Server Security Licenses
Malware scanning, a web application firewall and upload inspection are three different jobs, and no single product does all three equally well. The products on this page cover those layers.
Imunify360 is the broad one: a web application firewall that filters incoming requests, a scanner that finds and cleans infected files inside customer accounts, brute-force protection on panel and mail logins, and IP reputation data, all in a single interface. On a shared server where you cannot audit hundreds of customer sites one by one, that consolidation is the whole point. CPGuard runs inside the control panel itself, so scanning, firewall management and configuration checks happen in the panel UI instead of a separate console; if your team already lives in that panel all day, there is no second dashboard to learn. cxs does something narrower and sharper: it inspects files the moment they are uploaded and matches them against known malicious signatures, catching a web shell — the file an attacker drops in order to run commands on your server — before it is ever executed. When an outdated plugin gets exploited, that is usually the layer that catches the payload before it runs.
The three overlap in places, but none of them replaces another. A rough guide: if you sell shared hosting, a broad scanning and firewall layer alongside upload-time file inspection is a sensible pairing; on a VPS running a single application, one of them is often enough. Running two firewalls on the same server without reconciling their rule sets produces false positives and outages that are genuinely hard to diagnose, so decide who owns which layer before you install anything. The commercial side works the way it does everywhere else on the panel: the license binds to the server's IP, installation is a single command, activation is automatic from your prepaid balance, and you change the IP yourself when the server moves, at which point the old address stops working immediately. Creating, renewing and moving a license can also run over the REST API if you drive it from WHMCS or your own panel. If you try one and decide against it, switch off auto-renewal: the monthly license runs to the end of its term and nothing further is charged. Current pricing is shown in the panel.