Managed Web Server

A dedicated server with a control panel included, run by our engineers. No control panel licence to pay.

Managed Web Server with Control Panel

Your own web server. Managed by us. Control panel included.

Rent a dedicated virtual server in our Vilnius data center with PFHW (Portal for Hosting Websites), a full hosting control panel, installed and our engineers running the server. Host websites, applications and email for your customers or your own business, for one price and with no separate control panel licence.

Request a demo View Pricing

No control panel licence

PFHW, the control panel, is part of the service. You pay one price for the server, the panel and the management, with no per-account fees.

Managed by our engineers

We monitor the server, apply operating system security patches, maintain the firewall and run the backups. You keep full control of your sites and applications.

High availability in Vilnius

Your data is stored three times on a Ceph cluster in a Tier III data center. If a physical host fails, your server restarts on a healthy one.

Who it is for

Built for people who host for others, and for themselves

Agencies and freelancers

Host all your client sites on one server, with a separate account and login for each client.

Hosting resellers

Create plans, add customers and manage their accounts. Move your existing accounts over with the cPanel import tool.

Businesses with several sites

Run your company websites, applications and mailboxes on a server dedicated to you.

Application owners

Run PHP, Node.js, Python, Ruby or Java applications, with Git deployment and a web terminal.

How it works

From first contact to a running server

1

Request a demo

Tell us what you host. We contact you to arrange a time.

2

We prepare your server

After the demo we can set up a trial server for you.

3

Move your sites

Import cPanel backup packages, or upload your sites with SFTP or Git.

4

We keep it running

Monitoring, patching, the firewall and backups are on us.

2–16
Dedicated vCPU cores
4–32 GB
Dedicated RAM
3×
Ceph replication
Nightly
Incremental server backup
Features

Everything PFHW does

Open a category to see every function you and your customers get.

365 functions in 15 categories

No function matches your search.

  • Create hosting accountCreate a hosting account with its own domain, login and plan. Accounts need the nameservers to be set first.
  • List and search hosting accounts (JSON or CSV)Search and filter all accounts. The API can return the list as CSV. A reseller sees only its own customers' accounts.
  • View an accountOpen an account and see its details, plan and usage.
  • Suspend accountSuspend an account, with an optional reason. A lock stops a reseller from unsuspending it.
  • Unsuspend accountUnsuspend an account with one click.
  • Terminate accountTerminate an account and its data. You can keep its DNS zone or delete its mailboxes. It takes effect at once, with no undo window.
  • Change account passwordSet a new password for an account. It is the password for the panel, SSH, SFTP and FTP; database passwords are not changed.
  • Change plan (package) of an accountMove an account to another plan, keeping or replacing its own limits.
  • Change disk quota of an accountChange the disk quota of a single account.
  • Modify account (own limits, e-mail, user name, owner, language)Edit an account's own limits, contact e-mail, user name and owner in one place.
  • Rename account user nameRename the user name of an account.
  • Modify several accounts at once (bulk)Change the plan or the owner of many accounts at once.
  • Change the owner (reseller) of an accountMove an account to another reseller.
  • Move account to another home directory locationMove an account's files to another home location on the server.
  • Refresh account usage (disk, bandwidth)Refresh the disk and bandwidth use of an account.
  • Monthly bandwidth limit per accountSet a monthly bandwidth limit per account. A daily check applies it, and a reset returns the account to its plan.
  • Run the bandwidth check now / lift all bandwidth limitsRun the bandwidth check now, or lift all bandwidth limits.
  • View bandwidth usage of all accountsSee the bandwidth use of all accounts in one table.
  • List suspended accountsList every suspended account.
  • List accounts over quotaList the accounts that are over their disk quota. The list is only shown; nothing is sent to the customer.
  • List and remove subdomains, addon and alias domains of all accountsSee and remove the subdomains, addon domains and aliases of all accounts.
  • Shell access of accounts (normal, restricted, none; one or all)Choose shell access for each account: normal, restricted or none. Restricted accounts get a process limit against fork bombs.
  • Resellers: add, list, show usageAdd resellers, list them and see their usage.
  • Plans (packages): create, edit, delete, limitsCreate plans with limits for disk, bandwidth, domains, databases, FTP accounts, memory, processes, CPU and shell access.
  • List, create, delete portal users and set their password (API)List, create and delete panel users and set their passwords. Available through the API.
  • Customer records (create, read, change, delete)Keep customer records: create, read, change and delete. Available through the API.
  • Service and domain records (registry only)Keep service and domain records in the registry. Available through the API.
  • Audit logKeep a log of administrative actions. Available through the API.
  • Account preferences: contact e-mail addressesSave up to two contact e-mail addresses per account. They are used by site monitoring alerts, leech protection and mail to customers.
  • User manager: extra FTP and Web Disk loginsCreate extra FTP and Web Disk logins for an account. Logins with FTP count against the plan's FTP limit.
  • Add a team userAdd a colleague as a team user of an account.
  • Change a team user's roles (Administrator, Database, Web, Email)Give team users roles: Administrator, Database, Web or Email.
  • Suspend or unsuspend a team userSuspend or unsuspend a team user.
  • Delete a team userDelete a team user.
  • Suspend all accounts of a resellerSuspend all accounts of a reseller at once.
  • Unsuspend all accounts of a resellerUnsuspend all accounts of a reseller at once.
  • Terminate all accounts of a resellerTerminate all accounts of a reseller at once.
  • Create the customer together with the accountCreate the customer and the account in the same step.
  • Reseller sees and manages only its own customers' accountsA reseller sees and manages only its own customers' accounts.

  • Log in with user name and passwordSign in with a user name and password. Idle sessions end after a set time, and failed logins are counted by brute-force protection.
  • Log outEnd your session from any page.
  • Two-factor login (TOTP) set up, confirm and removeProtect a login with a one-time code from an authenticator app. Users set it up, confirm it and remove it themselves.
  • Enter the two-factor code at loginEnter the one-time code as the second step at login.
  • Administrator turns off two-factor for a userAn administrator can turn off two-factor login for a user who lost the device, and list who uses it. The list is available through the API.
  • Change own passwordChange your own password from the panel.
  • Password generatorGenerate a strong random password when you create or change one.
  • Password strength meter and minimum strengthShow a strength meter and refuse passwords below a minimum strength set by the administrator.
  • Password expiry (force new password after N days)Optional: force a new password after a set number of days. Off by default.
  • Force password change for usersMake chosen users pick a new password at their next login.
  • Limit logins to verified IP addressesOptional: allow panel logins only from verified IP addresses. Adding a verified address is done through the API.
  • Security questions at login from a new addressOptional: ask security questions when someone logs in from a new address.
  • Delete own security questionsUsers can delete their own security questions.
  • Administrator resets a user's security questionsAn administrator can reset a user's security questions. Available through the API.
  • Passkeys (WebAuthn) register and log inOptional: register a passkey (WebAuthn) and log in with it. A passkey login counts as two factors.
  • Administrator resets a user's passkeysAn administrator can reset a user's passkeys. Available through the API.
  • List users' login methodsSee which login methods each user has set up: two-factor, questions, passkeys and linked external identities.
  • External login (OpenID Connect, Google, GitHub): providersOptional: let users sign in with OpenID Connect, Google or GitHub. An administrator chooses the providers.
  • External login: link and unlink own identityUsers can link their panel account to an external identity, and unlink it again.
  • External login: administrator removes a user's identitiesAn administrator can remove a user's linked external identities. Available through the API.
  • Branded client login domains (reseller)Give a reseller its own login address for its customers, with the reseller's host name, certificate, brand name and logo.
  • One-time login URL for a customer (billing system)Sign a customer in from your billing system with a one-time URL that works once and expires within about a minute.
  • Log in as the customer and returnSign in as a customer to help them, then return to your own session.
  • API tokens: create, rename, revokeCreate API tokens to automate tasks. Name them, set an expiry and an IP allow-list, and revoke them at any time.
  • API console (Swagger UI)Try API calls in the built-in Swagger console. The page can be switched off.
  • Portal single sign-on provider for the file manager (OpenID Connect)The panel is the sign-in provider (OpenID Connect) for the file manager, so users are logged in to it automatically.
  • Statistics report language mappingMap the panel language to the language of the statistics reports.
  • Delete own passkeyUsers can delete their own passkeys.

