Roadmap

We ship continuously — everything lands in the changelog the moment it is live. This page is the higher-level view: what has landed lately, what is actually being worked on, and what we are considering or have decided not to build.

Last reviewed 27 September 2026. If this page ever looks older than the changelog, trust the changelog.

Recently shipped

Not everything we ship is listed here — see the full changelog for every release.

  • Per-customer CPU, memory and process limits on packages, and real SSH access per package with private customer home folders — Oct 2026
  • Branded, editable website pages with live preview — server address, new-site placeholders, error, maintenance and suspended pages — Oct 2026
  • A redesigned panel you can switch back from — new admin and customer design, with the 1.9.4 Classic look one click away in Settings, every feature in both — Oct 2026
  • Editable alert emails with live preview, plus a Firewall Activity page and DNS propagation checks for admins — Oct 2026
  • File Manager batch tools — select all, copy files and folders, filter by name, download a selection as one zip, and one-click Fix Permissions — Sep 2026
  • Every web engine runs the same PHP — full extension set on OpenLiteSpeed and every panel-installed version, kept complete on update, and Laravel/Symfony public/ docroots detected on every engine — Sep 2026
  • Restore a single site from a backup, and publish a WordPress staging copy to live with a backup taken first — Sep 2026
  • Customer panel in ten more languages — German, French, Spanish, Italian, Dutch, Portuguese, Turkish, Russian, Polish and Romanian — Sep 2026
  • Account migration from cPanel, DirectAdmin and HestiaCP — sites, files, databases, mail with its stored messages, DNS records, forwarders and cron, read from a backup archive with a dry run first — Aug 2026
  • Panel installs its own security releases, with automatic rollback if the new version will not start — Aug 2026
  • Web server selection per site — OpenLiteSpeed, Nginx/OpenResty or Apache behind Caddy — Aug 2026
  • Hosting accounts a billing system can drive — WHM-style one-call provisioning, plus a FOSSBilling module — Aug 2026
  • Mail that actually delivers — inbound Maildir fix, Dovecot 2.4, LMTP so filters run, submission/SMTPS, DKIM signing repaired — Aug 2026
  • Spam and virus filtering — SpamAssassin scoring, ClamAV, greylisting, all opt-in per server — Aug 2026
  • Firewall events you can read — 30 days of stored WAF activity, filterable, with the rule that fired — Aug 2026
  • Push-to-deploy with rollback, per-site background workers, and custom deploy commands — Aug 2026
  • Disk quota enforcement, and the Developer tier — per-site env vars, application log viewer, config import/export — Aug 2026
  • Sessions you can revoke, a trash bin in the file manager, and DNSSEC DS records — Aug 2026
  • Email forwarders, catch-all addresses, and deliverability alerts that check SPF, DKIM, DMARC and PTR for you — Jul 2026
  • Subdomains as first-class sites — their own SSL, apps and settings — Jul 2026
  • Tunable WAF — Off / Detection / Blocking modes and per-category OWASP CRS rule toggles — Jul 2026
  • WordPress Manager — one-click core, plugin and theme updates plus nightly per-site auto-updates, and staging sites — Jul 2026
  • Per-customer offsite backups — each customer's own S3 / B2 / Wasabi / MinIO / SFTP destination and schedule — Jul 2026
  • File Manager power-ups — in-panel editor, batch delete, compress and extract, sortable columns — Jul 2026
  • Server Health Score dashboard, resource monitoring and alerts to notifications or webhooks — Jun 2026
  • Wildcard SSL via ACME DNS-01, and secondary DNS with hidden-master AXFR + NOTIFY — Jun 2026
  • Customer portal with magic-link sign-in, and provider-aware billing across Stripe and PayPal — May 2026

In progress

Actively being worked on. Will land in the next 1-3 minor releases.

In progress

Plesk import

cPanel, DirectAdmin and HestiaCP accounts import today. Plesk is the obvious next format and nothing is written for it yet — its backups are structured differently enough that the existing reader does not simply extend to them.

In progress

Pulling accounts straight off the old server

Migration today reads a backup archive you already have. A transfer tool would take the old server's credentials, list its accounts and fetch them itself — the useful half for anyone moving dozens of accounts at once. The importer underneath would not change; it is only a different way of getting the archive.

Considering

Ideas with merit. No commitment to ship — these need either user demand or product clarity before they leave this list.

Considering

API reference documentation

The REST API already exists and powers both the admin and customer panels, and API tokens ship on Pro and above — it just is not documented publicly yet. The CLI reference is already up at /docs/cli.

Considering

Onboarding wizard for first-time installs

Replacing install-then-figure-it-out with a guided first run: hostname, admin user, first site, first customer. Creating a customer account is already one step rather than five, which was the worst of it, so this is now a smaller job than it was.

Considering

Account & site ownership transfer

Move a site — with its domains, databases, and mail — from one customer to another, admin/reseller-initiated. Requested by testers. The database side is simple; the careful part is moving files and the per-account Linux user cleanly, so it's scoped but not yet scheduled.

Considering

First-class container hosting

NovaPanel already runs Docker-runtime sites; the larger consideration is full container hosting — deploy an image, expose a port, get an auto-domain + TLS. Tradeoff is scope creep, so we'd build it carefully rather than as a swiss-army-knife.

Considering

Multi-server fleet view

Operators running NovaPanel on 5+ boxes manage them individually today. A meta-panel that shows fleet-wide health + lets you push config across servers would be a Developer-tier feature.

Considering

Extension / plugin API

Letting third parties add functionality (e.g., Imunify-style malware scanners, custom site builders). Risky — extensions are a security surface. Would only ship behind a strict signing policy.

Considering

Windows host support

Honest answer: probably never. The work is huge and the audience for 'Windows hosting via a control panel' has been declining for a decade. Plesk handles this case well.