The Linux server panel that makes you forget Plesk and cPanel.
KoaPanel runs websites, WordPress, databases, mail and customers on an Ubuntu 24.04 or 26.04, AlmaLinux 9 or Rocky Linux 9 server. Fast by default, secure by design, easy to use even from your phone. Free up to 3 websites.
Demo without installing anything: login admin / demo-admin-2026, data resets every hour.
$ curl -fsSL https://get.koapanel.app | sudo bash
See it in action
KoaPanel in 70 seconds.
WordPress
Fast WordPress, with no cache plugin to configure.
Install WordPress in one click and the panel sets everything up: pages served by nginx without touching PHP, a private Redis for the site, OPcache. Then it measures the result: home page response time with and without the cache.
- Safe updates: backup, update, official checksum and home page checks. If anything goes wrong, it rolls back by itself.
- Staging copy protected by password, published to production in one click.
- Log into wp-admin without a password, login protection, WP-CLI in the browser.
An update breaks the site? The panel restores files and database and tells you.
Three levels and white label
One server, many customers. Each sees only their own.
Like WHM and cPanel, but in one modern interface. Create resellers with their quotas; they create packages and customers under their own name and logo.
Administrator
The whole server: accounts, resellers, packages, security, updates.
Agency or reseller
Their customers and packages, under their brand, logo and support contacts.
End customer
Their own sites, files, databases, mail and backups, within the package limits.
Migration
From cPanel and Plesk in a few clicks. Without even downloading anything.
Upload the account backup file, or connect the old server over SSH: KoaPanel detects domains, databases, cron jobs and mailboxes and brings them over.
- Databases with new passwords,
wp-config.phprewritten automatically - A traffic light for every imported site: the panel compares the old and the new server before the DNS switch
- One-click cutover, at night too: final sync, DNS, SSL and cron
- A migration that stops starts again from where it was
- SSH credentials used once and never stored
Security
Secure by design, not as an add-on.
Isolation between sites, built-in antimalware and digitally signed panel updates that roll back automatically if anything goes wrong.
Antimalware
Built-in scanner for web shells and obfuscated code, real-time protection on newly written files, ClamAV sized to the server RAM, WordPress files compared with the official ones and a check of the WordPress database. Reversible quarantine and original files put back in one click: it never deletes anything by itself.
Isolation
One Linux user and PHP pool per site, open_basedir, dangerous functions disabled, SFTP locked into the site folder. WordPress commands always run as the site user, never as root.
Signed updates
Every new panel version is verified by digital signature and checksum before installing. If it doesn't respond within a minute, the previous version comes back by itself.
Mail for your domains, when you need it.
An optional mail service you enable in one click: mailboxes, forwarders, autoresponders, antispam, DKIM signing and a webmail that opens from the panel already signed in.
- Checks before enabling: port 25, reverse DNS, blocklists, memory
- SMTP relay for cloud providers that block port 25
- DNS records ready to publish, or published for you with Cloudflare
AI assistant
An AI assistant that finds the problem and proposes the fix.
Anthropic's Claude reads the site's logs and configuration, without passwords or personal data, and explains what's wrong. Every fix shows before and after: apply it in one click and undo it the same way.
In the latest versions:
- Complete firewall like WHM: ports, lists with expiry, countries, flood, alerts, security score and test mode
- Busy sites: request limit per address, real address behind the CDN, most active addresses to block in one click, PHP processes set from the panel
- KoaPanel AI with no key: 100 Haiku diagnoses and 5 Sonnet deep analyses a month in every licence, PRO for those who want more
- Migrations that resume, site check with a traffic light and one-click cutover; full DirectAdmin
- Function search like in WHM, with cPanel and Plesk names too
- Migration from CWP: whole accounts with mail and original passwords
- Full backups: mail, site settings, downloadable archive, SFTP, FTP and Google Drive
- Like WHM: reseller permissions, functions included in packages, real disk quotas and monthly traffic
- Account shell closed in the site, Git deploy for PHP sites, process manager
- Mail: queue message by message, delivery log, adjustable antispam per domain
- Savings: real RAM per site, compressed RAM, compressed mail (−41%)
- Ubuntu 24.04 and 26.04, AlmaLinux 9 and Rocky Linux 9, with the OWASP application firewall
And everything else
Everything you need to host websites. Nothing you don't.
Isolated sites
Each site gets its own Linux user, PHP-FPM pool and folder: a compromised site cannot touch the others.
PHP 7.4 to 8.5
Several versions on one server, one per site, with memory, uploads and timeouts tunable per site.
HTTPS Let's Encrypt
Free certificates in one click, wildcards too, automatic renewal, "Renew now" and a DNS check before requesting. Or upload the certificate you bought elsewhere.
MariaDB and PostgreSQL
Databases and users per site; phpMyAdmin and Adminer open already signed in, no password to retype.
App installer
Over 40 apps in one click, including WordPress, WooCommerce, PrestaShop, Joomla, Drupal, Nextcloud and Moodle, from verified official packages.
Node.js, Python and .NET
Node.js, Python and ASP.NET Core apps as a site service, with Git deploy, logs and health checks. And .htaccess rules when you need them.
Passkeys
Sign in with Face ID, Touch ID or Windows Hello, or protect sign-in with an authenticator app.
