CXS (ConfigServer eXploit Scanner) License Pricing Guide

Server security for cPanel hosting environments isn’t a single-tool problem it’s a layered challenge that requires covering multiple attack surfaces simultaneously. While Imunify360 handles the broad security platform layer and CP Guard focuses on malware scanning, CXS ConfigServer eXploit Scanner fills a specific and important gap: scanning uploaded files in real time for exploits, malware, and suspicious scripts before they can execute on your server. At $4/month, it’s one of the most affordable and targeted security tools available for cPanel environments. This guide covers exactly what CXS does, what’s included in the license, how it compares to other security tools, and whether it belongs in your server’s security stack.

https://tremhost.com/licenses.html

What CXS Actually Does

CXS is a real-time file scanning and exploit detection tool developed by ConfigServer the same team behind the widely used CSF (ConfigServer Security & Firewall) tool. Where CSF handles network-level firewall protection and Imunify360 covers the broader security platform layer, CXS specialises in scanning files as they are uploaded to the server — catching malicious scripts, backdoors, and exploit code at the point of entry rather than after the fact.

Core capabilities include:

• Real-time upload scanning — files uploaded through cPanel File Manager, FTP, and web-based upload forms are scanned automatically as they arrive on the server
• Exploit and malware detection — identifies known exploit scripts, PHP backdoors, web shells, and malicious code using regularly updated signature databases
• On-demand scanning — administrators can run manual scans of specific accounts, directories, or the entire server at any time
• Automatic quarantine — suspicious files can be automatically quarantined or deleted based on configurable scan action policies
• WHM integration — scan results, configuration, and reporting accessible directly through the WHM interface
• ClamAV integration — works alongside ClamAV antivirus for combined signature-based and heuristic malware detection
• Detailed scan reporting — comprehensive logs of detected threats, scan results, and actions taken for full audit visibility
• Configurable scan policies — administrators can customise what gets scanned, how aggressively, and what action is taken when threats are detected
• User-level scanning — individual cPanel accounts can be scanned separately, making it easy to isolate and address compromised accounts without affecting the rest of the server

https://tremhost.com/licenses.html

CXS License: $4/Month

The CXS License is available at $4.00 USD per month. This includes:

• ConfigServer eXploit Scanner (CXS) license
• Easy installation
• Installation guide provided
• Free configuration
• No account limitation
• Free 24/7 support
• Ability to replace a normal license
• Real-time updates from official servers

At $4/month with real-time signature updates, free configuration support, and no account caps, CXS is a cost-effective addition to any cPanel server’s security stack particularly for hosting environments where client file uploads represent a significant attack surface.

https://tremhost.com/licenses.html

Why Upload Scanning Matters for Hosting Servers

The attack vector that CXS specifically addresses file uploads is one of the most common ways hosting servers get compromised. Here’s why:

When clients upload files to their hosting accounts through FTP, cPanel File Manager, or web forms, those files arrive on the server before any server-side execution occurs. A compromised client account, a hacked FTP credential, or a vulnerable web application that allows arbitrary file uploads can all result in malicious files landing on your server. Without real-time upload scanning, those files sit undetected until they’re executed — at which point the damage is already happening.

CXS intercepts files at the upload stage, before execution, and flags or removes them based on scan results. This is a fundamentally different approach from tools that detect malware after it’s already active on the server — and it’s why CXS is commonly deployed alongside rather than instead of broader security platforms like Imunify360.

https://tremhost.com/licenses.html

CXS vs Imunify360 vs CP Guard: Clear Comparison

The table makes the complementary nature of these tools clear. CXS excels specifically at real-time upload scanning and exploit detection — an area where Imunify360 provides some coverage but where CXS provides deeper, more specialised scanning. CP Guard focuses on malware scanning and detection without the upload scanning specialisation. Imunify360 is the most comprehensive platform but at a slightly higher price point.

https://tremhost.com/licenses.html

Running CXS Alongside Other Security Tools

CXS is specifically designed to work alongside other security tools rather than replace them. The most common deployment combinations for cPanel hosting environments are:

CXS + Imunify360:
The most comprehensive security stack for high-security hosting environments. CXS handles real-time upload scanning and exploit detection while Imunify360 covers the web application firewall, intrusion detection, proactive defence, and broader malware platform. Combined cost: $9/month. This combination covers virtually every significant attack surface on a cPanel hosting server.

CXS + CP Guard:
A budget-focused security stack that covers upload scanning and exploit detection (CXS) alongside malware scanning and monitoring (CP Guard). Combined cost: $7/month — less than Imunify360 alone, with complementary rather than overlapping coverage between the two tools.

CXS standalone:
For servers that already have network-level firewall protection through CSF and need to add the upload scanning and exploit detection layer without a full security platform. At $4/month, CXS standalone is the most targeted and affordable way to specifically address the file upload attack vector.

