xPGuard
All-in-One cPanel Server Security

Protect Your Servers Before Threats Become Problems

xPGuard is a powerful server security and monitoring solution designed for cPanel/WHM servers. Detect, block and remove malware, stop web attacks and keep your servers safe 24/7.

  • Easy to Install
  • Works on cPanel/WHM
  • Lightweight & Fast

Real-Time Protection

Block malware & web attacks instantly

cPanel/WHM Optimized

Built for hosting servers

Lightweight & Fast

Minimal server resources

Easy Management

Clean and simple interface

Powerful Features

Everything You Need to Keep Your Servers Secure

xPGuard combines multiple security layers to protect your cPanel servers from malware, web attacks, brute force attempts and malicious IPs — all from one easy-to-use dashboard.

IPDB Blocklist Stats

World map of attacks blocked by country
Top Countries by Attacks Blocked
🇺🇸United States536,658
🇨🇳China508,524
🇷🇺Russia505,382
🇮🇳India484,674
🇫🇷France368,524

Virus Scanner Logs ⋮

wp-recovery.php/home/shop/public_htmlBackdoorQuarantined
form.php/home/blog/public_htmlClean 99%Restored by AI
units.php/home/news/public_htmlInjectedCleaned
.htaccess/home/demo/public_htmlPHP lockCleaned

CMS Threat Alerts ⋮

shop-example.comWooCommerce 8.2.1Critical
medical-supplies.exampleElementor Pro 3.11Critical
travel-blog.exampleContact Form 7High
bakery.exampleWordPress 6.2Outdated

Firewall Logs Live

🇳🇱 198.51.100.3115 WAF blockedBlocked
🇺🇸 203.0.113.212DoS: more than 150 conn.Blocked
🇨🇳 192.0.2.555 failed cPanel loginsBlocked
🇷🇺 198.51.100.155IPDB high riskBlocked
Live Protection

Detect. Block. Clean.
All from One Dashboard.

Monitor threats in real-time, scan for malware, block malicious IPs, protect your websites and keep your servers running smoothly.

  • Real-time dashboard with live threat data
  • Automatic malware scanning & cleanup
  • Advanced firewall with IP reputation (IPDB)
  • Detect outdated CMS, plugins and themes
  • Detailed logs and reports
  • Lightweight and optimized for cPanel/WHM
View All Screenshots
Simple Pricing

Choose Your Plan

Start with a free 30-day trial or upgrade for full protection. Save 25% with yearly billing.

Get Started Free

30 Days Free Trial

Try every feature free

$0

No payment needed

  • 1 server
  • 30 days, all features
  • Real-time malware scanner
  • Firewall & brute-force protection
  • Web Application Firewall (WAF)
  • IPDB IP reputation
View all features
  • CMS threat detection
  • No payment needed
  • Real-time malware scanner (inotify) for every home directory
  • Scheduled quick and full scans, path scans
  • Surgical cleaning of injected code
  • WordPress core file repair and hacked .htaccess cleanup
  • Quarantine with one-click restore
  • AI second opinion on suspicious files
  • Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
  • Country allow/deny lists and port rules
  • CSF compatible
  • ModSecurity WAF: OWASP CRS + xPGuard rule packages
  • WordPress, WooCommerce and admin panel exclusions
  • Automatic WAF false-positive protection
  • Bad-bot blocker and CAPTCHA protection for login pages
  • IPDB shared IP reputation and live attack map
  • Tor exit node and high-risk IP blocking
  • CMS threat detection: vulnerable plugins and themes
  • Database malware scanner
  • Exim mail protection: RBLs, Spamhaus DQS, phishing filter
  • Outgoing spam detection
  • Domain reputation (Google Safe Browsing, blocklists)
  • Process and cron monitor (miners, reverse shells)
  • Server monitoring: CPU, memory, disk, load, services
  • Email and Telegram alerts
  • cPanel and WHM plugins
  • xgcli command line
  • Mass operations across servers
  • AI Connector (MCP) for your AI assistant
  • Agent updates and new signatures included
Start Free Trial
Most Popular

Pro

Per server, everything included

$4.99 / month

or $59.88 $44.91 / year (25% OFF)

Discount applies to every renewal.

