Compare

auraPanel vs CloudPanel: the facts, with sources.

Two self-hosted Linux control panels, one free and one licensed per server, compared on operating systems, site types, databases, Docker, HTTPS, backups, security and price. CloudPanel's column is quoted from its own site and documentation, with links and the date read.

Free vs paidCloudPanel is free of charge; auraPanel is licensed per server
PostgreSQLfirst-class in auraPanel; not in CloudPanel's stack
Dockera site type in auraPanel; absent from CloudPanel
Firewall UICloudPanel manages UFW rules; auraPanel leaves them to you
auraPanelCloudPanel
In one lineA paid, per-server Linux control panel for sites, applications, databases, HTTPS, backups and server operations, made by auraOne."A free software to configure and manage a server with an obsessive focus on simplicity", by MGT-COMMERCE GmbH, Berlin.
Price and licence$24.95 per server per month, or $249.95 a year. 30-day free trial, no card.Free of charge under MGT-COMMERCE's own licence terms. Reselling, or hosting for third parties for a fee, needs written permission; reverse engineering is prohibited. Not an open-source licence.
Operating systemsDebian 12 and 13; Ubuntu 22.04, 24.04 and 26.04 LTS. x86-64 and ARM64.Debian 12 and 13; Ubuntu 22.04, 24.04 and 26.04. x86 and ARM64.
Minimum serverDesigned for 1 core, 1 GB RAM, 10 GB disk; installer adds swap at 2 GB or less."≥ 1 Core", "≥ 2 GB" RAM, "≥ 10 GB" disk.
Web servernginx mainline from nginx.org.NGINX 1.30 with the PageSpeed module; Varnish Cache available per site.
Site typesPHP, Node.js, Python, static, reverse proxy, Docker Compose.Static, PHP, Node.js, Reverse Proxy, Python. WordPress quick install.
PHP8.1–8.5 installed side by side; per-site pool and version; hand-installed 7.4 recognised for legacy apps."7.1-8.5" per the technology stack.
Node.js and PythonNode.js 18–24 per site, start command resolved from package.json, systemd or pm2-runtime. Python via gunicorn; no venv or pip handling by the panel.Node.js 12–24 LTS; Python 3.x by OS. Deployment documented with pm2 and uwsgi.
DatabasesPostgreSQL and MariaDB, chosen per database. Loopback only; no remote access feature.MySQL 8.0/8.4 and MariaDB 10.6–12.3. PostgreSQL not in the technology stack. Remote access by allow-listing your IP on port 3306 in the firewall.
Database consoleauraDB, built in: schema browser, SQL with EXPLAIN, grid editing, privileges, role-checked statements, hash-chained audit.phpMyAdmin (their docs warn against using it for import and export; clpctl db:export / db:import instead).
DockerDocker Compose sites: your compose file behind nginx with HTTPS, loopback publishing enforced, dangerous settings refused.No Docker site type or documentation; the docs state CloudPanel runs on virtual machines only, not in Linux containers.
HTTPSBuilt-in ACME client, HTTP-01 by default, Cloudflare DNS-01 for wildcards and proxied origins, renewal every 12 h."Free Let's Encrypt SSL Certificate" and "Cloudflare Integration".
BackupsPer-site DB and file backups on a schedule with retention; off-site through one rclone remote (S3, B2, Dropbox, Google Drive, SFTP, Swift, custom); restore wizard; server snapshots on 7 providers.Nightly database dumps kept 7 days per site; Remote Backups via Rclone to S3, Wasabi, DigitalOcean Spaces, Dropbox, Google Drive, Hetzner Storage Box, SFTP or custom Rclone; AWS AMI backups.
FirewallInstaller enables UFW (22, 80, 443, panel port) and fail2ban; the panel does not manage rules.Integrated firewall UI based on UFW: add, edit and delete rules from the admin area.
Users and rolesAdministrator, site manager, user and custom roles; per-site grants; passkeys and TOTP.Admin, Site Manager and User roles (User restricted to assigned sites); two-factor authentication.
Mail, DNS, reseller, multi-serverNone of the four. One panel per server.None documented as features (a guide covers running Mailcow as an application). One panel per server.
UpdatesEd25519-signed self-update with automatic rollback; optional auto-update.Update procedure documented; signing not stated.
TelemetryDaily licence check and release checks; no usage analytics.Not stated on the pages read.

Sources: cloudpanel.io,Requirements,Technology stack,Licence terms,Users,Security,Remote backups,Databases, read 17 September 2026. CloudPanel is a trademark of its owner; auraPanel is not affiliated with it.

Who each is for

CloudPanel is for people who want a capable, free, PHP-and-Node-centred panel on a single VPS and are comfortable with MySQL or MariaDB, phpMyAdmin and Varnish. Its licence is free of charge but not open source, and it forbids reselling or hosting for third parties for a fee without permission.

auraPanel is for people running a mixed estate on a server they own — WordPress next to Laravel, a Node.js service, a Python app, a container stack — who want PostgreSQL as a first-class engine, a real database console instead of phpMyAdmin, per-site backups with restore into a new site, and signed updates with rollback, and who accept a per-server licence for that.

