Hosting accounts
Each account is its own Linux user; on a fresh install, new accounts get their own PHP‑FPM pool.
Read the docs18 services in every tier
Vanta Panel is a self-hosted web hosting control panel – a modern cPanel/WHM alternative – that you install on your own Ubuntu or Debian VPS with one command. Every feature below is in every tier, including Free; the tiers differ only in how many accounts, mailboxes and databases you can create.
| Limit | Free | Basic | Unlimited |
|---|---|---|---|
| Accounts | 1 | 5 | Unlimited |
| Mailboxes | 1 | 5 | Unlimited |
| Databases | 1 | 5 | Unlimited |
| Features | All | All | All |
| Price | $0per month | $5per month | $10per month |
The hosting stack
Three services: a real mail server, authoritative DNS on nameservers that carry your brand, and a panel your customers log into. Vanta Panel runs all three on your own VPS, set up by the installer and included in every tier, on a standard stack you can inspect and keep.

Not a relay you rent. Postfix and Dovecot with Roundcube webmail on your own server: mailboxes, forwarders, autoresponders, filters and spam filtering, with SPF, DKIM and DMARC for every domain you add.
SMTP 25 · 465 · 587 IMAP 143 · 993 POP3 110 · 995

PowerDNS answers from your own VPS, so ns1 and ns2 carry your brand. Turn on per-account zones in Server Setup and every account gets its own zone, with a full record editor.
$ dig +short NS yourbrand.com
ns1.yourbrand.com.
ns2.yourbrand.com.
vWHM is your console; vPanel is theirs. Customers manage their own domains, email, databases, files and backups without opening a ticket.
Try it: sign in to vPanel as acme / demo. Open vPanel
Vanta Panel manages stock Apache, PHP‑FPM, MariaDB, Postfix, Dovecot, PowerDNS and Let’s Encrypt on your own machine; it does not sit in front of them, so your sites, mail and DNS keep serving even if the panel is stopped.
Every service
18 services, set up by one installer and managed from two panels: vWHM for you and vPanel for your customers. None is a paid add-on, and each has its own guide in the docs.
Each account is its own Linux user; on a fresh install, new accounts get their own PHP‑FPM pool.
Read the docsAddon and parked domains, subdomains, redirects.
Read the docsPostfix + Dovecot, Roundcube webmail, forwarders, autoresponders, filters, spam filtering; SPF/DKIM/DMARC per domain.
Read the docsPowerDNS on your server with a full zone editor.
Read the docsns1 and ns2 on your own brand, answering from your VPS.
Read the docsLet's Encrypt on every domain, renewed automatically.
Read the docsDatabases, users, phpMyAdmin.
Read the docsUpload, edit, archive, permissions.
Read the docsScheduled and on-demand; plain .tar.gz + .sql, local or remote.
Read the docsPer-account schedules.
Read the docsClone, pull, deploy.
Read the docsManaged app processes behind the web server.
Read the docsRun an executable JAR as a managed service (OpenJDK 17).
Read the docsOne shared broker; per-account SCRAM logins and ACLs on prefixed topics.
Read the docsOne shared, loopback-only instance, enabled per account.
Read the docsInstall, update, reset the admin password.
Read the docsPer-account SSH, browser terminal and FTP accounts.
Read the docs2FA, firewall, IP blocker, hotlink protection, audit log.
Read the docs
.tar.gz + .sql, with customer self-service restores. Real screenshots from the live demo. Backups guide
Beyond PHP
Beyond PHP, Vanta Panel runs Node.js, Python and Java apps as managed services, a shared Apache Kafka broker and a shared Redis cache. Java, Kafka and Redis are switched on per account, and every app runs as its account’s own Linux user.
An executable JAR, such as a Spring Boot app, runs as a managed systemd service on OpenJDK 17, on its own port with a per-app memory cap, served on a path of the site or on its own domain. Java apps guide
One shared broker in KRaft mode, listening on 127.0.0.1:9092. Each enabled account gets its own SCRAM login and ACLs on topics and consumer groups prefixed with its name. Kafka guide
One shared redis-server on 127.0.0.1:6379, reachable only from the server itself and enabled per account by the administrator. It has no password, so every account on the server can reach it: keep it to cache and session data, never secrets. Redis guide
Apps run in place from the account’s home as systemd services under its own user, restart if they crash, and sit behind an Apache reverse proxy. Python apps get their own virtualenv and uvicorn or gunicorn. Node.js guide Python guide


Isolation
Each hosting account is its own Linux user with its own home directory, and on a fresh install every new account runs PHP in its own PHP‑FPM pool as that user, so one compromised site cannot read the others. The panels add two-factor sign-in and brute-force throttling, and the installer turns on a default-deny firewall.
An isolated account’s PHP runs as its own user, limited to its home directory by open_basedir, with shell functions such as exec and system disabled and a private temp directory.
TOTP codes with eight single-use recovery codes, which you can make mandatory for admins, accounts or both. After eight failed sign-ins in 15 minutes from one address, further attempts are refused until the window clears.
Two-factor authenticationThe installer enables ufw with a default-deny policy and only the web, mail, DNS, SSH and FTP ports open, plus fail2ban jails for SSH and FTP brute force.
How Vanta Panel handles security, from signed releases to vulnerability reports
Questions
Something else? Ask support or read the docs.
Yes. Free, Basic and Unlimited install the same panel with every service on this page. The tiers differ only in how many hosting accounts, mailboxes and databases you can create: 1 account, 1 mailbox and 1 database on Free, 5 accounts, 5 mailboxes and 5 databases on Basic, and unlimited accounts, mailboxes and databases on Unlimited.
Yes. Vanta Panel runs its own mail server, Postfix and Dovecot, with Roundcube webmail. Each hosting account can create mailboxes, forwarders, autoresponders, filters and mailing lists, with spam filtering, and SPF, DKIM and DMARC are set up per domain.
Yes. Each hosting account can add addon and parked domains, subdomains and redirects, and secure each one with a free Let's Encrypt certificate. How many hosting accounts one server can hold depends on the tier: 1 on Free, 5 on Basic and unlimited on Unlimited.
Yes. Vanta Panel installs PowerDNS as an authoritative DNS server on your VPS, so ns1 and ns2 on your own domain answer from your server. Set them in vWHM Server Setup, create the glue records at your registrar and turn on automatic zones: every new hosting account then gets its own DNS zone, with a full record editor in vPanel.
Node.js and Python apps as managed services, Java apps (an executable JAR on OpenJDK 17), a shared Apache Kafka broker with per-account SCRAM logins and ACLs, and a shared, loopback-only Redis instance that is enabled per account. Git deploys and cron jobs cover the rest.
Yes. Vanta Panel issues free Let's Encrypt certificates: each hosting account secures a domain in one click from vPanel, with an option to force HTTPS, and renewal is automatic.
Yes. vWHM's Import from cPanel tool takes a cPanel account backup and recreates the account, including its Linux user, home directory, primary domain, databases, mailboxes and cron jobs. The old server is never modified. Mailbox passwords, custom DNS records such as SPF, DKIM or an external MX, SSL certificates, and addon domains or FTP accounts do not transfer: you set those up again afterwards, and certificates are issued fresh in one click.
CloudPanel and RunCloud are deploy tools: they put sites and apps on a server. They do not run a mail server or authoritative DNS for your domains, and their team and site-user logins are not a panel where hosting customers manage their own email, DNS and backups. Vanta Panel ships all three, which is what selling shared hosting needs.
Install the whole panel free on one account, then pay $10 a month per server for unlimited accounts, mailboxes and databases.
curl -fsSL https://get.vantapanel.com | sudo bash