There is a version of web hosting that most clients never see but always feel. It is the version where their site loads quickly and consistently, where a hacked account on the same server does not compromise their files, where a resource-hungry neighbour does not slow their WordPress installation to a crawl, and where automated attacks are blocked before they ever reach their application.<\/p>\n
That version of hosting does not happen by accident. It is the product of a specific set of tools running on the server beneath the surface \u2014 tools that most clients will never think about but will immediately notice the absence of if they are ever removed.<\/p>\n
The three most important of those tools are cPanel, CloudLinux, and Imunify360. Together they form what professionals in the hosting industry recognise as the essential shared hosting stack the minimum viable configuration for a server that can be offered to paying clients with confidence.<\/p>\n
In 2026, through Tremhost\u2019s current 50% off promotion, you can run this entire stack for under $10 per month. This guide explains exactly what you get, why each component matters, and why this combination is the foundation every serious hosting provider builds on.<\/p>\n
The hosting software ecosystem is large. There are dozens of tools that could theoretically be added to a hosting server additional security scanners, performance optimisers, monitoring systems, specialised caches. Most of them are useful. A few of them are essential.<\/p>\n
cPanel, CloudLinux, and Imunify360 sit in the essential category for a specific reason: they address the three most fundamental requirements of a shared hosting server that serves paying clients.<\/p>\n
cPanel<\/strong> solves the management problem. Without it, you cannot give clients a usable interface to manage their hosting account, and you cannot efficiently manage multiple client accounts yourself. It is the layer that turns a Linux server into a hosting product.<\/p>\n CloudLinux<\/strong> solves the isolation problem. Without it, every account on your server shares the same environment \u2014 meaning a compromised or resource-hungry account affects every other account on the machine. It is the layer that makes shared hosting genuinely safe and stable.<\/p>\n Imunify360<\/strong> solves the threat problem. Without it, your server has no active, automated defence against the constant stream of attacks that every internet-facing server receives. It is the layer that keeps external threats from becoming internal incidents.<\/p>\n Remove any one of these three and you have a meaningful gap in your hosting operation. Run all three and you have a server that is manageable, isolated, and defended \u2014 the three properties that every hosting client is implicitly paying for when they sign up with you.<\/p>\n cPanel is the world\u2019s most widely deployed web hosting control panel, and its dominance is not accidental. It has been refined over more than two decades into an interface that strikes the right balance between power and accessibility giving experienced administrators deep control while remaining usable for clients with no technical background.<\/p>\n The control panel operates on two levels. WHM \u2014 Web Host Manager \u2014 is your server administration interface. From WHM you create and manage hosting accounts, allocate resources, configure server-wide settings, manage DNS zones, integrate with billing software, and control every aspect of the server\u2019s operation. cPanel is the client-facing interface, accessible to each individual account holder, where they manage their files, email, databases, domains, SSL certificates, and everything else relating to their individual hosting account.<\/p>\n The reason cPanel matters beyond mere functionality is familiarity. The majority of people who have ever used shared hosting before have used cPanel. They know where to find the file manager, how to create an email account, where to access their database credentials. Offering cPanel means your clients arrive knowing how to use their hosting environment, which reduces your support burden from day one.<\/p>\n cPanel pricing at Tremhost:<\/strong><\/p>\n https:\/\/tremhost.com\/licenses.html<\/a><\/p>\n Compare this to the $45 to $65+ per month that cPanel currently charges when purchased directly from the vendor. The saving from this single license alone is enough to cover the entire rest of the stack at Tremhost prices.