Where auraPanel is stronger

  • PostgreSQL alongside MariaDB, chosen per database.
  • auraDB: schema browsing, SQL with EXPLAIN, grid editing and privilege management with role checks and a hash-chained audit trail, instead of phpMyAdmin.
  • Docker Compose as a site type, with the compose file validated before it starts.
  • Backups that capture database and files together, restore into a new site with credential re-home, and provider snapshots on seven clouds.
  • Signed updates with automatic rollback, passkeys, per-resource roles, an audit log of every action.
  • A commercial licence you can rely on for client hosting, and support from the maker.

Where CloudPanel is stronger

  • Price: it is free of charge for your own use.
  • A firewall interface: UFW rules are managed from the admin area. auraPanel configures UFW at install and then leaves rules to you.
  • Varnish Cache per site, with a WordPress plugin; auraPanel's page cache is nginx FastCGI/proxy cache and Redis.
  • Remote database access by allow-listing an IP; auraPanel keeps databases on loopback only.
  • PHP 7.1 onwards and MySQL as well as MariaDB, for older applications.

Moving from CloudPanel

Both panels lay sites out as a Linux user with a document root, so a site moves as files plus a database dump: export with clpctl db:export, create the site in auraPanel, upload the files over SFTP, and import with apcli db import. For WordPress, restoring a backup into a new auraPanel site re-homes the database credentials for you. There is no one-click importer. MySQL-specific features that MariaDB lacks need checking first.

Frequently asked

Is CloudPanel open source?

Its licence terms describe free-of-charge proprietary software with GPL components inside; they prohibit reverse engineering and reselling or third-party hosting for a fee without permission. Read the licence terms linked under the table before building a business on either product.

Which is faster?

We have not benchmarked the two and will not guess. Both front sites with nginx; CloudPanel adds the PageSpeed module and optional Varnish; auraPanel offers nginx page caching and Redis.

How do their nginx configurations differ?

Directive by directive, in What a control panel writes into nginx for WordPress: auraPanel's rendered server block from a live host next to CloudPanel's published WordPress template.

Try the live demo

A real auraPanel on a real server, shared with everyone. Sign in with the demo account and click around.

Email
demo@goaura.one
Password
demo1234
Open the demo panel ↗

Shared public demo, so please don’t put anything personal in it. More about the demo →

Talk to us

Tell us what you need and how to reach you. A person reads this, not a queue.

We use these details only to reply to you. Privacy

Recent updates

What shipped in the last releases. With automatic updates on, each lands on your server the moment it is published.

  1. v1.21.3
    Framework sites were undetectable, and a restore could silently point the copy at the original's live database.

    DetectApp looked for each application's signature relative to the docroot — but every PHP framework in the registry serves from a subdirectory (DocrootSub: public, webroot, web, pub, docroot) and keeps the file that identifies it one level *above* that. So the Laravel signature searched <project>/public/artisan,…

  2. v1.21.2
    Restarting nginx now blocks the panel and reconnects, instead of showing a notice.

    v1.21.1 stopped the false "HTTP 520" but only put up a toast — and a toast is the wrong affordance when the panel itself is about to go away: the page sat there looking broken while every request failed underneath it.

  3. v1.21.1
    Restarting nginx from Services no longer reports a false failure.

    It showed "Restart failed — HTTP 520". The panel is reverse-proxied *by* nginx, so the request deadlocked against itself: the handler blocked waiting for the restart to finish, while nginx's graceful stop waited for that very request to drain. Neither could proceed until nginx's stop-retry timeout force-killed it,…

  4. v1.21.0
    Per-site X-Frame-Options, fixing page builders that couldn't load their preview.

    Elementor's editor failed with *"Multiple 'X-Frame-Options' headers with conflicting values ('DENY, SAMEORIGIN')"*. The cause is that nginx's add_header appends rather than replaces: when the application also sets the header — a WordPress security plugin, or a CDN transform — the browser received two values,…

  5. v1.20.6
    The multi-database restore refusal now says what is in the backup and what still works.

    It read only "Restoring a multi-database site isn't supported yet", which is a dead end: it named neither the databases involved, nor why one of them is the limit, nor any route forward.

  6. v1.20.5
    Services: cards in a row now match heights.

    Like the settings grid before it, the Services grid pinned each card to its own content height, so a row often showed one card noticeably shorter than the card beside it. Each row now takes the taller card's height and both fill it, and it re-balances as content changes — a runtime installed, a longer service list.

  7. v1.20.4
    Settings: paired cards now match heights.

    Organisation / Panel Domain and auraPanel Updates / Session timeout each sat at their own content height, so a row showed one card visibly shorter than its neighbour. Each row now takes the taller card's height and both fill it — driven by content, not a fixed value, so it still adapts as a card grows (a validation…

  8. v1.20.3
    Settings: Organisation and Panel Domain now share a row too.

    They were full-width blocks stacked above the rest of the page; they now sit side by side in the same two-column grid as the Updates / Session timeout pair, so the top of Settings reads as two tidy rows instead of four stacked bands. Both cards shrink cleanly — the logo drop zone is a fixed 44×44 and the name field…

All releases on GitHub ↗