There is a version of web hosting that most clients never see but always feel. It is the version where their site loads quickly and consistently, where a hacked account on the same server does not compromise their files, where a resource-hungry neighbour does not slow their WordPress installation to a crawl, and where automated attacks are blocked before they ever reach their application.

That version of hosting does not happen by accident. It is the product of a specific set of tools running on the server beneath the surface — tools that most clients will never think about but will immediately notice the absence of if they are ever removed.

The three most important of those tools are cPanel, CloudLinux, and Imunify360. Together they form what professionals in the hosting industry recognise as the essential shared hosting stack the minimum viable configuration for a server that can be offered to paying clients with confidence.

In 2026, through Tremhost’s current 50% off promotion, you can run this entire stack for under $10 per month. This guide explains exactly what you get, why each component matters, and why this combination is the foundation every serious hosting provider builds on.

Why these three tools specifically

The hosting software ecosystem is large. There are dozens of tools that could theoretically be added to a hosting server additional security scanners, performance optimisers, monitoring systems, specialised caches. Most of them are useful. A few of them are essential.

cPanel, CloudLinux, and Imunify360 sit in the essential category for a specific reason: they address the three most fundamental requirements of a shared hosting server that serves paying clients.

cPanel solves the management problem. Without it, you cannot give clients a usable interface to manage their hosting account, and you cannot efficiently manage multiple client accounts yourself. It is the layer that turns a Linux server into a hosting product.

CloudLinux solves the isolation problem. Without it, every account on your server shares the same environment — meaning a compromised or resource-hungry account affects every other account on the machine. It is the layer that makes shared hosting genuinely safe and stable.

Imunify360 solves the threat problem. Without it, your server has no active, automated defence against the constant stream of attacks that every internet-facing server receives. It is the layer that keeps external threats from becoming internal incidents.

Remove any one of these three and you have a meaningful gap in your hosting operation. Run all three and you have a server that is manageable, isolated, and defended — the three properties that every hosting client is implicitly paying for when they sign up with you.

cPanel: the management layer

cPanel is the world’s most widely deployed web hosting control panel, and its dominance is not accidental. It has been refined over more than two decades into an interface that strikes the right balance between power and accessibility giving experienced administrators deep control while remaining usable for clients with no technical background.

The control panel operates on two levels. WHM — Web Host Manager — is your server administration interface. From WHM you create and manage hosting accounts, allocate resources, configure server-wide settings, manage DNS zones, integrate with billing software, and control every aspect of the server’s operation. cPanel is the client-facing interface, accessible to each individual account holder, where they manage their files, email, databases, domains, SSL certificates, and everything else relating to their individual hosting account.

The reason cPanel matters beyond mere functionality is familiarity. The majority of people who have ever used shared hosting before have used cPanel. They know where to find the file manager, how to create an email account, where to access their database credentials. Offering cPanel means your clients arrive knowing how to use their hosting environment, which reduces your support burden from day one.

cPanel pricing at Tremhost:

• cPanel VPS License: $5/month ($2.50 with 50% off)
• cPanel Dedicated License: $6/month ($3 with 50% off)

https://tremhost.com/licenses.html

Compare this to the $45 to $65+ per month that cPanel currently charges when purchased directly from the vendor. The saving from this single license alone is enough to cover the entire rest of the stack at Tremhost prices.

CloudLinux: the isolation layer

A shared hosting server, by definition, hosts multiple clients on a single machine. These clients are strangers to each other. They have different levels of technical sophistication, different security practices, different quality of code running on their sites, and different intentions. Putting them all in a shared environment without isolation is the hosting equivalent of leaving every apartment in a building with its front door open.

CloudLinux closes those doors.

Its core technology, CageFS, creates a virtualized file system for each hosting account — a private environment that contains everything the account needs to operate but is completely separated from every other account on the server. An account operating within CageFS can see only its own files and processes. It cannot read other users’ data, cannot access configuration files that might reveal information about the broader server environment, and cannot traverse into neighbouring accounts regardless of what tools or techniques an attacker operating through that account might attempt to use.

The practical consequence is containment. When a WordPress site on your server is compromised — through an outdated plugin, a stolen password, a vulnerable theme — the damage stops at the edge of that account’s CageFS container. Your other clients are unaffected. Their files are inaccessible to the compromised account. The incident is a single-account problem rather than a server-wide crisis.

CloudLinux’s second major component, LVE (Lightweight Virtual Environment), addresses the stability side of the shared hosting equation. LVE allows you to set per-account limits on CPU usage, memory consumption, disk I/O, and concurrent processes. When an account hits its limits — due to a traffic spike, a poorly coded script, or deliberate resource abuse — CloudLinux throttles that account rather than allowing it to consume resources belonging to other accounts. Every other client on the server continues to operate normally, completely unaware that anything happened.

MySQL Governor extends this resource management to database operations, preventing any single account’s database queries from monopolising your server’s MySQL capacity and causing timeouts or slowdowns for other accounts.

CloudLinux pricing at Tremhost:

• CloudLinux OS License: $6/month ($3 with 50% off)
• Lifetime CloudLinux License: $250 one-time ($125 with 50% off)

Direct vendor pricing for CloudLinux is approximately $13 to $15 per month. Tremhost’s promotional price of $3 per month is more than 75% cheaper.

Imunify360: the defence layer

While CloudLinux protects your clients from each other, Imunify360 protects your entire server from the outside world. It is a six-layer security platform that operates continuously in the background, blocking attacks, scanning for malware, patching vulnerabilities, and monitoring your server’s reputation — all automatically, without requiring manual intervention.

The six layers work as a coordinated defence system:

The Web Application Firewall inspects every incoming HTTP request against a continuously updated database of known attack signatures, blocking SQL injections, cross-site scripting attempts, file inclusion exploits, and hundreds of other known attack patterns before they reach any application on your server.

The Intrusion Prevention and Detection System monitors authentication systems across SSH, cPanel, FTP, email, and databases, automatically blocking IP addresses that exhibit brute force behaviour — and sharing that intelligence across the entire global Imunify360 network so your server benefits from threat data gathered from hundreds of thousands of other protected servers.

The Real-Time Antivirus scans files as they are uploaded to your server, quarantining malware before it can execute, and runs scheduled scans of all existing files to catch infections that may have arrived through other vectors.

The Network Firewall blocks traffic from known malicious IP ranges and attack infrastructure at the network level, before it consumes server resources or triggers application-level defences.

Patch Management applies live security patches to your Linux kernel without requiring a reboot, keeping your server protected against known kernel vulnerabilities continuously rather than only after scheduled maintenance windows.

Reputation Management monitors whether your server’s IP is being used for spam or other activity that could trigger blacklisting by email providers or security services — catching the problem early rather than after the damage is done.

Imunify360 pricing at Tremhost:

• Imunify360 License (unlimited accounts): $5/month ($2.50 with 50% off)
• Lifetime Imunify360 License: $190 one-time ($95 with 50% off)

Direct vendor pricing for Imunify360 with unlimited users is approximately $15 to $20 per month. At $2.50 during the promotion, Tremhost’s price is more than 80% below the vendor rate.

How the three tools work together

Understanding each tool individually is useful. Understanding how they interact is what makes the difference between a server that is theoretically protected and one that is comprehensively defended.

Consider a common attack scenario: an attacker discovers a vulnerability in a WordPress plugin installed on one of your client’s sites. They exploit it to upload a malicious PHP script that attempts to read the database credentials of other accounts on the server, use those credentials to access other sites, and eventually establish persistent access to the server itself.