<\/p>\n A shared hosting server, by definition, hosts multiple clients on a single machine. These clients are strangers to each other. They have different levels of technical sophistication, different security practices, different quality of code running on their sites, and different intentions. Putting them all in a shared environment without isolation is the hosting equivalent of leaving every apartment in a building with its front door open.<\/p>\n CloudLinux closes those doors.<\/p>\n Its core technology, CageFS, creates a virtualized file system for each hosting account \u2014 a private environment that contains everything the account needs to operate but is completely separated from every other account on the server. An account operating within CageFS can see only its own files and processes. It cannot read other users\u2019 data, cannot access configuration files that might reveal information about the broader server environment, and cannot traverse into neighbouring accounts regardless of what tools or techniques an attacker operating through that account might attempt to use.<\/p>\n The practical consequence is containment. When a WordPress site on your server is compromised \u2014 through an outdated plugin, a stolen password, a vulnerable theme \u2014 the damage stops at the edge of that account\u2019s CageFS container. Your other clients are unaffected. Their files are inaccessible to the compromised account. The incident is a single-account problem rather than a server-wide crisis.<\/p>\n CloudLinux\u2019s second major component, LVE (Lightweight Virtual Environment), addresses the stability side of the shared hosting equation. LVE allows you to set per-account limits on CPU usage, memory consumption, disk I\/O, and concurrent processes. When an account hits its limits \u2014 due to a traffic spike, a poorly coded script, or deliberate resource abuse \u2014 CloudLinux throttles that account rather than allowing it to consume resources belonging to other accounts. Every other client on the server continues to operate normally, completely unaware that anything happened.<\/p>\n MySQL Governor extends this resource management to database operations, preventing any single account\u2019s database queries from monopolising your server\u2019s MySQL capacity and causing timeouts or slowdowns for other accounts.<\/p>\n CloudLinux pricing at Tremhost:<\/strong><\/p>\n Direct vendor pricing for CloudLinux is approximately $13 to $15 per month. Tremhost\u2019s promotional price of $3 per month is more than 75% cheaper.<\/p>\n While CloudLinux protects your clients from each other, Imunify360 protects your entire server from the outside world. It is a six-layer security platform that operates continuously in the background, blocking attacks, scanning for malware, patching vulnerabilities, and monitoring your server\u2019s reputation \u2014 all automatically, without requiring manual intervention.<\/p>\n The six layers work as a coordinated defence system:<\/p>\n The Web Application Firewall<\/strong> inspects every incoming HTTP request against a continuously updated database of known attack signatures, blocking SQL injections, cross-site scripting attempts, file inclusion exploits, and hundreds of other known attack patterns before they reach any application on your server.<\/p>\n The Intrusion Prevention and Detection System<\/strong> monitors authentication systems across SSH, cPanel, FTP, email, and databases, automatically blocking IP addresses that exhibit brute force behaviour \u2014 and sharing that intelligence across the entire global Imunify360 network so your server benefits from threat data gathered from hundreds of thousands of other protected servers.<\/p>\n The Real-Time Antivirus<\/strong> scans files as they are uploaded to your server, quarantining malware before it can execute, and runs scheduled scans of all existing files to catch infections that may have arrived through other vectors.<\/p>\n The Network Firewall<\/strong> blocks traffic from known malicious IP ranges and attack infrastructure at the network level, before it consumes server resources or triggers application-level defences.<\/p>\n Patch Management<\/strong> applies live security patches to your Linux kernel without requiring a reboot, keeping your server protected against known kernel vulnerabilities continuously rather than only after scheduled maintenance windows.<\/p>\n Reputation Management<\/strong> monitors whether your server\u2019s IP is being used for spam or other activity that could trigger blacklisting by email providers or security services \u2014 catching the problem early rather than after the damage is done.