Every xCloud release, newest first. 193 updates and counting.
Redis Host and Port on Site Credentials, and To-Dos That Stay Fixed
You can now copy your site’s Redis host and port straight from Site Credentials. The Security updates are waiting To-Do no longer fails after you click Fix and comes back every hour. This release also keeps MariaDB starting after the MariaDB Security Patch and fixes a Backups page that looked empty.
Cloudflare Enterprise Setup Now Waits for Payment
Cloudflare Enterprise setup now starts only once its invoice is paid, and the page tells you why it is waiting. If you signed up with Google or GitHub, you can now set a password and turn on two-factor authentication. This release also fixes Redis object caching, billing and the Security Update page.
Pay for a Package in Monthly Installments
You can now split the price of a package into monthly payments right at checkout. When a server is too small for a One-Click App, xCloud now shows you how to fix it. Git sites created through the API or MCP can also use the server’s PostgreSQL.
Before, packages that offer installments could only be bought at the full price on the checkout page. Now you can pick Pay in installments, choose the number of months and pay only the first month today.
Delete a Failed Server and Get Your Payment Back as Account Credit
You can now delete a server that failed before it was ever set up, and what you paid for it is added to your Account Credit. API and MCP users can update only the vulnerable plugins, themes and WordPress core on many sites in one request. One-Click Apps also keep their passwords and keys safer.
File Manager Can Turn Itself Off After 3 Hours
You can now set File Manager to turn off 3 hours after you turn it on for a site. The AI assistant panel opens faster and looks calmer. Editing a Vultr or Hetzner provider now tests the new key you type.
Before, the shortest auto disable time for File Manager was 6 hours. Now you can keep it open for less time after a quick fix.
Ask the AI Assistant from the Command Palette
You can now type a question into the command palette and send it straight to the AI assistant. Restores, clones and migrations now import your database with the site’s own access, not full admin rights. This release also fixes site security settings that could turn off when you changed something else.
Keep the Backups That Matter, and Back Up on More Than One Schedule
Any backup can now be kept out of auto delete until you let it go. A site can also take full backups on several schedules, such as daily and weekly. Object Cache Pro caching now lasts between page loads. This release also fixes billing, support tickets, Git deploys and more.
Environment Changes Reach Your Dockerfile Sites, and Ended Migrations Forget Your Root Password
When you change an environment variable on a Git site that uses its own Dockerfile, the running container now gets it after a deploy. A server migration that fails or is canceled no longer keeps your old server’s root password. This release also fixes billing, PageSpeed reports, Cloudflare domains and MariaDB installs.
Safer Deploys and Restores, Plus Team Activity in the API
A Git deploy no longer touches your WordPress settings file or uploads, and an interrupted restore puts your site’s files back. Developers can now read the team’s recent activity from the API and MCP.
GET /api/v1/activity returns the team’s tasks from the last 30 days: name, type, status, times, server, site and who started it. Filter it by server, site, person, type, status, time or name, so you can find a deleted site by its domain. It is also the activity.list MCP tool. Only the team owner, or a team admin who can see logs and events, can read it. It never includes emails, command output or scripts.servers.tasks now names who started each task.Turn Off the X-XSS-Protection Header, and More Reliable Backups
You can now stop a site from sending the old X-XSS-Protection header that security scanners flag. Backups to S3-compatible storage now work on servers that block running programs from the temporary folder.
See What Needs You Across All Your Sites and Servers With the Security Center
The new Security Center shows your whole team’s security on one page. One vulnerable plugin on 40 sites is one line, and each line has one button that opens the page where you fix it. Security Update now also lists every major service on your servers and keeps Node.js patched.
Meet the To-Do Center: Everything That Needs You, in One List
You no longer have to open each server and site to find out what needs attention. The new To-Do Center collects every notice into one list, and each card has its own buttons to fix it, ask the AI assistant, or put it off. This release also fixes certificate renewals on OpenLiteSpeed and makes the nightly vulnerability scan more reliable.
