cPFence v4 public beta is here.

Explore v4

Ultimate Protection for Enhance Servers

Your hosting security.
Under control.

Block malicious traffic. Find malware in files and databases.
Close WordPress vulnerabilities across your Enhance cluster.

One-command setup From $5 / month Built for your cluster
cPFence v4+ dark-mode dashboard with All Servers selected, populated security counters, and attack-origin and defense charts
Real visibility. Across every server.cPFence WebUI · System dashboard

Trusted by hosting teams.

Three layers of protection.Working as one.

Protect your network, web applications and files with complementary defenses. Shared IP intelligence, a proxy-aware WAF and malware protection work across your Enhance cluster, managed from one dashboard.

Animation shows illustrative security events.

  • Your protection layers
  • Layer 1Network edge

    IP reputation and DDoS protection

    Block known malicious IPs at the network layer with shared IPDB intelligence. Brute-force detection and configurable connection limits help defend your servers against aggressive traffic.

    • IPDB
    • DDoS mitigation
    • Shared threat data
    blocked203.0.113.24listed in IPDB
  • Layer 2Web server

    Web application firewall for your stack

    Built for Nginx, Apache, OpenLiteSpeed and LiteSpeed. The proxy-aware Layer 7 WAF identifies real client IPs behind services such as Cloudflare and blocks abusive clients.

    • Nginx
    • OpenLiteSpeed
    • LiteSpeed
    blockedPOST /xmlrpc.phpbrute-force attempt
  • Layer 3Files and databases

    Real-time malware protection

    Scan new and changed files, with automatic quarantine when enabled. Daily WordPress database scans and vulnerability checks help uncover threats beyond the filesystem.

    • File scanning
    • Database scanning
    • WordPress vulnerabilities
    quarantineduploads/img-cache.phpwebshell signature
  • Your sites, protected
Fits right into your stackEnhanceNGINXLiteSpeedApacheWordPress

WP AutoShield®

One click protects every WordPress site.

Stop securing WordPress one site at a time. WP AutoShield® hardens every installation on your server, detects vulnerabilities and keeps updates automatic.

  • Vulnerability detection
  • Automatic updates
  • One-click setup

Owl AutoMySQL™

Smart monitoring that acts on its own.

cPFence Owl™ watches your server processes 24/7. It blocks malware instantly, catches abusive users and high load, and applies One-Click MySQL resource limits before the server slows down.

  • Detect rootkits
  • Abusing users
  • High load

0-day malware detection

Go beyond basic malware protection.

A light, smart scanner with hourly-updated signatures that detect over 14 million viruses and malware. Unlike basic antivirus such as ClamAV, it catches the latest threats in real time without false positives.

  • Hourly signatures
  • Real-time scanning
  • Lightweight

Spam AutoShield®

Keep every inbox clean and safe.

Every email on your server is scanned the moment it arrives. Malicious links are quarantined, hidden malware is blocked, and phishing and blackmail attempts are filtered out, with no external DNS filters.

  • Phishing
  • Malicious links
  • Hidden malware

VULNERABILITY MANAGER

Find the vulnerable plugin.
Fix the affected sites.

See CVEs, severity, and remediation guidance across your WordPress sites. Apply available updates in bulk or select exactly what to update.

  • Weekly scans and email reports
  • Filter by owner, plugin, theme, or CVE
  • On-demand scans and CSV exports
Explore Vulnerability Manager
cPFence v4+ dark-mode Vulnerability Manager showing Local server findings, CVE severity, affected sites, and selective update controls
Vulnerability Manager · Review findings and apply available updates

MEET YOUR NEW COMMAND CENTER

One panel.
Your whole cluster.

Less jumping between servers. More getting things done. Bring security, websites, and day-to-day management into one clear view.

Take a closer look at WebUI
01

See the bigger picture

Find your servers and websites across the cluster.

02

Go straight to the source

Access site management with single sign-on.

03

Take action from one place

Manage protection and everyday admin tasks.

cPFence v4+ dark-mode cluster overview with All Servers selected, domain and website summaries, filters, and single sign-on controls
cPFence WebUI · Cluster overview

AUTOMATED DEFENSE. SPECIFIC ACTIONS.

Harden your sites.
Contain the abuse.

WordPress hardening, outbound spam lockdown, and resource controls.
Protection with actions you can configure.

WP AutoShield®

Harden the entry points.
Across every WordPress site.

WP AutoShield applies security settings across your installations: protect sensitive files, restrict PHP execution in uploads, and manage login and XML-RPC controls alongside automatic updates.

