SakerCP

Alpha · sign-ups open

The hosting panel that treats security as its first feature.

Client, reseller and administration in one panel, written from scratch in Go for CloudLinux and Imunify360. The part that talks to the Internet has no power; the part that has power trusts no one.

Go, no shellCloudLinux · CageFS · LVEImunify360Security keys and passkeysPortuguese and EnglishSigned updates

I want to try it See the product

One panel for three people

Everything a client expects from a hosting panel, where they look for it, plus the tools of those who resell and those who run the server.

Client

Mail with filters and anti-spam, domains and DNS, automatic certificates, file manager, databases, WordPress, Node.js and Python applications, Git, cron, key-only SSH, API tokens, sub-users and restoring backups by date.

Reseller

Their own accounts and plans, with account and disk limits checked by the server, permissions granted one by one, private nameservers, dedicated IPs and logging into client accounts. They only see what they can use.

Administration

Accounts, plans and resellers; server status; automatic updates with rollback; an advisor with one-click fixes; Imunify360, LVE Manager and MySQL Governor; audit log. Only from the management networks, always with two factors.

Home of the client panel: tools grouped by area, with search, and the account summary on the side.
The home of the client panel (shown in Portuguese). Sample data.

What talks to the Internet has no power

Every request goes through layers with different privileges. A bug in one of them is not enough to take the server: the next one is always missing.

  1. No privilegesOne process per port, without root or capabilities. It decides nothing: it hands the request to the broker.
  2. Root, but closedThe broker is the only privileged part: a closed registry of operations, each with its role, ownership and audit declared; typed validation; commands without a shell.
  3. As the account's userWork inside home directories runs as the client's user, inside CageFS and within their limits, without following symbolic links.
290+operations in the closed registry
120+security controls written and tested
480+automatic tests on every change
0shells opened by the panel
  • Isolated accounts: no mail() or exec in PHP, mail sent only with a login and with an hourly limit.
  • Files from outside (migrations, restored backups, command output) treated as hostile.
  • Hash-chained audit log, written before every effect.
  • Signed updates, with a health check and automatic rollback.

Backups the server cannot delete

SakerBackupServer is SakerCP's backup platform: a separate machine that pulls the backups from the servers. The hosting server never holds a key that can delete them.

It pulls, it does not receive

Whoever keeps the backups is whoever fetches them. A compromised server cannot reach them.

Encrypted and deduplicated

Mail every hour, databases every two hours, accounts every day, with retention.

Restore from the panel

The client picks the date and what they want back; the administration recovers a whole machine.

Painless migration

SakerCP imports accounts from cPanel* servers: from a backup archive or straight from the source server, with a second pass for whatever changed in the meantime. Mail, domains, DNS, databases and certificates come along, and anything that could not come is listed in a report.

* cPanel is a trademark of its respective owners. SakerCP is an independent product, written from scratch, with no third-party code.

Built for CloudLinux

CageFS, LVE limits, PHP, Node.js and Python selectors, MySQL Governor and Imunify360 integrated, and the panel adapts to each server's CloudLinux edition.

Join the alpha

We are choosing the first servers for the alpha. Tell us who you are and what you host; we reply by e-mail. After sending, you will get a message to confirm your address.