Here is how the three-tool stack responds at each stage:

Stage 1 — The exploit attempt. Imunify360’s WAF inspects the incoming request that attempts to exploit the WordPress vulnerability. If the exploit matches a known attack signature — which most do — the request is blocked before it reaches the application. The attack fails immediately.

Stage 2 — If the exploit gets through. If a zero-day exploit or an unusual attack vector bypasses the WAF, Imunify360’s real-time antivirus scans the uploaded malicious PHP file as it arrives and quarantines it before it can be executed.

Stage 3 — If the malicious file executes. If the file somehow executes before being quarantined, CloudLinux’s CageFS prevents it from reading other accounts’ files or database credentials. The malicious script is contained entirely within the compromised account’s environment. It cannot reach what it is looking for.

Stage 4 — Lateral movement attempt. If the attacker attempts to brute force access to other accounts’ cPanel or SSH, Imunify360’s IDS/IPS detects the unusual authentication activity and automatically blocks the attacking IP address.

Stage 5 — Spam sending. If the compromised account attempts to send spam as a secondary objective, Imunify360’s reputation management detects the unusual outbound mail volume and throttles or blocks it before your server’s IP reaches any blacklist.

At every stage, the combination of tools provides overlapping layers of defence. Each tool catches what the others might miss. The result is a server where a determined attacker faces multiple independent barriers rather than a single line of defence that, once breached, leaves everything exposed.

The complete cost breakdown

Here is what this three-tool stack costs at every price point:

Buying directly from vendors:

• cPanel VPS: ~$45–65/month
• CloudLinux: ~$13–15/month
• Imunify360: ~$15–20/month
• Total: approximately $73 to $100 per month

Buying from Tremhost at standard pricing:

• cPanel VPS: $5/month
• CloudLinux: $6/month
• Imunify360: $5/month
• Total: $16/month

https://tremhost.com/licenses.html

Buying from Tremhost with 50% off promotion:

• cPanel VPS: $2.50/month
• CloudLinux: $3/month
• Imunify360: $2.50/month
• Total: $8/month

https://tremhost.com/licenses.html

The saving compared to vendor-direct pricing is between $65 and $92 every single month — from three licenses alone, before adding any other components to your stack.

At $8 per month for the complete three-tool foundation, the cost objection to running a properly licensed, professionally secured hosting server essentially disappears.

Adding LiteSpeed: the performance upgrade that completes the stack

If the three tools above form the essential minimum, LiteSpeed is the first addition that delivers the most immediate, client-visible benefit.

LiteSpeed replaces Apache as your web server, serving pages up to six times faster, handling SSL connections three times faster, and improving PHP performance by approximately 50%. Every site on your server loads faster. Every client’s Google ranking benefits. Every visitor has a better experience.

LiteSpeed is also fully compatible with CloudLinux’s CageFS, meaning you get the performance benefits without any compromise to the isolation and security that CloudLinux provides.

Adding LiteSpeed at Tremhost:

• LiteSpeed 2 Core: $5/month ($2.50 with 50% off)

Complete four-tool stack with 50% off promotion:

• cPanel + CloudLinux + Imunify360 + LiteSpeed: $10.50/month

Alternatively, the Tremhost VPS bundle — which includes all four of these tools plus JetBackup, WHMReseller, Softaculous, Sitepad, and FleetSSL — is available from $15/month ($7.50 with 50% off), making it cheaper to buy the complete nine-license bundle than to buy the four core tools individually at standard pricing.

Who this stack is built for

Hosting providers launching their first shared server. This is the right starting configuration. It gives you everything you need to host clients professionally and safely, at a price that keeps your startup costs minimal while you build your client base.

Existing hosts running without CloudLinux or Imunify360. If you are currently operating a shared server with cPanel but without account isolation or active security monitoring, you are carrying significant risk that your clients are not aware of. Adding CloudLinux and Imunify360 through Tremhost costs $5.50 per month at the promotional rate — a trivially small investment to eliminate a serious operational vulnerability.

VPS resellers building a hosting brand. The combination of cPanel’s familiar interface, CloudLinux’s stability and isolation, and Imunify360’s security gives you a hosting product you can genuinely stand behind — one that competes with established providers on the metrics that matter most to clients.

Agencies and developers running client infrastructure. If you manage hosting for multiple clients on a single server, this stack ensures that one client’s poorly maintained WordPress installation cannot compromise another client’s business data.

Frequently asked questions

Do all three tools need to be installed together? They can be installed independently, but they are most effective together. CloudLinux and Imunify360 in particular are designed by the same team and integrate seamlessly. Installing them together is the recommended configuration and the one that delivers the layered defence described in this guide.

Is there a correct installation order? Yes. CloudLinux should be installed first it modifies the operating system kernel, which other tools then run on top of. Imunify360 and cPanel can be installed in either order after CloudLinux is active. Tremhost’s free installation assistance covers this process.

Will adding these tools require server downtime? CloudLinux installation requires a single reboot to load the new kernel — typically a few minutes. Imunify360 installation does not require a reboot. cPanel installation on a fresh server takes longer but also does not require additional reboots after the initial setup.

Can these tools be added to an existing server that already has cPanel? Yes. CloudLinux and Imunify360 can both be installed on an existing cPanel server without requiring a fresh build or migrating accounts. The installation process is designed to be non-disruptive to existing hosting environments.

Does Tremhost provide support if something goes wrong after installation? Yes. All Tremhost licenses include 24/7 support, and free installation assistance is provided with every license. If you encounter issues during or after installation, Tremhost’s support team is available to help resolve them.

The lifetime option: eliminate recurring costs permanently

For each of the three core tools, Tremhost offers lifetime license options that replace the monthly recurring cost with a single one-time payment:

• Lifetime cPanel VPS License: $190 ($95 with 50% off)
• Lifetime CloudLinux License: $250 ($125 with 50% off)
• Lifetime Imunify360 License: $190 ($95 with 50% off)

Combined lifetime cost for all three during the promotion: $315 one-time.

At the standard promotional monthly rate of $8 for all three, the combined lifetime licenses pay for themselves in approximately 39 months — just over three years. After that point, running your complete core hosting stack costs nothing in licensing fees, permanently.

For hosting providers with a long-term view of their infrastructure, purchasing lifetime licenses during the current promotional period is one of the most financially rational decisions available. The promotional pricing window is finite. The benefit of having purchased at that price is permanent.

Getting started

Building this stack through Tremhost takes a single visit to the license store:

1. Visit tremhost.com/licenses.html
2. Order cPanel, CloudLinux, and Imunify360 individually  or select the VPS bundle to get these plus six additional licenses in a single order
3. Activation is instant across all licenses
4. Free installation assistance is available if needed
5. All three tools integrate with your WHM interface, giving you a unified management environment

The 50% off promotion is currently active across all licenses and bundles.

Final thoughts

The cPanel, CloudLinux, and Imunify360 stack is not a premium configuration reserved for large hosting operations. It is the baseline for professional shared hosting the minimum that any provider serious about client security, server stability, and business reputation should be running.

In 2026, through Tremhost’s current promotion, that baseline costs $8 per month. The tools that major hosting companies spend tens of thousands of dollars per year licensing across their server fleets are available to an independent hosting provider for less than the cost of a monthly streaming subscription.

There is no credible argument for running shared hosting without this stack at these prices. Build it right from the start or fix it now if you have been running without it.

Order cPanel, CloudLinux, and Imunify360 individually or as part of the complete bundle at tremhost.com/licenses.html. The 50% off promotion is live now.

