Pricing
Pricing
One licence per server, CyberPanel or cPanel. Every domain, every account and every reseller on that machine is covered by it.
Try it for 14 days, free
Two tiers, both free, neither of them quarantining anything by itself. What differs is how long you get and how much of the product is switched on.
| Trial | 14 days, report-only | 30 days, payment method on file |
|---|---|---|
| Duration | 14 days from the start of the trial. | 30 days from the start of the trial. The trial is extended automatically, not restarted. |
| Requirement | A customer account in the shop with a confirmed email address. Disposable email domains are turned away. | The same account, plus a payment method stored in the client area: credit card or PayPal. |
| Scope | Every engine, signed feeds, findings and notifications. Nothing is put into quarantine, and the upload gate only reports. | Everything except automatic quarantine: manual quarantine and restore, the upload gate with blocking, and per-domain policies. The policy action “quarantine” stays on “report” for the duration of the trial. |
| Afterwards | The daemon stops scanning and stops updating its feeds. Findings, the audit trail and everything already in quarantine stay visible in the panel and on the CLI. Order the licence to carry on being protected. | |
One trial per server and per customer. The trial is tied to the server fingerprint and renewed online once a day.
One CyberPanel or cPanel server
One licence per server, no limit on the number of domains or accounts on it.
€14.90per server / month · incl. 19 % VAT
Net for business customers: €12.52
€149.00per server / year · incl. 19 % VAT
Net for business customers: €125.21 — 2 months free against paying monthly
- Real-time watching with fanotify, with reconciliation after overflow, reboot or upgrade
- The synchronous PHP upload gate, configurable fail-open or fail-closed per domain
- ClamAV, YARA 4.5, hash sets with a known-good allowlist and explainable heuristics
- Signed signature generations with per-rule provenance, corpus gating and automatic rollback
- Crash-safe quarantine with full metadata restore, and a hash-chained audit trail
- The CyberPanel plugin with roles for administrators, resellers and customers
- cPanel/WHM support in beta: platform auto-detection, a site index from the cPanel userdata, CLI and API
- Health, metrics and audit in Prometheus text format on a local socket
- Signed
.deband.rpmpackages for six supported distributions
Displayed prices include German VAT at 19 %. Business customers inside the EU with a valid VAT ID are invoiced net under the reverse-charge procedure.
Trial
14 days free in report-only mode — 30 days with a payment method on file.
free for 14 days
Every engine, signed feeds, findings and notifications on your own server. Nothing is quarantined, and the upload gate only reports. All it needs is a customer account with a confirmed email address.
From 5 servers
Running a fleet? Volume and reseller pricing is arranged individually. Tell us how many servers and how they are managed.
What one licence covers
A licence is bound to one server, identified by a fingerprint derived from /etc/machine-id.
Inside that server there is no counting: max_domains is zero, which is the product’s way of
saying “no limit”. A host with four hundred sites on it costs the same as a host with four.
The panel on that server makes no difference to the price. A CyberPanel host and a cPanel host cost exactly the same, and a licence moves between the two without a change of plan.
Moving a licence between machines is a two-command operation: shelltrap license deactivate on
the old server releases the slot, and shelltrap license activate on the new one takes it.
Yearly against monthly
The yearly price is ten monthly instalments: paying for a year up front saves two months. Both figures are gross and include 19 % German VAT, because most people reading a price want to know what leaves their account.
For business customers inside the EU with a valid VAT identification number, invoicing is net under the reverse-charge procedure — 12.52 EUR per month or 125.21 EUR per year. The client area asks for the VAT ID during checkout.
Fleets
From five servers upwards, volume and reseller pricing is arranged individually. It is a short conversation: tell us how many servers, which distributions and whether you manage them for customers or for yourself. Ask about volume pricing .
