WHM Addon for Hosting Providers
Install and manage the Defensia security agent directly from your WHM panel. Designed for hosting providers running cPanel/WHM on CentOS, AlmaLinux, or CloudLinux.
What does the addon do?
The Defensia WHM addon adds a management panel to WHM's sidebar under Plugins > Defensia Server Security. From there, server administrators can:
- Install the Defensia agent on your server with one click
- View real-time agent status (version, uptime, connection status)
- Check if the server is protected and connected to the dashboard
- Quick links to the Defensia dashboard for full management
- Integrates with cPHulk brute force detection (automatic)
Requirements
- cPanel/WHM 11.30+— Any modern WHM version
- Root access— Required for addon installation
- CentOS 7+ / AlmaLinux 8+ / CloudLinux 7+— Standard cPanel-supported OS
- curl— For downloading addon files
- Internet access— HTTPS outbound to defensia.cloud
Installation
SSH into your WHM server as root
The addon must be installed as root because it writes files to cPanel system directories.
Run the install command
curl -fsSL https://defensia.cloud/whm-addon/install.sh | bashThis downloads the addon files and registers Defensia in the WHM sidebar.
Open WHM and find Defensia
After installation, navigate to WHM > Plugins > Defensia Server Security. The addon will appear in the left sidebar. From there you can install the agent, view status, and manage your server's security settings.
What the installer does
- Verifies cPanel/WHM is installed on the server
- Downloads addon files from defensia.cloud/whm-addon/
- Installs the CGI script to /usr/local/cpanel/whostmgr/docroot/cgi/
- Copies static assets (CSS, JS, icon) to the WHM addon plugins directory
- Registers the addon in /var/cpanel/apps/defensia.conf
- Installs a one-command uninstaller at /usr/local/bin/defensia-whm-uninstall
File locations
/usr/local/cpanel/whostmgr/docroot/cgi/addon_defensia.cgi/var/cpanel/apps/defensia.conf/usr/local/cpanel/whostmgr/docroot/addon_plugins/defensia//usr/local/bin/defensia-whm-uninstallSecurity
- The addon uses Whostmgr::ACLS::hasroot() for authentication — only WHM root users can access it
- No cPanel user-level access — the addon is restricted to the WHM admin interface
- The addon does not modify any cPanel configuration files or system services
- All communication with the Defensia API uses HTTPS with TLS 1.2+
- The agent token is stored locally in /etc/defensia/config.json and never transmitted to third parties
Compatibility
Uninstalling
To remove the WHM addon from the sidebar, run:
defensia-whm-uninstall
Or manually:
rm -f /var/cpanel/apps/defensia.conf rm -f /usr/local/cpanel/whostmgr/docroot/cgi/addon_defensia.cgi rm -rf /usr/local/cpanel/whostmgr/docroot/addon_plugins/defensia/ rm -f /usr/local/bin/defensia-whm-uninstall
Uninstalling the WHM addon does not remove the Defensia agent. If the agent is installed on the server, it will continue running independently. To also remove the agent, see the standard uninstall instructions.
WHM addon vs standalone install
The WHM addon is a management interface that makes it convenient to install and monitor the agent from WHM. Under the hood, it runs the same Defensia agent as the standalone install.
For hosting providers
If you manage multiple cPanel/WHM servers and want to deploy Defensia across your fleet, the WHM addon can be installed on every server via a simple script. Each server registers independently with your Defensia organization.
Multi-server deployment
# Deploy addon to multiple WHM servers for host in server1.example.com server2.example.com; do ssh root@$host 'curl -fsSL https://defensia.cloud/whm-addon/install.sh | bash' done
For volume pricing and white-label options, contact us.
Ready to protect your WHM servers?
Free for 1 server. No credit card required.