Every hosting server connected to the internet is under constant attack. This is not an exaggeration or a marketing claim — it is a measurable, documented reality. Security researchers consistently report that internet-facing servers receive thousands of automated attack attempts every single day. Port scans, brute force login attempts, vulnerability probes, malware upload attempts — they happen continuously, around the clock, whether your server is brand new or has been running for years.

Most of these attacks are fully automated. Botnets scan the entire IPv4 address space looking for servers running known vulnerable software versions. When they find one, they exploit it — no human decision-making involved, no targeting, no warning. Your server does not need to be important or high-profile to be attacked. It just needs to be online.

The question facing every hosting provider is not whether their server will be attacked. It is whether their server is protected when the attacks arrive.

Imunify360 is the answer most professional hosting providers rely on. At $5 per month — currently $2.50 through Tremhost’s 50% off promotion — it is also one of the most cost-effective security investments available for any server infrastructure.

Here is everything you need to know about what it does, how it works, and why the cost of not having it vastly exceeds the cost of the license.

What is Imunify360?

Imunify360 is a comprehensive server security platform developed by CloudLinux Inc. — the same company behind CloudLinux OS. It was built specifically for web hosting servers running cPanel, Plesk, or DirectAdmin, and it combines six distinct layers of protection into a single integrated platform managed from one dashboard.

The name reflects its design philosophy: 360-degree protection, covering every angle from which a hosting server can be attacked or compromised.

It is currently deployed on hundreds of thousands of servers worldwide and is the security platform of choice for hosting providers ranging from independent operators running a single server to large-scale hosting companies managing thousands of machines.

The six layers of Imunify360 protection

Layer 1: Web Application Firewall (WAF)

The Web Application Firewall sits between the internet and every website hosted on your server. It inspects incoming HTTP and HTTPS requests in real time and compares them against a continuously updated database of known attack signatures.

When a request matches a known attack pattern — an SQL injection attempt, a cross-site scripting payload, a file inclusion exploit, a remote code execution attempt — the WAF blocks it before it reaches the web application. The legitimate user or search engine crawler sees nothing unusual. The attacker’s request is silently dropped.

The Imunify360 WAF uses the OWASP ModSecurity ruleset as its foundation — the most widely adopted set of web application security rules in existence — and extends it with CloudLinux’s own threat intelligence, which is continuously updated based on attack patterns observed across the entire Imunify360 network.

This means that when a new WordPress vulnerability is discovered and exploits begin circulating, Imunify360’s WAF rules are typically updated within hours — long before the majority of WordPress installations on your server are likely to be patched by their owners.

Layer 2: Intrusion Prevention and Detection System (IDS/IPS)

The IDS/IPS monitors your server’s authentication systems and network activity for patterns that indicate an ongoing attack or intrusion attempt.

The most common trigger is brute force attacks — automated tools that attempt thousands of username and password combinations against your server’s SSH, cPanel login, FTP, email, and database interfaces. Without protection, these attacks run indefinitely. With Imunify360’s IDS/IPS, an IP address that generates a threshold number of failed authentication attempts is automatically blocked — first temporarily, then permanently if the behaviour continues.

The system also monitors for other intrusion indicators: unusual file access patterns, privilege escalation attempts, suspicious process execution, and traffic patterns associated with known attack tools. Detected threats trigger automatic responses — blocking, throttling, or alerting — without requiring manual intervention.

Importantly, the IDS/IPS operates across the entire Imunify360 network. An IP address that attacks one Imunify360-protected server is flagged across the entire network, meaning your server benefits from threat intelligence gathered from hundreds of thousands of other protected servers. An attacker who has never targeted your server specifically can still be blocked based on their behaviour elsewhere.

Layer 3: Real-Time Antivirus

Imunify360’s antivirus component monitors file uploads to your server in real time and scans them for malware before they can be executed or served to visitors.

Every file uploaded through cPanel’s file manager, through FTP, through WordPress’s media uploader, or through any other upload mechanism is scanned on arrival. If malware is detected, the file is quarantined immediately — it cannot be accessed or executed, and the account holder is notified.

The antivirus also runs scheduled scans of all existing files on the server, identifying infections that may have arrived before Imunify360 was installed or that slipped through other defences. Detected malware is quarantined and logged, giving you a clear record of what was found and where.

The malware database is updated continuously based on new threats discovered across the global Imunify360 network, meaning protection keeps pace with the evolution of attack tools.

Layer 4: Network Firewall

The network firewall operates at the lowest level — blocking traffic before it even reaches your server’s application layer. It maintains a continuously updated list of known malicious IP addresses, ranges, and autonomous systems — botnets, known attack infrastructure, Tor exit nodes, and other sources of malicious traffic — and drops their connections at the network level.

This layer reduces the attack surface your server presents to the internet and offloads a significant volume of malicious traffic before it can consume server resources or trigger application-level defences. Every blocked connection at the network level is a connection that doesn’t reach your WAF, your web server, or your application — reducing noise, conserving resources, and keeping your logs clean.

Layer 5: Patch Management

One of the most common causes of server compromise is known, unpatched vulnerabilities in server software. Attackers actively scan for servers running vulnerable versions of PHP, OpenSSL, Apache, kernel components, and other widely deployed software, and exploit those vulnerabilities before administrators have had the chance to apply patches.

Imunify360’s patch management component — KernelCare, which is developed by the same CloudLinux team — applies security patches to your server’s Linux kernel without requiring a reboot. This means critical kernel vulnerabilities are patched in real time, rather than waiting for the next scheduled maintenance window. Your server runs the patched kernel continuously, without ever rebooting to apply security updates.

For hosting providers who want to minimise downtime and keep their security posture current, live kernel patching is a significant operational advantage.

Layer 6: Reputation Management

The reputation management component monitors whether your server’s IP address is being used to send spam, participate in DDoS attacks, or engage in other activity that could result in your IP being blacklisted by email providers, security services, or internet infrastructure operators.

If a compromised account on your server begins sending spam emails, Imunify360 detects the unusual outbound mail volume, alerts you, and can throttle or block the sending to prevent your server’s IP from being blacklisted. IP blacklisting is one of the most damaging and time-consuming problems a hosting provider can face — once your IP is on major spam blacklists, email deliverability for every client on your server is affected, and delisting can take days or weeks even after the underlying problem is resolved.

Catching the problem before it reaches that point is dramatically easier than resolving it afterward.

The real cost of a server compromise

To understand why Imunify360 at $5/month is not a cost question but a value question, it helps to consider what a server compromise actually costs a hosting provider.

Direct remediation time. Identifying how a server was compromised, cleaning infected files, closing the vulnerability, and restoring affected accounts is not a quick process. Depending on the severity of the compromise, this can take anywhere from several hours to several days of technical work. At any reasonable valuation of technical time, a single serious compromise incident costs far more than a year of Imunify360 licensing.

Client data exposure. If client data — files, databases, email — is accessed or exfiltrated in a compromise, you face potential liability, mandatory disclosure obligations depending on your jurisdiction, and serious damage to client trust. The reputational cost of a data breach affecting client sites is difficult to quantify but straightforward to describe: clients leave, and they tell others why.

IP blacklisting. As described above, a compromised server that begins sending spam can result in IP blacklisting that affects every client’s email deliverability. Resolving blacklisting issues is time-consuming and stressful, and the impact on clients is immediate and highly visible.

Client churn. Clients whose sites are hacked on your server will, in many cases, leave — regardless of whether the compromise was their fault or yours. The perception that your hosting environment is insecure is enough. Losing even two or three clients to a preventable security incident costs more in lost monthly recurring revenue than years of Imunify360 licensing.

