Stack Guides & Tips

The best WordPress control panel: 26 panels ranked

Published
No affiliate links

There are no affiliate links on this page. No panel, host or server company pays me anything for appearing here, or if you buy from them.

Written in November 2026. Panels change their prices, plans and features all the time, so read this as a snapshot of that month.

The question people actually ask me is “Which control panel should I put on my server?”, usually straight after I’ve told them to get off shared hosting. This is my answer, with the scoring shown so you can disagree with the weights rather than with me.

It sits alongside Choosing WordPress hosting for performance, which covers which server to rent. This page covers what to run on it.

Buy the panel and the server separately

My advice hasn’t changed: buy your control panel from one company and your server from another.

The reason is incentives. If a company sells you the panel and the hosting, it earns more when your site needs a bigger server. A slow site isn’t something it wants, but it isn’t something that costs it money either. A company that only sells the panel earns the same whether your server has 2 GB or 32 GB. The only way it makes more is by keeping you as a customer and keeping its support queue short, and the cheapest way to do both is a panel that works and a stack that doesn’t fall over.

That’s not a claim that bundled hosts are dishonest. Plenty of them tune hard and support you well. It’s that the panel-only vendor’s incentives line up with yours by default, and the bundled host’s only line up if it chooses to make them.

There’s a second benefit that’s easy to miss. When the panel and the server are separate, you can move. Hetzner gets more expensive in the US, DigitalOcean opens a region nearer your customers, a data centre has a bad week: you add a new server to the same panel, clone the site across, change DNS. The panel is the thing that stays.

When a managed host still makes sense

If you don’t want any server responsibility at all, a managed host is a perfectly reasonable choice. The two I point people at are GridPane’s PeakFreq when price matters most, and WP Engine when support does (more under “What I’d buy” below). You pay for that in two ways: you can’t bring your own server, and the company does earn more when you upgrade. If an hour of your time is worth more than the difference, buy it with your eyes open.

What I ranked on

Every panel I’d recommend needs three things: staging, backups and cloning. Ideally cloning to another server in another data centre, because that’s what makes moving cheap. The rest of the weighting follows from the argument above.

CriterionWeightWhat earns a 5
Bring-your-own-server freedom20Panel only, any provider, no server resale
Staging15One click, push and pull both ways, choose which database tables go
Backups15Scheduled several times a day, off-server targets, incremental, easy restore
Cloning15Clone a site to any server, including another provider or data centre
Stack15Nginx or LiteSpeed/OpenLiteSpeed, current PHP, Redis object cache, server page cache
Price10Cheapest tier that has staging, backups and cloning, for one or a few servers
Support and project health10Real support included, active development, no unhandled security history

Each criterion is scored 0 to 5 from the vendor’s own pricing pages and documentation, read on 4 November 2026 (6 November for SlickStack, Virtualmin, Centmin Mod, Trellis, ISPConfig and Froxlor). Where I couldn’t confirm a feature it scored low rather than getting the benefit of the doubt. Ties are broken by the combined staging, backups and cloning score.

What this ranking doesn’t measure is speed. I haven’t benchmarked these panels against each other, so I’m not going to guess.

The ranking

#PanelScore /100ModelPrice for staging + backups + cloning
1RunCloud91Panel only$19/mo (Professional, up to 50 servers)
2xCloud84Panel, also resells servers$5 per server/mo (PRO)
3Enhance84Panel licence, per site$10/mo minimum ($0.15 per site)
4SpinupWP82Panel only$12/mo (Essentials, 1 server)
5Plesk + WP Toolkit74Server licence€25.49/mo (Web Pro VPS)
6EasyEngine73Open source, command line$0 [open source]
7Cloudways71Bundled hostingEntry price not verified
8FlyWP70Panel, also resells servers$5 per server/mo
9ServerAvatar69Panel, also resells servers$12/mo (5 servers)
10Ploi68Panel only€13 / $16 per month (Pro, 10 servers)
11cPanel + WP Toolkit67Server licence$29.99/mo (Solo, 1 account)
12Virtualmin GPL67Open source, Pro edition sold separately$0 [open source]
13CyberPanel63Open-source core, paid add-ons$59/yr add-on bundle
14SlickStack62Open source, command line, one site per server$0 [open source]
15Centmin Mod59Open source, shell menu$0 [open source]
16Webinoly59Open source, command line$0 [open source]
17GridPane (new accounts)58Free panel on Vultr, or resold Vultr serversFree Core; PeakFreq from $18.08/mo with server
18HestiaCP58Open source$0 [open source]
19CloudPanel56Free, closed sourceFree (no staging or cloning)
20Trellis55Open source, Ansible playbooks$0 [open source]
21ISPConfig54Open source, paid add-ons$0 [open source]
22WordOps53Open source, command line$0 [open source]
23aaPanel48Freemium, custom licencePro $198/yr
24Laravel Forge38Panel, also sells Laravel VPSNo WordPress staging or cloning
25Coolify38Open-source PaaS$0 [open source]
26Froxlor37Open source$0 [open source]

