Download

curl -fSLO --proto '=https' \
  'https://license.shelltrap.com/v1/downloads/shelltrap_<version>_amd64.deb?key=STL-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX'
curl -fsSL 'https://license.shelltrap.com/v1/downloads/index.json' | python3 -m json.tool

Verify before you install

Every release directory served by the licence service contains a SHA256SUMS file next to the packages. Compare the checksum of what you downloaded with that list before installing; the same checksums are shown in the client area. Detached OpenPGP signatures and an apt/dnf repository are planned for a later release and are deliberately not advertised here until they exist.

sha256sum -c --ignore-missing SHA256SUMS
dpkg-deb --info shelltrap_0.2.3_amd64.deb      # Debian/Ubuntu
rpm -qip shelltrap-0.2.3-1.x86_64.rpm          # AlmaLinux/RHEL

Installing the packages

Everything below works the same with a licence key or a trial key. If you are here for the free trial , the key in your client area activates exactly like a paid one.

On a CyberPanel host, install the core package first, then the panel plugin, and activate the licence:

sudo apt-get install ./shelltrap_0.2.3_amd64.deb ./shelltrap-cyberpanel_0.2.3_all.deb
sudo shelltrap license activate STL-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
sudo shelltrap health

sudo dnf install ./shelltrap-0.2.3-1.x86_64.rpm ./shelltrap-cyberpanel-0.2.3-1.noarch.rpm
sudo shelltrap license activate STL-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
sudo shelltrap health

On a cPanel/WHM host, install the core package on its own — there is no WHM plugin yet — and activate the licence the same way:

sudo dnf install ./shelltrap-<version>-1.x86_64.rpm      # AlmaLinux 8 / 9
sudo apt-get install ./shelltrap_<version>_amd64.deb     # Ubuntu 22.04 / 24.04
sudo shelltrap license activate STL-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
sudo shelltrap health

cPanel support needs Shelltrap 0.3.0 or newer. The daemon recognises the platform by itself and builds its site index from the cPanel userdata. It is a beta: read Shelltrap on cPanel before you install on a host with customers on it.

Which package do I need?

Two packages on a CyberPanel host, both from the same version; on a cPanel host only the first of them:

• shelltrap — the scanner: broker, worker, CLI, systemd units, the PHP upload adapter and the signature machinery. This is the one that does the work, on CyberPanel and on cPanel alike.
• shelltrap-cyberpanel — the panel integration: pages, roles and the repair path that puts the integration back after a CyberPanel upgrade. Optional; the scanner runs without it, and on a cPanel host you do not install it at all.

Supported with CyberPanel: Ubuntu 20.04, 22.04 and 24.04; AlmaLinux, RockyLinux and RHEL 8, 9 and 10; CloudLinux 8; CentOS 9. Debian is only third-party supported by CyberPanel itself, so we do not promise it either.

Supported with cPanel/WHM (beta): AlmaLinux 8 and 9, Ubuntu 22.04 and 24.04.

After installing

shelltrap license activate STL-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
shelltrapd --config /etc/shelltrap/shelltrap.toml --check
shelltrap health

Then read the installation guide for the profile decision, the systemd drop-ins and — importantly — how to start in report-only on a host that already has paying customers on it.

Findings are mailed from sentinel@shelltrap.com . Put that address on the allowlist of whatever filters your admin mailbox before you switch alerts on: the first mail you get is the one you least want in a spam folder. Replies to it are read, but it is not a support channel — support runs through the client area , and a suspected false positive has its own automated route .

No key yet?

The key is created when you order — a licence or a trial — and appears in the client area, together with the activation command and the list of servers currently using it.

• Try 14 days free — report-only, no payment method; 30 days with one on file
• Order Shelltrap — one licence per server, every domain covered
• Pricing — what it costs, with VAT and net figures