Support burden. Hacked sites generate support tickets. Lots of them. Cleanup requests, restoration requests, questions about what happened and how — a single wave of compromises across multiple accounts on an unprotected server can overwhelm a small support operation entirely.

Imunify360 at $2.50/month during the Tremhost promotion prevents the overwhelming majority of these scenarios. The return on that investment is not just measurable — it is enormous.

Imunify360 vs managing security manually

Some hosting providers, particularly those with strong Linux system administration backgrounds, consider managing server security manually — configuring CSF (ConfigServer Security & Firewall), managing ModSecurity rules, running ClamAV for malware scanning, and monitoring logs for intrusion indicators.

Manual security management is possible, and some experienced administrators do it effectively. But it carries significant costs that are easy to underestimate.

Time. Maintaining an effective manual security posture requires ongoing attention. Rule updates, log review, incident response, software patching — these are not one-time tasks. They are continuous responsibilities that consume time that could be spent on revenue-generating activities.

Expertise. Effective manual security management requires deep, current knowledge of server security — the kinds of attacks currently in circulation, the vulnerabilities in the software versions you’re running, the indicators of compromise to watch for. This knowledge needs to be continuously updated as the threat landscape evolves.

Reactive vs proactive. Manual security management is inherently more reactive than automated security platforms. You find out about problems after they happen — through log review, client reports, or visible compromise — rather than having them blocked automatically in real time.

Coverage gaps. Individual security tools cover individual attack vectors. CSF handles network-level blocking. ModSecurity handles web application attacks. ClamAV handles malware. Managing these tools separately means configuration gaps, update lag between components, and the absence of the integrated threat intelligence that Imunify360’s network-wide approach provides.

Imunify360 replaces all of these individual tools with a single integrated platform that updates automatically, responds in real time, and draws on threat intelligence from hundreds of thousands of protected servers. For $2.50 per month, it removes an entire category of operational burden from your hosting business.

Imunify360 pricing: direct vendor vs Tremhost

Buying directly from CloudLinux Inc.: Imunify360 for unlimited users — the version appropriate for any shared hosting server — is priced at approximately $15 to $20 per month when purchased directly from the vendor. This is the license tier that removes all per-user restrictions and covers every account on your server regardless of how many you have.

Buying from Tremhost:

• Imunify360 License (unlimited accounts): $5/month
• With the current 50% off promotion: $2.50/month
• Lifetime Imunify360 License: $190 one-time ($95 with 50% off)

The standard Tremhost price represents a saving of 67% to 75% compared to buying directly. At the promotional price of $2.50/month, you are getting enterprise-grade server security for less than the cost of a single cup of coffee.

The lifetime option deserves particular consideration. At $95 during the promotion, the Imunify360 lifetime license pays for itself in 38 months at the standard $5/month rate — and permanently eliminates a recurring security cost from your server infrastructure. For hosting providers running long-term infrastructure, this is one of the most financially rational purchases available.

Imunify360 and CloudLinux: better together

Imunify360 and CloudLinux OS are developed by the same company and designed to work in combination. While they address different aspects of hosting security, they complement each other in important ways.

CloudLinux handles internal security — isolating accounts from each other so that a compromise in one account cannot spread to others. Imunify360 handles external security — blocking, detecting, and cleaning up attacks coming from outside the server.

Together they provide comprehensive security coverage: CloudLinux ensures that if something does get through, the damage is contained; Imunify360 works to ensure nothing gets through in the first place.

Running both on the same server is the recommended configuration for any shared hosting environment, and through Tremhost’s bundle options, you can get both — along with cPanel, LiteSpeed, JetBackup, and the rest of the essential hosting stack — for $7.50/month during the current promotion.

Getting Imunify360 on your server

The process is straightforward:

1. Order your Imunify360 license at tremhost.com/licenses.html
2. Activation is instant — your license is ready to deploy immediately
3. Tremhost provides free installation assistance if needed
4. Imunify360 integrates directly into your WHM or Plesk interface, giving you a clean dashboard for monitoring and managing your server’s security posture

Once installed, Imunify360 requires minimal ongoing management. The rule updates, threat intelligence feeds, and automated responses operate continuously in the background. You set it up, review the dashboard periodically, and respond to alerts when they arise. The day-to-day protection is fully automated.

Frequently asked questions

Does Imunify360 work with both cPanel and Plesk? Yes. Imunify360 integrates with cPanel/WHM, Plesk, and DirectAdmin. The security features are identical across all three control panels — only the management interface location differs.

Will Imunify360 slow down my server? No. Imunify360 is designed for production hosting environments and is optimised to provide comprehensive protection with minimal resource overhead. The performance impact on a properly provisioned server is negligible.

Does Imunify360 replace the need for CloudLinux? No — they serve complementary functions. Imunify360 protects against external attacks. CloudLinux isolates accounts from each other internally. Both are recommended for a complete security posture on a shared hosting server.

What happens if Imunify360 blocks a legitimate visitor? False positives do occasionally occur — legitimate requests that match attack patterns. Imunify360 provides a straightforward whitelist mechanism for unblocking legitimate IPs and a client-facing CAPTCHA challenge system that allows real users to verify themselves and bypass blocks. The false positive rate on a properly configured installation is very low.

Can clients see Imunify360 in their cPanel? Clients see a simplified view of Imunify360 in their cPanel that shows the security status of their account and any malware detected in their files. They do not have access to server-wide security settings — those remain in WHM, accessible only to the server administrator.

The bottom line

Imunify360 at $2.50 per month is not a security expense. It is security insurance that costs less per month than almost any other subscription your hosting business carries — and the risk it protects against can cost thousands in lost time, lost clients, and reputational damage from a single incident.

The question is not whether $2.50 per month is worth comprehensive server security. The question is how any hosting provider running a shared server can justify not having it at that price.

Order your Imunify360 license — or get it included as part of the complete hosting bundle — at tremhost.com/licenses.html. The 50% off promotion is live now, making this the lowest price available for a legitimate Imunify360 license anywhere in 2025.

If you run a shared hosting server — meaning multiple clients hosted on a single machine — there is one piece of software that separates a professional, stable hosting environment from a disaster waiting to happen. It is not your control panel. It is not your firewall. It is CloudLinux OS, and if your server is not running it right now, your clients are more exposed than they realise — and so are you.

This is not a scare tactic. It is a straightforward description of how shared hosting works without proper account isolation, and why CloudLinux exists. The good news is that in 2025, there is no financial argument for skipping it. Through Tremhost’s current 50% off promotion, a CloudLinux license costs $3 per month — less than most people spend on a single app subscription.

Here is everything you need to know.

https://tremhost.com/licenses.html

What is CloudLinux OS?

CloudLinux is a hardened Linux operating system built specifically for shared hosting environments. It was developed by the same company behind Imunify360 and has been the industry standard for shared hosting security and stability for over a decade. It is currently running on more than 50,000 servers worldwide, powering hosting environments for providers of every size — from single-server independents to large-scale hosting companies managing thousands of accounts.

CloudLinux is not a plugin or an add-on to your existing operating system. It is a replacement operating system — a modified version of the Linux kernel that has been specifically engineered to solve the core problems that arise when multiple untrusted users share the same server.

It installs alongside your existing cPanel or Plesk setup without requiring a fresh server build, and once active, it operates transparently in the background. Your clients do not see CloudLinux. They experience its benefits — stability, speed, and security — without any change to their cPanel interface or their day-to-day hosting experience.

https://tremhost.com/licenses.html

The core problem CloudLinux solves

To understand why CloudLinux matters, you need to understand the fundamental vulnerability of standard shared hosting.

