Senior administrators respond to every alert from our monitoring and every ticket you open, watching your cPanel and WHM servers continuously and keeping them hardened and patched against the attacks hosting servers attract. When an account is hacked or a service crashes, we perform disaster recovery and get you back online quickly. Server Surgeon has maintained cPanel and WHM servers at hosting scale since 2005.
$65USD / server / month
Save 20% when purchasing for five or more servers · and up to 15% more with prepay discounts · full pricing →
Everything your cPanel/WHM servers need, managed for you
Most cPanel server management happens in WHM and at the SSH command line, not in cPanel: reseller accounts and packages, AutoSSL across every domain, EasyApache and per-account PHP, and the one account that pins the CPU at the worst moment. Server Surgeon has managed cPanel and WHM on production hosting servers since 2005, and we keep the underlying server fast and secure. Urgent tickets reach a senior administrator in 5 to 10 minutes, support is unlimited, and management is a flat $65 per server per month. Moving from another server or panel? We migrate you with little or no downtime, usually just a few minutes at cutover.
24/7 Support
Server Hardening
Monitoring
Migrations
Disaster Recovery
What's Included
Our cPanel Server Management Includes
Our 24/7 monitoring watches your cPanel server and automatically opens a ticket when something needs attention. You and your team can also open tickets any time for support, maintenance, troubleshooting, or server changes. We work the queue around the clock.
24/7 Server Monitoring
We monitor your cPanel server constantly: CPU, memory, disk, inodes, the RAID array, and the response of every service WHM runs — cPanel/WHM, Exim, Dovecot, Apache, NginX, LiteSpeed, MySQL, MariaDB, PHP-FPM, BIND, FTP, and SSH. We also watch the Exim mail queue for outbound-spam spikes. Custom website sanity checks, application probes, and port monitors are added on request, and alerts land in our cPanel server management queue rather than on your phone.
Disaster Recovery
Disaster recovery is the highest-priority work in your cPanel Server Management. Whether it is a server compromise, a failed drive, a reseller who deleted the wrong account, or a database dropped in production, we work without stopping until your data is back. We restore at whatever level the incident needs: a full-server rebuild, a single cPanel account from a cpmove archive, one database, or one mailbox. We pull from any backup you have, including JetBackup, R1Soft, the provider’s snapshot, cPanel’s own backups, or our optional Linux server backup, and where severity allows we can often recover a hacked or crashed server without one.
cPanel Server Hardening
We tune an advanced CSF firewall to your cPanel server’s traffic, with cPHulk and Login Failure Daemon blocking brute-force attempts on WHM, cPanel, FTP, SSH, and Exim. We work WHM’s own Security Advisor end to end, run ModSecurity with OWASP, Comodo, or Imunify360 vendor rulesets, and add Imunify360 or ImunifyAV for malware. Every domain gets SSL through AutoSSL, Let’s Encrypt, or your own certificate. We harden SSH and DNS, patch the kernel, secure /tmp, /var/tmp, and /dev/shm, and run CloudLinux with CageFS where you have it. We assist with PCI compliance on e-commerce servers. Hardening is optional. We recommend it to every customer, and if you have any concerns, we can discuss it first and apply all of it, some of it, or none.
cPanel Server Migrations
We complete cPanel server migrations with the lowest possible downtime. A final fast-sync runs just before the cutover, then DNS flips, and end users land on new cPanel server hardware without a status-page incident. We migrate cPanel-to-cPanel, other-control-panel-to-cPanel, and bare-metal-to-cloud, whether that means AWS EC2 to DigitalOcean or any source to any target. We also move cPanel servers off end-of-life CentOS 7 to AlmaLinux without losing customer data, by building a fresh server and migrating the accounts onto it, and the hostname, DNS, mail, and SSL certificates cut over cleanly.
