Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › automatic updates

cPanel vs Plesk: Which Hosting Control Panel Has Stronger Security and Update Controls?

By Freedom251 Team · · 11 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

cPanel has the stronger enforced-update baseline; Plesk gives administrators more explicit control over update scope and timing. cPanel says WHM can no longer disable automatic updates through its interface and documents current-major security releases being applied within an hour by default. Plesk separates panel, Plesk-shipped component, and Linux system-package updates, with options for safe updates, package locks, and scheduled installation windows. Neither policy alone makes a server secure: the choice depends on whether your priority is reducing the chance of deferred panel updates or controlling exactly what changes and when.

Is cPanel or Plesk more secure?

There is no established breach-rate or vulnerability-count comparison showing that one panel is categorically more secure. The clearest documented difference is how each handles updates: cPanel emphasizes a vendor-enforced baseline and rapid servicing of current-major security releases, while Plesk exposes more choices over update scope and scheduling.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That distinction matters because a control panel is only one part of a server’s security. A supported panel with current fixes can still be undermined by weak credentials, exposed services, outdated operating-system packages, vulnerable applications, or overly broad administrative access. Conversely, a flexible update policy can be useful, but it also gives an operator more ways to defer important changes.

Security and update question cPanel Plesk
Can an administrator turn off panel automatic updates in the web interface? cPanel says automatic updates can no longer be disabled through WHM. Manual command-line editing remains possible. [c001] Automatic updates are configurable; Plesk recommends enabling them, and warns that security fixes and hotfixes are not shipped when they are disabled. [c007]
How quickly are security releases applied? A 2026 changelog entry says current-major security releases are applied within an hour by default, independently of the normal update schedule. [c004] The administrator guide says Plesk checks once a day by default and automatically downloads and installs available updates. [c006]
Can panel, bundled components, and system packages be controlled separately? The cited material describes WHM update enforcement and does not establish equivalent separate controls for these categories. Yes. Plesk has separate settings for panel updates, Plesk-shipped third-party components, and system-package updates. [c005][c006]
Are Linux system-package updates enabled by default? Not stated in the cited cPanel material. No. System-package updates are not enabled by default on Plesk for Linux. [c006]
Does the panel automatically move installed PHP to a new major version? No. cPanel says it applies security fixes and minor improvements to installed PHP versions, but administrators handle new major versions through EasyApache and MultiPHP Manager. [c002] The cited Plesk material does not establish a comparable PHP-major-version policy.

In practical terms, choose cPanel if the main risk you want to reduce is an administrator leaving panel updates disabled through WHM. Choose Plesk if your operations require deliberate maintenance windows, package locks, or distinct decisions for panel, bundled components, and Linux packages. Neither feature set removes the need to keep the server within its supported lifecycle.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

What does cPanel update automatically?

cPanel’s policy addresses panel updates, while its PHP guidance draws a separate line between fixes for installed PHP branches and moving to a new PHP major version. Do not treat automatic panel servicing as an automatic upgrade of every runtime or server package.

Panel updates and security releases

cPanel states that “Automatic updates can no longer be disabled through WHM.” The stated intent is to keep the software current with feature and security improvements. The wording is specific to disabling updates through the WHM interface: cPanel also says manual command-line editing remains possible. That means the policy raises the barrier to casually turning updates off in the UI, but should not be represented as an unchangeable technical guarantee against every administrative override. [c001]

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A separate cPanel changelog entry says WHM servers apply current-major security releases “within an hour by default,” independently of the normal update schedule. The entry describes a Security Updates preference governing that behavior. This is a documented default for current-major security releases, not a promise that every update, every server package, or every PHP major upgrade will be installed within an hour. [c004]

The changelog also records security-focused work in the 134 line, including targeted security releases on September 29, 2026, and security hardening on October 20, 2026. These dated entries show active maintenance of that line; they are examples, not a comprehensive measure of security or a comparison with Plesk. [c003]

PHP fixes are not PHP major-version upgrades

According to cPanel’s PHP guidance, security fixes and minor improvements are applied to PHP versions already installed on the server. A newer PHP major version is not substituted automatically. Administrators use EasyApache to install the newer version and MultiPHP Manager to assign PHP versions as needed. [c002]

Rank #2
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

This distinction is important for application compatibility. A site may depend on behavior that changes across major PHP versions, so keeping its existing branch patched and choosing when to move to another major branch are different maintenance decisions. cPanel’s described approach updates the installed branch without silently treating a major-version migration as an ordinary security fix; the administrator remains responsible for planning and making that migration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What can Plesk administrators control?