On a conventional shared hosting server running a standard Linux distribution — CentOS, AlmaLinux, Ubuntu — all hosted accounts exist in the same environment. They share the same file system visibility, the same process space, and the same pool of server resources. There is limited isolation between accounts at the operating system level.

This creates two categories of serious risk.

Security risk: If one account on your server is compromised — through an outdated WordPress plugin, a weak password, a vulnerable PHP application — the attacker operating through that account can potentially read files belonging to other accounts on the same server. In a standard Linux environment, file permission configurations are the primary barrier between accounts, and they are far from impenetrable for a determined attacker or a piece of malicious code running with the permissions of a compromised account. A single compromised account can become a stepping stone to every other account on the machine.

Stability risk: On a standard shared server, there is nothing preventing one account from consuming a disproportionate share of the server’s CPU, memory, or disk I/O. A poorly coded script, a traffic spike, a runaway process, or a deliberately malicious account can consume resources that should be shared across all clients, degrading performance for every other account on the server. In extreme cases, a single account can make the entire server unresponsive.

These are not theoretical risks. They are the day-to-day reality of running shared hosting without proper isolation — and they are exactly what CloudLinux is built to prevent.

How CloudLinux works: the three core technologies

CageFS — complete account isolation

CageFS is CloudLinux’s most important feature and the technology that directly addresses the security risk described above. It creates a virtualized file system for each hosting account  a private, isolated environment that the account user can see and operate within, but which is completely separated from every other account on the server.

When a user is operating within CageFS, they can see only their own files, their own processes, and a carefully controlled set of system files necessary for their applications to run. They cannot see other users’ home directories. They cannot access other users’ databases. They cannot view running processes belonging to other accounts. They cannot read configuration files that might reveal information about the server’s broader environment.

The practical effect is that a compromised account is completely contained. An attacker who gains access to one cPanel account through a vulnerable WordPress installation can do damage within that account — but they cannot traverse to other accounts, cannot read other users’ data, and cannot use the compromised account as a launchpad for broader server access. The breach is isolated. The rest of your clients are protected.

This is not just a security feature — it is a client trust feature. When a client’s website gets hacked on your server, their first question will be whether their compromise affected other clients’ data. With CageFS, the answer is definitively no.

LVE — per-account resource limits

LVE (Lightweight Virtual Environment) is CloudLinux’s resource management technology. It allows you to set specific limits on the CPU, memory, disk I/O, and number of concurrent processes that any single hosting account can use at any given time.

When an account hits its LVE limits — because of a traffic spike, a poorly coded script, or a resource-intensive operation — CloudLinux throttles that account rather than allowing it to consume resources that belong to other accounts. The account’s performance degrades gracefully. Other accounts on the server are completely unaffected.

From WHM, you have full visibility into resource consumption across all accounts. You can see which accounts are consistently hitting their limits — a signal that they need to upgrade to a higher-resource plan — and adjust limits on a per-account basis as needed.

LVE is what makes genuine shared hosting possible at scale. Without it, shared hosting is a constant game of hoping no single account goes rogue and takes everyone else down with it. With it, every account is guaranteed its allocated share of server resources regardless of what other accounts are doing.

MySQL Governor — database resource management

MySQL Governor extends CloudLinux’s resource management to database operations, monitoring and throttling MySQL queries on a per-account basis. Without it, a single account running expensive database queries — a complex WooCommerce store, a poorly optimised plugin, a scheduled database operation — can overwhelm your server’s database capacity and cause timeouts or failures for every other account’s database queries.

MySQL Governor tracks per-account database resource usage in real time and applies limits to prevent any single account from monopolising database capacity. Combined with LVE for PHP and CPU resources, it gives you complete resource governance across every layer of your hosting stack.

What CloudLinux means for your hosting business

Fewer support tickets

Resource abuse and account compromise are two of the most common causes of support requests on shared hosting servers. Slow sites, unexplained downtime, hacked accounts — these generate support tickets that consume your time and frustrate your clients. CloudLinux reduces the frequency of all of these events significantly. Less firefighting means more time building your business.

Better client retention

Hosting clients leave for three reasons above all others: their site was slow, their site went down, or their site got hacked. CloudLinux directly addresses all three. Faster, more stable, more secure hosting means clients who are satisfied with their service and have no compelling reason to look elsewhere.

A genuine marketing advantage

Many budget hosting providers do not run CloudLinux because they are either unaware of it or unwilling to absorb the licensing cost. Running CloudLinux — and communicating that you do — is a legitimate technical differentiator you can put in front of prospective clients. “CloudLinux-powered hosting with full account isolation” is a meaningful statement to any client who has previously experienced the consequences of being on a server without it.

Compliance and liability protection

For hosting providers serving business clients — e-commerce stores, professional services firms, healthcare or legal businesses — account isolation is not just a nice-to-have. Some clients have regulatory obligations around data security and will specifically ask whether their hosting environment is isolated from other tenants. CloudLinux gives you a clear, honest answer.

CloudLinux and cPanel: a purpose-built combination

CloudLinux was designed to work alongside cPanel, and the integration is seamless. Installation on a cPanel server is straightforward, and once installed, CloudLinux’s features are manageable directly from WHM — your main server administration interface.

From WHM with CloudLinux installed you can:

• Enable or disable CageFS on a per-account basis
• View and adjust LVE resource limits for every account
• Monitor real-time resource usage across all accounts
• Access MySQL Governor settings and usage statistics
• Review security events and account activity logs

There is no separate management interface to learn. Everything operates within the WHM environment your team already uses.

CloudLinux is also fully compatible with LiteSpeed, Imunify360, and every other major component of a modern hosting stack. All of these tools are designed to work together, and running them in combination produces a server that is meaningfully more secure, stable, and performant than the sum of its parts.

CloudLinux pricing: direct vendor vs Tremhost

https://tremhost.com/licenses.html

Buying directly from CloudLinux: The standard CloudLinux OS license purchased directly from the vendor is priced at approximately $13 to $15 per server per month. For a small hosting provider running on tight margins, this is a significant recurring cost — particularly when combined with all other necessary licenses.

Buying from Tremhost:

• CloudLinux OS License: $6/month
• With the current 50% off promotion: $3/month
• Lifetime CloudLinux License: $250 one-time ($125 with 50% off)

At $3/month during the promotion, CloudLinux costs less per month than a standard streaming subscription. The protection and stability it provides to your hosting business — and to every client on your server — is worth orders of magnitude more than that.

The lifetime option at $125 during the promotion deserves particular attention. At the standard monthly rate of $6, the lifetime license pays for itself in just under 42 months. After that point, your CloudLinux license costs nothing permanently. For hosting providers running infrastructure they intend to keep long-term, the lifetime option is a straightforward financial decision.

CloudLinux as part of a complete hosting stack

https://tremhost.com/licenses.html

CloudLinux does not operate in isolation. It is most effective when combined with the other security and performance tools that form a complete shared hosting stack:

CloudLinux + Imunify360: CloudLinux isolates accounts from each other. Imunify360 protects the server from the outside world — blocking malicious traffic, scanning for malware, and preventing intrusion attempts. Together they provide both internal and external security coverage. Imunify360 is available at Tremhost for $5/month ($2.50 with 50% off).

CloudLinux + LiteSpeed: CloudLinux’s CageFS is fully compatible with LiteSpeed’s web server, and the combination delivers both the performance advantages of LiteSpeed and the security isolation of CloudLinux simultaneously. LiteSpeed licenses start at $5/month at Tremhost ($2.50 with 50% off).