Apache & NginX Optimization
We tune EasyApache 4 to your workload: the right MPM, mod_lsapi or PHP-FPM in place of suEXEC/DSO, and PHP-FPM pool sizing across the MultiPHP versions cPanel runs per account, so a single site cannot starve the rest. We put NginX caching in front of Apache where it earns its keep. We tune MySQL and MariaDB, covering buffers, thread cache, and slow-query hunting, and use the MySQL governor and CloudLinux LVE limits to cap the account that spikes load. We also enable HTTP/2, Brotli and gzip, an in-memory tmp, and Redis or Memcached object caching, and move MySQL data to NVMe where it is available.
24/7 Server Support
We provide unlimited 24/7/365 ticket support for anything on your cPanel server: blocked outbound email and SMTP bounces, IMAP and Dovecot connection issues, AutoSSL and TLS certificate renewals, slow WordPress sites and wp-admin lockouts, DNS, SPF, DKIM, and CNAME changes, firewall and ModSecurity rule updates, cron failures, .htaccess and file permissions, malware scans, reboots, outages, and any system administration task you can describe in a ticket. Standard tickets respond in ten to thirty minutes, urgent in five to ten. There is no ticket limit and no hourly charge.
Linux Updates & Patching
We keep your cPanel server’s patch level current. We set the WHM update tier deliberately, whether LTS, RELEASE, or CURRENT, run upcp and OS package updates, and notify you of reboots. Security patches for major Linux outbreaks are applied promptly. We run EasyApache 4 and major PHP upgrades with a profile rollback ready, and we handle MySQL and MariaDB version upgrades, including major-version moves on InnoDB and MariaDB Galera clusters.
cPanel Server Setup
We build a new cPanel server in full whenever you need one. That covers the Linux OS install, the cPanel/WHM install, our hardening baseline, and configuration of the services you will host. We deploy AutoSSL with Let’s Encrypt for valid SSL on every domain, and we configure the hostname plus forward and reverse DNS. DNS templates are ready for every domain you add, with DKIM, SPF, and DMARC enabled on every mail domain. We migrate your existing websites, databases, and applications from the old server before the cutover.
Software Installation
We handle installs at the OS level and across the cPanel ecosystem. We build EasyApache 4 profiles for the Apache, NginX, and PHP combination you need, with the MultiPHP extensions each account depends on, and we set up CloudLinux with CageFS, LVE, and the PHP Selector for tenant isolation. For protection we install Imunify360 or ImunifyAV and ModSecurity vendor rulesets. We also install Softaculous and cPAddons for one-click apps, ClamAV for scanning, MySQL, MariaDB, and PostgreSQL for databases, and Redis, Memcached, Varnish, or Solr for caching and search. Git, Node.js, Python, Ruby via Passenger, Java and Tomcat, and most third-party Linux software with an install path round out what we deploy.
Email & Mail Server Support
We configure Exim through WHM’s Exim Configuration Manager, setting mail authentication (SPF, DKIM, DMARC) and outbound limits so one hijacked account cannot torch your IP reputation. We also handle Dovecot IMAP and POP3, Roundcube and Horde webmail lockouts, SMTP relay and smart-host setup, SpamAssassin and the cPanel Mail Queue Manager, BoxTrapper and forwarders, mailbox quota and Maildir issues, bounce-loop diagnosis. This is the everyday mail work hosting companies forget to ask for until it breaks.
And More...
We also take on WHM root work, cPanel account and reseller plan changes, DNS zone work, CageFS configuration, SSH access management, cron jobs, certificate installation and renewal, firewall rule changes, .htaccess and file permissions, log file analysis, and WordPress and wp-admin recovery. We handle the ten-minute tasks and the four-hour ones alike.
Inside the Panel
How we handle day-to-day cPanel server administration
Most of your cPanel server management happens in WHM, not cPanel. Your customers work in cPanel; we work in WHM as root and on the SSH command line, which is where the real cPanel server administration takes place. We administer the server the way you run it, so the panel-configuration work — Tweak Settings and the Feature Manager, the Packages and Feature Lists your plans provision from, reseller ACLs scoped to exactly the privileges you intend, and account creation, suspension, quota, and bandwidth — happens when you ask or when a ticket calls for it, not as unsolicited changes to a setup that is working.