  • ModSecurity (WAF) global configuration: mode, paranoia, threshold, audit, disabled rulesRun ModSecurity (WAF): choose the mode, paranoia level, threshold and audit settings, and disable rules.
  • ModSecurity custom rules and rule hitsAdd custom ModSecurity rules and see the rule hits.
  • ModSecurity rule sets (OWASP CRS): on/off, version update, rule files, disable by rule idTurn the OWASP rule set on or off, update its version, manage rule files and disable rules by id.
  • ModSecurity per domain (customer) and hitsSwitch ModSecurity on or off for each domain, and see its hits.
  • Brute force protection (cPHulk): settings, report, unblockBlock IP addresses after repeated failed logins to the panel, SSH, SFTP and FTP. Settings, report and unblock are in the panel.
  • Country white and black lists for logins (GeoIP database download and lookup)Allow or deny logins by country, using a GeoIP database that the administrator downloads.
  • Host access control rulesAllow or deny access to the server by address with host access rules.
  • IP Blocker (customer)Block visitors by address, range or wildcard for all of an account's sites.
  • Virus scanner (ClamAV): scan, quarantine, deleteScan files for viruses with ClamAV, and quarantine or delete what is found. It runs on demand.
  • Host firewall with confirm-or-revertManage the host firewall. Changes revert automatically unless you confirm them. The host owner must switch changes on first.
  • Root SSH keys: list, add, generate, removeList, add, generate and remove the SSH keys that can log in as root. The host owner must switch changes on first.
  • Sudo group: list, add and remove membersList, add and remove the members of the sudo group. The host owner must switch changes on first.
  • Security Advisor (read-only scan of the host and of PFHW settings)Scan the server and the PFHW settings for security problems. The scan only reports; it changes nothing.
  • Security Advisor scheduleRun the Security Advisor on a schedule.
  • Automatic IP banning (Fail2ban-style netfilter) with allowlist and denylist MailcowBan abusive IP addresses automatically (Fail2ban style), with an allow-list and a deny-list.
  • Watchdog monitoring of the mail containers MailcowWatch the mail containers with the Watchdog.

  • List domains of an accountList the domains of an account.
  • Change document root and Force HTTPS of a domainChoose the folder a domain is served from, and switch Force HTTPS on or off.
  • Remove a domainRemove a domain from an account.
  • Rename the main domainRename the main domain of an account.
  • Serve a domain through nginx only or through Apache (.htaccess)Serve a domain with nginx alone, or through Apache so that .htaccess files work.
  • Folder listing mode (Indexes)Choose whether a folder without an index file shows a list of its files.
  • Leech protection of a protected folderLock a user of a protected folder who logs in from too many addresses. Off until enabled per folder.
  • Apache handlersAssign Apache handlers to file extensions.
  • Add an addon domainAdd an extra domain to an account, with its own document root. Limited by the plan.
  • Add a subdomainAdd a subdomain such as shop.example.com. Limited by the plan.
  • Add an alias (parked) domainAdd an alias (parked) domain that shows the same site as the main domain. Limited by the plan.
  • Add a redirect (301/302)Add a permanent (301) or temporary (302) redirect.
  • Delete a redirectDelete a redirect.
  • Set a custom error pageShow your own page for errors such as 404 and 500.
  • Remove a custom error pageRemove a custom error page.
  • Add a MIME typeAdd a MIME type so the server sends special file types correctly.
  • Delete a MIME typeDelete a MIME type.
  • Protect a folder with a password (Directory privacy)Protect a folder with a password. Removing the protection uses the same screen.
  • Add or remove a user of a protected folderAdd or remove the users who may open a protected folder.

  • Global web server settings (timeouts, body size, keep-alive, index files, extra directives)Set server-wide web server options: timeouts, upload size, keep-alive, index files and extra directives.
  • TLS protocols and ciphersChoose the TLS protocols and ciphers the web server accepts.
  • Reload or restart the web serverReload or restart the web server.
  • Rebuild every account's web server configurationRebuild the web server configuration of every account. Available through the API.
  • Content compression gzip (server default and per site)Compress pages with gzip, as a server default or per site.
  • Brotli compressionOptional: compress pages with Brotli. Off by default.
  • Reverse proxy site type (site forwards to a back-end URL)Put a domain in front of an application by forwarding the site to a back-end address.
  • Web server features of the nodes (what nginx can do)See what the web server nodes can do.
  • Page cache per site (on/off, time) and purgeCache pages for each site, set the cache time and purge the cache. The cache size depends on the plan.
  • WordPress object cache (Redis) on or offTurn on a Redis object cache for WordPress sites.
  • List sites with a cache (all accounts)List the sites that have a cache, across all accounts.
  • Bot blocking by user-agent name (per site and server-wide)Block unwanted crawlers and bots by their user-agent name, for each site and server-wide.
  • Hotlink protectionStop other sites from embedding your images and files. Set per site.
  • Cloudflare: real visitor address and Cloudflare-onlyFor sites behind Cloudflare: show the real visitor address and accept traffic only from Cloudflare. Off per site.
  • Preview URL /~user on the server addressPreview a site on the server's own address (/~user) before its domain points to it. Off by default.

  • PHP version per domain and PHP on/offRun a different PHP version on each domain, or switch PHP off. The administrator chooses the offered versions.
  • PHP settings per account (basic form and php.ini editor)Edit PHP settings for an account with a simple form or the php.ini editor.
  • PHP-FPM slow logLog slow PHP requests to find what makes a site slow. Off until you set a timeout.
  • System PHP settings: offered versions, default version, extensions, pool limitsSet the offered PHP versions, the default version, extensions and pool limits for the server.
  • Edit php.ini of a PHP versionEdit the php.ini of a PHP version for the whole server.
  • Set PHP version or on/off for several domainsSet the PHP version, or switch PHP on or off, for several domains at once.
  • Build PHP versions and extensionsBuild additional PHP versions and extensions on the server.
  • Restart PHP-FPMRestart PHP-FPM.
  • Web apps: Node.js, Java, Tomcat, Python (WSGI/ASGI) and Ruby (Puma)Host web apps written in Node.js, Java, Tomcat, Python and Ruby.
  • n8n applicationInstall the n8n automation tool with one click, when the administrator enables it.
  • Perl modules, PHP PEAR packages and RubyGems (customer)Install Perl modules, PHP PEAR packages and RubyGems in your own account.
  • System Perl modules and PEAR packages (administrator)Install Perl modules and PEAR packages for the whole server.
  • WordPress: install, list and removeInstall WordPress, list the installations and remove them.
  • WordPress: one-click loginLog in to WordPress with one click.
  • WordPress: change administrator passwordChange the WordPress administrator password.
  • WordPress: security report and fixesCheck the security of a WordPress site and apply fixes.
  • WordPress: scan for installations made by other meansScan an account for WordPress installations made by other means.
  • Git deployment with releases and rollbackDeploy from Git as releases and roll back to an earlier one.
  • Git repository browser (read-only)Browse a Git repository in the browser, read-only. Off by default.
  • Add a cron jobAdd a scheduled cron job.
  • Edit a cron jobEdit a cron job.
  • Delete a cron jobDelete a cron job.
  • Set the cron output e-mail addressChoose the e-mail address that receives cron output.
  • Create a Git repository (clone or empty)Create a Git repository by cloning one or starting an empty one.
  • Update a Git repository from its remote and deploy HEADPull the latest changes from a repository's remote and deploy them.
  • Stop managing a Git repositoryStop managing a Git repository.
  • Start, stop or restart a web appStart, stop or restart a web app.
  • Read a web app's logRead the log of a web app.
  • WordPress: update core, plugins or themesUpdate WordPress core, plugins or themes.
  • WordPress: install a plugin or theme from wordpress.orgInstall a WordPress plugin or theme from wordpress.org.
  • Node.js appsHost Node.js apps with a chosen Node version, entry file and build command.
  • Java and Tomcat appsHost Java and Tomcat apps with a chosen Java version and entry file.
  • Ruby apps (Rack on Puma)Host Ruby apps (Rack on Puma) with a chosen Ruby version.
  • Python apps (WSGI on gunicorn, ASGI with uvicorn workers)Host Python apps: WSGI with gunicorn, or ASGI with uvicorn workers.
  • RubyGems (customer)Install RubyGems for your own account.