CloudLinux + cPanel bundle: The most cost-effective way to get CloudLinux alongside cPanel, Imunify360, LiteSpeed, JetBackup, and every other essential license is through Tremhost’s VPS or Dedicated license bundle — from $15/month ($7.50 with 50% off), which includes CloudLinux as one of nine bundled licenses.

Frequently asked questions

Does CloudLinux work with AlmaLinux and Rocky Linux? Yes. CloudLinux OS is compatible with AlmaLinux, Rocky Linux, and CentOS-based systems. It installs as a kernel replacement and works alongside your existing distribution.

Will installing CloudLinux require server downtime? Installation requires a server reboot to load the CloudLinux kernel, which typically means a few minutes of downtime. This is best scheduled during a low-traffic window. The installation itself is straightforward and Tremhost provides free installation assistance with every license.

Can I enable CageFS for some accounts and not others? Yes. CageFS can be enabled or disabled on a per-account basis from WHM. You have complete granular control over which accounts operate within the isolated environment.

Does CloudLinux affect site performance? No negatively. In fact, the resource management features of CloudLinux — particularly LVE — tend to improve overall server performance by preventing resource abuse. Individual sites operate within their allocated limits, which means the server’s aggregate performance is more consistent and predictable.

Is CloudLinux compatible with Plesk as well as cPanel? Yes. CloudLinux works with both cPanel and Plesk. If you’re running a Plesk server, the license and functionality are identical — the management interface simply integrates with Plesk’s admin panel rather than WHM.

The bottom line

https://tremhost.com/licenses.html

If you are running a shared hosting server without CloudLinux, you are running a server where one compromised account can read another client’s files, and where one resource-hungry account can degrade performance for every other client on the machine. These are not edge cases they are predictable, recurring events on unprotected shared hosting servers.

CloudLinux solves both problems completely. It has been the industry standard for shared hosting security and stability for over a decade. It is running on more than 50,000 servers worldwide. And through Tremhost’s current 50% off promotion, it costs $3 per month.

There is no credible argument for running shared hosting without it at that price.

Order your CloudLinux license or get it bundled with your entire hosting stack at tremhost.com/licenses.html. The 50% off promotion is live now.

Most software in the hosting industry comes with a monthly bill attached. cPanel, CloudLinux, Imunify360, LiteSpeed every tool that keeps your server running professionally adds another line item to your recurring costs. For hosting providers thinking long-term, there’s an obvious question worth asking: what if you could eliminate some of those monthly costs entirely with a single one-time payment?

That’s exactly what a lifetime cPanel license offers. Pay once, own the license permanently, and never see another monthly cPanel invoice again.

It sounds straightforward. But like any significant purchasing decision, the answer to whether it’s worth it depends on your specific situation, your plans for the server, and  critically where you buy it. Because the price difference between buying a lifetime cPanel license from the right source versus the wrong one is substantial.

This guide breaks down everything you need to know.

https://tremhost.com/licenses.html

What is a lifetime cPanel license?

A lifetime cPanel license is a one-time purchase that gives you permanent access to cPanel and WHM on a single server, without any recurring monthly fees. Once activated, the license remains valid indefinitely  you receive official cPanel updates on the same schedule as monthly license holders, your server continues to function normally, and there are no renewal reminders, no subscription cancellations, and no monthly charges.

Everything that comes with a standard monthly cPanel license comes with the lifetime version:

• Unlimited cPanel accounts
• Full WHM server management access
• Official cPanel updates
• Stability after server reboots
• Free FleetSSL (Let’s Encrypt integration)
• Free Softaculous auto-installer
• Free Sitepad website builder
• Free installation support

The lifetime license is not a different or inferior version of cPanel. It is identical software with identical functionality — the only difference is the payment structure.

https://tremhost.com/licenses.html

The monthly vs lifetime cost breakdown

To understand whether a lifetime license makes financial sense, the calculation is simple: how many months of monthly payments equal the one-time lifetime price?

At standard Tremhost pricing:

• Monthly cPanel VPS license: $5/month
• Lifetime cPanel VPS license: $190 one-time
• Break-even point: 38 months (just over 3 years)

At the current 50% off promotional pricing:

• Monthly cPanel VPS license: $2.50/month
• Lifetime cPanel VPS license: $95 one-time (50% off $190)
• Break-even point: 38 months

The break-even point stays consistent because the promotion applies proportionally to both options. What changes is the actual cash outlay — at the promotional price, you’re securing a permanent license for $95 instead of $190.

For dedicated servers:

• Monthly cPanel Dedicated license: $6/month (standard) / $3/month (50% off)
• Lifetime cPanel Dedicated license: $250 one-time (standard) / $125 one-time (50% off)
• Break-even point: approximately 41 months

When a lifetime license is clearly worth it

You’re running a server you plan to keep long-term. If you have a VPS or dedicated server that forms the core infrastructure of your hosting business — one that you intend to run for three or more years — the lifetime license is almost certainly the better financial decision. Once you pass the break-even point, every subsequent month is pure saving. A server you run for five years on a monthly license costs $300 in cPanel fees alone. A lifetime license costs $95 during the current promotion. The five-year saving is $205 from this one license.

You want predictable, fixed infrastructure costs. Monthly licensing creates variable cost exposure. Prices can increase. Promotional rates can expire. A lifetime license locks in your cost at today’s price permanently. For hosting businesses that budget carefully and want to know exactly what their infrastructure costs, removing a recurring variable is genuinely valuable.

You’re building a hosting business for the long term. If you’re serious about running a hosting business — not experimenting, not testing, but building something with real clients and real revenue — the lifetime license reflects that commitment and pays for itself many times over across the life of the business.

You’re buying during the 50% off promotion. The current Tremhost promotion cuts the lifetime VPS license from $190 to $95. This is the most important timing consideration in this entire guide. A lifetime license bought at $95 has a break-even point of 38 months at the standard monthly rate but if the monthly rate ever increases, or if the promotional window closes, the value of having locked in at $95 becomes even greater. Lifetime licenses bought during promotional periods represent genuinely exceptional value.

When a monthly license makes more sense

You’re setting up a temporary or experimental server. If you’re building a development environment, testing a new hosting stack, or running a server you expect to decommission within a year or two, a monthly license at $2.50 to $5 per month is more appropriate. There’s no point paying for a lifetime license on infrastructure you won’t be running long enough to break even.

You’re not sure yet which infrastructure you’ll settle on. If you’re still evaluating whether a particular VPS provider or server configuration is right for your business, start with a monthly license. Once you’ve settled on a stable setup you’re confident in, that’s the point to consider upgrading to a lifetime license.

Cash flow is a current constraint. Even at $95 during the promotion, a lifetime license requires a larger upfront payment than a monthly subscription. If cash flow is tight right now, the monthly option is perfectly sensible — you can always upgrade later. The lifetime license will still be available, and the monthly fee in the meantime is low enough that waiting is not a costly decision.

Where to get the cheapest legitimate lifetime cPanel license

This is the most important practical question in this guide, and the answer matters more than most hosting providers realise.

If you search for “lifetime cPanel license,” you will find a range of prices and providers. Some will be dramatically cheaper than others. Before exploring those options, it’s worth understanding what makes a lifetime license legitimate and what the risks of unverified sources are.

