Real fixes for the problems hosting servers actually have
Hacked sites, outbound spam, brute-force floods, noisy WAF rules, surprise outages and end-of-life ConfigServer tools. Pick the problem below and see which MEGAwit product, or custom development service, solves it.
5
Shield, Postmaster, Firewall, Guardian, Monitor
3
cPanel/WHM, Plesk & DirectAdmin
Unlimited
One license per server
15 days
On first install, one-line installer
Web hosting servers on cPanel/WHM, Plesk & DirectAdmin
Run the whole stack from one vendor: the MegaWit Suite bundles all five products under one license key with priority support. Every product is licensed per server, covers unlimited accounts and installs with the same one-line installer.
New DirectAdmin support for all five products
Same installer, admin plugin under Admin Level › Extra Features, plus a per-account end-user page for every DirectAdmin user (Shield, Postmaster, Guardian). End-user dashboards are now on Plesk too.
- Lives inside the panel: WHM › Plugins, Plesk Extensions, DirectAdmin Extra Features
- CentOS 7+, CloudLinux, AlmaLinux, Rocky, Ubuntu & Debian
- Automatic agent & signature updates, no vendor cloud lock-in, multi-language dashboards
| Product | cPanel | Plesk | DirectAdmin NEW |
|---|---|---|---|
| Shield | ✓ | ✓* | ✓ |
| Postmaster | ✓ Exim | ✓ Postfix | ✓ Exim |
| Firewall | ✓ | ✓ | ✓ |
| Guardian | ✓ | ✓ | ✓ |
| Monitor | ✓ | ✓ | ✓ |
* Shield Proactive Defense is not available on Plesk.
$ curl -fsSL https://install.megawit.com/install.sh | sh
One installer: cPanel/WHM · Plesk · DirectAdmin
Solution 02 · Malware & compromised sites
Clean up hacked sites, and keep them clean
MegaWit Shield scans files as they are written, disinfects or quarantines what it finds and can restore from backup. Pair it with Guardian's virtual-patching rule packs to block the exploit that got the site hacked in the first place.
- Real-time (on-access) scanning, plus Proactive Defense that blocks malware at runtime
- WordPress core repair, database malware scanning and plugin/theme vulnerability scan
- Upload-time blocking via ModSecurity, IP & domain reputation (blacklists / Safe Browsing)
- Modern alternative to cxs (end-of-life 31 Aug 2025) and Imunify360
[on-access] /home/acct1/public_html/wp-content/uploads/cache.php
↳ YARA: PHP webshell · quarantined
[wp-core] acct2/example.org · 3 modified core files · repaired
[database] acct2 wp_options · injected script · cleaned
[vuln] acct3 · outdated plugin with known vulnerability · flagged
[restore] acct1 index.php restored from backup
Exploit request for vulnerable plugin endpoint blocked before PHP runs.
Solution 03 · Outbound spam & deliverability
Stop outbound spam before your IP lands on a blacklist
MegaWit Postmaster detects outbound spam, enforces hard per-account sending limits and scans outbound content to pinpoint the PHP script that is sending it. Fix SPF, DKIM and DMARC in one click and watch your server IP reputation.
- Advanced Exim mail-queue manager, inbound anti-spam & anti-virus
- Server IP reputation (RBL & PTR), choose the outbound sending IP, 7-day traffic analytics
- End users get their own spam folder, quarantine, allow/block lists & digest
- Modern alternative to ConfigServer Mail Queues (cmq) and MailScanner Front-End
| Sender | Queued | Status |
|---|---|---|
| [email protected] | 412 | limit hit · sending paused |
| [email protected] | 3 | deferred · retrying |
| [email protected] | 1 | frozen |
[outbound scan] spam source found
/home/acct3/public_html/wp-includes/mailer.php
Solution 04 · Brute-force & network attacks
Shut down brute-force attacks, and move off csf safely
MegaWit Firewall watches SSH, mail, Exim, cPanel, DirectAdmin and FTP logins and bans attackers automatically on an iptables/ipset engine. Run it next to csf, or replace csf with a one-command migration.
