Paper Lantern for cPanel accounts is being retired this year. Find out more »
cPanel & WHM Version 102 has been released, and brings a slew of great updates. Take a look at what is included, and then upgrade today!
New Topic

All Topics

Ideas Announcements FAQs Knowledge Base
Guides

Documentation page for PCI Compliance Info Page Improvement Suggestions

Completed Feature I. ● Security ● Comments: 2 ● Reply 6 years ago by benny
4 votes

Add patch to Increase ModSecurity Collection Size Limits

Open Discussion WillDashwood ● 7 years ago ● Security ● No Comments
6 votes
Vote

SSL notification clarity

Completed Melanie ● Security ● Comments: 1 ● Reply 6 years ago by cPanelAdamF
1 vote

Mail SNI: support "mail." and other subdomains without requiring a wildcard

Completed Alex @. ● Security ● Comments: 5 ● Reply 5 years ago by benny
14 votes

FTP Login with Reseller Password

Open Discussion keliix06 ● Security ● Comments: 1 ● Reply 6 years ago by cPanelAdamF
2 votes
Vote

A Wizard to guide me through establishment of SSL

Completed Feature I. ● Security ● Comments: 3 ● Reply 5 years ago by benny
32 votes

Mod_Security False Positive Reporting System

Open Discussion Echelon17 ● Security ● Comments: 1 ● Reply 6 years ago by PbG
25 votes
Vote

Login Branding

Open Discussion TinyHostingLtd ● Security ● Comments: 1 ● Reply 6 years ago by Josh F.
5 votes
Vote

Notification when an account is suspect of being compromised

Open Discussion Feature I. ● 10 years ago ● Security ● No Comments
6 votes
Vote

A better community powered Malware protection

Open Discussion shojib ● Security ● Comments: 1 ● Reply 6 years ago by EHR
4 votes
Vote

Comodo WAF as a ModSecurity Vendor

Open Discussion pointaction ● Security ● Comments: 17 ● Reply 6 years ago by Hosted P.
46 votes
Vote

Enable HSTS on cPanel / WHM interface

Open Discussion jcnewton ● Security ● Comments: 1 ● Reply 19 months ago by Reza S.
12 votes
Vote

Having the option to enable or disable password age in WHM Security Center

Open Discussion Abacus D. ● 2 years ago ● Security ● No Comments
1 vote
Vote

Add Support for TLS 1.3

Completed ciao70 ● Security
140 votes

Implement Content-Security-Policy header for ports 2083, 2087 and 2096 to pass CPI scans

Open Discussion Flyer ● 2 years ago ● Security ● No Comments
6 votes
Vote

enhance scanning facilities

Open Discussion feanor ● 4 years ago ● Security ● No Comments
3 votes
Vote

"nofollow" on language buttons on cPanel and webmail login

Open Discussion Rihan ● Security ● Comments: 1 ● Reply 23 months ago by tch
4 votes
Vote

DCV (AutoSSL, Market, etc) to Act Differently based on Apache Version

Completed Marcelo P. ● Security ● Comments: 5 ● Reply 5 years ago by benny
13 votes

Require SSL with option to redirect to SSL cert name or serverhostname)

Open Discussion Ivan L. ● Security ● Comments: 6 ● Reply 20 months ago by Brandin A.
10 votes
Vote

Option to allow passwords with username in them

Needs Review Shaun R. ● Security ● Comments: 1 ● Reply 3 years ago by benny
2 votes
Vote

Out of date software notifications (added to iContact?)

Open Discussion France P. ● Security ● Comments: 9 ● Reply 49 days ago by Kelli G.
4 votes
Vote

Reseller AutoSSL interface

Open Discussion Mike ● Security ● Comments: 6 ● Reply 3 years ago by benny
40 votes
Vote

Force email password change on 1st login

Completed SitesPT ● Security ● Comments: 8 ● Reply 5 years ago by benny
8 votes

Default php.ini should be correctly hardened

Completed point_and_click ● Security ● Comments: 4 ● Reply 6 years ago by cPanelJacob
3 votes

Geo Filtering added to the cpHulk Brute Force

Open Discussion Scott L. ● Security ● Comments: 2 ● Reply 4 years ago by Silent N.
13 votes
Vote

Whitelist IP Feature

Open Discussion Mike ● Security ● Comments: 1 ● Reply 23 months ago by J. M.
3 votes
Vote