On the web stack we run EasyApache 4 with a profile matched to your workload, and we use MultiPHP Manager so each account can sit on its own PHP version with its own PHP-FPM pool and INI settings. That is the per-account PHP flexibility cPanel is built around, tuned so one busy site cannot starve the rest. AutoSSL keeps every domain on a valid certificate, and we resolve the Domain Control Validation and Certification Authority Authorization edge cases for the handful it cannot.
If you run CloudLinux, we treat CageFS, LVE limits, and the PHP Selector as first-class tools for isolating tenants and capping the account that spikes load before it takes the server down. Imunify360, ModSecurity vendor rulesets, and WHM’s Security Advisor and cPHulk round out the hardening we keep current. We also know the cPanel licensing model, from the per-account tiers to the issues that arise when a server’s IP changes, and we resell cPanel licenses, so management and licensing can land on one bill instead of two.
Where the work happens: WHM, administered as root by senior cPanel admins.
Real Tickets, Real Fixes
Common cPanel problems we resolve
Here is a sample of the cPanel and WHM tickets that reach our queue every week, along with what it takes to resolve each one.
AutoSSL stopped renewing — “could not validate” on a domain
We trace the failed Domain Control Validation to its cause, whether a stray Certification Authority Authorization record, a hijacked .well-known path, internal DNS that does not match the public record, or a proxy in front of the host, fix it, then force a clean AutoSSL run so every domain is valid again.
WHM reports the license as expired or invalid
Usually the server’s main IP changed or licensing cannot reach the cPanel store. We re-point the license to the current IP, clear the block, and run cpkeyclt so WHM is licensed again in minutes rather than after a long support exchange.
Outbound spam from one account, the IP heading for a blocklist
We find the compromised account or script through the Exim queue and logs, stop the sending process, rotate the password, clean the malware, and set outbound limits, stopping the activity before the IP is blocklisted and deliverability suffers.
A reseller can’t create accounts or keeps hitting a limit
We fix it in WHM by adjusting the reseller ACLs, the account, disk, and bandwidth limits in their privileges, and the Package or Feature List the plan points at, so provisioning works without handing out more access than you intend.
A site throws a 500 right after an EasyApache or PHP change
We rebuild the EasyApache 4 profile with the right modules and re-add whatever a MultiPHP switch dropped, often a missing extension or a hard-coded handler, with a rollback staged and ready rather than gambled on production.
An account shows disk full but the numbers don’t add up
We recalculate quotas and locate the inode and hidden-space causes, such as a runaway Exim queue, a giant error_log, orphaned /tmp, or stale cPanel backups, and get the account back under quota without deleting anything real.
One account is pinning CPU and slowing the whole server
We identify it with CloudLinux LVE stats or the process list, cap it with LVE limits, fix the slow MySQL query or runaway plugin behind it, and move it to mod_lsapi or PHP-FPM so it cannot starve its neighbors.
ModSecurity is blocking a legitimate app or checkout
We read the audit log, identify the triggered rule, and whitelist it narrowly for that one domain in WHM, keeping the vendor ruleset enforcing everywhere else instead of switching protection off.
cPHulk has locked you or a customer out of WHM or SSH
We clear the cPHulk block from the command line, whitelist your office, VPN, and monitoring addresses so the right people are never blocked again, and tune the brute-force thresholds and one-day temporary bans so real attacks are still stopped without locking out staff.
WHM still shows an account suspended after you unsuspended it
We clear the stale suspension state the panel is caching, look for a leftover lock file, a suspendlist entry, or a root-level Apache include still redirecting the domain, and confirm the account is fully live again across web, mail, and FTP.
A cpmove restore finished but the account is missing mail or databases
We re-run the restore correctly, fix the database-user grants and ownership a partial cpmove leaves behind, pull any missing mail or files from the archive, and verify the site, mailboxes, and cron jobs all work before we call it done.
