Features

See everything. Fix it from one place.

Five things Berth does that other panels leave to plugins, paid extensions or a second tool.

01 · Monitoring

Know before your customers do.

Uptime, response times, server load and every service, watched from inside the panel. No separate monitoring stack to install or pay for.

Watch any page, not just the home page, and check that a keyword is on it.
CPU, memory, disks and service restarts, per server and per subscription.
A watchdog with thresholds and office hours. Alerts by mail or Telegram.
A public status page your customers can check themselves.

Uptimelast 45 days

shop.example.com/checkoutkeyword “Pay now” on the page24 h 100 %30 d 99.97 %

example.comHTTP 200 · certificate valid24 h 100 %30 d 100 %

mail.example.comIMAPS and SMTP submission24 h 100 %30 d 99.91 %

Response time · shop.example.com

312 msmedian1.9 speak

web01 · load

CPU23 %

Memory61 %

/var82 %

Watchdog · to Telegram · 14:07shop.example.com is slower than 1.5 s for 5 minutes

PHP-FPM pool at 20 of 20 workers. Raise the limit, or look at the slow log.

Backups · bakery-example.comrestic · S3 object lock

Today, 03:12site · 2 databases · 6 mailboxes · 18.4 GBRestore…
Yesterday, 03:1018.3 GB · 212 MB changed
Monday, 03:1118.1 GB · kept 30 days

Whole siteOne databaseOne mailboxA single file

Weekly restore test · picked at randomRestored into a sandbox and checked

HTTP 200412 tables6 mailboxes

02 · Tested backups

A backup only counts once you have seen it come back.

Berth restores a random subscription into a sandbox on a schedule, checks that the site answers and the data is there, and keeps the report for your auditor.

Encrypted with restic, optionally with the customer's own key.
Offsite to any S3 storage, with object lock against ransomware.
Customers restore a site, a database, a mailbox or a single file themselves.

03 · Security score

A score per domain, and a button to fix it.

Berth runs the checks of internet.nl, the Dutch standard for modern internet security, explains each result in plain words, and fixes what it can with one click.

DNSSEC, DANE, SPF, DKIM, DMARC, HSTS, TLS and IPv6 in one view.
Malware scanning with quarantine and a WAF per domain feed the same score.
Customers see their own score, so the conversation starts with facts.

of 100 example.com 2 points to gain

DNSSEC signedPassed
TLS configuration (NCSC)Passed
HSTS and security.txtPassed
DMARC policyp=none, should be p=rejectFix
DANE for mailno TLSA record for the mail serverFix
Malware scan · 14,208 filesClean

04 · WordPress

Every WordPress site on the server, in one list.

Updates, known vulnerabilities, hardening, a login link and a staging copy. Built in, not sold as a toolkit on top.

Site	Version	Updates	Security	Object cache	Actions
bakery-example.com	6.8.3	Automatic	Hardened	Valkey · 94 % hits	Log in
shop.example.com	6.8.3	3 plugins	1 known vulnerability	Valkey · 88 % hits	Update now
staging.shop.example.com staging	6.8.3	Test first	Not indexed	off	Copy to live

One-click installHardened from the start; the admin details are shown once.

Staging copyIts own domain, webspace and database. Test first, then copy.

Page cache with purgePublishing a post clears exactly the pages it touches.

Maintenance modeOne switch, with your own page while you work.

05 · Audit and incidents

Evidence, not anecdotes.

Every change is written to a log that cannot be edited without it showing. When something does go wrong, Berth keeps the clock for your NIS2 notifications.

Who, what, when, and the exact configuration diff.
Streamed to your SIEM over TLS; customers see their own entries.
A signed export of an incident with its timeline, ready for the regulator.

14:02 · anna · PHP version 8.3 → 8.4 · shop.example.com#a91f…3c
14:05 · auditor · admin rights for 2 hours · approved by mark#5e02…a1 ← a91f
14:07 · watchdog · 20 failed logins from one network#c47d…09 ← 5e02

Incident · password guessing on webmailopened 14:07

24 h · early warningSent

72 h · notificationdue in41:12:05

1 month · final reportin 30 days

06 · Also included

One panel instead of a stack of extensions.

Everything below is part of Berth, on every server. No add-ons to buy, license or keep up to date separately.

Migration and site importFrom Plesk, cPanel, DirectAdmin and other Berth servers, with a trial run first. Or fetch a single site over FTP or SFTP.
Integrity monitoring and write lockA fingerprint of every file the panel manages, and a write lock per subscription for sites that should not change.
Advice and self-repairRecommendations per domain, a hardening check of the server, and a repair command that puts a broken service right.
Logs and log drainsLive logs per domain, and forwarding to your SIEM, a log service or Grafana Loki.
Metrics for PrometheusA metrics endpoint with its own scoped token, ready for your own dashboards.
Apps and background processesNode.js and Python apps and workers per domain, each as the subscription's own user.
Certificates from any CALet's Encrypt or any ACME CA, wildcards, signing requests, and paid certificates through a CA reseller account.
DNS at your providerManage records at Cloudflare, TransIP or Hetzner, or host DNS yourself with DNSSEC.
CDN connectionCloudflare and Bunny, connected per domain, with purge from the panel.
CachingA Valkey object cache per subscription, a page cache with purge, and microcaching for dynamic sites.
Offsite backupsEncrypted with restic to S3 with object lock, SFTP, Backblaze B2, Azure or Google Cloud Storage.
Sign-in securityAuthenticator apps, passkeys, single sign-on with OIDC or SAML, and a second factor for SSH as well.
Billing integrationA provisioning API for WHMCS and HostBill, plus webhooks for everything that changes.
AI integrationLet an AI assistant work in the panel through MCP, with a scoped key or OAuth and only the customer's own rights.
Mail catcher for stagingMail sent by a staging site is caught and shown in the panel instead of reaching real people.
Evidence pack for auditsA signed package per period with access review, activity log and changes, for ISO 27001, BIO and NIS2.

07 · On the roadmap

What we are building next.

Berth is in early access. These are next on the list, and early-access partners help decide the order.

RoadmapWhite label for resellersYour own logo, colours, panel name and address per reseller, also in mails, status pages and reports.
RoadmapOne-click appsNextcloud, Matomo, Ghost, n8n, Uptime Kuma, Umami and more. Softaculous and Installatron for hosts that already use them.
RoadmapLaravel toolkitArtisan commands, queue workers, the scheduler, the .env file and Composer, straight from the panel.
RoadmapSmart WordPress updatesUpdate a staging copy first, compare screenshots before and after, and only then update the live site.
RoadmapReal-time malware protectionScan on every write instead of weekly, and clean known injections automatically.
RoadmapMail import over IMAPMove mailboxes from Gmail, Microsoft 365 or another host, with folders and flags.
RoadmapMicrosoft 365 and Google WorkspaceThe right MX, SPF, DKIM and autodiscover records in one click.
RoadmapMailing listsLists per domain with subscribe, unsubscribe, moderation and an archive.
RoadmapUptime from several locationsChecks from more than one place, so an alert means the site is really down.
RoadmapCore Web Vitals per siteLighthouse measurements on a schedule, in the performance score and the monthly report.
RoadmapVirus scanning for incoming mailAttachments scanned on arrival, with quarantine and a notice.
RoadmapDomain registrationRegister, transfer and renew domains from the panel through a registrar, with DNS and certificate set up at once.

And the rest: mail, DNS, certificates, PHP, databases.

The everyday work of a hosting panel, done carefully.

All features Request early access