A legitimate lifetime cPanel license:

• Is activated through cPanel’s official licensing system
• Receives official cPanel updates
• Is stable across server reboots
• Can have its IP address changed legitimately if you migrate servers
• Comes with support from the provider
• Does not put your server at risk of sudden deactivation

Illegitimate or cracked licenses — often sold at suspiciously low prices through forums or unverified resellers  do none of these things reliably. They may work initially and stop working without warning. They may expose your server to security risks. They may put you in violation of cPanel’s terms of service. And when something goes wrong — which it eventually will  there is no support, no recourse, and no refund.

Tremhost’s lifetime cPanel licenses:

• Lifetime cPanel VPS License: $190 one-time ($95 with the current 50% off promotion)
• Lifetime cPanel Dedicated License: $250 one-time ($125 with the current 50% off promotion)

Both are fully legitimate shared licenses — the same model that has delivered over 10,000 licenses to hosting providers worldwide. Official updates, free installation, IP change capability from the client area, and 24/7 support included.

At $95 for a VPS lifetime license, Tremhost’s promotional price is the lowest legitimate price available anywhere for this product. There is no credible competing offer at this price point from a provider with a comparable track record.

https://tremhost.com/licenses.html

How the lifetime license compares to buying directly from cPanel

cPanel does not publicly offer lifetime licenses through their standard direct sales channel. Their current model is entirely subscription-based, which means if you want a lifetime license, shared licensing providers like Tremhost are the primary legitimate route.

This is one of the areas where the shared license model offers something the direct vendor relationship simply cannot the ability to make a single payment and remove the recurring cost permanently. For hosting providers who have been watching cPanel’s subscription fees climb since 2019, the lifetime option represents a meaningful way to step off that escalating cost treadmill entirely.

What happens to the lifetime license if you migrate servers?

This is one of the most common practical questions about lifetime licenses, and the answer is straightforward.

If you migrate your hosting server to a new machine whether because you’re upgrading hardware, switching providers, or moving to a different data centre you simply update the IP address associated with your license in the Tremhost client area. The lifetime license moves with you. You do not need to purchase a new license. You do not pay any migration fee.

This is an important consideration for hosting businesses that anticipate infrastructure changes over the life of the license. The lifetime license is tied to your Tremhost account, not permanently locked to a single server IP.

Combining the lifetime license with a full stack

One practical approach worth considering: use the lifetime license for cPanel the most stable, longest-running component of your stack — and use monthly licenses for the supporting tools where your needs might evolve over time.

For example:

• Lifetime cPanel VPS License: $95 one-time (promotional price)
• Monthly CloudLinux: $3/month (promotional price)
• Monthly Imunify360: $2.50/month (promotional price)
• Monthly LiteSpeed: $2.50/month (promotional price)
• Monthly JetBackup: ~$0.84/month (promotional price)

Total ongoing monthly cost after the lifetime purchase: approximately $8.84/month  compared to $7.50/month for the full monthly bundle. The slight premium is a reasonable trade for permanently eliminating your cPanel monthly fee.

Alternatively, if you want to go all-in on reducing long-term costs, Tremhost also offers lifetime licenses for Imunify360 ($190 standard / $95 promotional) and CloudLinux ($250 standard / $125 promotional), allowing you to build a stack where multiple major components carry no recurring monthly cost.

The 50% off promotion: why timing matters here more than usual

For most monthly licenses, the timing of a promotion matters primarily in the sense that your ongoing monthly cost is lower while the promotion is active. If the promotion ends, your cost returns to the standard rate.

For lifetime licenses, the timing of a promotion is permanently significant. Whatever you pay for a lifetime license is what you pay — forever. A lifetime license bought at the $95 promotional price will always have been bought at $95, regardless of what prices look like in future. The saving is baked in permanently.

This is why the current Tremhost 50% off promotion is a particularly strong reason to act on a lifetime license now rather than later. The promotional pricing window is finite. The benefit of having bought at that price is permanent.

Frequently asked questions

Does the lifetime license include future versions of cPanel? Yes. You receive official cPanel updates as they are released, the same as any other license holder. Your server will always run the current version.

Is there any ongoing fee after purchasing a lifetime license? No. The one-time payment is the complete cost. There are no renewal fees, maintenance charges, or hidden ongoing costs.

Can I buy a lifetime license for multiple servers? Each lifetime license covers one server. If you operate multiple servers, you would purchase a lifetime license for each one you want to cover permanently.

What support comes with the lifetime license? 24/7 support from Tremhost is included, along with free installation assistance and IP change capability from the client area.

Is the break-even calculation affected if cPanel’s prices change in future? The break-even calculation is based on Tremhost’s pricing, not cPanel’s direct pricing. If Tremhost’s standard monthly rate changes in future, the calculation would adjust accordingly but the lifetime license price you paid at purchase is permanently fixed regardless.

The verdict

https://tremhost.com/licenses.html

A lifetime cPanel license is worth it if you are running a server you plan to keep for three or more years and you want to eliminate a recurring monthly cost permanently. The mathematics are simple, the break-even point is clear, and the ongoing saving after that point accumulates indefinitely.

At the current 50% off promotional price of $95 for a VPS lifetime license, it is the most cost-effective way to license cPanel available from any legitimate provider. The promotional pricing makes an already-compelling case decisive.

If you are running a long-term hosting business, if you want predictable fixed infrastructure costs, or if you simply want to stop paying a monthly cPanel bill, this is the moment to act.

Browse lifetime cPanel licenses and the full range of hosting licenses at tremhost.com/licenses.html — the 50% off promotion is live now across all products.

If you’re setting up a new hosting server or reviewing your current licensing costs, one of the first decisions you’ll face is straight forward on the surface but surprisingly confusing in practice: do you need a cPanel VPS license or a cPanel Dedicated license?

The names suggest the answer is obvious VPS for virtual private servers, dedicated for dedicated servers. And while that’s broadly correct, the reality is a little more nuanced. The wrong choice won’t break your server, but understanding the difference properly will help you make a confident decision, avoid paying more than you need to, and build a licensing setup that scales with your business.

This guide covers everything you need to know, with real pricing from both the vendor and the cheapest legitimate source available in 2026

https://tremhost.com/licenses.html

What is a cPanel VPS license?

A VPS — Virtual Private Server  is a virtualized server environment created by partitioning a physical server into multiple isolated instances. Each VPS gets its own allocated CPU resources, RAM, and storage, and runs its own operating system independently of the other VPS instances on the same physical machine.

A cPanel VPS license is designed specifically for this environment. It gives you full cPanel and WHM functionality on your VPS, with unlimited hosting accounts, the complete suite of cPanel features, and access to all official updates.

The VPS license is the correct choice for the majority of independent hosting providers and resellers starting out. Most hosting businesses begin on a VPS  the cost is lower than dedicated hardware, the performance is more than sufficient for a growing client base, and the environment is easy to scale up as your needs grow.

cPanel VPS License at Tremhost: $5/month (now $2.50 with 50% off)

What is a cPanel Dedicated license?

A dedicated server is a physical machine that you have exclusive use of. There is no virtualization layer, no shared hardware, no neighbouring VPS instances drawing on the same physical resources. You get the entire machine — all its CPU cores, all its RAM, all its disk I/O — to yourself.

A cPanel Dedicated license is the version of cPanel licensed for this environment. It is priced slightly higher than the VPS license to reflect the higher-capacity infrastructure it typically runs on.

Functionally, a cPanel Dedicated license offers the same features as a VPS license. The same WHM interface, the same client-facing cPanel, the same unlimited accounts, the same update cycle. The distinction is environmental, not functional.

cPanel Dedicated License at Tremhost: $6/month (now $3 with 50% off)

The core difference: virtualized vs bare metal

The single most important factor in choosing between these two licenses is your server environment — not your traffic levels, not your number of accounts, not your technical requirements.

