Self-hosted · No vendor lock-in · Full control

Your server,
your rules.

ShadowPanel is the professional self-hosted hosting control panel built for developers and agencies. Deploy, manage, and scale websites without paying per-server fees — forever.

No monthly per-server fees Runs on your own VPS Cancel anytime
app.shadowpanel.de
ShadowPanel dashboard showing site management with disk usage, bandwidth, RAM and requests metrics alongside PHP, database, SSL and email module cards
€0
Per-server fees
100%
Self-hosted
Multi-PHP
7.4 → 8.4 support
4 Distros
Ubuntu · Debian · CentOS · Fedora
Interface

Dark or light — your call.

ShadowPanel ships with a fully polished dark and light theme. Switch with one click. Drag the slider to compare both modes.

app.shadowpanel.de:2087
/

Drag the slider to compare

One panel to run your entire hosting stack

From multi-PHP to Docker containers, ShadowPanel gives you full control of your server without the complexity.

Git Deploy

Push to your repo and ShadowPanel automatically pulls, builds, and deploys your site. Zero-downtime deploys with instant rollback to any previous commit.

Terminal — git push → auto-deploy
$ git push origin main
Enumerating objects: 14, done.
Pulling latest on app.shadowpanel.de…
Running composer install…
Reloading PHP-FPM worker…
Deployed to example.com in 4.2s
PHP

Multi-PHP (7.4 – 8.4)

Run multiple PHP versions in parallel. Switch any site to a different version in one click — no server restarts, no conflicts.

Per-site version selector
7.4 8.0 8.1 8.3 ✓ 8.4
SSL

Free SSL (Let's Encrypt)

Auto-provisioned and auto-renewed certificates for every domain and subdomain. Wildcard SSL included — zero manual steps ever.

example.com Valid ✓
Let's Encrypt · Auto-renews in 72 days
Docker

Docker Support

Run containerised apps alongside traditional PHP sites. Full Docker Compose support with port mapping and volume management.

nginx:latest Running
mysql:8.0 Running
redis:alpine Stopped
Nginx

Nginx Web Server

Every site is served by tuned Nginx with HTTP/2, Gzip and smart caching, plus reverse-proxy support for Node apps — and the full vhost config stays editable right in the panel.

Tuned per site
HTTP/2 Gzip Reverse proxy Custom config
Backups

Automated Backups

Daily off-site backups with one-click restore. S3-compatible storage with configurable retention (up to 30 restore points).

Restore points ● 14 available
Today 03:00
Yesterday
2 days ago
DNS

DNS Management

Full-featured DNS manager with A, CNAME, MX, TXT, and SRV records. Built-in propagation checker, TTL control, and one-click presets for popular services like Google Workspace and Cloudflare.

TypeNameValue
A example.com 192.168.1.1
CNAME www example.com
MX @ mail.example.com
TXT @ v=spf1 include:…
Email

Email Hosting

Create unlimited mailboxes per domain. Full IMAP/SMTP access, webmail, and catch-all routing included.

J
john@example.com
New order confirmed ✓
S
support@example.com
Ticket #142 resolved
Unlimited mailboxes · IMAP/SMTP · Webmail
File Manager

File Manager

Browser-based file manager with drag-and-drop upload, code editor, permissions, and archive extraction — no FTP client needed.

public_html/
index.php 4.2 KB
assets/
wp-content/
SEO Toolkit

SEO Toolkit

Optimize every site without leaving the panel — edit robots.txt, generate XML sitemaps, manage 301/302 redirects and scan live page metadata.

Built-in tools
robots.txt Sitemap Redirects Meta scan
1-Click Install

1-Click Install

Deploy WordPress, Laravel, Joomla, Drupal, Ghost and more in seconds — the installer sets up the database, files and configuration for you.

Popular apps, ready to go
WordPress
Laravel
Joomla
Drupal
Ghost
PrestaShop
OpenCart
White Label
Agency plan

White Label Branding

Deploy the panel under your own brand — custom domain, logo, and colors. Your clients never see "ShadowPanel". Includes reseller accounts, SEO toolkit, and 1-click app installer.

Custom domain Your logo & colors Reseller accounts SEO toolkit 1-click apps Dedicated support
panel.youragency.com
YB
YourBrand Panel
Sites
47
Clients
12
MRR
€2.4k
Multi-Server
Agency plan

Multi-Server Management

Enroll unlimited remote servers and manage every client site from one panel. Sites, PHP, MySQL, SSL, backups, and cron stay on the site's own server — mail and DNS stay central. Each server connects over a pinned, key-based SSH tunnel to its own daemon, so no new ports or credentials to manage.

One-line server enrollment Pinned SSH host keys Per-server metrics & alerts Central mail & DNS
ShadowPanel ShadowPanel
de-fra-01 online
us-nyc-02 online
sg-sin-01 idle
SSH

SSH Access

Give any site a full interactive SSH shell on its own dedicated port — beyond SFTP — with keys and access managed right in the panel.

Secure by default
SSH shell Dedicated port Key auth SFTP

Works with your existing stack

A team using the ShadowPanel dashboard on a desktop workstation in an office

One flat license. Zero per-server charges.