  • File permissions and wp-config.php protection
  • PHP execution restrictions in uploads
  • Login limits, XML-RPC controls, and updates
Explore WP AutoShield
cPFence v4+ dark-mode action chooser with WP-AutoShield and Protection selected, showing Run WP-AutoShield for the selected sites

Spam AutoShield®

Stop inbound threats.
Lock down outbound abuse.

Scan incoming mail for phishing and malicious attachments. When outbound sending exceeds configured limits, block the offending sender until you unblock it after remediation.

Explore email protection
  • Email and Slack alerts with account details
  • Configurable limits and manual unblock controls
How outbound lockdown works

cPFence Owl™ & AutoMySQL™

Keep one busy site
from taking over the server.

Automatically manage abusive MySQL activity and slow or long-running queries. Monitor CPU, RAM, and I/O with Owl, then configure alerts and supported automated actions for your environment.

Meet Owl & AutoMySQL
  • Automatic query controls and user exclusions
  • Server load monitoring and notifications

SERIOUS PROTECTION. SIMPLE PRICING.

Your setup.
Your way to pay.

Choose the billing model that fits your hosting business.
Switch as your needs change.

UNLIMITED WEBSITES PER SERVER

PAY PER SERVER

More sites. Same price.

$5 / server / month

One predictable price with unlimited accounts and websites

Cost per website on one server

  • 50 websites $0.10
  • 100 websites $0.05
  • 500 websites $0.01

  • Unlimited websites on each licensed server
  • Layered security and malware defense
  • Central dashboard and automation tools
  • A straightforward per-server license
Start your free trial

Licensing 10 or more servers? Bulk licenses from $2.00 per server.

SAVE UP TO 60% WITH YEARLY BILLING

BULK LICENSE

One license. Your whole fleet.

Cover 10, 20 or 50 servers under a single license key, from $2.00 per server per month.

  • Unlimited websites on every licensed server
  • Add your server IPs when you order
  • Activated manually after payment
View bulk licenses
Billing period
ServersBilled monthlyBilled yearly
10 serversInstead of $5$4.50/ server / monthsave 10%$45 billed monthlySave $5 a monthInstead of $5$2.50/ server / monthsave 50%$25 / month · $300 billed yearlySave $300 a year
20 serversInstead of $5$4.25/ server / monthsave 15%$85 billed monthlySave $15 a monthInstead of $5$2.50/ server / monthsave 50%$50 / month · $600 billed yearlySave $600 a year
50 serversBest valueInstead of $5$4.00/ server / monthsave 20%$200 billed monthlySave $50 a monthBest valueInstead of $5$2.00/ server / monthsave 60%$100 / month · $1,200 billed yearlySave $1,800 a year

Prices in USD. Savings are compared with $5 per server per month. 3 and 6 month terms are available at checkout.

FROM THE PEOPLE BEHIND THE SERVERS

Good company.
Even better peace of mind.

Built by hosting professionals.
Trusted by teams who do this every day.

Very light on resources
Cosmos HostingCustomer review
Read the full review
Support is fanatical. Quick and efficient
Media ServeCustomer review
wow what a difference!
Guarana HostingCustomer review on cpfence.app
Meet Guarana Hosting

A FEW THINGS YOU MIGHT BE WONDERING

Good questions.
Straight answers.

Need a hand with your setup?

Talk to our team
Does protection work behind Cloudflare or another proxy?

cPFence’s proxy-aware Layer 7 WAF identifies real client IPs behind services such as Cloudflare, Akamai, Fastly, and Nginx. It works with IPDB, brute-force detection, and log analysis to block abusive clients.

Does cPFence work with my hosting setup?

cPFence is built specifically for the Enhance control panel. It supports web, database, mail, and control panel server roles, with WAF support for Nginx, Apache, OpenLiteSpeed, and LiteSpeed.

How do I get started?

Start your trial in the customer portal, get your license, and run the one-line installation command provided there. The installer detects your server’s capabilities and configures the recommended protections.

How does per-website billing work?

You pay $0.10 per main domain per month across your cluster, with a $5 monthly minimum covering up to 50 websites. Service, add-on, platform, and staging sites do not count.

Can I switch between billing options?

Yes. You can switch between per-website billing and $5 per server per month with unlimited websites as your hosting business grows. Manage your licenses through the customer portal.

Do I need to manage each server separately?

The central dashboard brings your servers and websites together in one browser-based interface. View your cluster, manage security, and run bulk WordPress tools from one place.

Can I move my license to another server?

Yes. Use the reissue license option in the customer portal to move your cPFence license to a new server.