Mail to Gmail or Microsoft is bouncing or landing in spam
We set the reverse DNS and a matching HELO, align SPF, DKIM, and DMARC so the large providers stop rejecting the domain, and look for any compromised account or misconfiguration behind the reputation hit.
“Thank you for keeping me updated and for your fabulous support today. I can see that my client's websites are running just fine and email services are back to normal. You (Alexander) and Edward have provided exceptional service, thank you again!”
PPaulServer Surgeon Customer
Knowledgeable Staff
★★★★★
“Everyone was very helpful during this migration. You have a very friendly and knowledgeable staff who made this a cake walk for us. It's not often you work with multiple support reps who know exactly what's going on with a single account. You guys are awesome, and I tell everyone I know about you.”
JJimServer Surgeon Customer
Extremely Pleased
★★★★★
“I have been using your services now for over 5 years and am extremely pleased with the relationship that we have established. Just set it and forget it — you provide a much-needed coverage in our gap between what we know, what we don't, and what we just don't know that we don't know…”
$65 per cPanel server with volume and prepay discounts that stack. Unlimited tickets. Month-to-month, no fixed-term contract, with a 30-day money-back guarantee. Order online and your cPanel server is in management within an hour or two of us receiving access details.
With 5 or more Linux servers, take another 20% off: the volume discount stacks on top of prepay.
24/7/365 emergency support 30-day money-back guarantee+1-213-291-9191
Migrating to a new server? It’s included — order management as you normally would, then describe the move in your onboarding ticket. We manage the old and new server at the cost of one and cut over with a final fast-sync, so there’s no separate migration charge and no interruption for your users — the cutover is scheduled to land with little or no downtime, usually just a few minutes.
After signup you get a welcome email asking for cPanel/WHM root access, the names of anyone authorized to open tickets with us, an emergency contact list, and optionally your hosting provider login (for cases that need a reboot or hardware fix). Once we have access we set up monitoring and bring your cPanel server under management, usually within an hour or two, then begin responding to alerts and tickets as they come in.
Most Asked
Is my information kept secure?
Yes. Credentials and other sensitive data go into the encrypted fields of our ticketing portal, and are deleted within 24 hours of the ticket being closed — any login data we send back to you is subject to the same deletion. Our production system runs in our locked rack at the PhoenixNAP datacenter, and you can change any of the passwords you gave us once the initial setup is complete.
Most Asked
Is your support 24/7/365?
Yes, and it has been since 2005. Our monitoring watches your cPanel server around the clock and opens a ticket whenever something needs attention. Crashed servers reboot in under ten minutes, urgent tickets respond in five to ten minutes, and standard tickets in ten to thirty. Senior administrators staff every shift, every weekend, and every holiday: the same team, the same response times, with no overnight skeleton crew.
More questions
What is the average ticket response time and average ticket resolution time?
Standard tickets respond inside ten to thirty minutes, often faster. Urgent tickets respond inside five to ten minutes. Resolution time depends on the issue.
How many years of experience do your technicians have?
Every system administrator who touches your cPanel server has 8+ years managing production web hosting servers. Most have more.
How long have you been in business?
Since 2005.
Do you limit the hours of support per month a customer can use?
No. No ticket limits. No hourly buy-ins. No throttling.
Is there any fixed term contract?
No. Month-to-month.
What is your refund policy?
30-day money-back guarantee.
Are there any additional fees or setup charges?
No. $65 per cPanel server. 20% discount at five servers or more. Quarterly, semi-annual, and annual prepay discounts on top. Unlimited tickets. No hourly add-ons.
Do you backup my server as part of the server management?
Do you work in WHM as root, or only inside cPanel?
As root in WHM. Your customers use cPanel; we administer the whole server from WHM — Tweak Settings, Packages and Feature Lists, reseller ACLs, account and quota management, EasyApache, and everything else that needs root. cPanel account-level work is included too.
Can you manage our resellers, packages, and WHM Feature Lists?
Yes — when you ask us to. We build or adjust WHM Packages and Feature Lists, scope reseller ACLs and limits, and handle account creation, suspension, upgrades, and quota changes as the tickets come in.
