2F
Panel access
Two-factor authentication, SSH management, credential rotation and audit logging help protect administrative access.
Security
Security should be part of the architecture.
EasyCP is designed to reduce unnecessary privilege, create clearer boundaries around sensitive operations and fit into the security stack hosting providers already run.
Privilege separation
The panel does not need to be root to be useful.
EasyCP separates the ordinary web application from root-required server operations. That narrows the privilege exposed to day-to-day application code and creates a deliberate boundary for sensitive actions.
01
Unprivileged panel service
The main EasyCP service runs as the dedicated easycp user.
02
Restricted privileged broker
Root-level work is handled by a separate privileged component with scoped operations.
03
Validation and audit boundaries
Privileged requests can be validated and recorded instead of exposing an unrestricted root shell path.
REQUEST PATH
WEB APPLICATIONEasyCP as easycp userRoutes · UI · API · ordinary operations
↓ validated request ↓
PRIVILEGED BOUNDARYAllowlisted root operationInput validation · controlled execution · logging
↓ server change ↓
HOST OSService / filesystem / network action
Layered defence
Security controls that fit a real hosting server.
EasyCP brings together the controls operators need to protect the panel, hosted sites and the server around them.
WAF
Web attack protection
WAF / ModSecurity, firewall controls and bot management give you layers around web-facing services.
AV
Malware & threat tooling
ClamAV, malware scanning, CrowdSec and Imunify360 integrations extend protection beyond the panel itself.
Security operations
Give the operator useful context, not another disconnected screen.
Security is easier to operate when it sits beside logs, process visibility, network status, raw access data, service health and diagnostics.
2FAAdministrative access controls
WAFModSecurity workflows
AuditSensitive action visibility
ThreatCrowdSec / Imunify360 / malware tooling
“Security by design” means reducing the amount of code that needs privilege, not just adding another firewall switch.
EasyCP architecture principleSee how EasyCP connects with the wider hosting stack.
Security, backups, performance, billing and email integrations are part of the operating model.