Hosting control, redefined

Built for power.
Designed for control.

One premium platform for hosting operations, infrastructure, security, recovery, billing, and growth—built around truthful system state and a hardened privileged boundary.

Get started Explore the platform
Least privilege Native PHP and Node.js Organization tenancy
OUTLAW PANELProduction control plane
Checking live status
Live activityAPI response
No samples

Retrieving verified platform status.

99.99%Uptime SLA
< 100msAPI Response
24/7System Monitoring
GlobalInfrastructure Ready
AutomatedBackups & Recovery
EnterpriseSecurity First

Powerful features.
Complete control.

Everything you need to operate, scale, and protect your infrastructure from one unified platform.

Explore all features
Infrastructure ManagementManage servers, sites, domains, databases, and services.Security & AccessRole permissions, Owner IP controls, and complete audit logs.Backups & RecoveryAutomated backups, one-click restore, and disaster recovery.Real-time MonitoringLive metrics, alerts, and performance insights.Billing & AutomationAutomated billing, invoicing, and subscription management.Extensible PlatformAPIs, webhooks, and custom integrations.

Hosting management

Every core service, organized around the domain it serves.

Manage the complete daily hosting lifecycle through focused, secure, production-ready workflows.

Websites & domains

Provision sites, nest subdomains, select PHP or Node.js runtimes, and keep domain-owned resources together.

Authoritative DNS

Manage BIND9 zones and records with validation, reload evidence, and organization ownership.

Mail hosting

Operate Postfix and Dovecot mailboxes with honest client-setup guidance and no fake webmail.

MariaDB services

Create databases, users, and explicit grants, then validate the real operating-system result.

FTP & managed files

Constrain file and FTP operations to verified hosting roots with traversal and symlink rejection.

TLS lifecycle

Issue, renew, and revoke managed certificates through account-scoped Runtime Agent operations.

Security architecture

Root capability stays out of the web application.

The control-plane API validates identity, organization membership, resource ownership, managed paths, and structured inputs. Only then may it request a named operation from the root-owned Runtime Agent. Arbitrary shell execution and browser socket access are denied.

Read the security guide

Built for every role

One platform. Clear authority.

Hosting providers

Operate organizations, servers, plans, customers, licensing, security, and recovery from Owner Operations.

Resellers and teams

Use organization membership and role permissions. Business plans support unlimited reseller and hosting accounts subject to infrastructure capacity.

Customers

Manage hosting, billing, subscriptions, licenses, downloads, security, notifications, and account settings from one client area.

Deployment choices

Self-hosted today. Managed availability by consultation.

Commercial fulfillment stays explicit so customers know who operates each layer.

Available now

Self-hosted

Install Outlaw Panel on supported Ubuntu server infrastructure you operate. Your team controls capacity, networking, backups, updates, and operating-system policy.

Read installation guidance
Contact sales

Hosted onboarding

Managed deployment availability, fulfillment, and operational responsibility are confirmed directly during onboarding.

Discuss requirements

What the platform manages

Commercial depth without legacy-panel assumptions.

Hosting operations

Organization-scoped accounts, websites, PHP, Node.js, domains, and service lifecycle.

Privileged isolation

A root-owned Runtime Agent executes only validated, allow-listed operations.

Verified recovery

Checksummed backups, restore validation, migration preview, rollback, and durable evidence.

Operational clarity

Live service state, host telemetry, audit history, logs, and explicit error handling.

Commercial control

Monthly plans, Stripe checkout, subscriptions, invoices, licensing, and entitlements.

Automation surface

Authenticated APIs and structured deployment workflows without a browser-to-root path.

Launch transparency

Public aggregates are published only when verified.

—Managed DomainsAggregate not published
—Websites PoweredAggregate not published
—Countries ServedNot verified
—Backups ProtectedAggregate not published

Platform roadmap

Production capabilities today, with a clear path forward.

Available now: hosting, DNS, mail, MariaDB, FTP, SSL, local backups, Runtime Agent operations, billing, licensing, monitoring, and customer and owner workspaces.

Planned enhancements: integrated webmail, runtime Marketplace installation, a full support desk, cloud backup destinations, expanded recovery automation, and privacy-preserving public metrics telemetry.

Take control

Build your hosting operation on a modern, auditable foundation.

Compare monthly plans, review the production documentation, or talk with the team about deployment.

View pricing Read documentation