Documentation & Technical Specs

Safety Monitor Pro — Architecture

Safety Monitor Pro is a native WHM plugin written in PHP. It runs inside your existing WHM — there is no external agent, no daemon consuming a persistent process, and no data leaves your server for monitoring. It reads the signals your server already produces (ModSecurity audit log, LFD/CSF state, cPanel access logs, /proc load metrics) and presents them in a single live dashboard.

What it watches:

• Intrusion Monitor — real-time ModSecurity events, brute-force and repeat-offender detection, per-domain attack breakdown.
• Load Guard (Cooler) — watches load average and high-consumption users. Its hard safety invariant: it never kills services or site PHP, and never suspends accounts — it surfaces and advises, it does not take destructive action by default.
• Country BlockGuard — GeoIP-based firewall rules with a self-contained country/ASN database (no external API key required).
• Site Doctor & Security Health — SSH hardening checks, firewall status, backup presence, and per-domain security posture.
• AI Threat Analysis — pattern-based classification of suspicious activity, with read-only, safe-by-default recommendations rather than automatic changes.

Resource Footprint

The plugin is event-driven and log-driven, not a polling daemon. Dashboard queries run on page load; background work is limited to short, throttled cron tasks (log parsing, GeoIP refresh). On a typical WHM server the steady-state overhead is negligible — it does not hold a resident process and does not add measurable CPU/RAM under normal load. Log parsing is bounded and incremental, so it does not re-scan large audit logs from scratch.

Compatibility & Conflicts

• cPanel / WHM — installs as a standard WHM plugin (AppConfig). Works on VPS and dedicated WHM servers.
• CSF / LFD — complementary, not conflicting. Safety Monitor reads CSF state and can add allow/deny rules through CSF; it does not replace your firewall.
• Imunify360 / other security suites — runs alongside them. It reads shared signals (ModSecurity) and focuses on visibility + load safety, so it does not compete for the same enforcement layer.
• Never-block-self — the plugin will not lock the admin out of their own server; it offers to allowlist the admin IP on entry.

cPanel / WHM Licenses

cPanel VPS and Dedicated licenses are provisioned through the official cPanel licensing system — activation is automatic within seconds of a successful payment, with no manual step. Licenses are keyed to the server IP and are transferable to a new IP when you migrate. Monthly plans auto-renew; you can cancel at any time.

Installation

1. Complete checkout — your license/plugin download is available instantly in your customer portal.
2. For WHM plugins: upload and run the installer from WHM (root), or use the one-line install command shown on your order page.
3. Open the plugin from WHM → Plugins. On first entry it offers to allowlist your current IP so you are never locked out.
4. For cPanel licenses: no install needed — the license activates against your server IP automatically.

Have a technical question not covered here? Open a support ticket or email us — we answer engineer-to-engineer. MailShield Pro documentation will be published when it exits development.