Moss is missing because it no longer exists: moss.sh doesn’t resolve as of November 2026.

What they look like

One screen from each panel, taken from its own documentation or website. Click any of them to see it full size. I couldn’t get a usable screen from Cloudways’ own pages, and SlickStack, Centmin Mod, Webinoly, WordOps and Trellis are command-line tools with no screen to show.

1. RunCloud

RunCloud does everything on my list, and it only sells the panel.

Staging is one click, and the sync works in both directions with an option to move “all database tables or only the selected tables”. That last part matters for WooCommerce. If orders have come in on live while you’ve been testing on staging, you want to push your settings tables back without overwriting the orders. RunCloud also takes a backup of production before it syncs.

RunCloud's staging Sync screen with Staging as source, Production as destination, and a choice between migrating all tables or selected tables only.
The "Migrate selected tables only" option is what lets you push settings without overwriting live orders.

Cloning is the one I wanted to check, because I’d been telling people RunCloud does what GridPane does here. It does. RunCloud’s own guide to moving sites between servers opens with “Whether you’re moving your website to a different cloud provider, or transferring it to an on-premises server”. You clone the web app to any server connected to your account, tick “Clone database”, and repoint DNS. A Hetzner server in Falkenstein and a DigitalOcean droplet in New York are both just servers to RunCloud.

RunCloud's Clone Web Application form with a Clone To server dropdown, a Clone Database checkbox and a new domain name field.
The Clone To dropdown lists every server on your account, whichever provider it runs on.

The catch is the tier. Cloning isn’t in Essentials ($9/mo, one server, one staging site). You need Professional at $19/mo, which also lifts you to 50 servers and 10 staging sites. That’s the plan I’d buy.

The stack is NGINX by default with OpenLiteSpeed available, multiple PHP versions per server, and RunCloud’s own cache doing NGINX FastCGI and Redis full-page caching plus a Redis object cache. Backups run anywhere from every 12 hours to every 7 days, kept for up to a month, with 2 GB of storage on Essentials and 10 GB on Professional, or your own S3 or SFTP.

What I couldn’t confirm is support: RunCloud sells tickets, but its pricing page doesn’t say what hours or response times you get, which is why it scores 3 there.

2. xCloud

xCloud has the best staging tool I found. Push and pull both ways, incremental or full file copy, and the choice of full database or selected tables in either direction. It’s $5 per server per month for the PRO features, which is the lowest price on this list for all three of staging, backups and cloning. Stack-wise you choose NGINX or OpenLiteSpeed per server, with Redis, full-page cache and an edge cache, and it has 24/7 live chat.

It drops points on the thing this article is about. xCloud also sells managed servers with the hardware included, so it does have something to gain when you buy a bigger one. You can still bring your own Hetzner, DigitalOcean, Vultr or any Ubuntu server, and nothing forces you onto theirs. It’s a mixed incentive, not a bundled one.

Note that the free tier (first server, up to 10 sites) has no staging, cloning or proper backups, so it doesn’t meet my minimum.

xCloud's Staging Management card with Pull Data from Production to Staging and Push Data from Staging to Production buttons.
Staging syncs in both directions from one card: pull from live, or push to live.
xCloud's Push to Production dialog with Files switched on and set to Incremental, a Database switch, and a ticked option to back up production before pushing.
Files can be pushed incrementally, and a production backup is taken first by default.

3. Enhance

Enhance is the one most site owners haven’t heard of, because it’s sold mainly to hosting companies as a cPanel replacement. It’s priced per website across your whole cluster: $0.15 per site per month, with a $10 minimum. Servers and staging sites aren’t billed. So a single site owner pays $10.