Do you support CloudLinux, CageFS, and Imunify360 on cPanel?
Yes — we treat them as core tooling. CageFS and LVE limits for tenant isolation and load control, the PHP Selector for per-account PHP, and Imunify360 or ImunifyAV plus ModSecurity vendor rulesets for protection, all kept current and tuned to your traffic.
We use JetBackup or R1Soft — can you restore from it?
Yes. We restore from any backup source you have, including JetBackup, R1Soft, your provider’s snapshots, cPanel’s own backups, or our optional Linux server backup, at the full-server, individual-account, database, or mailbox level.
Can you handle EasyApache 4 and MultiPHP changes without taking sites down?
Yes. We stage EasyApache 4 profile changes and MultiPHP or PHP-FPM moves, check the modules each account needs first, and keep a rollback ready — so PHP upgrades and web-stack changes happen without surprise 500s.
What cPanel/WHM versions do you support?
All cPanel/WHM versions, across the LTS, RELEASE, and CURRENT release tiers, on every cPanel-supported Linux distribution.
Which Linux distributions does cPanel run on?
cPanel runs on the RHEL family, which means AlmaLinux and RHEL itself, plus CloudLinux, and it also supports Ubuntu LTS. cPanel has dropped support for new Rocky Linux installs, though we still manage existing cPanel servers already running on Rocky. cPanel does not run on Debian, so if Debian is a requirement we would point you to Plesk, DirectAdmin, or a vanilla Linux build, all managed on the same plan and the same price. For a fresh cPanel server we recommend AlmaLinux with CloudLinux for account isolation, and we manage cPanel on whichever of these you run.
How does cPanel pricing work, and is the license included?
Most of our customers bring their own cPanel license, and we manage the server on whatever license you already hold. cPanel is priced per cPanel account, in tiers that have risen over the past few years; if you do need a license, we will sell you one at our cost, so management and licensing arrive on a single bill with no markup from us.
Can you migrate our cPanel accounts from another server?
Yes. There is no separate migration charge — we manage both servers at the cost of one until the move is complete. We move cPanel-to-cPanel with WHM’s Transfer Tool and the “Copy an Account from Another Server” feature, which carry each account’s files, databases, email, and DNS records across intact, and we migrate from other control panels into cPanel as well. A final fast-sync runs just before DNS flips so end users land on the new cPanel server without an interruption.
Our cPanel server is still on CentOS 7. What are our options?
CentOS 7 reached end of life on June 30, 2024, and CentOS 8 ended even earlier, so a cPanel server still on either one no longer receives security patches and should move to AlmaLinux. We build a fresh AlmaLinux server and migrate your cPanel accounts onto it, because a clean build is the safest path and lets you test before the cutover, and we stage a full backup throughout so there is always a way back. There is no separate migration charge — we manage both servers at the cost of one until the move is complete.
If we are not the right fit, the 30-day money-back guarantee is the easiest check we ever sign. Month-to-month, no fixed-term contract on your cPanel server. Most hosting companies stay because they do not get burned again.
1Order onlineTakes five minutes
2Server under managementWithin an hour or two of access
Support for every Linux distro, on every hosting provider
We manage nine Linux distributions across the Red Hat and Debian lineages, every hyperscaler, and hundreds of bare-metal and cloud VPS providers. One queue, one price, one team.
The same team every day, on every server. Three things we promise —
21 years solving the same problems
We have handled every common Linux distribution, every panel, and every kind of outage before, and we know how to resolve them.
Senior administrators only
Every ticket is handled by a senior admin with 8+ years of managing production web hosting servers. No outsourcing, no junior staff logged into your server.
5.0★ on Facebook, 30-day money-back
Month-to-month, no fixed-term contract. If we are not the right fit, we refund you without argument. Read the reviews →
Server Surgeon has specialized in cPanel server management since 2005. Many of our customers have trusted us with their cPanel servers for more than a decade because they know they can count on our experienced cPanel administrators when problems occur.