It's a completely different platform that evolved independently of cPanel and in doing so has done a great job on its own. There is a learning curve to it, although from the current userbase, once you pick up the differences you'll absolutely love it.
You can spin up a 30-day trial, customizing the stack to your requirements. Architecture provides a good top-down explanation of the components. I've never been keen on mod_security as the rules get applied non-deterministically. Regexes aren't the fastest either. You're better off keeping these accounts isolated, restricting access to static content URIs, judiciously separating privileges, and letting other components in its WAF shine.
I'm the lead developer. Have been for 19 years.
Got an email on this earlier today as well. DigitalOcean provisioning looks to be no longer calling cloud-init scripts, so it requires reworking repo activation.
I've submitted an updated build to their team, which will be online in a few days. Use the stack customizer in the meanwhile to install on a vanilla VPS.
It's relatively new compared to Plesk and cPanel but the guy that maintains it is a regular on /r/webhosting
Security review of it compared to other 'free' panels:
https://www.rack911labs.com/research/security-analysis-of-alternative-control-panels/
I see apiscp has some protection for rogue PHP scripts. https://apiscp.com/features/fortification. Is this useful in practice and how good is it in stopping malware?
ApisCP is a hosting platform in the same vein that cPanel and Plesk are, but where it differs is integration of essential services (WordPress management, account isolation, resource enforcement, privilege separation, brute-force protection, etc). You'd host it on your own cloud/VPS server. I've done several benchmarks across a variety of service providers to give an indication of what to expect in terms of performance. Either way ApisCP includes a 30-day free trial so you can evaluate at your leisure.
Freebies dried up in December, but had been available for over a year through various ads. You can spin up a 30 day trial though! 10 and 20 domain licenses are available for $30/$50 annually.
Freebies dried up in December. You can spin up a 30 day trial though! 10 and 20 domain licenses are available for $30/$50 annually. It's a great opportunity for smaller firms to keep their servers secure and routinely deploy updates/best practices. It integrates benefits of per-account isolation, 1-click installations/updates, and malware scanning without breaking the bank.
There's a turnkey image available on DigitalOcean's Marketplace as well. Scope GUI was released into edge last night, which is an oversimplification of system management because TIMTOWTDI isn't exactly what you want to hear when it comes to making changes to your system the right way. There are 73 Scopes bundled with release with many more on the way, including SMTP smart host and SSH port rebinding.
Spin up a demo either through DO's Marketplace or using the customization utility. Have fun, but be sure to reach out if you run into any issues!
The opportunity to have this conversation is far more impactful. New license classes are available, beginning at $2.50 per month. If you like the product, consider purchasing a license to support development! Devs gotta eat y'know.