Roadmap
We ship continuously — everything lands in the changelog the moment it is live. This page is the higher-level view: what has landed lately, what is actually being worked on, and what we are considering or have decided not to build.
Last reviewed 29 August 2026. If this page ever looks older than the changelog, trust the changelog.
Recently shipped
- Account migration from cPanel and DirectAdmin — sites, files, databases, mail with its stored messages, DNS records, forwarders and cron, read from a backup archive with a dry run first — Aug 2026
- Panel installs its own security releases, with automatic rollback if the new version will not start — Aug 2026
- Web server selection per site — OpenLiteSpeed, Nginx/OpenResty or Apache behind Caddy — Aug 2026
- Hosting accounts a billing system can drive — WHM-style one-call provisioning, plus a FOSSBilling module — Aug 2026
- Mail that actually delivers — inbound Maildir fix, Dovecot 2.4, LMTP so filters run, submission/SMTPS, DKIM signing repaired — Aug 2026
- Spam and virus filtering — Rspamd scoring, ClamAV, greylisting, all opt-in per server — Aug 2026
- Firewall events you can read — 30 days of stored WAF activity, filterable, with the rule that fired — Aug 2026
- Push-to-deploy with rollback, per-site background workers, and custom deploy commands — Aug 2026
- Disk quota enforcement, and the Developer tier — per-site env vars, application log viewer, config import/export — Aug 2026
- Sessions you can revoke, a trash bin in the file manager, and DNSSEC DS records — Aug 2026
- Email forwarders, catch-all addresses, and deliverability alerts that check SPF, DKIM, DMARC and PTR for you — Jul 2026
- Subdomains as first-class sites — their own SSL, apps and settings — Jul 2026
- Tunable WAF — Off / Detection / Blocking modes and per-category OWASP CRS rule toggles — Jul 2026
- WordPress Manager — one-click core, plugin and theme updates plus nightly per-site auto-updates, and staging sites — Jul 2026
- Per-customer offsite backups — each customer's own S3 / B2 / Wasabi / MinIO / SFTP destination and schedule — Jul 2026
- File Manager power-ups — in-panel editor, batch delete, compress and extract, sortable columns — Jul 2026
- Server Health Score dashboard, resource monitoring and alerts to notifications or webhooks — Jun 2026
- Wildcard SSL via ACME DNS-01, and secondary DNS with hidden-master AXFR + NOTIFY — Jun 2026
- Customer portal with magic-link sign-in, and provider-aware billing across Stripe and PayPal — May 2026
Not everything we ship is listed here — see the full changelog for every release.
In progress
Actively being worked on. Will land in the next 1-3 minor releases.
Plesk import
cPanel and DirectAdmin accounts import today. Plesk is the obvious next format and nothing is written for it yet — its backups are structured differently enough that the existing reader does not simply extend to them.
Pulling accounts straight off the old server
Migration today reads a backup archive you already have. A transfer tool would take the old server's credentials, list its accounts and fetch them itself — the useful half for anyone moving dozens of accounts at once. The importer underneath would not change; it is only a different way of getting the archive.
Considering
Ideas with merit. No commitment to ship — these need either user demand or product clarity before they leave this list.
API reference documentation
The REST API already exists and powers both the admin and customer panels, and API tokens ship on Pro and above — it just is not documented publicly yet. The CLI reference is already up at /docs/cli.
Onboarding wizard for first-time installs
Replacing install-then-figure-it-out with a guided first run: hostname, admin user, first site, first customer. Creating a customer account is already one step rather than five, which was the worst of it, so this is now a smaller job than it was.
Account & site ownership transfer
Move a site — with its domains, databases, and mail — from one customer to another, admin/reseller-initiated. Requested by testers. The database side is simple; the careful part is moving files and the per-account Linux user cleanly, so it's scoped but not yet scheduled.
First-class container hosting
NovaPanel already runs Docker-runtime sites; the larger consideration is full container hosting — deploy an image, expose a port, get an auto-domain + TLS. Tradeoff is scope creep, so we'd build it carefully rather than as a swiss-army-knife.
Multi-server fleet view
Operators running NovaPanel on 5+ boxes manage them individually today. A meta-panel that shows fleet-wide health + lets you push config across servers would be a Developer-tier feature.
Extension / plugin API
Letting third parties add functionality (e.g., Imunify-style malware scanners, custom site builders). Risky — extensions are a security surface. Would only ship behind a strict signing policy.
Windows host support
Honest answer: probably never. The work is huge and the audience for 'Windows hosting via a control panel' has been declining for a decade. Plesk handles this case well.
Want something that's not here?
Drop into our Discord and tell us. The roadmap shifts based on what real users actually need — features asked for once usually stay in "considering" forever; features asked for repeatedly get pulled in.