PHP 8.3 Is Now Available on ServerPilot

November 13, 2023

We’re excited to announce that PHP 8.3 is now available on servers managed by ServerPilot. Learn about the improvements, changes, new features, and deprecations in PHP 8.3.

PHP 8.2 Available on All Servers

December 8, 2022

Today we’re excited to announce that PHP 8.2 is now available on all ServerPilot servers. There are many changes, new features, and notable deprecations with the release of PHP 8.2.

Announcing Support for Ubuntu 22.04 LTS

June 1, 2022

We’re happy to announce support for Ubuntu 22.04 (“Jammy Jellyfish”). This latest Ubuntu Long Term Support version was released April 21, 2022. Ubuntu does a Long-Term Support (LTS) release every two years. Ubuntu LTS releases are enterprise-grade and receive security updates from Ubuntu for five years. For 22.04, that means security updates through 2027.

PHP 8.1 Available on All Servers

December 2, 2021

PHP 8.1 was recently released and has been rolled out to all ServerPilot servers. PHP 8.1 includes several new features, as well as some performance improvements.

EarlyDog: Managed Cloud on Google Cloud, AWS, and Microsoft Azure

March 8, 2021

We’re thrilled to announce EarlyDog, our fully managed cloud hosting service. With EarlyDog’s managed cloud, you get a dedicated team of engineers who expertly manage and monitor your hosting on Google Cloud, AWS, or Microsoft Azure using both automated tools and their own expertise.

PHP 8.0 Available on All Servers

November 26, 2020

PHP 8.0, officially released today, introduces breaking changes to the PHP language. These changes are a necessary step in making the PHP language easier and more enjoyable to use.

Introducing SSH Public Key Management

June 17, 2020

We’re excited to announce SSH public key management through ServerPilot. Once you’ve added your SSH key to a system user, you’ll be able to SSH and SFTP into your server using public key authentication.

Announcing Support for Ubuntu 20.04 LTS

April 23, 2020

We’re happy to announce immediate support for Ubuntu 20.04 (“Focal Fossa”). This latest Ubuntu Long Term Support version was released today. Ubuntu does a Long-Term Support (LTS) release every two years. Ubuntu LTS releases are enterprise-grade and receive security updates from Ubuntu for five years. For 20.04, that means security updates through 2023.

Let's Encrypt CAA Rechecking Bug

March 4, 2020

ServerPilot has re-issued all certificates affected by Let’s Encrypt’s recently identified CAA record rechecking bug. Let’s Encrypt, the world’s most popular SSL certificate provider, is used by ServerPilot to issue free AutoSSL certificates.

ServerPilot Is Not Vulnerable to PHP-FPM CVE-2019-11043

October 29, 2019

ServerPilot users are not at risk from the recently discovered PHP-FPM vulnerability (CVE-2019-11043). The server configuration ServerPilot uses prevents the vulnerability from being exploitable. As always, ServerPilot automatically updated all servers with the latest PHP versions that fix the vulnerability.

PHP 7.4 Available on All Servers

October 18, 2019

We’re happy to announce the release candidate of PHP 7.4 is now available on all servers. PHP 7.4 brings many new syntax features to the PHP language while at the same time continuing to boost the speed of PHP 7. There are also a few deprecations developers should be aware of as the PHP language is cleaned up in preparation for a future PHP 8.

Discontinuing PHP 5.6

September 10, 2019

PHP 5.6 is past end-of-life. Starting this week, ServerPilot will no longer install PHP 5.6 on newly connected servers. PHP 5.6 will continue to work normally on any server where it is already installed. Through the end of this year, you can contact ServerPilot support for assistance installing PHP 5.6 on new servers.

Announcing PayPal Support

December 17, 2018

We’re happy to announce the addition of PayPal as a payment option. You can now add credit to your account using PayPal. You’ll see this new payment option on your account’s billing page.

PHP 7.3 Available on All Servers

October 8, 2018

We’re happy to announce the release candidate of PHP 7.3 is now available on all servers. PHP 7.3 brings still more speed improvements to PHP 7, including a faster garbage collector. Additionally, PHP 7.3 includes further cleanup to PHP syntax and function behavior, making the lives of PHP developers easier.

