New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Are you serious? Who are you to question whether we use AI or any other tool to write our replies? We'll use whatever tools we want.
People who can't build anything themselves always show up to troll those who actually do. Instead of running our replies through AI detectors, try building something useful yourself.
You are just stupid. Look on your garden TM is back?
"© 2026 HPanel. All rights reserved."
What rights?
That's why I built boloxmedia.co.uk.
Z.AI agent mode
GLM 5.1
After a long time, we’re finally back on the forum! We’ve been quite busy behind the scenes working on HPanel and bringing a lot of new updates and improvements.
Over the past few months, we’ve made significant progress, including:
cPanel/WHM migration is now built directly into HPanel.
Several bugs and stability issues have been fixed and improved.
Major improvements have been made to the overall performance and reliability.
HPanel is now fully production-ready.
A Free Forever plan is available for users who want to run HPanel without ongoing license costs.
Paid plans are also available for users who need additional features and resources.
We’ve put a lot of work into making HPanel a reliable, modern alternative for hosting providers and server administrators.
It’s great to be back on LowEndTalk, and we’re looking forward to sharing more updates with the community.
HPanel: https://hpanel.net/
I have corrected for you.
I did evaluate this panel a couple of years ago during our R&D phase, and I have a few questions that you may be able to answer.
Our old setup, DirectAdmin + CloudLinux + litespeed enteprise, costs approximately $65 per server with unlimited accounts.
Some of our R&D clusters are currently using Enhance Control Panel. Since Enhance is priced per account, to make the economics comparable to DA, a server would need to host around 400 accounts to cost the same
Enhance is not yet ready for all of our hosting requirements, but it does solve some very common problems, so we are willing to compromise and at least give it a try.
My main question is: What problems of a modern hosting company does HPanel actually solve that would make it worth a company like SystemFreaks considering it as part of its stack?
I am asking because, from what I have seen so far, I haven't found anything that would make it compelling enough to compete with DirectAdmin for us. DirectAdmin has been running essentially problem-free for us since 2015, so there would need to be a clear operational or financial advantage for us to consider changing.
I would be interested in hearing what you believe HPanel offers that could make it worthwhile for a hosting company with our requirements.
How did you evaluate it a couple of years ago when OP says he has been working on it "over the past year"?
It can be last year, i cant really recall when i saw it, i passed it fast and i figure it doesn't solve any of the problems of a modern host
It got compromised earlier in this thread... just look at pages like: https://lowendtalk.com/discussion/215436/building-a-modern-alternative-to-cpanel-looking-for-feedback-from-the-let-community/p6
Fair question, and I'd rather answer it straight than pitch you.
If DirectAdmin + CloudLinux + LiteSpeed has run clean since 2015, I'm not going to tell you to replace it. That combination is hard to argue with on either of the points you raised.
Where HPanel differs is what's included rather than bolted on. Per-account filesystem isolation (a chroot jail per user) and per-account CPU / RAM / IO / IOPS / process limits via cgroups are built in, along with a PHP selector across 7.4–8.4. ModSecurity WAF, malware scanning with quarantine and restore, DNS clustering, and backups to S3, S3-compatible, Google Cloud or SFTP are part of the panel rather than separate licences. Licensing is flat per server with unlimited accounts, so account density never changes the bill.
To be upfront about the gap: we're nginx + PHP-FPM with FastCGI page caching, not LiteSpeed. If your stack is built around LSWS and LSCache, that's a genuine difference and worth weighing.
Happy to hand you a test instance if you'd rather judge it yourself than take my word for it.
before trusting ur pannel, please answer my little google form first. ( cuz i can see the smeel of AI )
one account gets hacked what stops the hacker from going sightseeing through every other account and the host ?
how do cpu, ram, i/o, iops, and process limits actually get enforced at the kernel and cgroup level? asking for the receipts.
what is hpanel’s actual source of truth? how do you stop hpanel, nginx, phpfpm, dns, and the filesystem from slowly doing their own thing?
what is the highest account count youve actually tested on one production server? and what breaks first when you keep adding more?
live website and database backup. how do you keep the backup consistent, and how do you know the backup isnt quietly corrupted?
server gets completely wiped. can you rebuild the whole thing from off server backups alone, including accounts, databases, dns, ssl, permissions, and resource limits?
cpanel migration time. what happens to custom apache or .htaccess rules, plugins, cron jobs, mail, dns, permissions, ssl, and weird custom configs ?
migration + backup + restore + account changes happening at the same time. how does hpanel stop everything from stepping on each other and creating broken state?
hpanel itself gets compromised. what stops it from turning into unrestricted root access across the entire server?
where are the actual benchmark numbers? performance, resource overhead, account density, backup and restore speed, migration speed, and failure recovery compared with directadmin + cloudlinux + litespeed.
FYI Hostingers Panel is called HPanel
hPanel is a custom-made web hosting control panel created by Hostinger to help users manage their websites, domains, emails, and server resources from one central dashboard
hopes and prayers, maybe the attacker is a nice person
1, the panel
a new innovative technology: decentralized backups. claude makes sure to introduce security holes so anyone can help us make a backup!!!
someone helped us demo it back in march: https://lowendtalk.com/discussion/comment/4752630/#Comment_4752630
yes. ask claude, it will handle it.
I loved that. It's amazing how fast HPanel was hacked.
Sounds good, Mr. Claude!
This is an AI-generated answer, and I don’t mind the use of AI. However, my question still hasn’t been answered.