Install on as many servers as you own. You only pay for the license, not per site or server.

Free

€0 forever

Up to 3 sites

  • Multi-PHP support
  • Free SSL certificates
  • File manager
  • Basic backups
  • Email hosting
  • Community support
Start free
Most popular

Pro Solo

€9 /mo

Up to 10 sites

  • Everything in Free
  • Git deploy
  • Docker support
  • Automated backups
  • Advanced DNS management
  • Priority support
Get Pro Solo

Agency

€29 /mo

Unlimited sites

  • Everything in Pro
  • Unlimited sites
  • Multi-server management
  • White label branding
  • Reseller accounts
  • SEO toolkit
  • 1-click app installer
  • Dedicated support
Get Agency

All plans include free SSL, automatic security patches, and access to the community forum. Compare full features →

Common questions

ShadowPanel is a self-hosted web hosting control panel. Install it once on your own VPS and get a professional interface to manage websites, PHP versions, SSL certificates, databases, DNS zones, email accounts, backups, cron jobs, and more — with no recurring per-server or per-site fees beyond your license.
ShadowPanel runs entirely on your own infrastructure with no phone-home licensing on every request and no fees that scale against you as you grow. It ships a modern React interface instead of legacy UIs, uses Nginx + PHP-FPM with per-site isolation out of the box, and is designed around the features developers and agencies actually use day to day.
The Free plan lets you manage up to 3 websites with full Nginx + PHP-FPM configuration, automatic Let's Encrypt SSL, MySQL/MariaDB databases, email accounts, file manager, DNS management, and cron jobs. No credit card required — install and start immediately.
Ubuntu 22.04 LTS and Ubuntu 24.04 LTS on x86_64 (amd64) are officially supported. The one-command installer sets up everything from scratch. A fresh VPS is strongly recommended — the installer configures Nginx, PHP-FPM, MariaDB, Redis, and more.
When a new version is available, an amber banner appears in the panel. Admins can trigger the update with one click — no SSH required. The update script downloads the new release, rebuilds the app, runs database migrations, and restarts services. All hosted sites stay online throughout.
There is no automated migration wizard yet. You can manually re-create sites through the panel and restore databases via the built-in database manager. SSL certificates are re-issued automatically by Let's Encrypt when you add a domain. Automated migration tooling is planned for a future release.
Yes — the Agency plan includes white-label branding (custom panel name and logo), reseller sub-accounts with isolated client access, staging environments, and unlimited sites. Your clients see your brand, not ours.
Your panel keeps running until the end of your billing period. After expiry the license deactivates and the panel reverts to the Free tier (3-site limit). All existing sites, files, databases, SSL certificates, and DNS zones remain completely intact on your server — nothing is deleted.
ShadowPanel uses Certbot with Let's Encrypt to issue and renew certificates automatically. A background job checks for expiring certificates every 24 hours and renews anything within 30 days of expiry. You can also issue, revoke, or force-renew certificates manually from the site dashboard at any time.
ShadowPanel is proprietary software distributed as compiled binaries. Your data and server infrastructure are entirely yours — we only provide the software license. The panel never sends your hosted site data or file contents to our servers.

Built in the open. Shipping fast.

Here's what's live, what's in progress, and what's coming next.

Shipped

Available now — v0.9

  • Multi-PHP 7.4–8.4 with per-site isolation
  • Git deploy + staging environments
  • Free SSL incl. wildcards — auto-renewed
  • Docker containers & Compose support
  • Automated backups with GPG encryption
  • DNS + email hosting with DKIM, SPF & DMARC
  • Resource monitoring with threshold alerts
  • WordPress Toolkit — core, plugins & themes
  • cPanel & Plesk migration importer
  • Uptime monitoring + public status pages
  • Web firewall (ModSecurity) + Fail2ban & CrowdSec
  • Malware scanning with quarantine
  • Node.js app hosting + web terminal
  • Two-factor auth, white-label & reseller
  • Multi-server management for agencies
  • SSH shell access with per-site ports
  • Maintenance-mode page templates
In progress

Coming next

  • More 1-click installers (WooCommerce, Nextcloud, Ghost…)
  • PHP 8.5 support
  • Per-site team access — invite developers & clients as collaborators
Planned

On the horizon

  • Full REST API — manage everything programmatically
  • Custom notification channels — Slack, Discord, Telegram

Ready to take control of your hosting?

Self-host without compromise — own your data and your infrastructure. Start free, upgrade when you're ready.

We use cookies

We use cookies to improve your experience and remember your preferences. You can manage your choices below. Learn more.

ShadowPanel

Manage your cookie preferences below. Essential cookies are always active as they are required for the website to function.

Essential

Required for the site to work. These include session authentication and CSRF protection. Cannot be disabled.

Always on

Functional

Remembers your language preference so you do not need to reselect it on every visit.

Analytics

Helps us understand how visitors use the site so we can improve it. No personal data is sold.

Marketing

Used by Google Ads to measure ad conversions and improve campaign targeting. No personal data is sold.