It’s panel only, the stack choice is broad (LiteSpeed, OpenLiteSpeed, Apache or nginx, with Redis and a container per site), backups are incremental snapshots to S3-compatible storage with self-service restore, and support is included. The WordPress toolkit does cloning and staging with a push to live.

What I couldn’t confirm is cloning a site to a different server or provider, so it scores 2 on cloning. It also wants a fresh Ubuntu 24.04 machine with at least 2 GB of RAM and two cores, and it’s built for running hosting, which is more panel than one blog needs.

Enhance's Backups page for a website, listing automatic and manual backups with file size, database and mailbox counts, and a Restore button on each.
Automatic backups run several times a day here, and each one has its own Restore button.

4. SpinupWP

SpinupWP is the closest thing to RunCloud in spirit: panel only, any provider (Vultr, Linode, DigitalOcean and Hetzner are integrated, anything else works), and staging, cloning and backups on the cheapest plan. Essentials is $12 per month for one server, and extra servers get cheaper fast.

There’s no feature called staging. You clone a site, then use Refresh to copy files, database or both in either direction. It works, but it copies the whole database, so you can’t hold back the orders tables the way RunCloud, xCloud and Plesk let you. Backups go up to four times a day to the storage you supply. Support is email, 2am to 6pm US Eastern, weekdays only.

One history note: SpinupWP came from Delicious Brains, which WP Engine bought in 2022, but SpinupWP was not part of that sale and is an independent company.

SpinupWP's Refresh Site screen with Files and Database checkboxes, a site to copy from, an exclude-files box and a backup-first toggle.
Refresh copies files, the database or both, but the database is all or nothing, with no table picker.
SpinupWP's Backup Schedule panel with daily, weekly and monthly schedules, each choosing database and files, run times, and a delete-after period in days.
Daily, weekly and monthly backups each get their own times and retention period.

5. Plesk with WP Toolkit

Plesk’s WP Toolkit has the most thoughtful staging sync on this list. By default it copies “all tables” except posts, postmeta, users and usermeta, which is exactly the content you don’t want to overwrite on live. You can also pick individual tables.

But you have to pay for the right edition. Web Admin (€14.29/mo on a VPS) only gets the cut-down WP Toolkit with no cloning, staging or sync. Web Pro at €25.49/mo is the realistic minimum. The stack is Apache with nginx in front, which is fine but not what I’d choose for a busy WooCommerce store. Plesk is owned by WebPros, the same company as cPanel.

Plesk WP Toolkit's site card showing Copy Data, Clone and Back Up / Restore links above the site status and tool toggles.
Copy Data is the staging sync, sitting beside Clone and Back Up / Restore on every site.

6. EasyEngine

If you’re comfortable on the command line, EasyEngine scores higher than most of the GUI panels for one reason: ee site clone and ee site sync work between servers over SSH, and you can sync files, database or uploads on their own. It’s MIT-licensed, maintained by rtCamp, and had five releases between July and October 2026. Each site runs in Docker with nginx.

There’s no table-level sync, and support costs extra. If you’d rather have a screen than a terminal, rtCamp also sells the EasyEngine Dashboard, a control panel for sites on your own servers. Its free plan covers 2 sites on 1 server with automated daily backups and one-click restore, and paid plans are priced by the number of sites and servers. For a developer, the free CLI is a solid option. For anyone else, pick something from the top four.

The EasyEngine Dashboard's Backup & Restore tab for a WordPress site, with an Automated Backup switch and a list of daily auto backups, each with Restore, Prepare ZIP and Delete buttons.
The EasyEngine Dashboard puts daily automated backups and one-click restore on top of the free CLI.

7. Cloudways

On features alone Cloudways would sit near the top: proper staging with table selection, cloning an app or a whole server “to another provider with the location you want”, backups included, 24/7 chat. It loses 20 points because you can’t bring your own server. You buy a DigitalOcean, Vultr, Linode, AWS or Google server through Cloudways, at Cloudways’ price.

That’s the trade I described at the top. If you want no server responsibility, it’s a good one. I couldn’t verify the current entry price directly, because the pricing page was showing promotional discounts, so check it yourself.

8 to 10. FlyWP, ServerAvatar and Ploi

FlyWP is $5 per server, runs each site in its own Docker container with nginx or OpenLiteSpeed, and does hourly backups and cloning to another server. It advertises staging but its documentation doesn’t describe how the push or pull works, so I scored it low there. It also resells managed servers.

ServerAvatar has push and pull staging, hourly backups and cloning, from $12/mo for five servers. Like FlyWP and xCloud it also sells managed servers.