Show which account/script is sending spam emails

Open Discussion kabatak ● Security ● Comments: 8 ● Reply 3 years ago by webdeve d.
14 votes
Vote

Security Advisor notifications should include process name, not just PID

Open Discussion Pete S. ● Security ● Comments: 1 ● Reply 3 years ago by Nuno
11 votes
Vote

Site Seal for cPanel Sectigo AutoSSL

Not Planned Metro2 ● Security ● Comments: 1 ● Reply 10 months ago by cPanelDustin
5 votes

Update ModSecurity Vendor OWASP to OWASP ModSecurity Core Rule Set (CRS) 3.1

Open Discussion Gregory B. ● Security ● Comments: 1 ● Reply 3 years ago by Max-PlotHost
18 votes
Vote

Update ModSecurity Vendor OWASP to OWASP ModSecurity Core Rule Set (CRS) 3

Completed Eric B. ● Security ● Comments: 11 ● Reply 5 years ago by benny
19 votes

Clouldflare SSL working without disabling Cookie IP Validation

Needs Review Incredo S. ● Security ● Comments: 1 ● Reply 5 years ago by benny
4 votes
Vote

Publish/Log ALL changed files on update

Need More Information Masta ● Security ● Comments: 3 ● Reply 41 days ago by cPanelDustin
3 votes
Vote

cPanelIDs in Marketplace configuration for Resellers

Open Discussion Ozzy S. ● 5 years ago ● Security ● No Comments
1 vote
Vote

The ability to customize the WHM & Cpanel port & url

Open Discussion Daniel K. ● 6 years ago ● Security ● No Comments
11 votes
Vote

Captcha challenge for layer 7, or application-layer attack protection

Open Discussion jmginer ● 3 years ago ● Security ● No Comments
2 votes
Vote

ModSecurity Vendor Load - Unique key to SecRemoteRules

Open Discussion Malware E. ● Security ● Comments: 1 ● Reply 4 years ago by Malware E.
4 votes
Vote

Stop showing other website domain names in every cpanel account

Open Discussion Web H. ● 23 months ago ● Security ● No Comments
2 votes
Vote

Add/Modify Package - hourly mail limits

Open Discussion sparek-3 ● Security ● Comments: 1 ● Reply 5 years ago by hbouma
4 votes
Vote

No more passwords or password errors -- Account Key, which uses push notifications to mobile device

Open Discussion Eugene A. ● Security ● Comments: 1 ● Reply 6 years ago by TCB13
1 vote
Vote

Force SSL overall but disable for an individual domain

Open Discussion GeoffT ● Security ● Comments: 1 ● Reply 6 years ago by GeoffT
1 vote
Vote

Ability to whitelist specific files from being flagged as suspicious by ClamAV

Open Discussion spaceman ● Security ● Comments: 1 ● Reply 5 years ago by Gingerweb
4 votes
Vote

Re-instate the option to disable gzip compression in cpsrvd

Open Discussion Amuraritei A. ● 5 years ago ● Security ● No Comments
1 vote
Vote

Customized days to renew for the cPanel SSL provider to solve time conflict with expiry monitor

Need More Information Krysis ● 2 years ago ● Security ● No Comments
2 votes
Vote

Different Maximum Password Age for webmail under "Configure Security Policies"

Open Discussion Peter A. ● 3 years ago ● Security ● No Comments
4 votes
Vote

Disable 2 Factor Authentication from certain IPs

Open Discussion Will H. ● 5 years ago ● Security ● No Comments
6 votes
Vote

Always show OIDC login options in the same order

Not Planned Yehuda K. ● Security ● Comments: 1 ● Reply 41 days ago by cPanelDustin
1 vote

Per user WHM login restriction via IP

Open Discussion Webafrica ● Security ● Comments: 1 ● Reply 2 years ago by Brad S.
15 votes
Vote

Run AutoSSL for only a Single Domain

Open Discussion JAB C. ● 16 months ago ● Security ● No Comments
4 votes
Vote

Destroy All Login Data on Login Fails

Open Discussion dave ● 2 years ago ● Security ● No Comments
1 vote
Vote
Browse Archived

cPanel, WebHost Manager and WHM are registered trademarks of cPanel, L.L.C. for providing its computer software that facilitates the management and configuration of Internet web servers.