- Allow, deny and ignore lists for IPv4 & IPv6
- Auto-expiring temporary bans and permanent bans
- Safe by design: it never locks you out of SSH
- Modern alternative to ConfigServer Security & Firewall (csf + lfd)
| IP | Trigger | Ban |
|---|---|---|
| 203.0.113.24 | SSH failed logins | temporary · expires 1h |
| 198.51.100.7 | Exim auth failures | temporary · expires 1h |
| 192.0.2.150 | cPanel login | permanent |
| 2001:db8::5 | FTP failed logins | temporary |
mwf import-csf
✓ allow / deny / ignore lists imported
✓ admin SSH IP kept on allow list
Solution 05 · WAF & web attacks
Tame ModSecurity false positives without dropping protection
MegaWit Guardian manages your panel's ModSecurity: explore WAF hits, let the tuning advisor separate false positives from real attacks, and disable a rule for one domain instead of the whole server.
- One-click ModSecurity install, WAF hit explorer and attack analytics
- Per-domain rule disable, allowlist & custom rules; one-click & automatic attacker blocking
- Auto-updated MegaWit virtual-patching rule packs, weekly report, end-user WAF view
- Modern alternative to ConfigServer ModSecurity Control (cmc)
POST /wp-admin/admin-ajax.php · same rule, many normal visitors
→ Suggested: disable rule for this domain + path
SQL injection and path traversal probes
→ Attacker blocked automatically
Solution 06 · Uptime, capacity & alerting
Know about the problem before your customers do
MegaWit Monitor gives every server a health score, 30-day trends and an incident timeline, and pages the right people when disks fill, certificates expire, sites go down or backups go stale.
- CPU breakdown (I/O-wait, steal, per-core), disk I/O, SMART, network; per-account CPU/RAM
- Website uptime (p95), TCP ports, SSL expiry + chain + DNS, backup freshness, disk-fill ETA
- Security signals: failed SSH + attacker IPs, open-port audit, root logins, RBL
- Maintenance windows, escalation and a public status page
disk-fill ETA /home~12 days
SSL expiry shop.example.com9 days
backup freshnessok · last night
MySQL healthok
Alert channels
Moving off ConfigServer tools
ConfigServer eXploit Scanner (cxs) reached end-of-life on 31 Aug 2025. If your servers still depend on cxs, csf, cmq or cmc, each one has a modern MEGAwit replacement that runs on cPanel/WHM, Plesk and DirectAdmin.
Firewall can coexist with csf while you test, then take over with a one-command csf migration. Every product starts with a 15-day free trial on first install.
| Old tool | MEGAwit replacement | Comparison |
|---|---|---|
| cxs eXploit Scanner · EOL 31 Aug 2025 | MegaWit Shield | cxs alternatives |
| csf + lfd Security & Firewall | MegaWit Firewall | csf alternatives |
| cmq Mail Queues (also replaces MSFE) | MegaWit Postmaster | cmq alternatives |
| cmc ModSecurity Control | MegaWit Guardian | cmc alternatives |
Want all four replacements plus Monitor? The MegaWit Suite covers them under one license key.
Need something built? We do that too.
The team behind five server products and our own SaaS brands builds custom software for clients: control-panel plugins, store and CMS customisation, SaaS platforms, APIs and internal tools.
Hosting & panel engineering
cPanel/WHM, Plesk & DirectAdmin plugins and automation
eCommerce
Customise and personalise store platforms
CMS add-ons
Plugins, automation and deployment
SaaS products
Subscriptions, multi-tenancy, billing, onboarding
Backend & APIs
REST/WebSocket, JWT auth, rate limiting, caching, DB design
Frontend & integrations
React/Next.js, TypeScript, browser extensions, internal tools
Found your problem? Start fixing it today.
One line installs any MEGAwit product on cPanel/WHM, Plesk or DirectAdmin. Not sure which one you need? Tell us about your servers.
$ curl -fsSL https://install.megawit.com/install.sh | sh
- One license per server
- Unlimited accounts
- No vendor cloud lock-in