Engineering capabilities
- WHM server build and tuning
- Account, package and reseller design
- Migration between servers
- Backup and restore configuration
Hosting & Control Panels
cPanel / WHM
Linux hosting control plane for shared and reseller environments, deployed with account isolation, backups and a defined patch path.
Security & hardening
- ModSecurity and firewall rulesets
- Two-factor administrative access
- Account isolation and resource limits
- Automated SSL issuance
cPanel / WHM hosting architecture
The panel is treated as a control plane, not the security boundary: accounts are isolated, the edge is filtered, and backups leave the server.
-
01
Edge
- DNS
- CDN / WAF
- TLS termination
AutoSSL or Let's Encrypt issuance with HTTP to HTTPS enforced site-wide.
-
02
Perimeter
- CSF / firewall
- ModSecurity
- cPHulk brute-force
Panel and SSH ports restricted to known sources; login throttling always on.
-
03
WHM control plane
- Packages & feature lists
- Reseller accounts
- EasyApache profile
Resource limits per package so a single account cannot starve the server.
-
04
Accounts
- cPanel users
- PHP-FPM pools
- MySQL databases
- Mail accounts
CageFS-style isolation, per-account PHP versions and separate database users.
-
05
Data protection
- Local backups
- Remote / offsite target
- Restore tests
Backups written off the server so a compromised host does not take the copies with it.
Frequently asked questions
Can you migrate accounts between cPanel servers without downtime?
Accounts are transferred and verified on the new server first, DNS TTLs are lowered ahead of the switch, then records are cut over. The old server stays available for a defined grace period.
Is the default cPanel install secure enough?
No. A stock install leaves the panel widely reachable and lacks brute-force and WAF tuning. Hardening covers port restriction, two-factor, ModSecurity rules and account isolation.
Which PHP handler should we use?
PHP-FPM per account in almost all cases: it isolates processes, gives predictable memory limits and performs better than suEXEC/CGI under load.
Are cPanel backups enough for disaster recovery?
Only if a copy leaves the machine and a restore has actually been tested. Local-only backups do not survive host failure, deletion or ransomware.
Scope the work before you commit budget
Send the environment details and get an engineered proposal with assumptions, risks and a rollback path.