Plesk provides separate controls for the panel, third-party components shipped by Plesk, and Linux system packages. Its administrator guide also describes safe-only package updates, package locks, and weekday-based installation windows expressed in UTC. [c005][c006]

Separate update categories

Plesk’s settings let administrators make distinct choices for three scopes: updates to Plesk itself, updates to third-party components shipped with Plesk, and Linux system-package updates. The distinction gives an operator more visibility into which class of software is being maintained. It does not mean that every category is automatically enabled: on Plesk for Linux, system-package updates are off by default. [c005][c006]

The Linux command-line examples in Plesk’s documentation show that the settings can be changed independently, including an option for safe system-package updates. Because these controls are independent, a server’s actual update posture depends on its configuration; seeing that Plesk is installed or updated does not establish that the operating system’s packages are also being updated. [c005]

Safe updates and package locks

Plesk documents a safe-only option for Linux system-package updates and the ability to lock selected packages. These options support more cautious change management when an administrator needs to avoid a particular package change or limit updates to the safe category described by Plesk. The documentation provided here does not define the detailed selection criteria behind “safe,” so operators should consult Plesk’s current documentation and verify what a chosen setting covers before relying on it for a specific package.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord | 6.35mm Jack, Durable Design, Stage and Home Studio Use, Low Noise Shielded Electric Cord for Bass, Keyboard, Amp, Mixer
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

A package lock is a deliberate exception to routine updating, not a security fix. If a package is locked because an application depends on a specific version, record the reason, identify who owns the exception, and review it when that dependency changes. Otherwise, the lock can turn into a forgotten source of exposure.

Daily checks and UTC installation windows

Plesk checks for updates once a day by default and automatically downloads and installs available updates by default. Administrators can configure the weekdays and UTC time window used for automatic installations. [c006]

A scheduled window helps an operations team coordinate updates with staffing, monitoring, and application checks. It also means that an update may wait for the next configured window rather than being installed as soon as it becomes available. When selecting a window, account for the server’s UTC-based schedule as well as the team’s local time, and make sure someone can respond if an application needs attention afterward.

How do the update controls affect day-to-day operations?

cPanel reduces one kind of administrative discretion over panel updates through WHM; Plesk makes more update decisions configurable. The trade-off is between a stronger default enforcement posture and a more granular maintenance workflow—not between automatic updates and no administrative responsibility.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When cPanel’s approach is a better fit

  • You want a baseline that is harder to disable in the UI. The WHM policy is useful where operators might otherwise switch off panel updates to avoid disruption. It is not a substitute for access controls or oversight, since the cited policy notes that command-line editing remains possible. [c001]
  • You want rapid current-major security servicing. The documented within-an-hour default is relevant when evaluating how quickly that class of cPanel security release is applied. Keep its scope in view: it is not a general installation-time guarantee for all software on the host. [c004]
  • You can manage runtime upgrades separately. Installed PHP branches receive security fixes and minor improvements under the described policy, but moving to a new major version remains an administrator task. [c002]

When Plesk’s approach is a better fit

  • You need scheduled installation windows. Plesk lets administrators select weekdays and UTC windows for automatic installations. [c006]
  • You need to distinguish panel maintenance from Linux package maintenance. Separate settings make it possible to decide independently about Plesk, Plesk-shipped third-party components, and system packages. [c005]
  • You need package-level exceptions. The ability to lock selected packages and use safe system-package updates supports more deliberate change management, provided exceptions are tracked and revisited. [c005][c006]
  • You need one hardening reference spanning Linux and Windows guidance. Plesk publishes security guidance with recommendations covering administrative access, services, application protections, and system upkeep. Confirm the recommendation relevant to your operating system and configuration rather than assuming every control applies identically to both. [c008]

Which security settings matter beyond automatic updates?

Update policy is only one layer. Plesk’s security guidance recommends keeping Plesk current and also calls out account security, network exposure, administrative access, web-application defenses, and kernel maintenance. These controls address different risks and should be reviewed alongside update settings. [c008]

