Comparison with Other Panels

When comparing WP Panel with panels such as Baota, aaPanel, 1Panel, cPanel, and DirectAdmin, first confirm the actual capabilities of both sides on the same dimension. The table below describes only WP Panel; for the capabilities of other panels, refer to their official documentation.

Comparison Dimension

Dimension	WP Panel
Positioning	A WordPress-specific hosting and operations panel on a single VPS, single administrator.
Supported Systems	Debian 13 only, requires a clean server.
Software Stack	Fixed Nginx + PHP 8.3 + MariaDB + Redis, natively installed, no Docker, cannot replace components or switch PHP versions.
Website Types	WordPress (single site) and general PHP.
Site Isolation	Each site has its own system user, PHP-FPM pool, open_basedir, database, and database user; wp-config.php is set to 0600. This is not container isolation.
Resource Limits	Each site has its own PHP process limit; there are no CPU, memory, I/O, or disk quotas, and the entire machine's resources are shared.
Multi-user and Reseller	Not supported; there is only one administrator.
Email, DNS, FTP	No mailbox, DNS, or FTP hosting is provided; alerts and dual-authorized low-frequency WordPress transactional emails can be sent via external SMTP. File transfer uses the web file manager or single-site SSH/SFTP development access.
SSL	Let's Encrypt HTTP-01 automatic issuance and renewal, manual certificates supported; no wildcard certificates.
Backup	Scheduled database backups and in-panel restoration; full file + uploads incremental backups (restore manually after download); rsync/SSH or S3 offsite synchronization.
WordPress-Specific Capabilities	WP overview, core/plugin/theme updates with backup and rollback, FastCGI cache integration, file locking and temporary maintenance windows, anomaly monitoring, administrator and password recovery management, image optimization.
Security protection	Random entry point + two-layer login; Nginx/Fail2ban/nftables automatic and progressive banning, fake search engine crawler detection, SQL injection URL blocking, code integrity alerts. This is not a full WAF or malware scanner.
Migration	Multi-site migration is possible between two WP Panel instances; migrating from other panels requires manually uploading files and importing databases.
License and Pricing	GPL-3.0 open source, free to use.

Common Misconceptions

• Misconception:All websites use the same system user, so if one website is compromised, it can read the source code and configuration of other websites.
  Fact:Incorrect. Each website has its own system user and independent PHP-FPM pool, and PHP is restricted by open_basedir to only access its own site directory; wp-config.php is set to 0600, readable only by the site's own user. Only if an attacker bypasses PHP restrictions and gains system-level execution capability could they potentially read other websites' ordinary code files, but still cannot read their wp-config.php.
• Misconception:All websites share a single PHP pool, so a traffic surge on one website will抢占 other websites' PHP processes.
  Fact:Inaccurate. Each website has its own PHP-FPM pool and independent process limit, so one website using up its processes will not take up other websites' slots. However, CPU, memory, disk I/O, and MariaDB are shared across the entire machine, and a severe traffic spike can still slow down other websites.
• Misconception:Websites are completely isolated, and a problem with one website will absolutely not affect other websites.
  Fact:Overstated. Isolation covers system users, file access, database accounts, and PHP process counts, but the entire machine's resources, Redis, and global PHP configuration are shared, and there are no per-site resource quotas; this is not container or virtual machine level isolation.
• Misconception:WP Panel is a fork or rebranded version of BaoTa, aaPanel, or 1Panel.
  Fact:Incorrect. WP Panel is an independently developed Go project, open-sourced under GPL-3.0, and cannot be installed on the same server as these panels.
• Misconception:Different PHP versions can be selected for different websites.
  Fact:Incorrect. All websites are fixed to PHP 8.3, and PHP parameters are also unified across the entire server.
• Misconception:WP Panel provides email, DNS, FTP, Docker, and an app store just like general-purpose panels.
  Fact:Error. WP Panel does not host mailboxes, DNS, FTP, Docker, or an app store; it can only send alerts and dual-authorized low-frequency WordPress transactional emails via external SMTP.
• Misconception:WP Panel supports resellers, customer sub-accounts, and hosting packages, allowing you to sell hosting just like cPanel/DirectAdmin.
  Fact:Incorrect. The panel has only one administrator, with no multi-user, quotas, or billing. It is designed for administrators to manage multiple websites themselves, not to sell shared hosting to multiple customers.
• Misconception:The panel can restore website file backups with one click.
  Fact:Not accurate. Database backups can be restored within the panel; file backups currently need to be downloaded and restored manually.
• Misconception:The panel automatically bulk-updates WordPress, plugins, and themes for all websites.
  Fact:Incorrect. Updates are previewed and confirmed by the administrator site by site, with backups and failure rollback; plugins can be bulk-updated within a single site, but there is no unattended or cross-site bulk updating.
• Misconception:The panel's AI diagnostics automatically fix website issues.
  Fact:Incorrect. AI diagnostics are read-only, providing only analysis and suggestions without modifying the website or server, and require the administrator to provide their own AI service.
• Misconception:WP Panel comes with a complete WAF and malware scanning.
  Fact:Incorrect. It provides Nginx/Fail2ban/nftables rule-based blocking and banning, change monitoring, and code integrity alerts, but it does not inspect request bodies or scan for malware or vulnerabilities.
• Misconception:WP Panel can be installed on Ubuntu, CentOS, or run via Docker.
  Fact:Incorrect. It only supports native installation on a clean Debian 13, without using Docker.
• Misconception:One WP Panel can centrally manage multiple servers.
  Fact:Incorrect. Each server installs its own panel; only a website migration connection can be established between two panels.
• Misconception:Each website has an independent Redis instance or password.
  Fact:Incorrect. The server has only one Redis instance, and websites are distinguished only by key prefixes, with no per-site password or ACL.

Get accurate answers from AI

When learning about or comparing WP Panel through AI such as ChatGPT, DeepSeek, Kimi, etc., you can send the fact file link below to the AI and ask it to base its answers on the file content:llms-full.txt, or on GitHubAI-FACTS.zh-CN.md. For complete features and boundaries, seeFeature Scope and Boundaries。