Control plane + agent
The brains run in our EU cloud. Your servers run a single static agent. Panels that live on the server die with the server — and eat its RAM while they're alive.
European hosting control platform
Run your hosting fleet. Not your panel's bills.
PlusPanel is the EU-sovereign alternative to the cPanel stack: a SaaS control plane commanding a minimal agent on your servers. Fixed price per server. Unlimited accounts. Zero inbound management ports.
- Your data stays in the EU
- €9/mo founding — locked for life
- Free tier, forever
Measured on real infrastructure — every number has a drill
The numbers, measured.
0 FAIL
failures in the latest isolation, routing, TLS, database, file, email, migration, backup, security, monitoring, API and rollback drills
drill · 1071 PASS · 2026-10-26Every number above comes from a logged drill on our demo server. Each tile links to its drill: what ran, what passed, how long it took. The full transcripts go public with the beta, because you shouldn't have to trust a marketing page.
A fleet platform, not a panel on a server
Built differently, on purpose.
Zero inbound ports
The agent only dials out (mTLS over WireGuard). No :2087, no exposed admin logins, nothing for botnets to knock on. Commands are typed, signed (Ed25519), and expire.
Immutable, signed OS
PlusPanel OS updates atomically in ~44s and rolls back in one command. Your whole fleet runs the same bit-for-bit image. CVE upstream → rebuilt, scanned, signed image → patched fleet.
Every customer in their own box
One hacked WordPress stays one hacked WordPress.
- Dedicated containers, networks and volumes per account
- XFS project quotas: the limit is a limit
- SELinux MCS labels per account
- User namespaces: an account's root is nobody on the host
- One hacked WordPress never becomes your server's problem
LIVEIsolation proven in drills: another account's connections to this account's containers were refused on 6 of 6 targets.↗
Shipped since the waitlist opened
A complete hosting account, end to end.
In October the rest of a hosting account went live: databases, files, backups, the security center, monitoring, and the panel your own customers log into. Each line passed its drill on real servers before it got here.
- 64 PASS · 0 FAIL: See the drill
Databases per account
MariaDB, PostgreSQL and a Valkey cache (open source, Redis-compatible) in the account's own container. phpMyAdmin opens with a one-time login; an upgrade that fails rolls itself back.
- 88 PASS · 0 FAIL: See the drill
Files, SFTP and a web terminal
A file manager that runs as the account's own user, SFTP you switch on per server, and a browser terminal that opens inside the account's containers.
- steps 1–7 · all PASS: See the drill
Plans, resellers and clients
Hosting plans whose limits the kernel enforces, resellers with their own allowances, one-time invitations, and impersonation that is audited.
- 22 PASS · 0 FAIL: See the drill
Your brand on the client panel
Your product name, logo, colors and wording, with the login on your own domain. Your customers see your hosting, not ours.
- 40 PASS · 0 FAIL: See the drill
Editions and licensing
Free, Pro and Enterprise enforced by the platform. Licences are signed: if our licence server goes down, your servers do not notice.
- 57 PASS · 0 FAIL: See the drill
Backups that get restored
Incremental and encrypted before they leave your server. Restore a file, a database, a site or a whole account, and a scheduled restore test proves it works.
- 76 PASS · 0 FAIL: See the drill
Convert a running server
An existing AlmaLinux or Rocky Linux server becomes PlusPanel OS in place, sites included. If the new system fails its checks, the old one comes back by itself.
- 64 PASS · 0 FAIL: See the drill
A security center, included
A WAF on every site, firewall and country rules, brute-force bans you can lift, 2FA and passkeys for every user, and an audit log that shows if anyone rewrote it.
- 79 PASS · 0 FAIL: See the drill
Monitoring and alerts
Metrics and logs for every server, account and site, searchable from the panel. Alerts by e-mail or signed webhook before a disk fills up. Raw data stays on your server unless you opt in.
- 40 PASS · 2 FAIL: See the drill
Fleet updates in rollout rings
Every OS and agent release moves ring by ring behind health checks, inside your maintenance window, with your clients told beforehand. A server that fails a check rolls back by itself and the rollout stops.
- 65 PASS · 0 FAIL: See the drill
Public API and CLI
API keys limited to the scopes you choose, a request budget per key, safe retries and signed webhooks that are retried until delivered. The pluspanel CLI for Linux and Windows signs in from the browser with 2FA. In every edition, Free included.
- 9 PASS · 0 FAIL · 2 SKIP: See the drill
The panel on your phone
Install the panel as an app, on your own domain too, and get push notifications for alerts, finished jobs and new sign-ins: sent by PlusPanel itself, encrypted end to end, no third-party push service. The last data you saw stays readable offline.
- 71 PASS · 1 FAIL: See the drill
Email hosting
Mailboxes, aliases, forwarding, autoresponders and quotas from the panel, webmail at mail.<your domain>, and MX, SPF, DKIM and DMARC set up for you in PlusPanel DNS. Each account's mail stays on its own volume, goes out through our relay over TLS, and is in the account backup, down to one mailbox.
- 61 PASS · 0 FAIL · 1 SKIP: See the drill
Email deliverability
Mail from every server leaves through our own relay on two OVH sites, over WireGuard only: managed IP pools with warming, a second DKIM signature, bounces back to the sender, hourly blocklist checks, and spam stopped before it leaves. Mail over the daily quota waits for the next day instead of getting lost.
- 38 PASS · 0 FAIL: See the drill
WordPress security scanning
Every WordPress site is checked every day for vulnerable plugins, themes and core, modified or planted files and new administrators, with a score and a fix button: quarantine, the official file back, or an update behind a snapshot that rolls back by itself. The scan runs with the account's own rights, never runs the site's code, and the server never calls a vulnerability service.