Ploi is panel only and good value at €13 / $16 a month for ten servers with cloning and backups. Its staging is weaker: you can only create a staging site alongside a new domain, and the docs don’t say how the database is handled when you push. It’s NGINX only and doesn’t offer 24/7 support.

11. cPanel with WP Toolkit

cPanel still has excellent backups, and WP Toolkit is included at no extra cost. What sinks it is price and stack.

In October 2019 a cPanel Solo licence was $15 a month. In November 2026 it’s $29.99. The licence that used to give you unlimited accounts on a VPS for $20 is now $35.99 for five accounts. And the default web server is Apache, with nginx as an optional reverse proxy and LiteSpeed sold separately. If your host bundles cPanel, it works. I wouldn’t buy a licence for a new server.

WP Toolkit inside cPanel showing a WordPress site's dashboard with Copy Data, Clone and Back Up / Restore links, update status and security toggles.
It's the same WP Toolkit as Plesk, here inside cPanel.

The free and open-source tools

CyberPanel runs OpenLiteSpeed and is free, but the clone and staging tools are in a paid add-on, and in October 2024 around 22,000 CyberPanel servers were hit by ransomware through command-injection flaws (CVE-2024-51567 and CVE-2024-51378). Patch it, put it behind a firewall, or pick something else.

Webinoly and WordOps are command-line tools with very good stacks (nginx, Redis, FastCGI cache, current PHP) and no staging. WordOps went 20 months without a release before picking up again in August 2026.

SlickStack is the only command-line tool here with a real staging site. It keeps a staging copy on a subdomain that refreshes from live on a schedule, and ss push staging sends it back. But that push replaces the whole live database, so any orders taken since the last refresh are lost, and staging shares live’s uploads folder. It’s built for one WordPress site per server (nginx, FastCGI cache, Memcached rather than Redis), its default backup is one hourly database dump that overwrites itself, and its root cron job re-downloads SlickStack’s own scripts from the project’s public mirrors unless you switch that off.

Centmin Mod is a shell menu for AlmaLinux and Rocky Linux with a very complete stack: its own nginx build, PHP 7.4 to 8.5, MariaDB, Redis, and a WordPress installer that sets up Cache Enabler, Redis or FastCGI page caching. Its backup script sends files and databases to S3, Backblaze B2, DigitalOcean Spaces or Cloudflare R2, and menu 21 moves a whole server to another Centmin Mod server. There’s no staging, and it’s one developer, George Liu, plus a community forum.

Trellis, from the Roots team, is a set of Ansible playbooks, and it’s the only tool here that treats staging as its own server: you describe staging and production in config files and deploy code to each with git, with rollback. What it doesn’t do is move data. There’s no command to pull the live database or uploads into staging, and no backups at all, so you’d add both yourself. The stack is excellent (nginx, FastCGI cache, Redis or Memcached, Ubuntu 26.04), but deploys expect a Bedrock site, so an existing WordPress install has to be restructured first.

HestiaCP is a well-maintained GPL fork of VestaCP with good incremental backups, but no staging or cloning. You move a site by backing it up and restoring it on the other server.

CloudPanel has a fast stack (NGINX, Varnish, Redis 8) and costs nothing, but it has no staging or cloning, backups go off-server only and are restored by hand, support is a Discord server, and it isn’t open source: the licence lets the vendor revoke it.

CloudPanel's Amazon S3 backup settings with frequency, time, bucket, region, storage directory, retention period and excludes.
CloudPanel's backups are remote only: you set a storage provider, frequency and retention.

aaPanel is cheap and flexible, but it’s under a custom licence that isn’t open source, its staging features aren’t documented, and it has a history of security flaws including WebSocket hijacking of its web SSH terminal.

Virtualmin, ISPConfig and Froxlor: hosting panels, not WordPress panels

These three are free graphical panels, but they’re built for running hosting for other people, with mail, DNS and reseller accounts, and WordPress is just one more thing you can put on them.

Virtualmin GPL, the free edition of a panel built on Webmin, does better on backups and moves than I expected. Scheduled backups can be differential and go to S3 and other cloud storage, there’s a Clone button, and Transfer copies a whole site to another Virtualmin server over SSH. There’s no staging, the default stack is Apache with no Redis or page cache management (nginx is an install option), and the WordPress tools worth having (WP Workbench) are Pro-only, from $7.50 a month. Webmin runs as root and had an authenticated root command-injection flaw in December 2024 (CVE-2024-12828), so keep it updated and don’t leave port 10000 open to the internet.