If your server is a VPS provisioned through a cloud provider like DigitalOcean, Vultr, Linode, Hetzner, AWS, or similar you need the VPS license.

If your server is a physical dedicated machine rented from a provider like OVH, Hetzner’s dedicated range, Leaseweb, ReliableSite, or similar — you need the Dedicated license.

If you are unsure which you have, log into your hosting provider’s control panel. It will be clearly labeled. Alternatively, check your original order — it will specify whether you provisioned a VPS/cloud instance or a dedicated server.

Does the license type affect performance?

No. The license type has no bearing on your server’s performance. Performance is determined by your hardware — CPU, RAM, disk, and network — and by the software stack running on top of it, particularly your web server (Apache or LiteSpeed) and your operating system configuration.

Choosing a VPS license over a Dedicated license, or vice versa, will not make cPanel run faster or slower. It will not affect how many accounts you can host, how quickly pages load, or how your clients experience their control panel. It is purely a licensing classification based on your server environment.

Does it matter which one you choose if your environment fits either?

In short, no as long as you choose the one that correctly matches your infrastructure. Using a VPS license on a dedicated server, or vice versa, is not the correct approach and may cause licensing issues or terms-of-service complications. Always match the license to the environment.

The good news is that at Tremhost’s prices, the difference between the two is $1 per month at standard pricing — $5 versus $6. At the current 50% off promotion, that’s $2.50 versus $3. The financial difference is negligible. Choose based on your server type, not on price.

VPS license: who it’s for

The cPanel VPS license is the right choice for you if:

You’re launching a new hosting business. Most new hosting providers start on a VPS. The economics are better at low account volumes, the management overhead is lower, and the performance is sufficient for dozens or even hundreds of client accounts depending on your VPS specification.

You’re a developer or agency hosting client sites. A VPS with cPanel is a clean, controllable environment for managing multiple client websites without the overhead of dedicated hardware.

You’re a reseller. If you’ve purchased VPS resources from a larger provider and want to subdivide them into hosting accounts for your own clients, the VPS license gives you full WHM access to do exactly that.

You’re testing or building out a hosting infrastructure. If you’re not yet at the scale where dedicated hardware makes financial sense, a VPS with a properly licensed cPanel setup lets you build and refine your offering before committing to higher-cost infrastructure.

Dedicated license: who it’s for

The cPanel Dedicated license is the right choice for you if:

You’re running a dedicated physical server. This is the primary criterion. If your server is bare metal, use the Dedicated license.

You’ve outgrown VPS performance. When your VPS can no longer handle your traffic and account volumes — typically when you’re consistently hitting CPU or RAM limits — moving to a dedicated server and a Dedicated license is the natural next step.

You’re running high-traffic or resource-intensive sites. E-commerce stores, high-traffic WordPress sites, video streaming, or any application with significant resource demands may require the predictable, unshared performance of dedicated hardware.

You want complete control over your hardware environment. Dedicated servers allow you to specify exact hardware configurations, add drives, customize RAID setups, and make infrastructure decisions that simply aren’t possible in a virtualized environment.

The bundle option: the smartest way to license either environment

Whether you need a VPS or Dedicated license, the most cost-effective approach at Tremhost is not to buy cPanel alone — it’s to order one of the license bundles, which include cPanel plus every other essential tool your server needs, all in a single package.

VPS License Bundle — from $15/month (now $7.50 with 50% off)

Includes:

• cPanel VPS License (unlimited accounts)
• CloudLinux OS License
• Imunify360 License
• LiteSpeed License
• JetBackup License
• WHMReseller License
• Softaculous (free)
• Sitepad Web Builder (free)
• FleetSSL / Let’s Encrypt (free)

Dedicated License Bundle — from $16/month (now $8 with 50% off)

https://tremhost.com/licenses.html

Includes everything above, licensed for dedicated servers.

To put the bundle value in perspective: if you were to purchase every one of these licenses directly from the respective vendors, you’d be paying upwards of $110 to $130 per month. The Tremhost bundle gives you the same stack for $7.50 to $8 per month during the current promotion. That’s not a small saving — it’s the difference between a licensing cost that’s an afterthought and one that dominates your monthly expenses.

Comparing Tremhost pricing to direct vendor pricing

The savings are not marginal. At Tremhost’s promotional pricing, a hosting business running a single dedicated server saves over $100 every month compared to buying licenses directly — that’s over $1,200 per year from one server alone.

https://tremhost.com/licenses.html

What about the lite bundle options?

For hosting providers who need cPanel and the most essential supporting licenses but don’t require the full stack, Tremhost also offers lite bundle options:

cPanel VPS License Lite — $9/month (now $4.50 with 50% off) Includes: cPanel VPS, CloudLinux, Imunify360, Softaculous, Sitepad, FleetSSL. No LiteSpeed, JetBackup, or WHMReseller.

cPanel Dedicated License Lite — $10/month (now $5 with 50% off) Same as above, for dedicated servers.

These are a good middle ground if you want to start with a leaner stack and add individual licenses as your needs grow.

Lifetime licenses: eliminate the monthly cost entirely

For hosting providers with a long-term view, Tremhost offers lifetime versions of both cPanel licenses — a one-time payment that removes the license cost permanently.

Lifetime cPanel VPS License — $190 one-time (now $95 with 50% off) Lifetime cPanel Dedicated License — $250 one-time (now $125 with 50% off)

Both include unlimited accounts, instant activation, official updates, free Softaculous, free Sitepad, and free FleetSSL.

At the standard monthly price of $5, the VPS lifetime license pays for itself in 38 months. At the promotional price of $95, it pays for itself in just 19 months — after which your cPanel license is a permanent zero-cost line item. For any hosting business planning to operate beyond a year or two, this is worth serious consideration, particularly while the 50% promotion is live.

Frequently asked questions

Can I switch from a VPS license to a Dedicated license later? Yes. If you migrate from a VPS to a dedicated server, you simply order the Dedicated license from Tremhost and update your server’s IP in the client area. The process is straightforward.

What happens if I change server providers and get a new IP? All Tremhost licenses allow you to change the associated IP address directly from the client area. You don’t need to purchase a new license when migrating servers.

Does it matter how many accounts I host? No. Both the VPS and Dedicated licenses from Tremhost are unlimited-account licenses. Whether you’re hosting 10 accounts or 10,000, the license price is the same.

Is there a difference in update frequency between VPS and Dedicated licenses? No. Both receive official cPanel updates on the same schedule. There is no functional difference in the software — only in the environment it’s licensed for.

Can I order a bundle and add individual licenses later? Yes. If you start with a bundle and later need additional licenses — an upgraded LiteSpeed tier, for example, or an additional server — you can order individual licenses from Tremhost at any time.

Making the decision

The choice between a cPanel VPS license and a cPanel Dedicated license comes down to one question: what type of server are you running?

VPS or cloud instance → VPS license. Physical dedicated machine → Dedicated license.

Everything else  number of accounts, traffic levels, technical requirements, budget is secondary to that single environmental distinction. And at Tremhost’s prices, the cost difference between the two is so small that it should never be the deciding factor.

If you’re setting up a new server and want everything configured correctly from the start, the bundle options are the cleanest path. You get cPanel plus every supporting license your server needs, at a combined price that’s a fraction of what any of them would cost individually from the vendors.

Browse all cPanel VPS and Dedicated licenses, bundles, and lifetime options at tremhost.com/licenses.html. With the 50% off promotion currently running, there has never been a better time to get your hosting stack properly licensed.