BETANot production ready yet. Testers wanted: apply · report a bug
KarnakPanel
Free hosting control panel · v1.5.51

Run a hosting business on your own server.

KarnakPanel turns a fresh Ubuntu or Debian VPS into a complete hosting server: websites, email, DNS, databases, backups and a drag-and-drop site builder. No licence fees. No per-account pricing. No licence server.

Install · as root · about 20 min
# fresh Ubuntu 24.04 LTS or Debian 13 · beta testing only
$ wget https://karnakpanel.com/downloads/karnakpanel-install.sh
$ sudo bash karnakpanel-install.sh panel.example.com admin@example.com
$0forever, every module
Unlimiteddomains & mailboxes
1 commandto install
8.3 – 8.5PHP per account
The KarnakPanel v1.5.51 dashboard: account usage, live server health, running services and top processes
New in v1.5.51

Move servers without losing a weekend.

Server-to-server transfers, calendar sync for every mailbox and a new jail for secret-file scanners. Recent releases →

Account Transfer

Pair two servers. Tick the accounts. Cut over.

Pair with two short codes, with no passwords or keys copied. Watch a live bar per account, then switch sites, mail and DNS with one button. A failed move rolls itself back.

Calendar & contacts

CalDAV and CardDAV for every mailbox

Phones, Thunderbird and DAVx5 find it from the email address alone.

DNS check

See what resolvers answer

After a cutover, compare Cloudflare, Google, Quad9 and your own resolver for each name.

Scanner jail

Ban secret-file probes

IPs probing for .env or .git files are banned from the web ports.

Coming from cPanel?

Import accounts

Bring sites, mail and databases from cPanel or HestiaCP backups. How →

Included free · Karnak Builder

Drag. Drop. Publish.

A website builder inside the panel. Pick a template, drop in sections and publish to any domain on your server. Your customers can build their own sites at no extra cost.

  • Templates75
  • Site styles9
  • Desktop, tablet & phone previewslive
  • Autosave and historybuilt in
  • Blog with RSSyes
  • Outputstatic HTML
Security

Built like it controls root. Because it does.

Signed updates, passkeys, sandboxed customer PHP and a scored Security Advisor ship in the free product. Every mechanism is implemented and awaiting independent review. That testing is what the beta is for.

The Security Advisor page: a score out of 100 with fix, improve and OK checks, each with a fix link
Security Advisor on a test server, v1.5.51
  • Signed releases and updates, checked before anything runs, with automatic rollback.
  • Passkeys and authenticator 2FA, required for admin and reseller staff.
  • One PHP master per account with its own CPU, memory and process limits.
  • Bot shield, scanner jail and Fail2ban across web, mail, FTP, SSH and the panel.
  • Security Advisor: a scored checklist with a fix link for each setting.
Under the hood

No Docker maze. No licence server.

Native distro packages driven by plain Bash scripts. If something breaks at 3am, you can read the script that manages it.

OpenLiteSpeedLSCache, PHP-FPM 8.3 / 8.4 / 8.5 per account
Exim4 + DovecotSpamAssassin, ClamAV, Roundcube webmail
BIND9Authoritative DNS with one-click DNSSEC
MariaDBPer-user grants, phpMyAdmin
Fail2ban + UFWSSH, web, mail, FTP and panel jails
vsftpdChrooted, TLS-only FTPS
Free forever

No paywall. Not now, not later.

Every module, reseller tools, the API and the builder, with unlimited domains, mailboxes and databases. Report a glitch and a human replies.