<\/p>\n Imunify360 pricing at Tremhost:<\/strong><\/p>\n Direct vendor pricing for Imunify360 with unlimited users is approximately $15 to $20 per month. At $2.50 during the promotion, Tremhost\u2019s price is more than 80% below the vendor rate.<\/p>\n Understanding each tool individually is useful. Understanding how they interact is what makes the difference between a server that is theoretically protected and one that is comprehensively defended.<\/p>\n Consider a common attack scenario: an attacker discovers a vulnerability in a WordPress plugin installed on one of your client\u2019s sites. They exploit it to upload a malicious PHP script that attempts to read the database credentials of other accounts on the server, use those credentials to access other sites, and eventually establish persistent access to the server itself.<\/p>\n Here is how the three-tool stack responds at each stage:<\/p>\n Stage 1 \u2014 The exploit attempt.<\/strong> Imunify360\u2019s WAF inspects the incoming request that attempts to exploit the WordPress vulnerability. If the exploit matches a known attack signature \u2014 which most do \u2014 the request is blocked before it reaches the application. The attack fails immediately.<\/p>\n Stage 2 \u2014 If the exploit gets through.<\/strong> If a zero-day exploit or an unusual attack vector bypasses the WAF, Imunify360\u2019s real-time antivirus scans the uploaded malicious PHP file as it arrives and quarantines it before it can be executed.<\/p>\n Stage 3 \u2014 If the malicious file executes.<\/strong> If the file somehow executes before being quarantined, CloudLinux\u2019s CageFS prevents it from reading other accounts\u2019 files or database credentials. The malicious script is contained entirely within the compromised account\u2019s environment. It cannot reach what it is looking for.<\/p>\n Stage 4 \u2014 Lateral movement attempt.<\/strong> If the attacker attempts to brute force access to other accounts\u2019 cPanel or SSH, Imunify360\u2019s IDS\/IPS detects the unusual authentication activity and automatically blocks the attacking IP address.<\/p>\n Stage 5 \u2014 Spam sending.<\/strong> If the compromised account attempts to send spam as a secondary objective, Imunify360\u2019s reputation management detects the unusual outbound mail volume and throttles or blocks it before your server\u2019s IP reaches any blacklist.<\/p>\n At every stage, the combination of tools provides overlapping layers of defence. Each tool catches what the others might miss. The result is a server where a determined attacker faces multiple independent barriers rather than a single line of defence that, once breached, leaves everything exposed.<\/p>\n Here is what this three-tool stack costs at every price point:<\/p>\n Buying directly from vendors:<\/strong><\/p>\n Buying from Tremhost at standard pricing:<\/strong><\/p>\n https:\/\/tremhost.com\/licenses.html<\/a><\/p>\n Buying from Tremhost with 50% off promotion:<\/strong><\/p>\n https:\/\/tremhost.com\/licenses.html<\/a><\/p>\n The saving compared to vendor-direct pricing is between $65 and $92 every single month \u2014 from three licenses alone, before adding any other components to your stack.<\/p>\n At $8 per month for the complete three-tool foundation, the cost objection to running a properly licensed, professionally secured hosting server essentially disappears.<\/p>\n If the three tools above form the essential minimum, LiteSpeed is the first addition that delivers the most immediate, client-visible benefit.<\/p>\n LiteSpeed replaces Apache as your web server, serving pages up to six times faster, handling SSL connections three times faster, and improving PHP performance by approximately 50%. Every site on your server loads faster. Every client\u2019s Google ranking benefits. Every visitor has a better experience.<\/p>\n LiteSpeed is also fully compatible with CloudLinux\u2019s CageFS, meaning you get the performance benefits without any compromise to the isolation and security that CloudLinux provides.<\/p>\n Adding LiteSpeed at Tremhost:<\/strong><\/p>\n Complete four-tool stack with 50% off promotion:<\/strong><\/p>\n Alternatively, the Tremhost VPS bundle \u2014 which includes all four of these tools plus JetBackup, WHMReseller, Softaculous, Sitepad, and FleetSSL \u2014 is available from $15\/month ($7.50 with 50% off), making it cheaper to buy the complete nine-license bundle than to buy the four core tools individually at standard pricing.<\/p>\n Hosting providers launching their first shared server.<\/strong> This is the right starting configuration. It gives you everything you need to host clients professionally and safely, at a price that keeps your startup costs minimal while you build your client base.