Server security suite Now on DirectAdmin

No vendor cloud lock-in Automatic agent & signature updates

Five commercial security agents for cPanel/WHM, Plesk & DirectAdmin

Modern, actively developed replacements for the aging ConfigServer tools (cxs, csf, cmq, cmc) — malware scanning, mail-queue management, firewall, WAF management and server monitoring. Written in Go, installed with one line, licensed per server.

Security products: 5; Security products
Control panels: cPanel, Plesk, DirectAdmin: 3; Control panels: cPanel, Plesk, DirectAdmin
Accounts per server license: Unlimited; Accounts per server license
Free trial on first install: 15-day; Free trial on first install

Malware & exploit scanner

MegaWit Shield

Real-time malware scanning that cleans infected sites automatically instead of just reporting them.

Modern alternative to

ConfigServer eXploit Scanner (cxs, end-of-life 31 Aug 2025) and Imunify360

Compare cxs alternatives

Real-time (on-access) scanning with upload-time blocking via ModSecurity
Automatic disinfection, quarantine & restore-from-backup
Proactive Defense blocks malware at runtime
ClamAV + YARA engine + cloud threat intelligence
WordPress core repair, database malware & plugin/theme vulnerability scans
IP & domain reputation (blacklists / Safe Browsing)

cPanel
Plesk· no Proactive Defense
DirectAdmin

Server license · from

$14.99 / month

Explore Order

mws · real-time scanner

Example

10:42:07 on-access /home/acme/public_html/wp-content/uploads/cache.php

↳ YARA match: php.webshell.obfuscated [malicious]

↳ action: quarantined · owner notified

10:42:31 disinfect /home/acme/public_html/index.php

↳ injected code removed · file cleaned

10:43:02 wp-core wp-includes/version.php checksum mismatch

↳ repaired from official WordPress core

Upload blocked by ModSecurity hook before the file ever landed

Engines

ClamAV + YARA

Database scan

wp_options clean

Domain reputation

not listed

Mail queue & deliverability

MegaWit Postmaster

Take control of the mail queue, stop outbound spam at the source and keep your server IPs off blacklists.

Modern alternative to

ConfigServer Mail Queues (cmq) and MailScanner Front-End (MSFE)

Compare cmq alternatives

Advanced Exim mail-queue manager
Inbound anti-spam & anti-virus
Outbound-spam detection + hard per-account sending limits
Outbound content scan pinpoints the spamming PHP script
End-user spam folder, own quarantine, allow/block lists & digest
One-click SPF, DKIM & DMARC setup and repair
Server IP reputation (RBL & PTR), outbound IP choice, 7-day traffic analytics

cPanel· Exim
Plesk· Postfix
DirectAdmin· Exim

Server license · from

$14.99 / month

Explore Order

mwp · exim queue

Example

Example Exim queue
Message ID	Sender	Age	State
1tAbcD-000Kx2-3F	[email protected]	2m	queued
1tAbcE-000Ln7-9Q	[email protected]	14m	deferred
1tAbcF-000Mp1-0Z	[email protected]	1h	frozen

Outbound spam detected · account acme

Source script: /home/acme/public_html/contact/send.php

Hourly sending limit reached → further mail held

SPF

pass

DKIM

pass

DMARC

fix → 1 click

Firewall & brute-force protection

MegaWit Firewall

An iptables/ipset firewall with brute-force protection that is safe by design — it never locks you out of SSH.

Modern alternative to

ConfigServer Security & Firewall (csf + lfd)

Compare csf alternatives

iptables/ipset engine
Brute-force protection for SSH, mail, Exim, cPanel, DirectAdmin & FTP
Allow / deny / ignore lists for IPv4 & IPv6
Auto-expiring temporary & permanent bans
Safe by design — never locks you out of SSH
Coexists with or replaces csf (one-command csf migration)

cPanel
Plesk
DirectAdmin

Server license · from

$9.99 / month

Explore Order

mwf · bans & brute-force

Example

Admin SSH session protected 192.0.2.10 always allowed

Example ban list
IP	Service	Reason	Expires
203.0.113.45	sshd	failed logins	temp · 1h
198.51.100.7	exim	SMTP auth failures	temp · 1h
2001:db8::5f	cpanel	login brute force	temp · 24h
203.0.113.99	ftp	repeat offender	permanent

# mwf import-csf → allow/deny lists imported

WAF & ModSecurity manager

MegaWit Guardian

Manage your panel’s ModSecurity from one place: see every hit, separate false positives from real attacks, block attackers.