Unlucky... Also the logo design doesn't help much. Such a shit show.
Can't you at least tweak the AI‑shiting color scheme? It doesn't inspire confidence in its stability and reliability.
After the summer host launch, the summer panel is finally here—what’s take?
AI copied what it found. Likely also came up with the product name.
1- Each account runs as its own Linux user inside its own chroot jail one account's process physically cannot see or touch another account's files.
2- Each account gets its own systemd cgroup slice with CPUQuota, MemoryMax, IOWeight, IOReadIOPSMax, IOWriteIOPSMax, and TasksMax enforced at the kernel level no userspace tricks.
3- PostgreSQL is the single source of truth. Every change writes to the database first, then nginx, PHP-FPM, and DNS configs are generated from it and validated before reload. Manual edits to config files get overwritten the next time that account changes.
4- Current production peak is 60 accounts on a single server, running stable.
5- Files are backed up with rsync, databases with mysqldump using --single-transaction for InnoDB so the dump is consistent without locking tables. Backups are verified after transfer if the restore test fails, the backup is flagged.
6- Yes. A full backup includes everything needed to rebuild the account on a fresh server files, databases, DNS, mail, SSL, permissions, and resource limits. Restore it and the account comes back complete, no manual re-provisioning needed.
7- Cron jobs, mail, DNS, permissions, SSL migrated automatically. Plugins and files copied as-is. .htaccess files are copied but nginx handles rewrites natively so WordPress and standard redirects just work. Custom Apache-specific rules need moving to Site Rules. Anything that can't migrate is listed in the migration report nothing is silently dropped.
8- Migrations are serialized one at a time via a global I/O lock with a queue. Each job is claimed atomically from the database so two workers can never grab the same job. Account changes validate and test configs before applying them and roll back on failure.
Nothing stops it completely the panel runs as root, same as cPanel and DirectAdmin. If the panel itself is compromised, the attacker has root. That's the honest answer. The prevention is keeping the admin port firewalled, not exposed to the public internet.
9- We're not positioning ourselves against DirectAdmin or LiteSpeed we have our own user base and it's growing. If the panel fits your requirements, great. If not, no hard feelings.
Bad idea, especially given your sordid security track record. The panel should run unprivileged and communicate instead with a privileged daemon that can perform privileged actions on its behalf. There's no reason you should let a vulnerability in PHP give you root in some module that does not need to be privileged to do its job. Just because cPanel and DirectAdmin do the same does not mean you should.
That is not an answer to whether or not you have benchmarks and what the real numbers are regarding e.g. overhead.
https://hpanel.net/compare/hpanel-vs-directadmin.php
Hmm...
https://www.corepanel.net/docs/cpanel-transform/ - that's very neat, do you have something like that too?
We wanted to make an alternative to cPanel so we took their logo and made hPanel.
Made with vibes, layered with hopes n prayers™
im still missing the actual technical details. i want to know what actually happens under the hood.
you said every account gets a separate linux user and chroot.
if a wordpress plugin gets fully compromised, what can the attacker access?
you mentioned:
CPUQuota
MemoryMax
IOWeight
IOReadIOPSMax
IOWriteIOPSMax
TasksMax
how are these actually applied?
systemctl showoutput or/sys/fs/cgroup.you said postgresql is the source of truth.
you said 60 accounts is the current production peak.
what was the server?
what was the first bottleneck? and have you actually tested more than 60 accounts?
you mentioned rsync and
mysqldump --single-transaction.when was the last successful restore test? having a backup and successfully restoring one are two different things.
you said a full account can be restored to a fresh server. okay. production server gets completely destroyed. only the off server backup survives. can you restore all of this?
without manually rebuilding everything? have you actually tested this on a clean server?
for cpanel:
.htaccess?what happens when HPanel finds something unsupported?does it stop or continue and report it? also how do you detect
.htaccessrules which cannot be converted to nginx?you mentioned a global i/o lock and atomic database queue.
you said a fully compromised root-level panel basically means root access. what else is protecting the system?
if HPanel gets compromised, can the attacker also grab the backup credentials?
what is HPanel built with?
what stops one customer from destroying the node for everyone else?
/tmp?what noisy neighbor protections exist?
if HPanel handles mail:
what happens when:
does HPanel detect it automatically?
does someone get an alert?
or do customers have to start screaming first?
this was question #10 from my original post. i don’t need a "HPanel is faster than everything" benchmark. i want the actual HPanel numbers.
the easiest way to prove most of this would be one public test.
something like:
fresh debian
-> install HPanel
-> create 10/50/100 accounts
-> apply cpu/ram/iops limits
-> run workloads
-> kill services
-> break configs
-> run backup
-> destroy server
-> reinstall
-> restore
-> check websites
-> check databases
-> check dns
-> check limits
post the results.
i said i want to see the difference between
"this is how HPanel is designed"and"we tested it, here are the results."show the receipts.
i swear i never used AI to structure the message. i did it manually like hpanel, but without vibing the message.
but he forgot ai is gonna fuck up if its made with layers and side panels. the side panel is a nice copycat, and the others are just blinking blinking. and damn browser based audio. my speakers are asking for a bigger disk than playing it.
He literally said he isn't positioning it, not comparing it.
usage limit
Sure. maybe He wants to make a copy of cPanel, or he just cant architect it himself and is asking Claude about current architecture of other pannels and having it recreate the architecture.