  • File manager (single sign-on into the SFTPGo web client)Manage files in the browser with the SFTPGo web client, signed in automatically.
  • Web Disk (WebDAV) loginsWork on your files over WebDAV with Web Disk logins.
  • FTP connections: list and disconnect sessionsSee open FTP connections and disconnect them.
  • Disk usageSee how much disk space an account uses.
  • Compress, extract, set permissions, search file namesCompress and extract archives, set permissions and search for files by name.
  • Web terminal (customer)Open a terminal for your account in the browser.
  • FTP server settings and restart (administrator)Set FTP server options and restart the FTP service.
  • Set up file manager single sign-on on every web nodeSet up single sign-on for the file manager on every web node. Available through the API.
  • SSH server: password logins and restart (administrator)Allow or block SSH password logins for the server, and restart the SSH server.
  • Root terminal on a node (administrator)Open a root terminal on a node from the admin panel.
  • Create an FTP accountCreate an FTP account limited to a folder. The plan limits how many.
  • List FTP accounts with folder, quota and usageList FTP accounts with their folder, quota and usage.
  • Change an FTP account's password or quotaChange an FTP account's password or quota.
  • Delete an FTP accountDelete an FTP account.
  • Generate an SSH keyGenerate an SSH key.
  • Import an SSH keyImport an SSH key.
  • Authorize or deauthorize an SSH keyAuthorize or deauthorize an SSH key.
  • Delete an SSH keyDelete an SSH key.

  • MariaDB: user privileges on a databaseGive a MariaDB user privileges on a database.
  • MariaDB Database Wizard (database, user and privileges in one step)Create a MariaDB database, a user and its privileges in a single step.
  • Remote MySQL (hosts allowed to connect)Allow chosen remote hosts to connect to your MariaDB database. Closed until you list a host.
  • phpMyAdmin (customer, logged in automatically)Open phpMyAdmin from the panel without typing a password.
  • Slow queries (customer, own databases)See the slow queries of your own databases. Empty until the administrator sets a threshold.
  • PostgreSQL Database WizardCreate a PostgreSQL database, a user and its privileges in one step.
  • Remote PostgreSQL (hosts allowed to connect)Allow chosen remote hosts to connect to your PostgreSQL database.
  • phpPgAdmin (Adminer, customer, logged in)Open Adminer, the PostgreSQL web client, from the panel without typing a password.
  • PostgreSQL job status of an accountSee the job status of an account's PostgreSQL work. Available through the API.
  • MariaDB hosts: list, add, validate, activate, deleteConnect several MariaDB servers: list, add, validate, activate and delete them. One is active at a time.
  • Edit a remote MariaDB host profileEdit the profile of a remote MariaDB host. Available through the API.
  • MariaDB root password and restartChange the MariaDB root password and restart the database server.
  • Additional MySQL access hosts (all database users)Allow extra hosts to reach the database server for all database users.
  • Change any database user's passwordChange the password of any database user as an administrator.
  • phpMyAdmin at root levelOpen phpMyAdmin with administrator rights.
  • Manage all MariaDB databases and users: list, rename, repair, give to an accountList all MariaDB databases and users, rename them, repair them and give them to an account.
  • Database processes (MariaDB)See the running MariaDB processes.
  • MariaDB upgrade: check, test copy, runUpgrade MariaDB with the host command pfhw-dbupgrade. The portal shows the upgrade reports.
  • Database version upgrade in container mode (MariaDB and PostgreSQL) with backup, trial on a copy and way backUpgrade MariaDB and PostgreSQL with a backup, a trial on a copy and a way back. It runs from the command line.
  • Database server configuration editor (MariaDB and PostgreSQL)Edit database server settings from an allowed list. Changes are tested and rolled back automatically if the health check fails.
  • Slow query monitoring (administrator: threshold, retention, read, clear)Set the slow-query threshold and retention for a database host, and read or clear the log.
  • PostgreSQL hosts: list, add, edit, validate, activate, delete, postgres password, restartConnect several PostgreSQL servers: list, add, edit, validate, activate and delete them, change the postgres password and restart.
  • PostgreSQL databases, users and processes of all accountsSee the PostgreSQL databases, users and processes of all accounts.
  • phpPgAdmin (Adminer) as superuserOpen Adminer as the PostgreSQL superuser.
  • Create a MariaDB databaseCreate a MariaDB database. The name gets the account prefix and the plan limits how many.
  • Rename a MariaDB databaseRename a MariaDB database.
  • Check a MariaDB databaseCheck a MariaDB database for errors.
  • Repair a MariaDB databaseRepair a MariaDB database.
  • Delete a MariaDB databaseDelete a MariaDB database.
  • Create a MariaDB userCreate a MariaDB user.
  • Change a MariaDB user's passwordChange a MariaDB user's password.
  • Rename a MariaDB userRename a MariaDB user.
  • Delete a MariaDB userDelete a MariaDB user.
  • Create a PostgreSQL databaseCreate a PostgreSQL database. The plan sets how many; a plan limit of 0 turns it off.
  • Rename a PostgreSQL databaseRename a PostgreSQL database.
  • Check a PostgreSQL databaseCheck a PostgreSQL database for errors.
  • Repair a PostgreSQL databaseRepair a PostgreSQL database.
  • Delete a PostgreSQL databaseDelete a PostgreSQL database.
  • Create a PostgreSQL userCreate a PostgreSQL user.
  • Change a PostgreSQL user's passwordChange a PostgreSQL user's password.
  • Rename a PostgreSQL userRename a PostgreSQL user.
  • Delete a PostgreSQL userDelete a PostgreSQL user.
  • Add or remove a PostgreSQL user on a databaseAdd or remove a PostgreSQL user on a database. Privileges are all or nothing.
  • Synchronize PostgreSQL grantsApply the stored PostgreSQL grants again.

