Protect Your Servers Before Threats Become Problems
xPGuard is a powerful server security and monitoring solution designed for cPanel/WHM servers. Detect, block and remove malware, stop web attacks and keep your servers safe 24/7.
- Easy to Install
- Works on cPanel/WHM
- Lightweight & Fast
Attacks Overview
Alerts
Attacks Blocked – 30 days
Virus Infections
Real-Time Protection
Block malware & web attacks instantly
cPanel/WHM Optimized
Built for hosting servers
Lightweight & Fast
Minimal server resources
Easy Management
Clean and simple interface
Everything You Need to Keep Your Servers Secure
xPGuard combines multiple security layers to protect your cPanel servers from malware, web attacks, brute force attempts and malicious IPs — all from one easy-to-use dashboard.
IPDB Blocklist Stats
Top Countries by Attacks Blocked
Virus & Malware Scanner
Detect and remove threats
Firewall & WAF
Block malicious traffic
IP Reputation & IPDB
Block bad IPs instantly
Server Monitoring
CPU, memory, processes
CMS Threat Detection
WordPress, Joomla, OpenCart
Bot Attack Protection
Stop automated attacks
Outgoing Spam Monitor
Detect suspicious email
Domain Reputation
Check domain blocklist status
System Health
Monitor server performance
Easy Configuration
Simple and user-friendly
Virus Scanner Logs ⋮
CMS Threat Alerts ⋮
Firewall Logs Live
Detect. Block. Clean.
All from One Dashboard.
Monitor threats in real-time, scan for malware, block malicious IPs, protect your websites and keep your servers running smoothly.
- Real-time dashboard with live threat data
- Automatic malware scanning & cleanup
- Advanced firewall with IP reputation (IPDB)
- Detect outdated CMS, plugins and themes
- Detailed logs and reports
- Lightweight and optimized for cPanel/WHM
Choose Your Plan
Start with a free 30-day trial or upgrade for full protection. Save 25% with yearly billing.
30 Days Free Trial
Try every feature free
No payment needed
- 1 server
- 30 days, all features
- Real-time malware scanner
- Firewall & brute-force protection
- Web Application Firewall (WAF)
- IPDB IP reputation
View all features
- CMS threat detection
- No payment needed
- Real-time malware scanner (inotify) for every home directory
- Scheduled quick and full scans, path scans
- Surgical cleaning of injected code
- WordPress core file repair and hacked .htaccess cleanup
- Quarantine with one-click restore
- AI second opinion on suspicious files
- Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
- Country allow/deny lists and port rules
- CSF compatible
- ModSecurity WAF: OWASP CRS + xPGuard rule packages
- WordPress, WooCommerce and admin panel exclusions
- Automatic WAF false-positive protection
- Bad-bot blocker and CAPTCHA protection for login pages
- IPDB shared IP reputation and live attack map
- Tor exit node and high-risk IP blocking
- CMS threat detection: vulnerable plugins and themes
- Database malware scanner
- Exim mail protection: RBLs, Spamhaus DQS, phishing filter
- Outgoing spam detection
- Domain reputation (Google Safe Browsing, blocklists)
- Process and cron monitor (miners, reverse shells)
- Server monitoring: CPU, memory, disk, load, services
- Email and Telegram alerts
- cPanel and WHM plugins
- xgcli command line
- Mass operations across servers
- AI Connector (MCP) for your AI assistant
- Agent updates and new signatures included
Pro
Per server, everything included
or $59.88 $44.91 / year (25% OFF)
Discount applies to every renewal.
- Choose your number of servers
- Real-time malware scanner
- Firewall & brute-force protection
- Web Application Firewall (WAF)
- IPDB IP reputation
- CMS threat detection
View all features
- Mail protection
- Server monitoring & alerts
- AI scanner & AI connector
- Priority email support
- Real-time malware scanner (inotify) for every home directory
- Scheduled quick and full scans, path scans
- Surgical cleaning of injected code
- WordPress core file repair and hacked .htaccess cleanup
- Quarantine with one-click restore
- AI second opinion on suspicious files
- Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
- Country allow/deny lists and port rules
- CSF compatible
- ModSecurity WAF: OWASP CRS + xPGuard rule packages
- WordPress, WooCommerce and admin panel exclusions
- Automatic WAF false-positive protection
- Bad-bot blocker and CAPTCHA protection for login pages
- IPDB shared IP reputation and live attack map
- Tor exit node and high-risk IP blocking
- CMS threat detection: vulnerable plugins and themes
- Database malware scanner
- Exim mail protection: RBLs, Spamhaus DQS, phishing filter
- Outgoing spam detection
- Domain reputation (Google Safe Browsing, blocklists)
- Process and cron monitor (miners, reverse shells)
- Server monitoring: CPU, memory, disk, load, services
- Email and Telegram alerts
- cPanel and WHM plugins
- xgcli command line
- Mass operations across servers
- AI Connector (MCP) for your AI assistant
- Agent updates and new signatures included
Business Bundle
10 servers at a bundle price
or $359.28 $269.46 / year (25% OFF)
$49.90 for 10 single licences · 40% OFF
Discount applies to every renewal.
- 10 server licences, 40% off
- Everything in Pro
- Mass operations across servers
- Team members & roles
- Priority support (4 h urgent)
View all features
- Real-time malware scanner (inotify) for every home directory
- Scheduled quick and full scans, path scans
- Surgical cleaning of injected code
- WordPress core file repair and hacked .htaccess cleanup
- Quarantine with one-click restore
- AI second opinion on suspicious files
- Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
- Country allow/deny lists and port rules
- CSF compatible
- ModSecurity WAF: OWASP CRS + xPGuard rule packages
- WordPress, WooCommerce and admin panel exclusions
- Automatic WAF false-positive protection
- Bad-bot blocker and CAPTCHA protection for login pages
- IPDB shared IP reputation and live attack map
- Tor exit node and high-risk IP blocking
- CMS threat detection: vulnerable plugins and themes
- Database malware scanner
- Exim mail protection: RBLs, Spamhaus DQS, phishing filter
- Outgoing spam detection
- Domain reputation (Google Safe Browsing, blocklists)
- Process and cron monitor (miners, reverse shells)
- Server monitoring: CPU, memory, disk, load, services
- Email and Telegram alerts
- cPanel and WHM plugins
- xgcli command line
- Mass operations across servers
- AI Connector (MCP) for your AI assistant
- Agent updates and new signatures included
Prices in US dollars. Pay with crypto (instant activation) or bank transfer. Compare plans →
Have Questions? We Have Answers
Find quick answers to common questions about xPGuard.