  • Choose your number of servers
  • Real-time malware scanner
  • Firewall & brute-force protection
  • Web Application Firewall (WAF)
  • IPDB IP reputation
  • CMS threat detection
View all features
  • Mail protection
  • Server monitoring & alerts
  • AI scanner & AI connector
  • Priority email support
  • Real-time malware scanner (inotify) for every home directory
  • Scheduled quick and full scans, path scans
  • Surgical cleaning of injected code
  • WordPress core file repair and hacked .htaccess cleanup
  • Quarantine with one-click restore
  • AI second opinion on suspicious files
  • Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
  • Country allow/deny lists and port rules
  • CSF compatible
  • ModSecurity WAF: OWASP CRS + xPGuard rule packages
  • WordPress, WooCommerce and admin panel exclusions
  • Automatic WAF false-positive protection
  • Bad-bot blocker and CAPTCHA protection for login pages
  • IPDB shared IP reputation and live attack map
  • Tor exit node and high-risk IP blocking
  • CMS threat detection: vulnerable plugins and themes
  • Database malware scanner
  • Exim mail protection: RBLs, Spamhaus DQS, phishing filter
  • Outgoing spam detection
  • Domain reputation (Google Safe Browsing, blocklists)
  • Process and cron monitor (miners, reverse shells)
  • Server monitoring: CPU, memory, disk, load, services
  • Email and Telegram alerts
  • cPanel and WHM plugins
  • xgcli command line
  • Mass operations across servers
  • AI Connector (MCP) for your AI assistant
  • Agent updates and new signatures included
Get Started
40% OFF

Business Bundle

10 servers at a bundle price

$29.94 / month

or $359.28 $269.46 / year (25% OFF)

$49.90 for 10 single licences · 40% OFF

Discount applies to every renewal.

  • 10 server licences, 40% off
  • Everything in Pro
  • Mass operations across servers
  • Team members & roles
  • Priority support (4 h urgent)
View all features
  • Real-time malware scanner (inotify) for every home directory
  • Scheduled quick and full scans, path scans
  • Surgical cleaning of injected code
  • WordPress core file repair and hacked .htaccess cleanup
  • Quarantine with one-click restore
  • AI second opinion on suspicious files
  • Firewall with automatic brute-force bans (SSH, FTP, mail, cPanel, WordPress)
  • Country allow/deny lists and port rules
  • CSF compatible
  • ModSecurity WAF: OWASP CRS + xPGuard rule packages
  • WordPress, WooCommerce and admin panel exclusions
  • Automatic WAF false-positive protection
  • Bad-bot blocker and CAPTCHA protection for login pages
  • IPDB shared IP reputation and live attack map
  • Tor exit node and high-risk IP blocking
  • CMS threat detection: vulnerable plugins and themes
  • Database malware scanner
  • Exim mail protection: RBLs, Spamhaus DQS, phishing filter
  • Outgoing spam detection
  • Domain reputation (Google Safe Browsing, blocklists)
  • Process and cron monitor (miners, reverse shells)
  • Server monitoring: CPU, memory, disk, load, services
  • Email and Telegram alerts
  • cPanel and WHM plugins
  • xgcli command line
  • Mass operations across servers
  • AI Connector (MCP) for your AI assistant
  • Agent updates and new signatures included
Choose Bundle

Prices in US dollars. Pay with crypto (instant activation) or bank transfer. Compare plans →

Frequently Asked Questions

Have Questions? We Have Answers

Find quick answers to common questions about xPGuard.

View All FAQs
What is xPGuard?
xPGuard is a server security platform for cPanel/WHM and Linux servers: a lightweight agent on each server and one cloud control panel for malware scanning, firewall, WAF, IP reputation, CMS security and monitoring.
Which operating systems are supported?
AlmaLinux, CloudLinux, Rocky Linux, RHEL, Ubuntu and Debian on x86_64 or ARM64 with systemd. cPanel & WHM get full support including the WHM and cPanel plugins. See Supported Systems for details.
How do I install xPGuard?
Sign in to the control panel, open Add Server and run the one-line command it shows as root. The server appears in your panel within a minute. No inbound port is needed.
Is there a free trial?
Yes. Each free trial covers one server for 30 days with every feature, no payment needed. An account can start up to 3 trials (one per server), and each server can have only one free trial.
How does yearly billing work?
Pay for a year in advance and save 25% compared with monthly billing. The discount is recurring: every yearly renewal keeps the same price. You can add servers at any time; they are charged pro rata until your period ends.
What happens when I reach my server limit?
The control panel stops creating new install tokens and shows a button to buy more server licences. Your existing servers keep working.
Which payment methods do you accept?
Cryptocurrency through Cryptomus (USDT, BTC, ETH, LTC and more) with instant automatic activation, and bank transfer, activated after we confirm the payment.
Will xPGuard slow down my server?
No. The agent uses little memory, scans at low priority and slows down automatically when the server is busy.

Ready to Secure Your Servers?

Join server administrators who trust xPGuard for proactive server security.