  • List and search DNS zonesList and search the DNS zones.
  • Add DNS zoneAdd a DNS zone.
  • Delete DNS zonesDelete DNS zones.
  • Add an A entry for a host nameAdd an A record for a host name.
  • Restart DNS serverRestart the DNS server.
  • Template for new zonesChoose the template that new zones are created from.
  • Set TTL of selected zonesSet the TTL of selected zones.
  • DNS cleanup (remove duplicate records)Clean up a zone by removing duplicate records.
  • Add SPF to all account zonesAdd an SPF record to the zones of all accounts. DKIM is created per mail domain under Mail DNS records.
  • Change an IP address in all zonesChange a server IP address in all zones at once. Available through the API.
  • Create missing zones for account domainsCreate missing zones for the domains of your accounts automatically.
  • Nameservers for all zones (set, dry run, apply)Set the nameservers for all zones (two to eight). A dry run lists every change before it is applied.
  • Edit any zone's records and view its change history (admin)Edit any zone's records as an administrator and see the change history.
  • DNS cluster status and synchronise with a secondarySee the status of a DNS cluster and synchronize with a secondary server.
  • Reset zone to the default recordsReset a zone to its default records.
  • Track DNS: look up a name and trace a routeLook up a DNS name and trace the route to it.
  • Domain forwarding (whole domain 301/302 to a URL, no account)Forward a whole domain to a web address (301 or 302) without creating an account. The domain's A record must point to the server.
  • View DNS records of a zone (customer)Customers see the DNS records of their zones.
  • Add a DNS record (customer)Customers add DNS records.
  • Edit a DNS record (customer)Customers edit DNS records.
  • Delete a DNS record (customer)Customers delete DNS records.
  • DNSSEC: view keys and DS recordsSee the DNSSEC keys of a zone and its DS records.
  • DNSSEC: create or import a keyCreate or import a DNSSEC key.
  • DNSSEC: activate or deactivate a keyActivate or deactivate a DNSSEC key.
  • DNSSEC: export a private keyExport a DNSSEC private key.
  • DNSSEC: delete a keyDelete a DNSSEC key.
  • Dynamic DNS: create a hostCreate a dynamic DNS host for a device whose address changes.
  • Dynamic DNS: recreate a host's address or delete the hostRecreate a dynamic DNS host's address, or delete the host.
  • Dynamic DNS: device updates its address (public web call)A device updates its own address with a public web call, with no panel login.

  • Private keys: generate, upload, view, deleteGenerate, upload, view and delete private keys.
  • Certificate signing requests: create, view, deleteCreate, view and delete certificate signing requests.
  • Upload a certificateUpload a certificate.
  • Create a self-signed certificateCreate a self-signed certificate.
  • Install and uninstall a certificate on a siteInstall a certificate on a site, or uninstall it. Certificates are uploaded or self-signed; there is no automatic issuing.
  • SSL/TLS status of every domain with expiry warningSee the SSL/TLS status of every domain, with an expiry warning.
  • SSL/TLS wizard (one certificate on several domains)Use one certificate on several domains with the SSL/TLS wizard.
  • Manage SSL hosts: list, make primary, uninstall (administrator)As an administrator, list SSL hosts, make one primary or uninstall it.
  • SSL storage manager (stored keys, CSRs, certificates of all accounts)See the stored keys, signing requests and certificates of all accounts.
  • Install a certificate on any domain (administrator)Install a certificate on any domain as an administrator.

  • Connect a Mailcow mail server (save, test, sync, disconnect)Connect a Mailcow mail server to PFHW: save the connection, test it, sync and disconnect. The Mail pages work once it is connected.
  • Mail import access for the cPanel importer (SSH key limited to one command)Give the cPanel importer a limited SSH key so it can bring mail over.
  • All mailboxes of the platformSee all mailboxes of the platform in one list.
  • Mail on or off for a domain (with delete preview)Switch mail on or off for a domain. Turning it off lists the mailboxes first and asks for confirmation.
  • Mail settings (server names for mail programs)See the server names to enter in mail programs.
  • Mail DNS records (MX, SPF, DKIM, DMARC) preview and applyPreview and apply the MX, SPF, DKIM and DMARC records of a mail domain, after a confirmation.
  • Mail to customers (all customers, resellers, a plan or a node)Send a plain-text message to all customers, all resellers, one plan or one node.
  • Mail relay login (user and password of the SMTP relay)Enter the login of the SMTP relay that carries alert, contact, cron and PHP mail.
  • Create a mailboxCreate a mailbox with a quota. The plan limits the number and the size.
  • Change a mailbox's password or quotaChange a mailbox's password or quota.
  • Disable or enable a mailboxDisable or enable a mailbox.
  • Delete a mailboxDelete a mailbox.
  • Add an alias or forwarderAdd an alias or forwarder.
  • Change an alias's destinations or disable/enable itChange an alias's destinations, or disable and enable it.
  • Delete an aliasDelete an alias.
  • Mail to customers: preview recipients and send a test mailPreview the recipients of a mailing and send a test mail.
  • Mail to customers: view progress, cancel and resume a mailingFollow the progress of a mailing, cancel it and resume it.
  • Mailboxes with quota, per-mailbox settings MailcowCreate mailboxes with quotas and per-mailbox settings.
  • Aliases, forwarders, catch-all, tagged-mail handling MailcowCreate aliases, forwarders and catch-all addresses, and choose how tagged mail is handled.
  • Webmail (SOGo) with direct login forwarding MailcowRead and send mail in SOGo webmail, with direct login forwarding.
  • Calendars and contacts (CalDAV, CardDAV), ActiveSync, SOGo resources MailcowUse calendars and contacts (CalDAV, CardDAV), ActiveSync and SOGo resources.
  • Autoresponder / out-of-office (SOGo) MailcowSet an out-of-office reply in SOGo.
  • Mail filters (Sieve) per user MailcowSort incoming mail with Sieve filters for each user.
  • Global filter maps (pre- and post-filter) MailcowApply global filter maps before and after the user filters.
  • Spam filter: per-user spam score, black and white lists, Rspamd settings map MailcowSet a per-user spam score, black and white lists, and Rspamd settings maps.
  • Greylisting MailcowDelay unknown senders with greylisting to cut spam.
  • Quarantine with notifications (never, hourly, daily, weekly) MailcowKeep suspected spam in a quarantine and notify users never, hourly, daily or weekly.
  • Antivirus scanning (ClamAV) MailcowScan mail for viruses with ClamAV.
  • Queue Manager MailcowSee and manage the mail queue.
  • Sync jobs (imapsync) to pull or migrate remote mailboxes MailcowPull or migrate remote mailboxes with imapsync jobs.
  • Rate limits per domain and per mailbox MailcowLimit how many messages a domain or a mailbox may send.
  • Routing: sender-dependent transports and relay domains MailcowRoute mail with sender-dependent transports and relay domains.
  • Forwarding hosts MailcowSet forwarding hosts.
  • BCC maps (copy of mail to another address) and recipient maps MailcowCopy mail to another address with BCC maps, and rewrite recipients with recipient maps.
  • TLS policy maps and enforced TLS incoming and outgoing per mailbox MailcowSet TLS policy maps and enforce TLS for incoming and outgoing mail per mailbox.
  • DKIM and ARC keys, DNS records per domain MailcowCreate DKIM and ARC keys and see the DNS records of each domain.
  • Autoconfig and autodiscover MailcowSet up mail programs automatically with autoconfig and autodiscover.
  • Logs: Postfix, Dovecot, SOGo, Netfilter, Autodiscover, Watchdog, ACME, API, Rate limits, Crontasks, Rspamd, Mailcow UI, SASL MailcowRead the mail server logs: Postfix, Dovecot, SOGo, Netfilter, Autodiscover, Watchdog, ACME, API, rate limits, Rspamd and more.
  • Quota notifications and mailbox statistics MailcowGet quota notifications and see statistics for each mailbox.
  • Mailing lists per domain MailcowCreate mailing lists for a domain.
  • Mailbox password recovery e-mail, force password change, force 2FA enrollment, app passwords MailcowSet a password recovery e-mail, force a new password, force two-factor enrollment and create app passwords for a mailbox.
  • Mail server administrators, domain administrators, two-factor and FIDO2 login, API MailcowAdd mail server administrators and domain administrators, with two-factor and FIDO2 login and an API.
  • Per-mailbox ACL (permissions), Pushover notifications, custom attributes, rename mailbox MailcowSet per-mailbox permissions, Pushover notifications and custom attributes, and rename a mailbox.
  • Allowed protocols per mailbox (IMAP, POP3, SMTP, Sieve, ActiveSync, CalDAV) MailcowChoose which protocols a mailbox may use: IMAP, POP3, SMTP, Sieve, ActiveSync and CalDAV.
  • Alias domains: a whole domain forwarded to another domain on the server; catch-all aliases to any address MailcowForward a whole domain to another domain on the server with alias domains, and use catch-all aliases to any address.