Modern alternative to

ConfigServer ModSecurity Control (cmc)

Compare cmc alternatives

One-click ModSecurity install, managed from the panel
WAF hit explorer + attack analytics
Tuning advisor: false positives vs real attacks
Per-domain rule disable, allowlist & custom rules
One-click & automatic attacker blocking
MegaWit virtual-patching rule packs (auto-updated) + JS browser bot check
Weekly report + end-user WAF view

cPanel
Plesk
DirectAdmin

Server license · from

$14.99 / month

Explore Order

mwg · WAF hit explorer

Example

Request · shop.example

GET /product.php?id=1 UNION SELECT user,pass FROM users--

SQL injection ModSecurity: denied 403 attacker IP blocked

Tuning advisor

Rule hits on /wp-admin/admin-ajax.php from logged-in editors

Likely false positive → disable rule for blog.example only

Rule packs

auto-updated

Bot check

JS challenge

Report

weekly

Server health monitoring

MegaWit Monitor

One health score for the whole server, with per-account usage, security signals and alerts wherever your team works.

Alerts to

Email, Slack, Telegram, webhook, PagerDuty, Opsgenie & Prometheus

Health score, 30-day trends & incident timeline
CPU breakdown (I/O-wait, steal, per-core), disk I/O, SMART, network
Per-account CPU/RAM, top Apache & MySQL consumers, bandwidth, disk/inode/email
SSL expiry + chain + DNS, website uptime (p95) & TCP ports
Security: failed SSH + attacker IPs, open-port audit, root logins, RBL
Backup freshness, disk-fill ETA, OOM/NTP/updates, MySQL health
Maintenance windows, escalation & public status page

cPanel
Plesk
DirectAdmin

Server license · from

$4.99 / month

Explore Order

mwm · server health

Example

Health score

CPU breakdown

user38%

I/O-wait9%

steal1%

SSL shop.exampleexpires in 9 days
Disk /homefill ETA ~3 weeks
Last backupfresh · 6h ago
Failed SSH loginsattacker IPs listed

Email Slack Telegram Webhook PagerDuty Opsgenie Prometheus

New

DirectAdmin support for all five products

Every MegaWit product now installs on DirectAdmin with the same one-line installer. Admins get a plugin under Admin Level › Extra Features, and every DirectAdmin user gets their own end-user page for Shield, Postmaster and Guardian.

Admin plugin in Extra Features
Per-account end-user pages (MWS, MWP, MWG)
End-user dashboards now on Plesk too
Guardian bot check on Apache, nginx & OpenLiteSpeed

Where each product lives

cPanel: WHM › Plugins
Plesk: Extensions
DirectAdmin: Admin Level › Extra Features

OS: CentOS 7+, CloudLinux, AlmaLinux, Rocky, Ubuntu & Debian · dashboards follow the panel language

Compatibility

Control-panel support at a glance

Supported control panels per product
Product	cPanel/WHM	Plesk	DirectAdmin
MegaWit Shield	Supported	SupportedProactive Defense not available on Plesk	Supported
MegaWit Postmaster	Supported · Exim	Supported · Postfix	Supported · Exim
MegaWit Firewall	Supported	Supported	Supported
MegaWit Guardian	Supported	Supported	Supported
MegaWit Monitor	Supported	Supported	Supported

Save 50%+

MegaWit Suite

All five products — Shield, Postmaster, Firewall, Guardian and Monitor — under one license key, with priority support.

One license key per server
Priority support
Unlimited accounts

Monthly

$29.99

/ month · ~~$59.95~~

Order monthly

Best value

Annual

$299

/ year · ~~$595~~

Order annual

Lifetime

$599

one-time · ~~$1195~~

Order lifetime

Try any product free for 15 days

Run the installer on your cPanel/WHM, Plesk or DirectAdmin server and pick the products you want. The 15-day trial starts automatically on first install.

$ curl -fsSL https://install.megawit.com/install.sh | sh

Visit the Store Talk to us