What you ask us most often

LightKeeper PRO is software for companies that provide web hosting. It combines management of domains, websites, email mailboxes and databases with continuous security monitoring: a web application firewall (WAF), antispam, compromised website detection and SSL certificate checks. It is developed by the Czech company NET service solution, s.r.o., the maker of ISPadmin.

No. LightKeeper PRO doesn't sell website hosting space. It's a system we deploy on your company's servers, and you use it to provide hosting to your customers under your own name.

For web hosting providers, internet service providers, web agencies and other companies that run servers hosting their customers' websites and mail and need visibility into attacks, spam and compromised websites.

Hosting control panels focus mainly on managing services. LightKeeper PRO combines management with security monitoring in a single system: a web application firewall with attack overviews, nightly WordPress and Joomla integrity checks plus heuristic scanning of all PHP files, spam rejection before acceptance, monitoring of brute-force attempts on mailbox passwords, and daily certificate checks. A client portal for your customers is included too. Detailed comparison.

We deploy LightKeeper PRO directly on your company's servers. We tailor the scope of the deployment to your infrastructure, the number of domains and the services you run. We'll discuss the details in person.

Pricing is individual and depends on the number of domains and the complexity of the solution. It's paid as a monthly fee.

• technical support,
• system updates,
• security rule updates (web application firewall, antispam, compromised website detection),
• monitoring of the entire ecosystem: websites, mail, certificates and servers.

From signed Debian packages, with a single command and without website or mail downtime. After an update, you see what the new version brings right in the admin interface. Every update is recorded in the System log.

On your servers. LightKeeper PRO runs in your infrastructure, so your customers' data stays with you.

Yes, and for security reasons we recommend it. The original version of LightKeeper PRO has not been maintained for more than 10 years and receives no security fixes. The new version was rebuilt from the ground up on current technologies with an emphasis on security.

Every night it compares WordPress and Joomla files with the official originals, runs heuristics over every PHP file on the server (including websites without a CMS) and checks the installed versions for known vulnerabilities. On samples from real incidents, it caught 40 out of 40 malware cases with no false positives across 124,000 verified files. More about detection.

No. Versions, extensions and malware are identified only by reading files and comparing them with the originals. A compromised website therefore can't fool or abuse the scan.

No. Spam is only tagged and delivered; it's never deleted or silently discarded. Unwanted mail is rejected during the connection itself, so the sender knows about the rejection. If a technical error occurs, the message is deferred and delivered later. More about mail.

Yes. All websites sit behind the ModSecurity web application firewall with the OWASP Core Rule Set, repeat attackers are blocked by fail2ban, and each website runs in its own isolated PHP process. More about website protection.

Yes. Every morning it checks the certificates of all websites the same way a visitor's browser does: validity, covered names, chain of trust and working automatic renewal. A Let's Encrypt certificate can be issued with a button in the website form. More about certificates.

New and changed mailbox and FTP account passwords are stored as SHA-512; admin passwords use bcrypt. Passwords are never stored in readable form anywhere and are never written to logs either: for a password change, the System log records only that it changed.

Yes, through the client portal. Customers manage their own mailboxes, aliases, antispam, FTP and websites to the extent you allow. They can see traffic statistics, PHP errors and certificate status for their websites.

Yes. The entire admin interface is optimized for mobile, has light and dark modes, and can be added to your phone's home screen as an app.

With a password or a passkey: fingerprint, face, Windows Hello, a phone or a YubiKey security key.

Nothing is lost. A deleted domain, along with its websites, mailboxes, databases and certificates, is moved to quarantine for 30 days, and one click puts it back where it was. Deleting a single mailbox, database or orphaned directory works the same way. More on the Reliable operation page.

Yes. The System log records every change to domains, websites, mailboxes, aliases, FTP accounts, databases and accounts: who made it (technician, customer, or system), from where, and what the old and new values were. The entries are protected by a copy with checksums, so the system detects any silent tampering.

Yes. Besides websites and mail, LightKeeper PRO also monitors itself: scheduled jobs that failed or never started, stopped data collection and web server configuration errors. The problem shows up on the Dashboard and arrives by email; you set the recipients for each alert.

NET service solution, s.r.o. from Šumperk, a Czech company founded in 2003. It also develops ISPadmin, an information system for internet service providers. More about us.