See Why a Git Deploy Failed, Without Digging Through Logs
When a Git deploy fails, the site’s Deployments page now shows which step failed and why. You get one alert when deploys start failing, not one for every failed deploy.
Before, every failed deploy sent you an email with the full deploy log. Finding the real error was hard, and a site that kept failing could fill your inbox.
Choose Your Own WordPress Table Prefix
You can now set the database table prefix when you create a WordPress site. Mail Delivery API keys work again.
Before, xCloud always picked the table prefix for a new WordPress site. Now you can type your own, for example to match another site or a plugin’s setup.
Fewer False BetterShield Alerts, and Backups That Repair Themselves
BetterShield no longer warns you about files xCloud writes for you. A scheduled backup that fails because its script is out of date now updates the script and runs again.
.env file.Safer Restores to Another Site, and xSpeed Database Cleanup Works With the Firewall On
This release fixes two problems you reported. Restoring a backup onto another site now keeps that site safe until the backup is in place. On OpenLiteSpeed, xSpeed’s database scan, clean and optimize work again without turning the firewall off.
See what you own under My Purchases, and know exactly what a server resize costs
You can now see every lifetime plan, server plan and add-on you own in one place, and what each one is used for. The resize screen now tells you in plain words what you pay today and why. Docker backups are safer, and they now tell you when they fail.
Clean up your WordPress database, let Auto Update fix Patchstack findings, and run site commands from the API
You can now clean up and optimize any WordPress site’s database from xCloud, without a plugin. You can take a database backup first, so nothing is lost if you change your mind. Auto Update now fixes Patchstack findings too, premium plugins included, and Supabase stays private by default.
Send Site Emails With toSend, Control What Support Can See, and Fixes Across Backups and Billing
You can now send your WordPress site emails through toSend. You can also test and check FluentSMTP on every site with one click. Support staff can’t see your site passwords or log in to your database until you give SSH consent. The rest of this release fixes problems you reported in backups, billing, databases and email.
PostgreSQL on Your Servers, Alerts in Discord, and Bulk PHP for the API
You can now run PostgreSQL on your server and manage it with pgAdmin. Your alerts can go to Discord or to your own web address, signed so you can trust them. You can also update WireGuard from the dashboard, and many backup, delete, Mail Delivery and billing problems are fixed.
Safer WordPress Logins, Simpler Cloudflare Setup, and a Weekly Backup Reminder
You can now protect WordPress logins with BetterShield, which replaces WP Fail2Ban. You can connect Cloudflare with just one API token. A weekly email tells you which servers have no backup, and you can finish setting up add-ons you already paid for. This release also brings more tools for the Public API and MCP, a large round of security work and many fixes. The v2.9.5.1 update from 25 October is included too.
See Every Server and Site in One Request, Plus Two Fixes
This small update lets your scripts and AI tools see all your servers and sites at once. If you pick MySQL 8.4 on an ARM server where it cannot be installed, xCloud now tells you right away. Creating an OpenLiteSpeed site with Cloudflare SSL no longer fails when the certificate cannot be issued.
Meet xCloud AI Assistant, Now for Every Team
xCloud AI Assistant is now open to every team, right inside your dashboard. Ask in plain words, and it checks your servers and sites, reads logs and helps you fix what it finds, with your approval on every change. It can now install and patch PHP and manage Node.js too. This release also adds 2FA protection for high-privilege server tools, a settings overview, a redesigned Deployments page and many smaller fixes.
PHP2Shell is a pair of critical remote code execution vulnerabilities in PHP itself, rated CVSS v4.0 9.2. We applied a temporary mitigation across connected xCloud servers before the official fix was released. Then we rolled out the patched PHP builds, PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, on both NGINX and OpenLiteSpeed servers. On a supported PHP version, nothing needs to be done from your end. Read the full PHP2Shell update.
Know Which Servers Need You, at a Glance
Fleet Monitoring brings every server’s health onto one page, with the servers that need you listed first. This release also adds Plain servers with no web server, a Deployments page for Git sites, team access you can manage from any server or site and one-click LibreChat updates. Backups are more reliable, secrets stay out of task history and many smaller issues are fixed.
