VestaCP is Secure?

Portal Home > Knowledgebase > Articles Database > VestaCP is Secure?

Posted by prgs1971, 04-26-2014, 03:53 PM
Hi Everyone I want to know from the security specialists if vestaCP is a good choice regarding security or i should choose another free cpanel. I don't want a comparison in terms of functionality and usability i just want to know about security. Once i was hacked before for me the main concern in choosing a cpanel is the security, everything else come after this. Thanks in advance
Posted by Julien@Hostabulous, 04-26-2014, 04:08 PM
Never tried vestaCP so not able to comment, but did you look into ISPConfig?
Posted by prgs1971, 04-26-2014, 04:20 PM
Hi, Yes i already already install and try ISPConfig but not in production. In Github the last update was 1 year ago, therefore the project seems to be dead or almost dead in terms of development. For me a project that stops to be developed is not good from the security point of view... i am wrong???
Posted by MaddinXx, 04-26-2014, 06:17 PM
http://git.ispconfig.org/ispconfig/ispconfig3
Posted by Steven, 04-26-2014, 06:36 PM
Vestacp is fairly reasonable. There is however some security concerns in the backup system that I had seen. It is however not a pool of security holes like kloxo or gplhost. Stay away from zpanel. There is a bunch of issues there. I am not impressed with ispmanager. Last edited by Steven; 04-26-2014 at 06:40 PM.
Posted by prgs1971, 04-26-2014, 06:50 PM
I google for ispconfi github and hit in https://github.com/cyberkathosting/ispconfig3 I have not realize that was a fork not the original Must be because i am very tired... one week sleeping less because of my compromised VPS... i just have time to the VPS after get out of the work.
Posted by prgs1971, 04-26-2014, 06:52 PM
You don't say nothing about ISPConfig so it is better alternative in terms of security? Thanks
Posted by Steven, 04-26-2014, 07:05 PM
I have not looked at ISPConfig yet so I cannot comment.
Posted by CircuitoX, 04-26-2014, 07:10 PM
here other related post: https://www.digitalocean.com/communi...l-panel-secure
Posted by prgs1971, 04-26-2014, 07:11 PM
Any plan to take a look into it??? It will be nice to have your input about ISPConfig
Posted by Steven, 04-26-2014, 07:13 PM
I'll see what my weekend has in store for me.
Posted by prgs1971, 04-26-2014, 07:17 PM
Many thanks for your link... I already have seen it before, but do not clarify me too much, it is good to know that passwords are stored correctly, but is not enough.
Posted by prgs1971, 04-26-2014, 07:20 PM
I hope to have your positive input soon I am already following you since the begin of this week in rack911 for security updates
Posted by Jake_K, 04-27-2014, 02:38 PM
VestaCP should be quite secure. I have been using it for hosting smaller websites for a long time and I haven't experienced any security related issues.
Posted by Steven, 04-27-2014, 03:12 PM
Just because you have not experienced any issues does not mean the threat is not present. The backup system does have security concerns for example. For example a malicious user could obtain files they do not own by taking advantage of a flaw in the backup system.
Posted by Jake_K, 04-28-2014, 02:08 AM
That's why I said "should be" and "quite secure". Nothing is 100% secure and threats may always be present even if the developers or end users don't know it. For a small website I see no harm in using VestaCP. If the only known security issue is caused by the backup system you can always backup your files some other way without using the built-in backup system.
Posted by prgs1971, 04-28-2014, 06:40 PM
Thanks for your input.

Add to Favourites Print this Article