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
  • Use strong passwords and limit administrative access. Reduce the number of people and paths that can make server-level changes; keep administrative access restricted to those who need it.
  • Filter unused ports. Avoid leaving services reachable when the server does not need them. A panel update cannot compensate for unnecessary network exposure.
  • Secure services with SSL/TLS. Plesk recommends protecting services with SSL/TLS rather than treating the panel’s own update state as the whole security picture.
  • Restrict XML API access. Review who can reach and use the API, not just who can sign in to the graphical interface.
  • Enable ModSecurity and use Fail2Ban. Plesk includes both among its security recommendations. Their presence does not remove the need to configure and maintain them appropriately.
  • Avoid the Apache-module PHP handler. Plesk’s guidance specifically advises against this handler; evaluate the applicable PHP handling configuration for the server rather than assuming panel updates will change it for you.
  • Keep system packages and the kernel current. Plesk recommends enabling system-package updates and keeping the kernel current. Since Linux package updates are not enabled by default in Plesk, verify that the relevant setting and process are in place. [c006][c008]

These are Plesk’s published recommendations, not evidence that cPanel lacks equivalent server-hardening options. The cited cPanel material is focused on update enforcement, PHP servicing, release timing, and lifecycle support; it does not provide a full control-by-control comparison of security features between panels.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How should you manage versions, testing, and deferred updates?

Support status is a security control: software outside its support window does not receive the vendor’s fixes. The practical decision is therefore not only which panel has more convenient update settings, but whether your team can keep its selected version supported and handle changes responsibly.

Check the support lifecycle before choosing a release

cPanel’s current product-version documentation lists version 110 with an approximate end of life in December 2026 and version 134 with an approximate end of life in June 2027. The dates are approximate, and cPanel says unsupported versions receive no security updates or bug fixes. Check the current lifecycle documentation for the release you plan to operate; do not treat these two examples as a complete list of supported versions. [c009]

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Plesk’s lifecycle policy warns that security patches, security updates, and hotfixes are not shipped when automatic updates are disabled. Plesk recommends enabling automatic updates for stability, security, and access to support. [c007]

Use a controlled maintenance process

  1. Confirm that the panel release is supported. Check the vendor’s current lifecycle information before planning an update or continuing to run an older installation.
  2. Identify what the setting actually covers. For cPanel, distinguish panel servicing from PHP major-version changes. For Plesk on Linux, verify separately the settings for Plesk, Plesk-shipped components, and system packages.
  3. Record exceptions and scheduling. Note any Plesk package locks, disabled categories, or scheduled UTC windows, and assign an owner to review them. For cPanel, do not assume that a command-line override is represented by the WHM interface policy.
  4. Test application compatibility where a change requires it. A PHP major-version move is a separate administrator action in cPanel; test that transition against the applications that will use the new version before assigning it.
  5. Maintain backups and watch vendor changelogs. A backup supports recovery if a change causes trouble, while changelog monitoring helps operators understand what is being released. cPanel’s changelog examples show that security releases and hardening entries can be distinct from ordinary update expectations.
  6. Review deferred changes as operational risk. If a team postpones a release or locks a package, set a review point and make the reason explicit. Deferral may help manage compatibility, but it also delays fixes; neither panel’s controls eliminate that trade-off.

Which panel should you choose for server security?

Choose cPanel when your priority is enforced panel updating and rapid servicing of current-major security releases. Its WHM policy is intended to keep automatic updates from being disabled through the interface, and its changelog documents an within-an-hour default for current-major security releases. Those advantages are most relevant when preventing an operator from casually opting out matters more than choosing a detailed installation schedule.

Choose Plesk when your team needs explicit control over update categories, timing, or package exceptions. Its separate settings, safe system-package update option, package locks, and weekday/UTC installation windows are useful for controlled maintenance workflows. That flexibility makes configuration review important, especially because Linux system-package updates are off by default.

For either panel, keep the installed version supported, monitor release information, maintain backups, and avoid letting compatibility concerns become indefinite deferrals. There is no evidence in the cited material for a numerical claim that one panel experiences fewer breaches or vulnerabilities, so the defensible comparison is about documented update and hardening controls—not a universal security ranking.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Does cPanel’s within-an-hour security update apply to every release?

No. The changelog wording concerns current-major security releases on WHM servers and says they are applied within an hour by default, independently of the normal schedule. It does not establish the same timing for all panel changes, operating-system packages, or runtime upgrades.

Does enabling Plesk automatic updates also turn on Linux package updates?

Not by itself according to Plesk’s administrator guide: system-package updates are not enabled by default on Plesk for Linux and have a separate setting. Check that category directly rather than inferring its state from panel auto-updates.

Is there a published statistic proving cPanel or Plesk has fewer security incidents?

No comparative breach-rate, vulnerability-count, or survey statistic is established by the cited material. The evidence supports comparing update policies and documented hardening recommendations, not claiming that either panel has a lower real-world incident rate.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

automatic updatescPanelPleskServer SecurityWeb hosting

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.