<\/p>\n Existing hosts running without CloudLinux or Imunify360.<\/strong> If you are currently operating a shared server with cPanel but without account isolation or active security monitoring, you are carrying significant risk that your clients are not aware of. Adding CloudLinux and Imunify360 through Tremhost costs $5.50 per month at the promotional rate \u2014 a trivially small investment to eliminate a serious operational vulnerability.<\/p>\n VPS resellers building a hosting brand.<\/strong> The combination of cPanel\u2019s familiar interface, CloudLinux\u2019s stability and isolation, and Imunify360\u2019s security gives you a hosting product you can genuinely stand behind \u2014 one that competes with established providers on the metrics that matter most to clients.<\/p>\n Agencies and developers running client infrastructure.<\/strong> If you manage hosting for multiple clients on a single server, this stack ensures that one client\u2019s poorly maintained WordPress installation cannot compromise another client\u2019s business data.<\/p>\n Do all three tools need to be installed together?<\/strong> They can be installed independently, but they are most effective together. CloudLinux and Imunify360 in particular are designed by the same team and integrate seamlessly. Installing them together is the recommended configuration and the one that delivers the layered defence described in this guide.<\/p>\n Is there a correct installation order?<\/strong> Yes. CloudLinux should be installed first it modifies the operating system kernel, which other tools then run on top of. Imunify360 and cPanel can be installed in either order after CloudLinux is active. Tremhost\u2019s free installation assistance covers this process.<\/p>\n Will adding these tools require server downtime?<\/strong> CloudLinux installation requires a single reboot to load the new kernel \u2014 typically a few minutes. Imunify360 installation does not require a reboot. cPanel installation on a fresh server takes longer but also does not require additional reboots after the initial setup.<\/p>\n Can these tools be added to an existing server that already has cPanel?<\/strong> Yes. CloudLinux and Imunify360 can both be installed on an existing cPanel server without requiring a fresh build or migrating accounts. The installation process is designed to be non-disruptive to existing hosting environments.<\/p>\n Does Tremhost provide support if something goes wrong after installation?<\/strong> Yes. All Tremhost licenses include 24\/7 support, and free installation assistance is provided with every license. If you encounter issues during or after installation, Tremhost\u2019s<\/a> support team is available to help resolve them.<\/p>\n For each of the three core tools, Tremhost offers lifetime license options that replace the monthly recurring cost with a single one-time payment:<\/p>\n Combined lifetime cost for all three during the promotion: $315 one-time.<\/p>\n At the standard promotional monthly rate of $8 for all three, the combined lifetime licenses pay for themselves in approximately 39 months \u2014 just over three years. After that point, running your complete core hosting stack costs nothing in licensing fees, permanently.<\/p>\n For hosting providers with a long-term view of their infrastructure, purchasing lifetime licenses during the current promotional period is one of the most financially rational decisions available. The promotional pricing window is finite. The benefit of having purchased at that price is permanent.<\/p>\n Building this stack through Tremhost takes a single visit to the license store:<\/p>\n The 50% off promotion is currently active across all licenses and bundles.<\/p>\n The cPanel, CloudLinux, and Imunify360 stack is not a premium configuration reserved for large hosting operations. It is the baseline for professional shared hosting the minimum that any provider serious about client security, server stability, and business reputation should be running.<\/p>\ncPanel: the management layer<\/h3>\n
\n
CloudLinux: the isolation layer<\/h3>\n
\n
Imunify360: the defence layer<\/h3>\n
\n
How the three tools work together<\/h3>\n
The complete cost breakdown<\/h3>\n
\n
\n
\n
Adding LiteSpeed: the performance upgrade that completes the stack<\/h3>\n
\n
\n
Who this stack is built for<\/h3>\n
Frequently asked questions<\/h3>\n
The lifetime option: eliminate recurring costs permanently<\/h3>\n
\n
Getting started<\/h3>\n
\n
Final thoughts<\/h3>\n