  • Customer backup download: home directory and each databaseDownload a backup of your home directory and of each MariaDB database.
  • Customer restore of files or of a database from an uploaded backupRestore files or a database from an uploaded backup.
  • Backup settings: destination, schedules, retention, encryption, verificationSet the backup destination (local folder or SFTP), schedules, retention, encryption and verification.
  • Scheduled backups and retentionBack up on a schedule and keep a chosen number of backups. Nothing runs until you set a schedule.
  • Backup encryption (gpg AES-256)Encrypt backups with GPG (AES-256). Off by default.
  • Leave an account out of backupsLeave chosen accounts out of backups.
  • Platform backup and restore commands (pfhw-backup, pfhw-restore)Back up and restore the platform from the command line with pfhw-backup and pfhw-restore.
  • Back up one account nowBack up one account now.
  • Full-server backup nowBack up the whole server now, with the platform, every mailbox and a reference of the mail server settings.
  • Test the backup destinationTest the backup destination.
  • Verify a backup againVerify a backup again with checksums and a restore test.
  • Restore an account backup: dry runRun a restore as a dry run to see what it would do.
  • Restore an account backup into the same or a recreated accountRestore an account backup into the same or a recreated account. A safety backup is made first.
  • Show the new passwords of a restore onceShow the new passwords of a restore once.

  • Visitors (recent requests)See the most recent requests to your sites.
  • Error logRead the error log of each site.
  • Raw access logs: archive setting and downloadTurn on raw access log archives and download them.
  • Bandwidth chartsSee bandwidth charts for your account.
  • Statistics reports (GoAccess): choose domains, open reportOpen traffic reports (GoAccess) for the domains you choose.
  • Statistics configuration (administrator)Set up the statistics reports: schedule and quiet hours.
  • CPU and RAM usage per accountSee the CPU and RAM use of each account over 24 hours, 7 days or 30 days, against the plan limits.
  • Site monitoring (uptime, status, text, speed, certificate expiry) with e-mail alertsWatch a website for uptime, status, expected text, speed and certificate expiry, with e-mail alerts. Off until the administrator turns it on.
  • Site monitoring overview and limits (administrator)See the site monitoring overview and set its limits as an administrator.
  • SEO audit of a domainCheck a domain for common SEO problems. The page is hidden until the administrator turns it on.
  • Checkmk: service status, disk usage, web server statusSee service status, disk use and web server status from Checkmk, once the Checkmk connection is set.
  • Checkmk login and poll nowSave the Checkmk login and poll it now.
  • Contact Manager: e-mail, URL call and chat webhook contacts for monitoring problemsSend monitoring problems to e-mail, URL and chat webhook contacts.

  • Service Manager: list, start, stop, restart, start at boot, monitorList services and start, stop or restart them, set them to start at boot and monitor them.
  • Process manager: list and kill processesSee running processes and end them.
  • Daily process logReview a daily history of processes.
  • Background process killer: names and run nowStop unwanted background processes automatically, by name, or run the killer now.
  • Alerts: list and acknowledgeList alerts and acknowledge them. Alerts are mailed to the contact address when it is set.
  • Servers and roles; change a server's rolesSee the servers and change the roles each one plays.
  • Enroll a server (enrollment command)Add a server to the cluster with an enrollment command.
  • Send settings to all servers (cluster push)Push the settings to all servers.
  • Check a node's agent; remove a node recordCheck a node's agent and remove a node record. Available through the API.
  • Cluster settings: time zone, NTP servers, compilers, traceroute, SSH password logins, mail relay address, fork-bomb protectionSet the time zone, NTP servers, compilers, traceroute, SSH password logins, mail relay address and fork-bomb protection for all servers.
  • Platform alert e-mail (node events, Core service restarts, failed backups)Get alert e-mails for node events, Core service restarts and failed backups.
  • Automatic certificates for the mail host (ACME) MailcowGet automatic certificates for the mail host with ACME.
  • Outbound SMTP relay MailcowSend outbound mail through an SMTP relay.
  • Mailcow branding: logo upload (normal and dark mode) and theme choice MailcowBrand the mail interface with your logo (normal and dark mode) and a theme.
  • Mailcow interface language selection and dark mode switch MailcowChoose the mail interface language and switch dark mode on or off.

  • Import from cPanel: upload package, dry run, import with options, reportImport accounts from a cPanel backup package: upload, dry run, import with options and a report.
  • Import from cPanel: show the new passwords onceShow the new passwords of an import once.
  • Import from cPanel on the command line (pfhw-import-cpanel)Import from a cPanel backup on the command line with pfhw-import-cpanel.
  • DashboardSee the dashboard: for administrators the customers, accounts, active nodes and failed jobs; for customers the account, plan and usage.
  • Help (searchable topics by role)Search the help, written for your role.
  • Release notesRead the release notes inside the panel.
  • Portal search (find any page of your menu)Find any page of your menu with the portal search.
  • Settings (Tweak Settings): find, view and save any settingFind, view and save any platform setting. A change takes effect at once.
  • Basic setup: contact e-mail, nameservers, hostmaster, home locations, server addresses, default TTLSet the contact e-mail, nameservers, hostmaster, home locations, server addresses and default TTL.
  • Task queue: list jobs, view a job and its stepsList the jobs in the task queue and see a job's steps.
  • Retry a failed jobRetry a failed job.
  • Submit any job type, list job types, cancel a queued jobSubmit any job type, list the job types and cancel a queued job. Available through the API.
  • Idempotency keys on account and job callsRetry safely with idempotency keys on account and job calls.
  • Hooks: list, turn on or off, reorder, delete; list eventsRun scripts on platform events with hooks: list, switch on and off, reorder and delete.
  • Installed modules listSee the list of installed modules.
  • Health endpointCheck the platform with an unauthenticated health endpoint that returns status and version.
  • Resource limits per account (memory, processes, CPU %) from the planLimit memory, processes and CPU for each account through its plan.
  • Service monitor (chkservd): restarts monitored services that are down and records an eventRestart monitored services that are down and record an event, every minute.
  • Nightly web log rotation, bandwidth counting and customer log archivesRotate web logs every night, count bandwidth and keep log archives for customers who turn them on.
  • Daily process log sampling and background process killer (timers)Sample processes every 5 minutes and run the background process killer every night.
  • Install the platform (pfhw-install)Install the platform with pfhw-install. It checks everything first and changes nothing if a check fails.
  • Upgrade with automatic rollback (pfhw-upgrade)Upgrade with pfhw-upgrade. It backs up first and restores the previous version if the upgrade fails.
  • Uninstall (pfhw-uninstall)Remove the platform with pfhw-uninstall, after you type DELETE to confirm.
  • Console administration (pfhwcore-admin): create admin, create token, reset password, unblock, list admins, smtp-relay-login, import-cpanel, db-downgrade, agent-jobAdminister from the command line with pfhwcore-admin: create admins and tokens, reset passwords, unblock, import cPanel and more.
  • Node enrollment: download the internal CA (machine endpoint)Let a new server download the internal CA while it enrolls.
Infrastructure

A dedicated server on a redundant cloud

Reserved resources, replicated storage and automatic failover, in a Tier III data center in Vilnius.

Component Specification What it means for you
Compute 2 to 16 dedicated vCPU cores, depending on the package CPU cores reserved for your server.
Memory 4 to 32 GB dedicated RAM Memory reserved for your server, not shared with others.
Storage 50 to 250 GB NVMe/SSD Kept on Ceph with three synchronous copies on separate drives.
High availability Hypervisor-level automatic failover If a physical host fails, your server restarts on a healthy host within seconds.
Network 1 Gbps redundant uplink Connected to European backbone networks.
Backups Nightly incremental backups Kept on a separate storage array, with one-click restore.