Backup and restore
Incremental restic backups to S3, SFTP, FTP, Google Drive or disk, scheduled, with file, database, mail and settings restore and a downloadable archive.
File manager and editor
In-browser file manager with a code editor, highlighting and linting; chrooted SFTP, FTP and FTPS.
Cron
Scheduled jobs per site with a readable schedule builder and run history.
DNS on the server or on Cloudflare
Like cPanel, the server can be your domains' DNS, with DNSSEC and your own nameservers; or manage records on Cloudflare and 1PrimeCDN.
All servers
One page with the status of every linked server and Ctrl+K (Cmd+K on Mac) quick search for a site on any server; jump between them already signed in.
Move an account
An account moves to another linked server with sites, databases, mail and DNS, same passwords; if anything fails, it goes back.
Web terminal
The server's root shell or the site user's shell in the browser, with the password asked every time and every session logged.
API, webhooks and WHMCS
A REST API documented as OpenAPI 3.1 with signed webhooks, and the free WHMCS module to sell hosting automatically.
Italian, English and French
Interface, manual and emails in each user's language.
Firewall and fail2ban
A complete firewall like WHM: ports by service, lists with expiry, countries, flood, malicious lists, alerts and a security score, plus ModSecurity with the OWASP rules and fail2ban for every service.
AI assistant
A diagnosis of your sites by Claude, with no passwords or personal data, and safe fixes you apply and undo in one click. No key needed: every licence includes KoaPanel AI credits each month.
Real-time antimalware
Site files are checked as soon as they are written: web shells and certain malware are quarantined at once, the rest is emailed to you.
A bigger server
See the server's plan at Vultr or Hetzner Cloud and move to a bigger one from the panel, with the disk grown by itself.
RAM and disk savings
See the real RAM of every site, protect the server with compressed RAM and compress mail, in one click. On XFS or Btrfs identical site files are shared too.
Extra disks
Prepare a new disk and move sites onto it while they stay online; migrations never start without enough space.
Activity log
Who did what, when and from where: every operation is logged.
Chat alerts
Stopped services, failed backups, malware and expiring certificates on Slack, Discord or Telegram.
Customer area and error reports
Licences, invoices and support in a customer area with Prime Software ID; when something breaks the panel tells us by itself, with technical data only.
Comparison
Why choose KoaPanel over Plesk or cPanel.
Plesk and cPanel are mature products built for large hosting providers. KoaPanel is made for people who run one to a few dozen servers and want a modern, fast panel with pricing designed for small teams.
| Aspect | KoaPanel | Traditional panels |
|---|---|---|
| Price | Free up to 3 sites (personal use), then from 7.90 € a month. Every feature in every plan. | Price lists designed mainly for large providers |
| Interface | One modern app for admins, resellers and customers, phone included | Interfaces grown over many years of development |
| WordPress | Three cache layers, private Redis, updates with automatic rollback and staging: built in | Often through dedicated toolkits or extensions |
| Installation | One binary and one script on Ubuntu 24.04 or 26.04, AlmaLinux 9 or Rocky Linux 9: nginx, PHP-FPM, MariaDB | More components to install and maintain |
| Language and support | English, Italian and French: interface, manual, emails. Support from inside the panel, from the team that builds it | International products, translated |
| Coming from another panel | Built-in migration from cPanel, Plesk, CWP and DirectAdmin: backup file or SSH, with a site check and one-click cutover | Migration tools between their own products |
KoaPanel vs cPanel KoaPanel vs Plesk Calculate your savings
Plesk and cPanel are trademarks of their respective owners. This comparison is qualitative and describes KoaPanel's design choices; it is not a benchmark.
FAQ
Frequently asked questions
Which servers does KoaPanel run on?
A freshly installed Ubuntu 24.04 o 26.04 LTS, AlmaLinux 9 or Rocky Linux 9 server (VPS or dedicated) with root access. The installer sets up nginx, PHP-FPM, MariaDB, certbot, the firewall and the panel. Mail and antimalware adapt to the available memory: they work on a 2 GB VPS too.
Can I try it for free?
Yes: on a fresh Ubuntu 24.04 or 26.04, AlmaLinux 9 or Rocky Linux 9 server run curl -fsSL https://get.koapanel.app | sudo bash. The Free plan allows up to 3 websites for personal use, with every feature. For more sites or business use, pick a paid plan and paste the license code in the panel: no reinstall needed.
How many servers does one license cover?
Each license covers one server. If you run several servers you need one license each; link them together and switch between them from the menu.
What happens if my license expires?
You get a 14-day grace period with the same limits; then the Free plan limits apply. The panel never deletes anything: sites keep running, only creating new sites beyond the limit is blocked.
Can I resell hosting to my customers?
Yes. Create resellers with their own quotas and packages; each can set a name, logo and support contacts. Customers never see KoaPanel's plans. If you are a hosting provider, see wholesale licenses.
Can I move sites from cPanel, Plesk or CWP?
Yes, with the account backup file or by connecting to the old server over SSH. Read how migration works.
Do I need a mail server?
No, mail is optional. Enable it whenever you want from Mail › Mail server, or keep using an external mail service.
Your next server deserves a better panel.
Free up to 3 websites for personal use. When you grow, pick the right plan: every feature is included in every plan.