An IOVA LTD product

Pano

The server panel that doesn’t eat the server.

Pano runs Next.js, Node.js and Bun apps, PHP sites and databases on your own Linux server. It is one self-contained binary: it deploys from git, gets HTTPS on its own and keeps itself patched.

Ask for access Compare panels

What Pano does

A hosting panel is the one program every site on the server depends on. Pano is built to be the easiest one to run and the hardest one to break.

  • One binaryTypeScript on Bun, shipped as one file. No Docker, no Python, no licence server. PHP, databases and extras are installed only when asked.
  • Never publicThe panel listens on 127.0.0.1 or a private tunnel address. You open it over SSH or your own WireGuard network.
  • Keeps itself patchedOS security updates daily, PHP patch releases nightly, and a nightly vulnerability scan of every app and site.
01 · Apps

Push to git. Health check. Then traffic.

Next.js, Node.js and Bun, monorepos included. A push builds in a sandbox, starts the new release beside the old one, waits for the health check and only then switches traffic. The previous release stays on disk, so rollback takes seconds and needs no rebuild.

  • Push-to-deploy from GitHub, GitLab, Gitea and Forgejo
  • Preview deploys per branch, linked on the pull request
  • Any Node.js or Bun version, pinned per app

Illustration with sample data.

02 · PHP and WordPress

Every PHP site in a pool of its own

PHP 7.4 to 8.5, installed on first use. Each site gets its own system user and its own PHP-FPM pool that never runs as root, with open_basedir and dangerous functions off. The edge never serves dotfiles, backups or PHP hidden in uploads.

  • WordPress install, updates, maintenance mode and password reset
  • Patch releases arrive with OS updates
  • MariaDB, PostgreSQL and Valkey on demand

Illustration with sample data.

03 · Backups

Backups the storage can’t read

Archives are encrypted with AES-256-GCM on the server before upload, or sent as incremental restic backups. Send them to one or two stores at once. Mark a store as protected and Pano never deletes from it, so a stolen server cannot wipe its own backups.

  • Cloudflare R2, Backblaze B2, Hetzner, Wasabi, AWS S3, MinIO
  • Every new database and app gets a daily backup job
  • A one-line recovery kit rebuilds the server elsewhere

Illustration with sample data.

04 · Security

2FA where it counts, checks that run on their own

The web UI runs unprivileged and can only ask the root agent for a fixed list of typed operations. Login needs a TOTP code, and the agent itself checks a fresh code before secrets are shown, code changes or data is dropped, so even a compromised UI cannot read secrets.

  • Malware scanner for web shells, droppers and SEO spam, with quarantine
  • Spamhaus DROP and botnet lists blocked in nftables
  • WordPress login floods dropped in the kernel

Illustration with sample data.

05 · Moving in

Move in from cPanel or CyberPanel

Import a cPanel full backup: each domain becomes a PHP site, databases load under their own user, and users keep their original password hashes. From CyberPanel, scan the live server and move sites one by one while the old panel keeps serving. Cutover has a one-click rollback.

  • Mail, cron, DNS and FTP are listed for manual follow-up
  • Running Node apps are picked up first, then moved to managed deploys

Illustration with sample data.

Pano next to the other panels

cPanel, Plesk, CyberPanel and HestiaCP are full hosting suites, CloudPanel is a free site panel and Coolify is a container platform. Four things to compare first.

As of November 2026

Licence cost for a year

Cheapest listed plan for one server, times twelve months.

  • PanoFree
  • CloudPanelFree
  • HestiaCPFree
  • CoolifyFree, self-hosted
  • CyberPanelFree core, add-ons $59
  • Plesk€144
  • cPanel$330

Memory it asks for

Official minimum RAM. Pano publishes none, so its bar is the panel’s measured use.

  • Pano≈ 130 MB
  • Plesk1 GB + swap
  • CyberPanel1 GB
  • HestiaCP1 GB
  • cPanel2 GB
  • CloudPanel2 GB
  • Coolify2 GB

Open source

A licence that lets you read, change and keep the code.

  • Yes: PanoMIT
  • Yes: CyberPanelGPLv3
  • Yes: HestiaCPGPLv3
  • Yes: CoolifyApache-2.0
  • No: CloudPanelno licence stated
  • No: cPanelcommercial
  • No: Pleskcommercial

Email hosting built in

Where Pano says no on purpose: mail stays with a mail provider.

  • No: Panoby design
  • No: CloudPanelby design
  • No: Coolifynot listed
  • Yes: cPanel
  • Yes: Plesk
  • Yes: CyberPanel
  • Yes: HestiaCP

cPanel $27.46 a month billed yearly, excl. VAT; Plesk €12.04 a month (VPS, 10 domains). Pano’s ≈ 130 MB is web UI, agent and web server measured in its test VM. Pano’s public repository is coming.