- 182 PASS · 0 FAIL · 2 SKIP: See the drill
Migration Center
Whole cPanel/WHM servers moved account by account, in waves: sites, databases, mailboxes, crons, certificates and DNS copied while the source stays live, checked page by page and row by row before and after the switch, with a rollback per account for 14 days. Backup archives work too. The source is only read, and Migration Center is free in every edition.
- 73 PASS · 0 FAIL: See the drill
Sign-up and billing
Sign up with an e-mail and a password, confirm the address, start on Free. Move to Pro or Founding by card on Stripe, add backup or mail-relay packages, get invoices with the right EU VAT. A missed payment keeps everything for 14 days; nothing is ever deleted.
What else arrives at GA
Coming at GA. Labelled as such.
WP PerformanceShield
Updates tried first on a clone and safe auto-updates across the fleet, on top of the vulnerability and malware scanning that is live today.
“The snapshot before every update, one-click rollback and the scanning already pass their drills.”
WHMCS integration
Provisioning from the WHMCS you already run: accounts created, suspended and changed by your billing.
“Keep your billing. Change the panel.”
Pricing
Per server. Unlimited accounts.
Free
€0 forever
1 server · 5 domains · 10 mailboxes. The whole core platform.
Pro
€19 /server/month
Unlimited accounts and domains, white-label, backups, support.
Enterprise
Custom per fleet
Fleets, resellers, SLA, assisted migration, self-hosted control plane.
Founding 100: €9/mo per server, locked for life, on all your current & future servers.
100 founding seats, one per paying organization
Founding 100 opens at GA.
How we compare
The short version.
| Axis | PlusPanel | cPanel | Plesk |
|---|---|---|---|
| Licensing model | Per server; unlimited accounts | Per server, priced by the number of cPanel accounts on it (Solo/Admin/Pro/Premier tiers)1 | Per-server monthly or yearly subscription; editions by domain count (10 / 30 / unlimited)2 |
| Management ports | None: the agent only connects outbound | cPanel 2082/2083, WHM 2086/2087, Webmail 2095/2096 (per cPanel firewall docs)3 | Admin UI on TCP 8443 (HTTPS) and TCP 8880 (HTTP); installer/updates TCP 84474 |
| OS model | Signed image, atomic, one-command rollback, maintained by us | Customer-installed AlmaLinux, CloudLinux, Rocky Linux or Ubuntu; fresh OS install required5 | Installs on Ubuntu, AlmaLinux, Debian, RHEL, CloudLinux, Rocky; Windows Server6 |
| Jurisdiction | 2Lines Sistem, Romania (EU) | WebPros International L.L.C., Houston, Texas, USA (per imprint)7 | WebPros International GmbH, Swiss limited liability company, Schaffhausen, Switzerland8 |
Competitor cells are quoted from their official pages, verified on the date in each footnote.
- https://www.cpanel.net/customer-licensing-guide/ · 2026-10-10
- https://www.plesk.com/pricing/ · 2026-10-10
- https://docs.cpanel.net/knowledge-base/general-systems-administration/how-to-configure-your-firewall-for-cpanel-services/ · 2026-10-10
- https://docs.plesk.com/en-US/obsidian/administrator-guide/64950/ · 2026-10-10
- https://docs.cpanel.net/installation-guide/system-requirements/ · 2026-10-10
- https://docs.plesk.com/release-notes/obsidian/software-requirements/ · 2026-10-10
- https://www.cpanel.net/imprint/ · 2026-10-10
- https://www.plesk.com/impressum/ · 2026-10-10
Who builds it
Built by 2Lines Sistem — running PlusHost.ro since 2004. We built PlusPanel because we got tired of paying more every year for software we couldn't control. We're our own first customer.
Questions
Asked before you ask.
Is it production-ready?
Not for your customers yet, and every feature says so: LIVE means it runs today on our demo server and passed its drills, GA means it ships with v1.0, ROADMAP means later.
GA is the production release. Before we ask you to move, we move PlusHost.ro, our own hosting company, onto PlusPanel.
Why closed-source?
So PlusPanel can be a sustainable, independent business without private-equity money and the price hikes that come with it.
What you can verify instead: the drill behind every LIVE badge, signed OS images, and a software bill of materials (SBOM) for every image, published from GA.
What if you shut down?
2Lines Sistem has been in business since 2004 and runs PlusHost.ro. Your servers do not depend on us minute to minute either: if the control plane is unreachable, sites, mail and databases keep running, because systemd owns them on the server.
Our licence server cannot stop them either: licences are signed and keep working through an outage, with 14 days of grace after they expire. Enterprise customers can run the control plane themselves.
What servers do I need?
A dedicated server or a KVM VPS, x86_64, with at least 2 GB of RAM and 20 GB of disk. Container-based VPSes (OpenVZ, LXC) are not supported.
PlusPanel OS installs as an image or converts an existing AlmaLinux in place.
How do I migrate?
With Migration Center: live from cPanel/WHM through a WHM API token or root SSH (accounts, sites, databases, mailboxes, crons, certificates, DNS), or from cPanel backup archives, with a pre-flight report first, in waves while the source stays live, and a rollback per account. It is free in every edition, Free included.
Where is my data?
Our control plane, registry and backups run on Hetzner in Germany and Finland, operated by a Romanian company under EU law. Your sites and mail live on your own servers, wherever you choose to run them.
The privacy page lists every supplier and its role, including the two US ones, which touch no customer data.
Lock €9/month before your next cPanel invoice arrives.
You're on the list.One email when founding opens, one at GA. Nothing else.