CXS and CSF: The ConfigServer Stack

CXS is developed by ConfigServer — the same team behind CSF (ConfigServer Security & Firewall), one of the most widely deployed Linux firewall tools in the cPanel hosting ecosystem. CSF itself is available free of charge and handles network-level firewall rules, login failure detection, and connection rate limiting. CXS extends the ConfigServer security stack into the file scanning layer, making the two tools natural complements:

• CSF (free) — network-level firewall and login protection
• CXS ($4/month) — file-level exploit and upload scanning

For hosting operators who already run CSF on their cPanel servers — which is a large proportion of the market — adding CXS creates a coherent, integrated security layer from the same vendor at a very low additional monthly cost.

https://tremhost.com/licenses.html

CXS Pricing in Context

CXS sits in the middle of the security product price range — more than CP Guard’s basic malware scanning, less than Imunify360’s comprehensive platform. For hosting operators building a layered security stack, CXS at $4/month is a targeted addition that addresses a specific and important attack surface without the broader platform overhead of Imunify360.

Multi-Server Security Stack Budgeting

For hosting providers running multiple servers who want to build a cost-effective security stack, here are three budget scenarios:

Budget stack (CSF + CXS + CP Guard): $7/month per server

• CSF: Free
• CXS: $4/month
• CP Guard: $3/month
• Covers: Network firewall, upload scanning, exploit detection, malware scanning

Mid-range stack (CSF + CXS + Imunify360): $9/month per server

• CSF: Free
• CXS: $4/month
• Imunify360: $5/month
• Covers: Network firewall, upload scanning, exploit detection, full security platform with WAF and IDS

Full stack in bundle (cPanel VPS Bundle including Imunify360): From $15/month per server

• Includes cPanel, CloudLinux, Imunify360, LiteSpeed, WHMReseller, JetBackup
• Add CXS at $4/month for complete upload scanning coverage on top of the bundle

Availability Note

Like CP Guard, CXS is currently shown with 0 available units — worth checking directly with Tremhost before purchasing, as availability for shared licensing products can vary. If CXS is temporarily unavailable, Imunify360 at $5/month provides the broadest alternative security coverage, though without CXS’s specialised real-time upload scanning depth.

Installation and Setup

CXS’s practical installation experience is straightforward:

• Easy installation with a provided installation guide
• Free configuration — initial setup handled at no additional charge
• Free 24/7 support — ongoing support included in the monthly license price
• No account limitation — scans all hosted accounts without per-account restrictions
• Real-time updates — signature database updates from official ConfigServer servers without manual intervention

For hosting operators who want a security tool that’s quick to deploy and doesn’t require ongoing manual tuning, CXS’s simple installation and automated signature updates make it a low-maintenance addition to the server security stack.

Who Should Use CXS

CXS is the right tool for:

• cPanel hosting providers managing multiple client accounts where file uploads from clients and their website visitors represent an ongoing security risk
• Shared hosting operators where one compromised account uploading a web shell or backdoor could affect server-wide security
• Hosting businesses running WordPress-heavy environments where plugin and theme vulnerabilities frequently enable malicious file uploads
• Server operators already running CSF who want to extend the ConfigServer security stack into the file scanning layer
• Security-conscious hosting providers who want real-time upload scanning as a specific layer on top of their existing security tooling
• Budget-focused operators who want targeted exploit scanning without the full cost of a comprehensive security platform

Who Might Not Need CXS as a Standalone Tool

• Hosting operators already running Imunify360 who have the budget for the comprehensive platform — Imunify360 provides some upload scanning coverage, and the incremental benefit of adding CXS depends on the specific security requirements of the environment
• Single-site server operators where the upload attack surface is minimal and a simpler security setup is sufficient
• Operators not running cPanel — CXS is specifically designed for the cPanel ecosystem and doesn’t apply to non-cPanel environments

Why Buy Your CXS License Through Tremhost

Tremhost’s CXS License at $4/month includes instant activation, real-time signature updates from official ConfigServer servers, free configuration, no account limitations, and free 24/7 support covering everything needed to get CXS scanning uploads and detecting exploits on a cPanel server without additional setup costs. For hosting operators building a layered security stack alongside CP Guard, Imunify360, or CSF, Tremhost provides a single vendor for every security layer in the hosting stack at competitive per-product pricing.

Final Thoughts

CXS fills a specific and important gap in the cPanel hosting security stack real-time file upload scanning and exploit detection — at a price point that makes it one of the most targeted and cost-effective security investments available for hosting servers. At $4/month with real-time signature updates and free configuration support, it’s a natural addition to any hosting server where file uploads from clients or their web applications represent a meaningful attack surface. Whether deployed standalone alongside CSF, combined with CP Guard for a budget security stack, or layered on top of Imunify360 for comprehensive coverage, CXS addresses the upload scanning gap that most other security tools in the hosting ecosystem don’t specifically prioritise.

https://tremhost.com/licenses.html