What fully managed covers

  • Network edge configuration
  • Monitoring of system metrics
  • Firewall maintenance
  • Operating system security patches
  • Backup administration

You keep control of your sites and your application code.

Email on its own servers

Your mail runs on our Mailcow servers, separate from your web server. A traffic spike or a code error on your sites does not interrupt your mail.

Outbound mail is rate limited and sent through relays that help protect the reputation of the sending IP addresses.

Vilnius, Lithuania

Your server and its data stay in a Tier III data center in Vilnius, inside the EU and subject to GDPR.

Pricing

Choose your server

Server, control panel, management and backups in every package. Pay monthly, or take a year and pay 20% less.

PFHW Starter

€29 / month
  • 2 dedicated vCPU
  • 4 GB dedicated RAM
  • 50 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

PFHW Business

€39 / month
  • 4 dedicated vCPU
  • 8 GB dedicated RAM
  • 80 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

PFHW Pro

€59 / month
  • 6 dedicated vCPU
  • 12 GB dedicated RAM
  • 120 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

PFHW Enterprise

€69 / month
  • 8 dedicated vCPU
  • 16 GB dedicated RAM
  • 150 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

PFHW Corporate

€89 / month
  • 12 dedicated vCPU
  • 24 GB dedicated RAM
  • 200 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

PFHW Max

€99 / month
  • 16 dedicated vCPU
  • 32 GB dedicated RAM
  • 250 GB NVMe/SSD on Ceph, three copies
  • Control panel included, no limit on sites or accounts
  • Management and firewall included
  • Nightly incremental backups included
Request a demo

The price is the same every month. Billed monthly, no contract, no commitment, no increase on renewal.

Prices are in euros per month, excluding VAT.

Frequently asked questions

Your data is written three times to separate hardware nodes on a Ceph storage cluster. If the physical host running your server fails, the cluster detects it and starts your server on a healthy host within seconds, using the replicated data.

Our engineers handle the network edge, system monitoring, firewalls, operating system security patches and the backup cycles. You keep control of your own sites and application code.

In a Tier III data center in Vilnius, Lithuania, inside the EU.

Yes. You can upload your own certificate, or buy one from us.

Yes. PFHW imports cPanel backup packages, after a dry run that shows what will change.

Yes. Request a demo and we will contact you to arrange a time. After the demo we can set up a trial server for you.

Yes. You can download PFHW, the control panel, for free from the Download tab. It comes without support and needs a server of your own.
Email

Email for all your domains, priced by storage

Add email to any package. It runs on our own mail server in Vilnius. You pay for storage only, never for domains, customers or mailboxes.

Mail storagePer month
25 GB€4
50 GB€7
100 GB€10
Each additional 100 GB+ €10

Prices are in euros per month, excluding VAT. Email is a separate add-on; the server packages above do not include mail storage.

  • Unlimited domains
  • Unlimited mailboxes
  • The price depends only on the storage you use
  • A mail server that is already in production, with an established sending reputation
  • Connected to your server, so mail domains are managed from the control panel
Ask about email
Compare providers

Managed servers with a control panel, side by side

Managed server plans with a control panel, grouped by number of vCPU, from the providers' public pages in November 2026.

ProviderPlanvCPURAM (GB)SSD (GB)Price per monthPrice laterControl panelAccounts includedBilling
CloudAcropolisPFHW Starter2450€29Same pricePFHWNo limitMonthly, no contract
Time4VPSManaged Mini2650€22.99not statedcPanel Admin5Monthly price shown in cart
HosterionCM82860€85not statedcPanel/WHM5 (more: extra fee)Monthly; annual saves one month
HosterionCM1221290€101not statedcPanel/WHM5 (more: extra fee)Monthly; annual saves one month
GinernetManaged VPS (minimum)24100€90–cPanel (licence €30 extra)5Hourly billing
Liquid WebManaged VPS2240$33 for 2 months$66None included; InterWorx, cPanel or Plesk optionaln/aPromotion, then regular price

ProviderPlanvCPURAM (GB)SSD (GB)Price per monthPrice laterControl panelAccounts includedBilling
CloudAcropolisPFHW Business4880€39Same pricePFHWNo limitMonthly, no contract
Time4VPSManaged Midi41050€44.99not statedcPanel Admin5Monthly price shown in cart
HosterionCM16416120€118not statedcPanel/WHM5 (more: extra fee)Monthly; annual saves one month
iv.ltSolo416100+€52.99not statedDirectAdmin1 domainMonthly, minimum 1 month
Liquid WebManaged VPS44100$55.50 for 2 months$111None included; InterWorx, cPanel or Plesk optionaln/aPromotion, then regular price

ProviderPlanvCPURAM (GB)SSD (GB)Price per monthPrice laterControl panelAccounts includedBilling
CloudAcropolisPFHW Pro612120€59Same pricePFHWNo limitMonthly, no contract
Time4VPSManaged Maxi61650€66.99not statedcPanel Admin5Monthly price shown in cart
HosterionCM20632240€184not statedcPanel/WHM5 (more: extra fee)Monthly; annual saves one month
iv.ltMulti624100+€79.99not statedDirectAdminMulti-domainMonthly, minimum 1 month

ProviderPlanvCPURAM (GB)SSD (GB)Price per monthPrice laterControl panelAccounts includedBilling
CloudAcropolisPFHW Enterprise816150€69Same pricePFHWNo limitMonthly, no contract
CloudAcropolisPFHW Corporate1224200€89Same pricePFHWNo limitMonthly, no contract
CloudAcropolisPFHW Max1632250€99Same pricePFHWNo limitMonthly, no contract
iv.ltPro832100+€99.99not statedDirectAdminMulti-domainMonthly, minimum 1 month
iv.ltVip1664100+€179.99not statedDirectAdminMulti-domainMonthly, minimum 1 month

An account is one hosting customer with their own login. cPanel licences limit the number of accounts, and the plans above include a licence for 5. PFHW has no limit.

Prices are taken from each provider's public page and change often; VAT treatment differs between providers. iv.lt plans run on OpenVZ without root access. Plans differ in storage, backups and bandwidth.

"Not stated" means the provider's page does not show a later price.

Compare

How it compares with other control panels

A control panel is only part of the cost. Here is what each option includes.

PFHW cPanel & WHM sPanel CloudPanel
Control panel licence Included in the price Separate licence; extra security and backup products are sold as add-ons Included with managed plans; flat licence tiers if you manage the server yourself Free software
Server included Yes, a dedicated virtual server No, the licence does not include hosting With managed plans from ScalaHosting; otherwise you bring a server No, you bring the server
Server management Included: monitoring, patching, firewall and backups You or your host Managed licence available You
Email service Mailcow mail server, separate from the web server Built in Built in None, you bring a mail service
High availability Ceph with three copies and automatic failover Depends on where you run it Depends on where you run it Depends on where you run it

Based on each vendor's public documentation, November 2026. Features and prices change, so check with each vendor.

Moving from cPanel? The panel imports cPanel backup packages.

Function by function

Open a category to compare every function with the other panels.

PFHW
100%
cPanel & WHM
90%
sPanel
58%
CloudPanel
28%

For each product: the share of the functions we could compare with its documentation that it covers (Yes or Partial).

Compared functions: cPanel & WHM 177, sPanel 177, CloudPanel 164.

Yes   Partial   Not listed   Not verified

No function matches your search.

