MaxPanel is built and operated by Cenmax. We started it because
we needed a control panel that wouldn't keep getting more
expensive every year, and the existing options didn't fit.
The architecture has a few opinions baked in:
- Tenants belong in real cages — namespaces, cgroups, quotas — not chroot dressed up to look like one.
- The panel runs unprivileged. It can only touch the system through a small RPC surface to a privileged agent. Compromise the panel, you don't get root.
- Defaults should be safe.
SymLinksIfOwnerMatch on by default. open_basedir locked. Per-user PHP-FPM mandatory.
- Boring tech wins. Postgres, SQLite, nginx, systemd, restic. No microservices, no Kubernetes, no proprietary stack.
- One binary, one box, one license. Self-hosted means self-hosted — your data never leaves your server.
- The code is source-available. You can read what runs on your machine.
We're a small team. If you have a question we should hear,
or something is missing, the contact page
has the right email.