Run hundreds of websites on one server. Securely.
ZoPanel is the hosting control panel built for today's servers: an unprivileged panel, every account in its own sandbox, and measured performance — 250 WordPress sites on a 4 GB VPS. Free for 10 websites.
curl -fsSL https://get.zopanel.net | sudo bash
The web panel never runs as root
Traditional panels run their web interface with full privileges. ZoPanel splits it in two: the panel runs as an ordinary user, and a small agent — the only part with root — accepts a fixed list of actions and checks every parameter again. A bug in the web interface cannot become root on your server.
- Every account runs in its own systemd sandbox, with quotas and hidden processes
- Docker apps in user namespaces: root in a container is nobody on the host
- Mail, backups and dumps never follow an account's symlinks
- Every release goes through security review and 175 checks on real servers
All you need to host and sell
Websites, WordPress, email, DNS, databases, backups, apps and resellers — built in, not bolted on.
Websites & PHP
Every site in its own sandbox, with the PHP version and settings it needs and a page cache that serves thousands of visitors per second.
WordPress Toolkit
Install, secure, update and copy WordPress in a click — with scheduled tasks run by the server, on time, and never on your visitors' requests.
A complete mail server that stays off blocklists: authenticated sending, limits per account, spam filtering and webmail with single sign-on.
DNS
Authoritative DNS with DNSSEC and a multi-server cluster, with mail records set up for you.
Databases
MariaDB, PostgreSQL, MongoDB and Redis for every account, each isolated, each backed up.
Security
The panel never runs as root. A separate agent checks every request again, and every account runs in its own sandbox.
Backups & disaster recovery
Full and incremental backups, encrypted before they leave the server, verified, and restorable to a new server with one command.
App Store & object storage
Docker apps in isolated user namespaces, one-click PHP apps and S3-compatible storage — for you and your customers.
Resellers & billing
Sell hosting the day you install it: reseller accounts, packages, and ready modules for WHMCS, Blesta, HostBill and Paymenter.
Multi-server fleet
Manage every server from one panel, create accounts anywhere and move sites between servers with their mail and databases.
Performance
Measured, not promised: 250 cached WordPress sites and 30 apps on a 4 GB VPS, back to normal 5 minutes after an overload.
Operations
A panel that looks after itself: it restarts failed services, updates safely with automatic rollback, and tells you before things break.
Migration
Bring your customers from cPanel or DirectAdmin with their sites, databases, mail, DNS zones, FTP accounts and certificates.
More websites per server
We load every release on real servers with real WordPress sites, Node, Python and PHP apps, and publish the numbers.
| Server | No page cache | With page cache | Recovery after overload |
|---|---|---|---|
| Ubuntu 24.04 · 4 GB · 4 vCPU | 100 WordPress | 250 WordPress | 5 min |
| Debian 12 · 3 GB · 4 vCPU | 50 WordPress | 200 WordPress | 2 min |
Each level also runs 30 apps (Node + MariaDB, Flask + PostgreSQL, Joomla, phpBB, OpenCart). Smooth = busy sites answer 95% of requests in under 1 s with under 0.5% errors.
A fraction of the price, none of the compromises
| ZoPanel | cPanel | DirectAdmin | |
|---|---|---|---|
| Price for unlimited accounts | $49 / year, or $199 once | Priced per account, from about $27 / month | About $29 / month (Standard) |
| Free plan | 10 websites, 10 databases, 3 accounts | Trial only | Trial only |
| Web panel runs as root | Never (unprivileged panel + verified agent) | Yes | Yes |
| Per-account isolation | Built in (systemd sandbox, quotas, hidden processes) | With CloudLinux (paid add-on) | With CloudLinux (paid add-on) |
| Docker App Store | Built in, user-namespace isolated | Not built in | Not built in |
| Incremental, encrypted S3 backups | Built in (restic) | Built in | Built in |
| WHMCS / Blesta / HostBill modules | Included | Included | Included |
Competitor prices are list prices as published in 2025; check the vendors for current prices. Learn more →
Plugs into your billing on day one
WHMCS
Create, suspend, upgrade and terminate accounts; single sign-on from the client area.
Blesta
Full provisioning module with package options and SSO.
HostBill
Provisioning and account management.
Paymenter
Open-source billing, supported out of the box.
Cloudflare
Real visitor IPs for sites behind Cloudflare; Origin certificates as custom SSL.
Amazon S3 & compatible
Backups to S3, Wasabi, Backblaze B2, MinIO, R2.
Let's Encrypt
Automatic certificates, wildcards through DNS.
Telegram & webhooks
Alerts and signed events for your own automation.
Questions
Which operating systems are supported?
Ubuntu 22.04 and 24.04, Debian 12 and 13, on x86-64 and ARM64. Ubuntu 24.04 or Debian 13 is recommended.
How much RAM do I need?
1 GB to try it, 2 GB for a small production server. ZoPanel sizes itself to the machine.
Can I move from cPanel or DirectAdmin?
Yes. Import their backups: websites, databases, mailboxes, DNS zones, FTP accounts and certificates come across, with the same passwords.
Is it secure enough for shared hosting?
It was built for it: the panel runs without root, every account is sandboxed, and each release passes security and regression checks on real servers.
Install ZoPanel free
One command on a fresh Ubuntu or Debian server. Up and running in minutes.