FunctionPFHWcPanel & WHMsPanelCloudPanel
Create hosting account
List and search hosting accounts (JSON or CSV)
View an account
Suspend account
Unsuspend account
Terminate account
Change account password
Change plan (package) of an account
Change disk quota of an account
Modify account (own limits, e-mail, user name, owner, language)
Rename account user name
Modify several accounts at once (bulk)
Change the owner (reseller) of an account
Move account to another home directory location
Refresh account usage (disk, bandwidth)
Monthly bandwidth limit per account
Run the bandwidth check now / lift all bandwidth limits
View bandwidth usage of all accounts
List suspended accounts
List accounts over quota
List and remove subdomains, addon and alias domains of all accounts
Shell access of accounts (normal, restricted, none; one or all)
Resellers: add, list, show usage
Plans (packages): create, edit, delete, limits
List, create, delete portal users and set their password (API)
Customer records (create, read, change, delete)
Service and domain records (registry only)
Audit log
Account preferences: contact e-mail addresses
User manager: extra FTP and Web Disk logins
Add a team user
Change a team user's roles (Administrator, Database, Web, Email)
Suspend or unsuspend a team user
Delete a team user
Suspend all accounts of a reseller
Unsuspend all accounts of a reseller
Terminate all accounts of a reseller
Create the customer together with the account
Reseller sees and manages only its own customers' accounts

FunctionPFHWcPanel & WHMsPanelCloudPanel
Log in with user name and password
Log out
Two-factor login (TOTP) set up, confirm and remove
Enter the two-factor code at login
Administrator turns off two-factor for a user
Change own password
Password generator
Password strength meter and minimum strength
Password expiry (force new password after N days)
Force password change for users
Limit logins to verified IP addresses
Security questions at login from a new address
Delete own security questions
Administrator resets a user's security questions
Passkeys (WebAuthn) register and log in
Administrator resets a user's passkeys
List users' login methods
External login (OpenID Connect, Google, GitHub): providers
External login: link and unlink own identity
External login: administrator removes a user's identities
Branded client login domains (reseller)
One-time login URL for a customer (billing system)
Log in as the customer and return
API tokens: create, rename, revoke
API console (Swagger UI)
Portal single sign-on provider for the file manager (OpenID Connect)
Statistics report language mapping
Delete own passkey

FunctionPFHWcPanel & WHMsPanelCloudPanel
ModSecurity (WAF) global configuration: mode, paranoia, threshold, audit, disabled rules
ModSecurity custom rules and rule hits
ModSecurity rule sets (OWASP CRS): on/off, version update, rule files, disable by rule id
ModSecurity per domain (customer) and hits
Brute force protection (cPHulk): settings, report, unblock
Country white and black lists for logins (GeoIP database download and lookup)
Host access control rules
IP Blocker (customer)
Virus scanner (ClamAV): scan, quarantine, delete
Host firewall with confirm-or-revert
Root SSH keys: list, add, generate, remove
Sudo group: list, add and remove members
Security Advisor (read-only scan of the host and of PFHW settings)
Security Advisor schedule
Automatic IP banning (Fail2ban-style netfilter) with allowlist and denylist
Watchdog monitoring of the mail containers

FunctionPFHWcPanel & WHMsPanelCloudPanel
List domains of an account
Change document root and Force HTTPS of a domain
Remove a domain
Rename the main domain
Serve a domain through nginx only or through Apache (.htaccess)
Folder listing mode (Indexes)
Leech protection of a protected folder
Apache handlers
Add an addon domain
Add a subdomain
Add an alias (parked) domain
Add a redirect (301/302)
Delete a redirect
Set a custom error page
Remove a custom error page
Add a MIME type
Delete a MIME type
Protect a folder with a password (Directory privacy)
Add or remove a user of a protected folder

FunctionPFHWcPanel & WHMsPanelCloudPanel
Global web server settings (timeouts, body size, keep-alive, index files, extra directives)
TLS protocols and ciphers
Reload or restart the web server
Rebuild every account's web server configuration
Content compression gzip (server default and per site)
Brotli compression
Reverse proxy site type (site forwards to a back-end URL)
Web server features of the nodes (what nginx can do)
Page cache per site (on/off, time) and purge
WordPress object cache (Redis) on or off
List sites with a cache (all accounts)
Bot blocking by user-agent name (per site and server-wide)
Hotlink protection
Cloudflare: real visitor address and Cloudflare-only
Preview URL /~user on the server address

FunctionPFHWcPanel & WHMsPanelCloudPanel
PHP version per domain and PHP on/off
PHP settings per account (basic form and php.ini editor)
PHP-FPM slow log
System PHP settings: offered versions, default version, extensions, pool limits
Edit php.ini of a PHP version
Set PHP version or on/off for several domains
Build PHP versions and extensions
Restart PHP-FPM
Web apps: Node.js, Java, Tomcat, Python (WSGI/ASGI) and Ruby (Puma)
n8n application
Perl modules, PHP PEAR packages and RubyGems (customer)
System Perl modules and PEAR packages (administrator)
WordPress: install, list and remove
WordPress: one-click login
WordPress: change administrator password
WordPress: security report and fixes
WordPress: scan for installations made by other means
Git deployment with releases and rollback
Git repository browser (read-only)
Add a cron job
Edit a cron job
Delete a cron job
Set the cron output e-mail address
Create a Git repository (clone or empty)
Update a Git repository from its remote and deploy HEAD
Stop managing a Git repository
Start, stop or restart a web app
Read a web app's log
WordPress: update core, plugins or themes
WordPress: install a plugin or theme from wordpress.org
Node.js apps
Java and Tomcat apps
Ruby apps (Rack on Puma)
Python apps (WSGI on gunicorn, ASGI with uvicorn workers)
RubyGems (customer)

FunctionPFHWcPanel & WHMsPanelCloudPanel
File manager (single sign-on into the SFTPGo web client)
Web Disk (WebDAV) logins
FTP connections: list and disconnect sessions
Disk usage
Compress, extract, set permissions, search file names
Web terminal (customer)
FTP server settings and restart (administrator)
Set up file manager single sign-on on every web node
SSH server: password logins and restart (administrator)
Root terminal on a node (administrator)
Create an FTP account
List FTP accounts with folder, quota and usage
Change an FTP account's password or quota
Delete an FTP account
Generate an SSH key
Import an SSH key
Authorize or deauthorize an SSH key
Delete an SSH key

FunctionPFHWcPanel & WHMsPanelCloudPanel
MariaDB: user privileges on a database
MariaDB Database Wizard (database, user and privileges in one step)
Remote MySQL (hosts allowed to connect)
phpMyAdmin (customer, logged in automatically)
Slow queries (customer, own databases)
PostgreSQL Database Wizard
Remote PostgreSQL (hosts allowed to connect)
phpPgAdmin (Adminer, customer, logged in)
PostgreSQL job status of an account
MariaDB hosts: list, add, validate, activate, delete
Edit a remote MariaDB host profile
MariaDB root password and restart
Additional MySQL access hosts (all database users)
Change any database user's password
phpMyAdmin at root level
Manage all MariaDB databases and users: list, rename, repair, give to an account
Database processes (MariaDB)
MariaDB upgrade: check, test copy, run
Database version upgrade in container mode (MariaDB and PostgreSQL) with backup, trial on a copy and way back
Database server configuration editor (MariaDB and PostgreSQL)
Slow query monitoring (administrator: threshold, retention, read, clear)
PostgreSQL hosts: list, add, edit, validate, activate, delete, postgres password, restart
PostgreSQL databases, users and processes of all accounts
phpPgAdmin (Adminer) as superuser
Create a MariaDB database
Rename a MariaDB database
Check a MariaDB database
Repair a MariaDB database
Delete a MariaDB database
Create a MariaDB user
Change a MariaDB user's password
Rename a MariaDB user
Delete a MariaDB user
Create a PostgreSQL database
Rename a PostgreSQL database
Check a PostgreSQL database
Repair a PostgreSQL database
Delete a PostgreSQL database
Create a PostgreSQL user
Change a PostgreSQL user's password
Rename a PostgreSQL user
Delete a PostgreSQL user
Add or remove a PostgreSQL user on a database
Synchronize PostgreSQL grants