Run Your AI Agents on Your Own Infrastructure
Hermes and OpenClaw can now run on a supported connected cloud account or your own VPS. This release also simplifies WordPress setup, adds device-specific Cloudflare Enterprise caching, lets you download server logs, restores database management in the Public API and MCP, and groups scheduled backup failures into a single digest instead of one email each.
Back Up Every Site to Two Storage Providers
A site can now send its backups to two storage providers at once, each on its own schedule with its own retention, so one provider outage or one deleted bucket no longer means losing your off-server copy. This release also shows you why CPU or RAM is high in Live Monitoring, makes firewall IP blocks take effect as expected, and fixes several issues with PHP, SSL and WordPress updates.
Run Any App Alongside Docker on One Nginx Server — Plus More Powerful OneClick Apps
This is a big one. An xCloud Nginx server now runs everything it already hosted — WordPress and WooCommerce, PHP and Laravel, Node.js and other SSR apps, and static sites — right alongside Docker workloads on the same server. You are no longer picking between a “web” server and a separate Docker stack. OneClick V2 then expands that further, and this release also brings new site-management Public API endpoints, personal email preferences, and a wide security pass.
Safer Team Access, Reseller Mailbox Plans, and Smarter Cloudflare Enterprise
xCloud v2.8.9 makes team access easier to maintain, opens Mailbox plans to white-label resellers, lets customers claim credit for server plans they bought but did not deploy, and expands Cloudflare Enterprise automation. It also makes site deletion safer and more recoverable, improves billing integrity, and fixes long-standing issues across Git setup, backups, WordPress monitoring, Node.js, OpenLiteSpeed, and DeepSeek Harness.
Agent-Ready Deployments, Multi-Team Access, and Smarter Infrastructure Management
xCloud v2.8.8 introduces a significantly upgraded MCP and Public API experience, multi-team API access, deployment diagnosis and recovery, Git staging through the API, smarter backup recovery, and reliability improvements across WordPress, xSpeed, OpenClaw, Git deployments, SSL, and server provisioning.
More Ways to Buy, Secure, and Manage Your Sites
This release brings new purchasing APIs, stronger site security, safer Git workflows, and more flexible caching across xCloud. It includes 42 merged changes since v2.8.6.3, together with the supporting platform and database updates.
xCloud v2.8.6 introduces backup and restore for Docker applications, a team Wallet for account credits, and read-only billing access through the xCloud Public API. This release also encrypts site environment scripts at rest, improves white-label signup, extends Mail Delivery beyond WordPress, and resolves several billing and server provisioning failures.
xCloud v2.8.5 introduces Ubuntu 26.04 LTS support and OneClick App deployment through the xCloud API. This release also adds more precise Cloudflare Enterprise cache controls and improves the reliability of Git deployments and Nginx server setup.
xCloud v2.8.3 delivers a powerful new Server Overview dashboard, smarter app-first site creation, 32 new One-Click Apps, improved Hermes Agent environment management, live monitoring, and important reliability fixes.
In xCloud v2.8.3, the new Server Overview dashboard provides at-a-glance insights into resource usage, site and service health, security, billing, automation, and quick actions. Learn more about managing server utilities in xCloud.
xCloud v2.8.2 brings more control over GitHub connections, a smoother support experience, safer domain setup, faster dashboard pages, and reliability fixes across hosting and site management.
Connect GitHub through an App and choose whether xCloud can access all repositories or only the repositories you select. Existing GitHub connections continue to work, and migration can happen without downtime.
Managed DeepSeek Harness Hosting is now available on xCloud. Deploy an open-source, plugin-based AI coding agent on fully managed infrastructure and get more control over the models, tools, and workflows behind your AI development setup.
DeepSeek Harness is built around a simple idea: everything is a plugin, giving you the flexibility to create the coding environment that works for you.