Adding TLS 1.3 and Removing Early TLS Versions

September 19, 2018

Recently, the TLS 1.3 specification was finalized and OpenSSL 1.1.1 was released with support for TLS 1.3. In the next week, we’ll be updating Nginx on all servers to support TLS 1.3. At the same time, we’ll be removing support for early TLS versions (1.0 and 1.1) that are now considered insecure or weak.

Volume Discounts

June 14, 2018

We appreciate the expertise and lower average support load from our high-volume customers. That results in lower costs for us and allows us to offer volume discounts.

Pricing Changes

June 8, 2018

In one month, on July 10th, we’ll be making our first pricing changes since we launched ServerPilot five years ago. The majority of our paying users will save money if they choose to switch to one of the new plans.

Announcing Support for Ubuntu 18.04 LTS

April 26, 2018

We’re happy to announce immediate support for Ubuntu 18.04 (code named “Bionic Beaver”). This latest Ubuntu LTS version was released a few hours ago.

Ending Support for PHP 5.4 and PHP 5.5 on New Servers

April 10, 2018

In the coming weeks, we’ll be ending support for PHP 5.4 and PHP 5.5 on new servers. These PHP versions are very outdated and no longer receive security updates from the developers of PHP. Existing servers will continue to support PHP 5.4 and PHP 5.5.

Drupal Remote Code Execution Vulnerability CVE-2018-7600

April 3, 2018

The Drupal Security Team has announced a highly critical remote code execution vulnerability in Drupal that was identified by Jasper Mattsson. If you use Drupal, you must upgrade your Drupal installations or else your apps will likely be compromised. For users with vulnerable Drupal apps, we’ve sent you an email with details of which apps are vulnerable and need to be upgraded.

Thank You, Let's Encrypt! ServerPilot Is Now a Sponsor.

March 6, 2018

Even before the first line of ServerPilot’s code was written, we’d dreamed of giving developers the ability to issue and deploy SSL certificates with the click of a button. We’d talked to Certificate Authorities, but all we found were inadequate APIs and high prices. However, that all changed in November 2014 when Let’s Encrypt announced their intention to create a free Certificate Authority built entirely around an API. Given the amazing people working on Let’s Encrypt, we knew our dreams were about to become reality.

WordPress Design and Development Pricing, Structure, and Services Survey Results

February 26, 2018

‘What will it cost to build my website?’ It’s the most common question that WordPress development and design companies have to answer. And it’s also the hardest. Until now, there hasn’t been a compelling, data-driven analysis of how much this type of work really costs. In early 2018, we ran a survey to try to answer this question.

Cloud Providers Rebooting for Meltdown and Spectre Mitigations

January 26, 2018

As the recent Meltdown and Spectre CPU vulnerabilities impacted all cloud providers, all cloud providers have needed to take action. Due to the complexity of these bugs in CPUs and slow responses from Intel and AMD, developing and testing mitigations has taken understandable time for most cloud providers. DigitalOcean and others are now deploying mitigations.

2018 WordPress Development and Design Pricing Survey

January 12, 2018

When it comes to WordPress development and design, cost is always top-of-mind, both for the agencies who build websites and for those who hire them. Unfortunately, there hasn’t been a compelling, data-driven analysis of how much this type of work really costs.

PHP 7.2 Available on All Servers

September 1, 2017

We’re happy to announce the first release candidate of PHP 7.2 is available on all servers. PHP 7.2 brings even more speed improvements while adding great new security features such as the sodium cryptography extension and the Argon2i password hashing algorithm.

WP-CLI Available On All Servers

July 18, 2017

If you use the command line and you love WordPress, your life just got easier. ServerPilot now installs WP-CLI by default on your servers. We’ve also rolled out WP-CLI to all existing servers.

CVE-2017-6074 Linux Kernel DCCP Vulnerability

February 22, 2017

A Linux kernel vulnerability allowing privilege escalation has been found that affects most major Linux distributions, including Ubuntu. The fix for this vulnerability, identified by CVE-2017-6074, has been applied to all servers managed by ServerPilot.

Introducing Two-Factor Authentication

December 19, 2016

ServerPilot now supports two-factor authentication! For users wishing to add another layer of security to their account, using two-factor authentication is a great way to do it.