FunctionPFHWcPanel & WHMsPanelCloudPanel
List and search DNS zones
Add DNS zone
Delete DNS zones
Add an A entry for a host name
Restart DNS server
Template for new zones
Set TTL of selected zones
DNS cleanup (remove duplicate records)
Add SPF to all account zones
Change an IP address in all zones
Create missing zones for account domains
Nameservers for all zones (set, dry run, apply)
Edit any zone's records and view its change history (admin)
DNS cluster status and synchronise with a secondary
Reset zone to the default records
Track DNS: look up a name and trace a route
Domain forwarding (whole domain 301/302 to a URL, no account)
View DNS records of a zone (customer)
Add a DNS record (customer)
Edit a DNS record (customer)
Delete a DNS record (customer)
DNSSEC: view keys and DS records
DNSSEC: create or import a key
DNSSEC: activate or deactivate a key
DNSSEC: export a private key
DNSSEC: delete a key
Dynamic DNS: create a host
Dynamic DNS: recreate a host's address or delete the host
Dynamic DNS: device updates its address (public web call)

FunctionPFHWcPanel & WHMsPanelCloudPanel
Private keys: generate, upload, view, delete
Certificate signing requests: create, view, delete
Upload a certificate
Create a self-signed certificate
Install and uninstall a certificate on a site
SSL/TLS status of every domain with expiry warning
SSL/TLS wizard (one certificate on several domains)
Manage SSL hosts: list, make primary, uninstall (administrator)
SSL storage manager (stored keys, CSRs, certificates of all accounts)
Install a certificate on any domain (administrator)

FunctionPFHWcPanel & WHMsPanelCloudPanel
Connect a Mailcow mail server (save, test, sync, disconnect)
Mail import access for the cPanel importer (SSH key limited to one command)
All mailboxes of the platform
Mail on or off for a domain (with delete preview)
Mail settings (server names for mail programs)
Mail DNS records (MX, SPF, DKIM, DMARC) preview and apply
Mail to customers (all customers, resellers, a plan or a node)
Mail relay login (user and password of the SMTP relay)
Create a mailbox
Change a mailbox's password or quota
Disable or enable a mailbox
Delete a mailbox
Add an alias or forwarder
Change an alias's destinations or disable/enable it
Delete an alias
Mail to customers: preview recipients and send a test mail
Mail to customers: view progress, cancel and resume a mailing
Mailboxes with quota, per-mailbox settings
Aliases, forwarders, catch-all, tagged-mail handling
Webmail (SOGo) with direct login forwarding
Calendars and contacts (CalDAV, CardDAV), ActiveSync, SOGo resources
Autoresponder / out-of-office (SOGo)
Mail filters (Sieve) per user
Global filter maps (pre- and post-filter)
Spam filter: per-user spam score, black and white lists, Rspamd settings map
Greylisting
Quarantine with notifications (never, hourly, daily, weekly)
Antivirus scanning (ClamAV)
Queue Manager
Sync jobs (imapsync) to pull or migrate remote mailboxes
Rate limits per domain and per mailbox
Routing: sender-dependent transports and relay domains
Forwarding hosts
BCC maps (copy of mail to another address) and recipient maps
TLS policy maps and enforced TLS incoming and outgoing per mailbox
DKIM and ARC keys, DNS records per domain
Autoconfig and autodiscover
Logs: Postfix, Dovecot, SOGo, Netfilter, Autodiscover, Watchdog, ACME, API, Rate limits, Crontasks, Rspamd, Mailcow UI, SASL
Quota notifications and mailbox statistics
Mailing lists per domain
Mailbox password recovery e-mail, force password change, force 2FA enrollment, app passwords
Mail server administrators, domain administrators, two-factor and FIDO2 login, API
Per-mailbox ACL (permissions), Pushover notifications, custom attributes, rename mailbox
Allowed protocols per mailbox (IMAP, POP3, SMTP, Sieve, ActiveSync, CalDAV)
Alias domains: a whole domain forwarded to another domain on the server; catch-all aliases to any address

FunctionPFHWcPanel & WHMsPanelCloudPanel
Customer backup download: home directory and each database
Customer restore of files or of a database from an uploaded backup
Backup settings: destination, schedules, retention, encryption, verification
Scheduled backups and retention
Backup encryption (gpg AES-256)
Leave an account out of backups
Platform backup and restore commands (pfhw-backup, pfhw-restore)
Back up one account now
Full-server backup now
Test the backup destination
Verify a backup again
Restore an account backup: dry run
Restore an account backup into the same or a recreated account
Show the new passwords of a restore once

FunctionPFHWcPanel & WHMsPanelCloudPanel
Visitors (recent requests)
Error log
Raw access logs: archive setting and download
Bandwidth charts
Statistics reports (GoAccess): choose domains, open report
Statistics configuration (administrator)
CPU and RAM usage per account
Site monitoring (uptime, status, text, speed, certificate expiry) with e-mail alerts
Site monitoring overview and limits (administrator)
SEO audit of a domain
Checkmk: service status, disk usage, web server status
Checkmk login and poll now
Contact Manager: e-mail, URL call and chat webhook contacts for monitoring problems

FunctionPFHWcPanel & WHMsPanelCloudPanel
Service Manager: list, start, stop, restart, start at boot, monitor
Process manager: list and kill processes
Daily process log
Background process killer: names and run now
Alerts: list and acknowledge
Servers and roles; change a server's roles
Enroll a server (enrollment command)
Send settings to all servers (cluster push)
Check a node's agent; remove a node record
Cluster settings: time zone, NTP servers, compilers, traceroute, SSH password logins, mail relay address, fork-bomb protection
Platform alert e-mail (node events, Core service restarts, failed backups)
Automatic certificates for the mail host (ACME)
Outbound SMTP relay
Mailcow branding: logo upload (normal and dark mode) and theme choice
Mailcow interface language selection and dark mode switch

FunctionPFHWcPanel & WHMsPanelCloudPanel
Import from cPanel: upload package, dry run, import with options, report
Import from cPanel: show the new passwords once
Import from cPanel on the command line (pfhw-import-cpanel)
Dashboard
Help (searchable topics by role)
Release notes
Portal search (find any page of your menu)
Settings (Tweak Settings): find, view and save any setting
Basic setup: contact e-mail, nameservers, hostmaster, home locations, server addresses, default TTL
Task queue: list jobs, view a job and its steps
Retry a failed job
Submit any job type, list job types, cancel a queued job
Idempotency keys on account and job calls
Hooks: list, turn on or off, reorder, delete; list events
Installed modules list
Health endpoint
Resource limits per account (memory, processes, CPU %) from the plan
Service monitor (chkservd): restarts monitored services that are down and records an event
Nightly web log rotation, bandwidth counting and customer log archives
Daily process log sampling and background process killer (timers)
Install the platform (pfhw-install)
Upgrade with automatic rollback (pfhw-upgrade)
Uninstall (pfhw-uninstall)
Console administration (pfhwcore-admin): create admin, create token, reset password, unblock, list admins, smtp-relay-login, import-cpanel, db-downgrade, agent-job
Node enrollment: download the internal CA (machine endpoint)

"Not listed" means the function is not in the vendor's documented feature list. It is not proof that the product lacks it. "Not verified" means we have not matched this function to the other panels' documentation.

Download

Download it for free

You can download PFHW (Portal for Hosting Websites) and run it on your own server, free of cost and without support, for whatever purpose you want.

PFHW

PFHW, Portal for Hosting Websites: the hosting control panel behind this service. Free to download and use.

Download

Mailcow

The mail server that provides mailboxes, webmail and spam filtering. Mail features in the panel work once you connect your Mailcow server.

Go to Mailcow

What you need

  • A virtual server with a public IP address
  • Someone to install and administer it
  • A Mailcow server, if you want email

The installer checks the server first and changes nothing if a check fails.

No support is included with the download. If you would rather have us run the server for you, see the pricing.

Want to see it running?

Request a demo and we will contact you to arrange a time.

Request a demo Contact Sales