capability index

Everything the panel
actually does.

No feature grid of vague promises. Every capability below maps to a real component in the stack — with the technical detail a sysadmin evaluates on.

01

performance

Blazing-fast by default

HTTP/3, real Early Hints, and intelligent caching deliver lightning-fast loads — the difference between a visitor staying and leaving.

  • HTTP/3 + QUIC transport
  • Real Early Hints (HTTP 103) preload
  • Dynamic cache with smart invalidation
  • WebP conversion on-the-fly
request timelineearly hints 103
styles.css
app.js
font.woff2
document
184msTTFB · cached
02

security

Isolation that actually isolates

Security in every layer. True user isolation and dedicated PHP-FPM pools mean one compromised site never touches its neighbors.

  • 0700 directories / 0600 files, no shared access
  • SELinux enforcing — mandatory-access-control confinement
  • Dedicated PHP-FPM pool per system user
  • Native integrated Web Application Firewall (pxShield)
user isolationenforced
alicephp-fpm:alice0700🔒
bravophp-fpm:bravo0700🔒
carolphp-fpm:carol0700🔒
no cross-account file access · separate Linux users
03

wordpress

Tuned for WordPress, out of the box

Dynamic caching, automatic purge on content changes, and Opcache preloading — the technical details handled so you can focus on content.

  • Dynamic cache with smart invalidation
  • Page cache with auto-purge on update
  • WP-CLI integration & automation
  • Opcache preloading for peak PHP
98%cache hit
dynamic cacheopcache preload
04

protection

Multi-layered active defense

Beyond the basics: behavioral DDoS mitigation, brute-force blocking, injection filtering, and bot detection — kept current automatically.

  • pxShield DDoS (behavioral analysis)
  • Fail2ban with WordPress rules
  • SQLi / XSS filtering via native pxShield WAF
  • Bot detection with challenge pages
blocked · last 24hWAF active
1,204threats mitigated
SQL injection412
brute force531
XSS168
bad bots93
05

modern stack

Modern components, no legacy baggage

Carefully chosen, actively maintained software — the opposite of a crusty Apache/cPanel box. Faster, leaner, production-tested.

  • CoreHttpd — auto HTTPS, HTTP/3; on-the-fly WebP + Early Hints (free); JS/CSS minify (Pro)
  • PHP 7.4 – 8.4, concurrent FPM pools
  • MariaDB 10.11 LTS (unified)
  • PowerDNS — GeoDNS, DNSSEC, API
installed components4 running
CoreHttpdoriginHTTP/3 · WAF · WebP · Early Hints
PHP8.3+ 8.2 · 8.1 · 7.4
MariaDB10.11LTS · versionlocked
PowerDNS4.xGeoDNS · DNSSEC
06

backups

Encrypted backups, restorable in one click

Automated, AES-256 encrypted, incremental backups to the storage you already use — and a one-click restore when it matters.

  • S3 · GCS · Azure · MinIO · SFTP targets
  • AES-256 encryption at rest & in transit
  • Incremental — 70–90% smaller
  • One-click restore to any server
backup destinationsencrypted
Amazon S3us-east-1
Google Cloudgcs-backup
MinIOon-prem
AES-256 · last run 04:00 · incremental

See what's included in each edition

Personal ships the full core stack, free. Pro and Business add the premium layers.