CVE-2016-8655 Linux Kernel Vulnerability

December 7, 2016

A Linux kernel vulnerability allowing privilege escalation has been found that affects most major Linux distributions, including Ubuntu. The fix for this vulnerability, identified by CVE-2016-8655, has been applied to all servers managed by ServerPilot.

PHP 7.1 Available on All Servers

September 9, 2016

We’re happy to announce the first release candidate of PHP 7.1 is available on all servers. PHP 7.1 keeps the speed and memory efficiency of PHP 7.0 while adding many great new language features.

Brotli Compression Algorithm Enabled on All Servers

August 8, 2016

For apps using HTTPS, page loads are now even faster. On all servers managed by ServerPilot, we’ve enabled the new Brotli compression algorithm developed by Google. Brotli is currently supported by Chrome and Firefox for HTTPS requests.

HTTPoxy Vulnerability

July 19, 2016

A vulnerability named HTTPoxy affecting many PHP applications has been discovered. The vulnerability allows a malicious request to control an environment variable named HTTP_PROXY that some PHP libraries use. The fix for this vulnerability has already been applied to all servers managed by ServerPilot.

Free SSL Certificates from Let's Encrypt

March 9, 2016

We’re truly excited to announce that ServerPilot now offers easy, unlimited, free SSL certificates to users on our Coach and Business plans. By making SSL deployment absurdly simple, we’re continuing to empower our users to focus valuable time and energy on your businesses and projects.

DROWN SSL Vulnerability

March 1, 2016

A recent vulnerability named DROWN (CVE-2016-0800) affecting the SSLv2 protocol has been discovered and is in the news. This vulnerability does not affect servers managed by ServerPilot.

HTTP/2 Enabled on All Servers

September 24, 2015

All servers managed by ServerPilot now support HTTP/2, the latest version of the HTTP protocol. HTTP/2 solves many fundamental performance limitations that existed in HTTP/1.x and can result in page load speedups of up to 50 percent.

PHP 7.0 Available on All Servers

August 20, 2015

If you’ve been excitedly watching the development of PHP 7 like we have, you’ve been looking forward to this day for more than a year. Today, PHP 7.0 RC1 was released. This is the first release candidate for PHP 7.0 and marks the end of beta for PHP 7. With this release, we’re proud to announce that PHP 7.0 is now available on all servers.

Logjam TLS Attack

May 20, 2015

Security researchers have discovered a new attack on the TLS protocol named Logjam. Additionally, the researchers found that commonly used values that are part of the Diffie-Hellman cryptographic key exchange used by TLS may be vulnerable to attack by very powerful entities like nation-states.

GHOST glibc Vulnerability

January 28, 2015

A vulnerability named GHOST (CVE-2015-0235) affecting the GNU C library (glibc) has been discovered. This vulnerability does not affect Ubuntu 14.04. Only ServerPilot users with Ubuntu 12.04 servers had the vulnerable version of glibc. As neither OpenSSH, Nginx, Apache, MySQL, or Postfix are considered vulnerable, there is low risk to your servers managed by ServerPilot. One potential risk is through PHP scripts that call the function gethostbyname() with user-supplied input as the argument.

SSLv3 Disabled Due to POODLE Vulnerability

October 26, 2014

Security researchers at Google recently announced their discovery of a flaw in Version 3 of the SSL protocol (“SSLv3”). The attack, called POODLE (“Padding Oracle On Downgraded Legacy Encryption”), can be exploited by attackers who are able to modify network transmissions between the browser and the server. A successful attack can result in, for example, an attacker being able to read the cookies sent by a browser over an SSL (HTTPS) request.

Bash Shellshock security update

September 25, 2014

Yesterday, a serious Bash shell vulnerability named Shellshock (CVE-2014-6271 / CVE-2014-7169) was announced. Updates to your servers were applied as soon as they became available.

ServerPilot API Released

September 2, 2014

Over the past few months, we’ve been putting the finishing touches on our API. In that time, beta users of our API have been giving us feedback, writing API wrappers, and even building businesses on top of our API. We’re very excited to announce our API is now available to everyone.

OpenSSL Heartbleed security update

April 8, 2014

Yesterday, the OpenSSL Project released an update to address CVE-2014-0160, a vulnerability nicknamed “Heartbleed.” This vulnerability affects many applications and services including ServerPilot, DigitalOcean, Amazon AWS, and others.