Self-hosted control panelSigned agent on every server

Your own hosting panel, on your own servers.

Install on any supported Linux server in minutes. Run websites, WordPress, and apps without a monthly per-site license. One panel manages one server or a fleet. Each server runs a small signed agent.

bash - root@vps
$curl -sSL https://get.boltpane.com/install.sh | bash
Panel at https://your-server:8443View requirements →
89
Task shortcuts
83
PHP extensions
7.4–8.5
PHP side by side
3
Web servers
25
MCP tools
10+
Linux families
Production
CPU Usage
18.4%
4 Cores AMD EPYC
Memory (RAM)
3.2 / 8 GB
40% utilized (Redis cached)
NVMe Disk
28.6 / 120 GB
91.4 GB available
Network Throughput
1.8 MB/s
184 GB transferred this month
Recent Active SitesOpen Full Demo →
WP
app.acmecorp.comSSL Active
PHP 8.3 • Redis Cache • Nginx FastCGI
142k req/day
99.98% Uptime
JS
store.nordicgear.ioSSL Active
Node.js 20 • Docker Compose • Reverse Proxy
89k req/day
100.0% Uptime
BoltPane v1.2.0•All Daemons Normal
Launch Full Interactive Demo

Who it is for

Agencies

Host client WordPress sites from one panel.

Resellers and small hosts

Plans, a customer portal, and a WHMCS provisioning module.

DevOps teams

Node.js and Python apps as services, with Git deploy and CI hooks.

Schools and trainers

Moodle with the right PHP version and extensions.

Why it is different

Self-hosted

The panel runs on your Linux server. Docker is not required for the panel itself.

Signed, audited jobs

Every server action is an Ed25519-signed job. The agent rejects anything else.

WAF, attack map, DDoS hardening

Edge firewall, live attack map, Fail2Ban, and kernel limits are in the product.

API, CLI, MCP, and BoltAI

REST with OpenAPI, boltpane and bp, 25 MCP tools, and an operator that waits for approval.

In the panel today

Grouped the way the sidebar groups them

Websites, WordPress, Moodle, apps, email, DNS, SSL, backups, firewall, and billing records. Each card is implemented in the October 2026 code.

Websites

WordPress, Moodle, PHP, static HTML, Node.js, Python, and reverse-proxy sites, each with its own Linux user.

Open

Managed WordPress

Production, staging, and development copies, safe updates, cache, and a fleet view.

Open

Moodle LMS

Install a supported Moodle branch with the right PHP version and extensions.

Open

Node.js and Python apps

Runtimes, virtual environments, services, logs, and Git deploy.

Open

Nginx, Apache, and OpenLiteSpeed

Three web servers, with Nginx in front of every site, and PHP 7.4 through 8.5 side by side.

Open

Databases

MariaDB / MySQL, PostgreSQL, and MongoDB, with users, grants, and phpMyAdmin.

Open

File manager

Browse, edit, upload, permissions, archives, trash, and per-site SFTP.

Open

DNS and SSL

Automatic DNS records, a Cloudflare zone editor, and Let's Encrypt.

Open

Email hosting

Mail domains, mailboxes, forwards, autoresponders, DKIM, and webmail.

Open

Backups and recovery

Local or S3 storage, schedules, restore, and a standby panel.

Open

Docker and Kubernetes

Compose stacks, one-click apps, and Kubernetes workloads.

Open

Servers and monitoring

One panel for one server or a fleet, each server running a small signed agent.

Open

Website firewall

A WAF on the Nginx edge, with an attack map and real visitor IPs behind Cloudflare.

Open

Server protection

UFW or firewalld from the panel, Fail2Ban, and kernel DDoS hardening.

Open

Access control

Argon2id passwords, TOTP, teams, scoped API keys, and a hash-chained audit log.

Open

REST API and CLI

A public REST API with OpenAPI, plus the boltpane and bp command-line tools.

Open

BoltAI operator

Chat with your hosting using your own OpenAI or Gemini key. Changes wait for approval.

Open

MCP server

A built-in Model Context Protocol endpoint with 25 hosting tools.

Open

Customer portal

Customers, resellers, plans, branding, and support tickets.

Open

Billing and WHMCS

Invoice records in BoltPane. Card charging stays in WHMCS.

Open

Not in the product yet

  • Disk, inode, CPU, RAM, and bandwidth quotas are not enforced by the operating system. Only the website count on a plan is enforced.
  • BoltPane records invoices and payments. It does not charge cards. WHMCS handles real payments.
  • There is no authoritative DNS server of its own. DNS editing goes through Cloudflare.
  • SFTP only. FTP and a web terminal are not included.
  • Automatic major Moodle upgrades are not included.
  • Site backups are full or database-only. Incremental and encrypted site backups are not included. The panel backup itself is encrypted.
  • Many features are unit- and API-tested. They are not certified on every live distribution.

Questions

BoltPane is a self-hosted hosting control panel. One web panel manages one server or a whole fleet. Each server runs a small signed agent. Websites, WordPress, Moodle, apps, email, DNS records, SSL, backups, firewall, and billing records live in one place.

Install it on your server.

The panel opens at https://your-server:8443. Licensing terms live on the contact page.