cPanel / WHM

WHM Addon for Hosting Providers

Install and manage the Defensia security agent directly from your WHM panel. Designed for hosting providers running cPanel/WHM on CentOS, AlmaLinux, or CloudLinux.

What does the addon do?

The Defensia WHM addon adds a management panel to WHM's sidebar under Plugins > Defensia Server Security. From there, server administrators can:

  • Install the Defensia agent on your server with one click
  • View real-time agent status (version, uptime, connection status)
  • Check if the server is protected and connected to the dashboard
  • Quick links to the Defensia dashboard for full management
  • Integrates with cPHulk brute force detection (automatic)

Requirements

  • cPanel/WHM 11.30+— Any modern WHM version
  • Root access— Required for addon installation
  • CentOS 7+ / AlmaLinux 8+ / CloudLinux 7+— Standard cPanel-supported OS
  • curl— For downloading addon files
  • Internet access— HTTPS outbound to defensia.cloud

Installation

1

SSH into your WHM server as root

The addon must be installed as root because it writes files to cPanel system directories.

2

Run the install command

curl -fsSL https://defensia.cloud/whm-addon/install.sh | bash

This downloads the addon files and registers Defensia in the WHM sidebar.

3

Open WHM and find Defensia

After installation, navigate to WHM > Plugins > Defensia Server Security. The addon will appear in the left sidebar. From there you can install the agent, view status, and manage your server's security settings.

What the installer does

  • Verifies cPanel/WHM is installed on the server
  • Downloads addon files from defensia.cloud/whm-addon/
  • Installs the CGI script to /usr/local/cpanel/whostmgr/docroot/cgi/
  • Copies static assets (CSS, JS, icon) to the WHM addon plugins directory
  • Registers the addon in /var/cpanel/apps/defensia.conf
  • Installs a one-command uninstaller at /usr/local/bin/defensia-whm-uninstall

File locations

FilePath
CGI script/usr/local/cpanel/whostmgr/docroot/cgi/addon_defensia.cgi
App config/var/cpanel/apps/defensia.conf
Static assets/usr/local/cpanel/whostmgr/docroot/addon_plugins/defensia/
Uninstaller/usr/local/bin/defensia-whm-uninstall

Security

  • The addon uses Whostmgr::ACLS::hasroot() for authentication — only WHM root users can access it
  • No cPanel user-level access — the addon is restricted to the WHM admin interface
  • The addon does not modify any cPanel configuration files or system services
  • All communication with the Defensia API uses HTTPS with TLS 1.2+
  • The agent token is stored locally in /etc/defensia/config.json and never transmitted to third parties

Compatibility

PlatformSupport
cPanel/WHM 11.30+ Fully supported
CentOS 7 Supported
AlmaLinux 8 / 9 Supported
CloudLinux 7 / 8 Supported (cPHulk integration)
Rocky Linux 8 / 9 Supported
Ubuntu (with cPanel) Supported
Plesk Not supported (use standalone install)
DirectAdmin Not supported (use standalone install)

Uninstalling

To remove the WHM addon from the sidebar, run:

defensia-whm-uninstall

Or manually:

rm -f /var/cpanel/apps/defensia.conf
rm -f /usr/local/cpanel/whostmgr/docroot/cgi/addon_defensia.cgi
rm -rf /usr/local/cpanel/whostmgr/docroot/addon_plugins/defensia/
rm -f /usr/local/bin/defensia-whm-uninstall

Uninstalling the WHM addon does not remove the Defensia agent. If the agent is installed on the server, it will continue running independently. To also remove the agent, see the standard uninstall instructions.

WHM addon vs standalone install

The WHM addon is a management interface that makes it convenient to install and monitor the agent from WHM. Under the hood, it runs the same Defensia agent as the standalone install.

FeatureWHM AddonStandalone
SSH brute force protectionYesYes
WAF (15 OWASP attack types)YesYes
Auto-detect web server logsYesYes
Docker container detectionYesYes
cPHulk integrationYesYes
Centralized dashboardYesYes
WHM sidebar integrationYesNo
Install agent from WHM UIYesNo
Status panel in WHMYesNo
Works without cPanelNoYes

For hosting providers

If you manage multiple cPanel/WHM servers and want to deploy Defensia across your fleet, the WHM addon can be installed on every server via a simple script. Each server registers independently with your Defensia organization.

Multi-server deployment

# Deploy addon to multiple WHM servers
for host in server1.example.com server2.example.com; do
  ssh root@$host 'curl -fsSL https://defensia.cloud/whm-addon/install.sh | bash'
done

For volume pricing and white-label options, contact us.

Ready to protect your WHM servers?

Free for 1 server. No credit card required.