A complete hosting stack, not a collection of half-features.

The headline feature, and the one cPanel needs CloudLinux for. Every website runs its own dedicated PHP process with its own version, its own extensions, its own php.ini and its own kernel-enforced resource limits — completely isolated from every other site on the server. No shared PHP, no bad-neighbour effect, no CloudLinux licence.

• Own extensions per website — a customer enables ionCube or ImageMagick on their site and it affects only their site
• Can't break the neighbours — on a shared PHP install one toggle changes it for everyone; here it's impossible
• Own PHP version — 7.4 for a legacy app, 8.3 next door, per website
• Own php.ini — memory, upload size, execution time, per site
• Own PHP workers — request timeout and worker count, set by the site owner within your limits 2.3.0
• Own CPU / RAM / process caps — enforced by the Linux kernel, not just PHP
• A busy site can't slow the rest — each site's PHP has its own capped queue, so a flood of slow pages on one site leaves the others fast 2.3.1
• Self-healing & safe — a bad module change is auto-reverted and can never take a site down; sites fall back to the shared master if their own can't start
• No CloudLinux, SELinux stays enforcing — the isolation people pay for, included

Four roles, real quotas with overselling protection, and branding that cascades — your reseller's customers see your reseller's brand, never yours.

• Admin → master reseller → reseller → user
• Package types — a package's type creates the right kind of account automatically
• Packages — disk, bandwidth, sites, databases, email, with an Unlimited tickbox on any limit
• Plan features & AI allowances — tick what each plan includes; a reseller's AI allowance is a shared pool for all their customers
• Dedicated resource pools — CPU/RAM/process caps per plan that cascade to a reseller's customers' sites
• Overselling protection — can't allocate what you don't have
• White-label branding — name, logo, colours, favicon
• Branding cascades down the hierarchy automatically
• Resellers never see the server — or the isolation controls; only their own customers
• Suspend and unsuspend accounts
• WHMCS module 3.0 — sell all three levels automatically, with real suspensions, one-click sign-in and usage billing

Clone a WordPress site to a staging subdomain, work on it in peace, then push it back to the live site in one go.

• One-click staging copy — files and database copied to a subdomain, with its own database, so it can never write to the live site by mistake
• Push files, the database or both — addresses are rewritten for the live site automatically
• Keep the live site's content — update settings, plugins and themes without losing new posts, pages, comments, users or shop orders
• Backed up first — the live site is backed up before the push and put back automatically if anything goes wrong
• Never touches wp-config.php — the live site keeps its own database settings and .htaccess

Twelve one-click hardening options for every WordPress site, a nightly check for known holes, and one button to update everything.

• 12 hardening switches — block XML-RPC, hide user names, stop PHP running from uploads, turn off the file editor and more
• Exactly undoable — turning a switch off puts the site back as it was
• Known security holes — your host can switch on a nightly check against a database of published WordPress vulnerabilities; a red badge says which plugin or theme to update
• Update every site at once — WordPress, plugins and themes on all your sites, one at a time, each backed up first; the run stops at the first failure

Not "we tar your files up". WebDeck rebuilds an entire server onto bare metal — and tests its own backups to prove they'd actually work.

• Scheduled backups — daily, weekly, retention you choose
• Off-site — SFTP and rclone (S3, Backblaze B2, Drive and more)
• Deduplicated and encrypted — powered by restic
• Full server restore — rebuild a dead server from scratch
• Per-site restore — roll one site back, leave the rest alone
• Site snapshots — take one before you do something risky
• Customer self-restore — scoped to their own domains
• Backup self-test — an untested backup isn't a backup
• Customer backup schedules — daily or weekly, on top of yours 2.3.1
• Restore as of a date, and bring back a deleted account 2.3.1
• Encrypted panel backups — with a passphrase only you hold 2.3.1

The panel knows how the server is doing — and fixes most problems before you find out about them.

• Live CPU, memory, disk and load
• Self-healing reconcile — rebuilds vhosts, renews certs, restarts services
• Self-healing permissions 2.2.18 — web server access, wp-config, certificate keys and the panel’s own secrets kept correct automatically
• Email notifications — service down, backups, low disk, security and more, with per-alert toggles
• Bandwidth and full-mailbox alerts to customers and resellers 2.3.0
• Notification bell in the header — the same alerts, in the panel, whether or not email is set up
• Health checks — vhosts, certificates, mail delivery
• Service control — start, stop, restart from the panel
• Resource usage per account and per site
• Disk usage breakdown — find what's eating the disk
• Data inspector — look inside the panel's own database
• Self-updating — with automatic rollback if an update fails, or is interrupted part-way

Point the importer at a cPanel backup and it recreates the account properly — not a half-import that leaves you fixing things for a week.

• Reads standard cPanel archives (cpmove / full backups)
• Websites and document roots recreated
• Databases and users restored with privileges
• Email accounts and their mail
• DNS records imported
• Bulk import — move a whole server, not one account at a time
• Remote pull — fetch backups straight from the old server
• Preflight check — see what will happen before it happens

Multiple versions side by side, and — since 2.2.0 — a complete PHP environment per website: each site's version, modules and settings are its own, isolated from every other site. Works on every OS and every web stack, not just Debian.

• Multiple PHP versions installed together
• Per-site version — legacy app on 7.4, new one on 8.3
• Per-site modules — each website toggles its own, affecting no one else
• Per-site PHP settings — memory, upload size, execution time
• ionCube loader — one click (WHMCS and friends)
• OPcache and the performance modules
• FPM pool tuning per site — and site owners can tune their own PHP workers 2.3.0
• Self-healing — repairs broken module config automatically

A full mail server — Postfix and Dovecot — with the deliverability records set up for you. Most panels leave DKIM as homework. WebDeck does it on day one, then checks its own work.

