New generation hosting panel,
made from scratch.
User: whsuser Password: whslozinka
demo account · no registration · resets every day at midnight
kernel language
+ Brotli + full-page cache
kernel · application · edge
enforcing on production
Server security
Uptime 99.9%Why didn't we use
ready-made solutions?
Traditional control panels carry with them decades-old code, slow architecture, and unnecessary overhead that consumes machine resources. To deliver the speed the modern web demands, we had to change the foundation. We created a panel that works without privileges, separates processes into isolated cages and leaves maximum resources to your site, not to the control software in the background.
Compiled kernel in Go
Panel is a single compiled program, without an interpreter and without a bunch of processes waiting in the background. The same language carries the infrastructure of Google, YouTube and Cloudflare. The power of the server rests with the application, not the administration.
Working without privileges
The panel does not have root rights. Everything that requires them is done by a separate system assistant, over a protected channel, with path checking without symlink traps. The whole class of user-to-root attacks is not patched, but engineered out.
Defense in layers
A flood of traffic drops already in the kernel (ipset raw-drop), the behavior is filtered at the application layer (fail2ban and Coraza WAF), and the rest is stopped at the network edge. Each layer does what it is fastest at.
The border between orders is
set at the system level.
On a shared server, the biggest risk is not an attack on you, but an attack on someone else. That's why insulation with us is not an option that is switched on, but the way the system works.
Each account in its own cage
Separate processes, cgroups CPU, RAM and I/O limits, disk quotas and chroot. An overloaded or hacked site stays in its box and doesn't crash the others.
WAF per domain
Coraza with OWASP CRS v4, with rules set per domain instead of one global set. The attack is filtered before it reaches the application.
Backup that restores
restic: encrypted and deduplicated, on S3, SFTP or B2. You restore an individual file, one database or one mailbox, not the entire server.
Incoming mail
DMARC and SPF, anti-phishing heuristics, outbound mail scanning and auto-suspension of spammers. Server IP reputation remains clean.
Speed is a consequence of architecture,
and not subsequent adjustment.
There is no button that makes a slow foundation fast. That's why speed is taken into account where it's really decided: on protocol, on compression and on cache.
HTTP/3 inbound
The latest generation of protocols keeps pages fast even on weak mobile internet, where older protocols get stuck on lost packets.
Brotli and full-page cache
Stronger compression and full-page caching work out of the box, with no performance plugins and no tweaks on your part.
What Google measures
Loading speed enters the rankings, and every second of waiting kills the number of visits and orders. Work on the foundation is seen here as a number, not as a feeling.
What today's
the application is really looking for.
Legacy panels are built for PHP site and MySQL database. Today, Node.js services, Python applications, Redis cache and PostgreSQL live on hosting. That was our starting point.
Nginx Unit
A real process manager for Node.js, Python and Go, with restart and resource control, instead of a fragile solution that hopes the process doesn't crash.
PostgreSQL and Redis
Both, by order and automatically, without opening a ticket and without waiting for someone to manually install the service.
WordPress manager
Secure auto-update with rollback, staging environment, hardening and scanner, all from the panel.
Cloudflare and AutoSSL
Zone, cache, under-attack mode and SSL per domain, natively from the panel. Let's Encrypt certificate is issued and renewed by itself.
We made everything ourselves, except
what you can't do alone.
We developed the panel, account isolation, WAF, multi-layer DDoS defense and email hygiene ourselves, from scratch. But for malware detection and real-time proactive defense we consciously included Imunify360, and it's not because we can't program it.
Malware protection today is not a programming problem, but analyses. Every day, Imunify360 learns from threats collected from millions of servers around the world and detects attacks that an individual server would never see in time. No hosting can create that kind of global network by itself, no matter how good the code is.
In addition, each of our servers is monitored by its own AI analysis of logs and errors, for early detection of problems and security risks, before they turn into failures. But there the AI only reports: it sends a notification to our team, and a human reviews, decides and fixes. Nothing on your site changes automatically, without human decision.
Panel, account isolation, WAF, DDoS defense and email hygiene, all proprietary software.
Malware detection, brute-force and proactive defense, driven by a global network of millions of servers.
Early detection of bugs and threats with notifications. Man decides and fixes, never autonomously.
Architecture 20 years ago
vs. WHS architecture today
Same feature list on paper, completely different foundation underneath. This is a difference that the site feels and the options list doesn't show.
„"Old Commercial Panels" means the most used generation of paid hosting panels; We do not specify the name on purpose.
Technical independence = stable price
Open the panel and try everything,
immediately and without obligation.
Live demo account, no registration required. Click all you want, it resets every night at midnight, so it's always clean for the next one.
user: whsuser · password: whspassword · everything you enter is deleted at midnight
Documentation already present
You can already find documentation and instructions about our panel in our knowledge base. Although we took care to make it easy to use and intuitive for most users, we also made sure that every option is covered with easy-to-use instructions.