Virtualmin's Create Virtual Server form with a domain name field, administration password, SSH key options and Enabled features ticked for DNS zone, Apache website, MariaDB database, mail, spam filtering and Webmin login.
Each site in Virtualmin is a "virtual server" with its own DNS, mail and database, and Apache is the default web server.

ISPConfig is a BSD-licensed panel for Apache or nginx with decent per-site backups: daily, weekly or monthly, a set number of copies kept, and restore from the panel. They go to a local folder, though, so getting them off the server means mounting remote storage yourself. There’s no staging or site cloning, moving servers needs the paid Migration Toolkit (€79 a year), and its WordPress Manager is still in beta with no price announced.

The ISPConfig 3.3 admin dashboard, with Client, Sites, Email, DNS, Monitor, Tools and System modules, a latest-news list and a system load chart.
Sites sits beside Email, DNS and Client: ISPConfig is built for hosting other people.

Froxlor has almost nothing a WordPress site owner needs: no staging, no cloning, no app installer, and its backup is an export a customer requests into their own home folder, with no restore. It also published 46 security advisories on GitHub in 2026, six of them critical, many about a customer getting admin or root access, which matters most when other people share your server. It’s last on this list.

17. GridPane: what’s changed

GridPane is the panel I’ve recommended to agencies for years, and on stack and cloning it’s still one of the best. Its Snapshot Failover, which clones every site on a server to a second server on a schedule as often as hourly, is the thing I’d point to when I say “cloning to another data centre”.

But if you sign up today, you can’t buy the panel I was recommending. GridPane withdrew its Panel and Developer Plus plans from sale in November 2024. A new account gets one of two things:

  • Core, which is free, up to 25 sites, but only on Vultr servers (“Custom servers are only available on paid plans”), with no support beyond a community forum. Staging and backups aren’t listed among its features.
  • PeakFreq, where GridPane leases you Vultr servers by the hour, from $18.08 a month for 1 vCPU and 2 GB. In GridPane’s own words: “Like Cloudways … we pay for these servers directly, and then lease them to you.”

GridPane’s CEO was candid about why when he announced it: the company makes “significantly more profit” from managed hosting than from the panel, and it will “look more and more like a fully managed hosting solution”. That’s a fair business decision, and existing customers keep their plans. But for a new customer it’s now exactly the panel-plus-hosting model I’m arguing against, and that’s why it ranks 17th here. If GridPane starts selling its full panel for any server again (it has said add-ons are coming “in the near future” since 2024), it goes straight back near the top.

GridPane's Tools page with the Snapshot Failover form: source server, failover server and a sync interval in hours.
Snapshot Failover pairs a source server with a failover server and syncs them on a schedule.

24 and 25. Laravel Forge and Coolify

Both are good at what they’re for, which isn’t WordPress. Forge has no WordPress staging or site cloning and only backs up databases on its $39 plan. Coolify runs the official WordPress Docker image with no page cache, staging or cloning. I’ve included them because people ask.

What I’d buy

It comes down to what you want most.

  • The best speed: RunCloud Professional on a server you rent yourself from Hetzner in Europe, or Vultr everywhere else. The panel company only sells the panel, the server is yours, and every setting that matters for speed is yours to change.
  • Affordable managed hosting: GridPane’s PeakFreq. GridPane leases you a Vultr server in whichever Vultr data centre you choose and looks after it for you, from $18.08 a month for 1 vCPU and 2 GB, with ticket support, monitoring, staging, cloning and backups to your own S3 or Backblaze B2. You give up bringing your own server, and in return you never have to manage one, and you get one of the best stacks on this list.
  • The best support: WP Engine. You pay more for the hardware than you would on your own server, but its support is real WordPress people who’ll look at your site rather than read you a script.

For which server to put underneath, see Choosing WordPress hosting for performance.

What this ranking doesn’t measure

This ranking is features, prices and business models. It doesn’t say which panel’s stack is fastest, because I haven’t measured it and I’m not going to repeat other people’s numbers. To find out for your own site, try a panel on a staging copy and measure the pages that matter before you move.

Prices and features checked 4 November 2026 from each vendor’s own pricing pages and documentation, and on 6 November 2026 for the six open-source tools added that day.

Comments

▲
▼
1/1