• Mailboxes, aliases, forwarders, catch-alls — with real mailbox sizes
• Spam filtering, out-of-office replies and mail rules 2.3.0
• DKIM signing — keys generated, DNS published automatically
• SPF and DMARC records created for you
• Deliverability checker — tells you what's wrong before Gmail does
• Auto-deliverability — fixes common problems on its own
• Mail self-test — proves the whole chain works, end to end
• Webmail built in — customers log in from the panel
• Autoconfig — Outlook and Thunderbird set themselves up
• SMTP relay support, and TLS hardening in one click

Every mailbox gets automatic replies and simple rules, set up in plain English — no scripts to write.

• Out-of-office replies — with start and end dates, sent once per sender, never to mailing lists or newsletters
• Mail rules — if From, To or Subject contains something, move it to a folder, forward it or delete it
• Forward safely — forwarded mail is sent from the mailbox's own address, so it passes SPF
• Works in webmail too — Roundcube's Filters screen shows and edits the same rules
• Limits per plan — you set how many rules each mailbox may have
• Built safely — the panel writes the filter itself and checks it before it goes live

Visits, pages, referring sites and errors for every website, by day and by month — long after the raw logs have rotated away.

• Two years of history — a small summary is saved every night from the server's own logs
• Top pages and referrers — what people read and where they came from
• Spot problems — 404s and server errors, day by day
• No tracking script — nothing is added to the site, and nothing is sent anywhere
• Private by design — no IP addresses or browser details are kept, and query strings are dropped

Every name is checked before Let's Encrypt is asked, so a domain that isn't pointed here yet doesn't hold up the rest — or burn through Let's Encrypt's limits.

• SSL names list — see each name on a certificate and exactly what it's waiting for
• Works behind NAT and Cloudflare — names are proved the same way Let's Encrypt checks them
• Retries by itself — after 1 hour, 6 hours, a day, then daily for 30 days
• Retry now — for when you've just fixed the DNS
• Never shrinks a working certificate — because of a temporary DNS hiccup

One nameserver is a single point of failure. Add a second machine and WebDeck puts a full copy of every zone on it, so your customers' DNS keeps answering even if the main server is offline. You run one command on the new box — it installs PowerDNS, configures itself as a secondary and registers back with the panel on its own.

• One command to enrol — no SSH keys or root credentials leave the panel
• Every zone transferred automatically over AXFR, and kept in step
• NS records updated for you — once a secondary is confirmed serving, it's added to your zones' NS records so domains actually use it
• As many secondaries as you like — there's no cap
• Live health per server — zones in sync, PowerDNS version, OS, last seen
• Safe by design — a single-use token that expires, and guards that refuse to bulk-delete zones if the primary ever looks wrong
• Retire a nameserver safely — disable one only once a healthy secondary exists, never leaving you below two
• Debian, Ubuntu, AlmaLinux, Rocky and RHEL — the right PowerDNS setup for each

Make WebDeck yours. Your name, your logo, your colours — customers never see ours.

• Your brand name replaces WebDeck throughout the panel
• Your logo and favicon
• Your colours — match the panel to your own site
• Three brand colours 2.2.13 — accent, secondary and a positive/success colour, used across every theme
• Three interface themes 2.2.13 — Aurora (modern glass, the default), Classic and Console; light and dark, with dark mode the default on new installs
• Cascades to resellers — their customers see their brand, not yours
• Applies to the whole panel, not just a login page
• Free — white-labelling isn't a paid tier

A real file manager in the browser. Fix a config typo, upload a logo, check permissions — without opening a terminal or making your customer install FileZilla.

• Browse the whole site with a proper tree view
• Edit files in the browser — syntax-friendly, saves instantly
• Uploads up to 4 GB — drag files straight in; a dropped connection picks up where it stopped 2.3.0
• Downloads of any size, streamed straight from disk
• Select several at once — delete, move, copy or change permissions in one go 2.3.0
• Drag onto a folder to move, and copy files and folders 2.3.0
• Zip and unzip — make .zip or .tar.gz, unpack .zip and .tar archives in the browser 2.3.0
• Create folders, rename, move, delete
• Change permissions (chmod) from the interface
• Scoped safely — a customer can't escape their own directory
• FTP accounts too (always encrypted: FTPS or SFTP), if they'd rather use a client

MySQL and MariaDB, with phpMyAdmin one click away and single sign-on so nobody has to remember another password.

• Create databases and users from the panel
• phpMyAdmin built in — with single sign-on
• Scoped privileges — a user per database
• Remote MySQL — per database, for named IP addresses only, always encrypted; off until you switch it on 2.3.1
• Included in backups — dumped and restored with the site
• Or install Adminer if that's more your thing

Create a site and WebDeck does the lot: virtual host, document root, PHP pool, DNS zone, SSL certificate. Then hands you the tools to run it.

• Parked domains — point extra domains at a site; fleet-checked so you can only park domains you own (2.2.9)
• One-step site creation — vhost, docroot, DNS and SSL together
• Apache, nginx or OpenLiteSpeed — switch stack without rebuilding
• Free Let's Encrypt SSL, issued and renewed automatically
• Force HTTPS per site, one toggle
• URL redirects — 301s and 302s, managed from the panel
• Page caching for an instant speed-up
• Site repair — rebuild a broken site's config in one click
• Add-on domains and subdomains

Scheduled tasks without the cron syntax anxiety. Common schedules are presets; the fields are there if you know what you're doing.

• Create and edit scheduled tasks from the panel
• Presets for the common schedules — hourly, nightly, weekly
• Full cron syntax available if you want it
• Per site — each customer manages their own
• Delete a job without editing a crontab by hand
• WordPress cron — set up a real one so scheduled posts actually publish