How it compares
Two figures, both from the vendors’ own pages, both checked on 4 September 2026. We are not going to publish a competitor comparison table built from numbers we cannot cite.
| Product | Model | List price |
|---|---|---|
| Shelltrap | subscription per server, unlimited domains | 14.90 EUR / month, 149.00 EUR / year, VAT included |
| Imunify360 | subscription per server, tiered by number of users | from 12 USD to 45 USD per month (imunify360.com/pricing ) |
| ConfigServer eXploit Scanner | one-time licence per server | no longer sold (configserver.org ) |
Two things that table does not show and that matter more than the numbers:
- CyberPanel’s own documentation states that using Imunify360 requires converting the host operating system to CloudLinux OS (CyberPanel knowledge base , checked 4 September 2026). On a stock AlmaLinux or Ubuntu host that is a second licence and a migration on top of the first price.
- Shelltrap does not price by the number of accounts, so a busy reseller host does not cost more than an idle one.
- CXS was licensed once per server and covered cPanel hosts as well. Shelltrap replaces it on both platforms at one price, with cPanel support currently in beta — what that means .
Billing, invoices and cancellation
Ordering runs through our shop, which is the same client area used for Panomity hosting products: invoices, payment methods, licence key and the list of activated servers all live there. Subscriptions renew until you cancel them, and cancellation is a button in the client area rather than an email you have to chase.
Statutory rights are unaffected by anything on this page. The contractual detail is in the terms and the licence terms .
Questions people actually ask
Is the price per server or per domain?
Per server. A licence covers one host — CyberPanel or cPanel — and every domain, child domain, addon domain and account on it. There is no per-site or per-account counter.
Does a cPanel server cost more than a CyberPanel server?
No. It is the same licence and the same price: 14.90 EUR a month or 149.00 EUR a year including VAT, per server. cPanel support is in beta from Shelltrap 0.3.0; the licence is not, and neither is the support obligation that comes with it.
Do the prices include VAT?
Yes. 14.90 EUR and 149.00 EUR are gross prices including 19 % German VAT. Business customers elsewhere in the EU with a valid VAT ID are invoiced net at 12.52 EUR and 125.21 EUR under the reverse-charge procedure.
Is there a free tier?
No, but there is a free trial: 14 days in report-only mode, or 30 days once a payment method is stored in the client area. All it needs is a customer account with a confirmed email address, and nothing is charged when it runs out. The full terms are on the trial page .
What happens after the trial?
The daemon stops scanning and stops updating its feeds; it does not crash and it never reports clean. Findings, the audit trail and everything already in quarantine stay on your machine and stay visible in the panel and on the CLI. If you want to carry on being protected, you order the licence — 14.90 EUR a month or 149.00 EUR a year, VAT included.
Can I extend the trial?
Once, and automatically: store a payment method in the client area — credit card or PayPal — and the 14 days become 30, counted from the day the trial started rather than from the day you stored it. Beyond that it is one trial per server and per customer. If you need longer for a real reason, ask us.
Why only one trial per server?
Because a trial that can be restarted is a free product rather than a trial, and this one costs money to provide. The trial is tied to the server fingerprint — the same identifier a paid licence uses — and renewed online once a day, so it runs its course from the day it started. It is the simplest rule we could find that stays fair to the people paying.
What does report-only mean?
Everything runs and nothing is moved: all engines, signed feeds, findings with their individual signals and notifications, but no automatic quarantine, and the upload gate reports instead of returning HTTP 403. It is the mode we start in on our own production hosts, and the one the installation guide recommends after you buy as well.
What happens when a licence expires?
Nothing crashes. The watcher keeps counting events, the upload gate answers allow with the reason unlicensed, health reports unlicensed with a precise cause, and the signature feed returns 401. The failure is visible rather than dangerous.
Can I move a licence to another server?
Yes. Run shelltrap license deactivate on the old machine to release the activation slot, then activate on the new one. The licence is bound to a fingerprint derived from /etc/machine-id, not to hardware you cannot change.