See full details
Prices, licences, systems and minimums from each vendor’s official site, checked 3 November 2026. Prices are as listed (cPanel excludes VAT) and change; check before you buy. Pano figures come from its own repository and test VM.
PanelMade forPriceOpen sourceOSRAM (official minimum)SecurityAI and automation
Panoby IOVA LTD Node.js, Next.js and Bun apps with git deploys, plus PHP and WordPress sites. No email or DNS hosting. Free Yes, MIT. Public repository coming AlmaLinux / Rocky 9, Debian, Ubuntu; x86-64 and arm64 No minimum published; panel and edge measured at about 90–130 MB Panel never public, agent-enforced 2FA, per-site sandboxes, malware scanner, IP reputation, CVE scan with auto-patching No AI assistant. CLI, push-to-deploy, Telegram alerts, remote runner for coding agents
cPanel & WHM Full web hosting suite: email, DNS, WordPress tools, many accounts $29.99/mo (1 account) to $69.99/mo (100 accounts), cloud/VPS No, commercial AlmaLinux 8–10, CloudLinux, Rocky Linux, Ubuntu 24.04; x86-64 2 GB (4 GB recommended) cPHulk brute-force protection, host access control; Imunify360 as a paid add-on AI Assistant, MCP, AI app hosting; WHM API and API tokens
Plesk Hosting suite: email, DNS, WP Toolkit, Node.js, Python, Git, Docker, resellers €12.04/mo (10 domains) to €31.38/mo (unlimited), VPS licence No, commercial Ubuntu, Debian, AlmaLinux, Rocky, RHEL, CloudLinux; Windows Server edition too 1 GB plus 1 GB swap ModSecurity, fail2ban; ImunifyAV and more as extensions AI Support Assistant, MCP (off by default); REST API, CLI
CyberPanel OpenLiteSpeed hosting: email, DNS, FTP, WordPress manager, Docker manager Free core; add-on bundle $59/yr or $169 lifetime Yes, GPLv3 Ubuntu 20.04–24.04, AlmaLinux 8–10, Rocky, RHEL, CloudLinux 8; x86-64 1 GB CSF / FirewallD, 2FA, Imunify support, SpamAssassin AI security scanner, API, one-click n8n
CloudPanel PHP, Node.js, Python and static sites on NGINX with Varnish Free No open-source licence stated Ubuntu 22.04–26.04, Debian 12–13; x86 and ARM 2 GB Firewall, IP and bot blocking, basic auth, Cloudflare-only mode CLI (clpctl); no AI listed
HestiaCP Hosting suite: email, DNS, FTP, multi-PHP on Apache or NGINX Free, donation-funded Yes, GPLv3 Debian 12–13, Ubuntu 22.04–26.04; amd64 and arm64 1 GB (4 GB recommended) Firewall, Fail2Ban, ClamAV, SpamAssassin REST API, CLI; no AI listed
Coolify Docker-based app platform: git deploys, PR previews, databases, one-click services, many servers Free self-hosted; Cloud from $5/mo (2 servers) Yes, Apache-2.0 Most 64-bit Linux with Docker 24+; amd64 and arm64 2 GB, 2 CPU cores Firewall guidance, scoped API tokens API, CLI, MCP

Sources: cpanel.net/pricing, cPanel requirements, cpanel.net/ai · plesk.com/pricing, Plesk requirements · cyberpanel.net, CyberPanel on GitHub · cloudpanel.io, CloudPanel e-mail · hestiacp.com · coolify.io/pricing, Coolify install.

Why switch to Pano

  • Built for modern appsGit push, sandboxed build, health check, then traffic. Rollback is instant because the last release is still on disk. Branch previews come with it.
  • Small on purposeOne binary with no Docker or Python. The UI idles around 7 MB, and PHP, databases and extras arrive only when a site needs them.
  • Security without add-onsPrivate panel, 2FA checked by the root agent, isolated sites, malware scanning, IP reputation and nightly patching, with no extra licence to buy.
  • Easy to move in, hard to loseImports cPanel backups and live CyberPanel servers. Backups are encrypted before they leave the server, and a recovery kit rebuilds it elsewhere.

When another panel fits better

Pano doesn’t host email or run a DNS server, has no resellers, client accounts or billing, and manages one server per panel. It has no file manager or per-site SFTP users yet. If you need those, cPanel, Plesk, CyberPanel or HestiaCP cover them. If you want containers across many servers, look at Coolify.

Pano is a young project, tested end to end in virtual machines.

Run your servers on Pano.

Pano is in early access. Tell us about your servers and what runs on them, and we’ll help you move in. Pano is an IOVA LTD product.

Ask for access Email us