Version 2.8.0 brings more affordable managed server options, Cloudflare Enterprise for any domain, and stronger reliability across migrations, backups, billing, and server management.
xCloud Managed servers are now more affordable. The 6 GB plan starts at just $9.99 for the first month and renews at $19.99 per month, giving you a more accessible managed hosting option with the tools and support you need to run your sites.
Launched 59+ new OneClick apps, including Penpot, OpenProject, SearXNG, ClickHouse, Discourse, Jellyfin, Keycloak, Odoo Community, Gitea, Matomo, Moodle, and many more
Broken-link monitoring now uses a more reliable scanning flow, making it easier to identify and manage broken links across your websites. You can now scan your WordPress sites for broken pages, links, images, redirects, and soft 404 errors directly from xCloud.
Deploy via Git through the xCloud API
You can now detect a repository’s application type and deploy Git-based projects through the xCloud Public API.
Cloudflare Enterprise is now available on xCloud as a per-domain add-on. You get the same enterprise network the largest brands run on, fully managed by xCloud, for a flat $5 per domain, per month. No Cloudflare account, no enterprise contract, and no DNS work on your side.
🎉 xCloud MCP is here. Connect Claude, Claude Code, Cursor, ChatGPT, Gemini, VS Code, Windsurf, or any MCP-compatible client to your xCloud account and manage your servers and sites through a conversation instead of the dashboard.
Describe what you want in plain language and your AI assistant handles it against your real infrastructure:
xCloud v2.7.4 introduces the Buzz OneClick App and OneClick App Templates, making it easier to deploy supported self-hosted applications on Docker Nginx servers. You can now run your own private Buzz workspace on xCloud with a guided setup, secure WebSockets, and persistent application data.
xCloud’s new OneClick App Templates provide a guided way to deploy supported Docker and Node.js applications. xCloud manages the required credentials, ports, configuration values, and template version used during installation.
xCloud v2.7.3 brings a smoother sign-in and checkout experience, stronger multisite wildcard SSL handling, more flexible Custom Nginx controls, and reliability improvements across the platform.
Sign in with your Google or GitHub account, manage connected accounts, and complete purchases through a simpler unified checkout flow.
xCloud v2.7.2.2 adds GPT-5.6 support for AI agents and improves deployment, monitoring, WordPress update, and dashboard reliability.
You can now use GPT-5.6 with Hermes, OpenClaw, and Paperclip on xCloud.
The old source we used for Nginx is out of date and no longer gets new versions. Now you can move your servers to the official Nginx with a single click. Just click on the ‘Upgrade Nginx’ button from the banner of your dashboard and xCloud does the rest in the background. Your sites stay online the whole time. If something goes wrong, it undoes the change by itself, so it’s completely safe to try. New servers already come with the official Nginx built in.
Deploy any Git project, WordPress, Laravel, Node, Docker, or anything else, through one simple flow. Drop in a repo and AI handles the rest: it reads your project, detects the app type, branch, and runtime, writes the deploy script, and ships it. Setup takes seconds, not hours.
xCloud v2.7.0 brings a more powerful AI Bot Blocker, stronger backup reliability, smoother n8n provisioning, and several improvements across site management, billing, search, and documentation.
We’ve upgraded the AI Bot Blocker from a simple on/off option into a full management experience for your sites. You can now view the default AI bot blocklist, allow selected bots, and add custom bots to block directly from the Web Server Security page.
Take full control of your servers and sites by describing what you want in plain language, and let the skills handle the xCloud Public API calls in the background with enterprise-grade security. The skills are agent-agnostic: they work with any MCP-compatible AI coding agent, including Claude, Codex, Grok, and others. Create a token in your dashboard settings, install the skills in your agent, and start in about a minute.
You can now add Git integration to an existing WordPress or Custom PHP site directly from the site’s Git tab, in a single flow. Previously, putting an existing site under Git meant redeploying the project from scratch: create a repository, push your files, set up a deploy key, and get it live.
Introducing xCloud Pulse, a native macOS menu bar companion app for xCloud, built on the upcoming xCloud Public API.
xCloud Pulse works like a quick-access xCloud dashboard that lives directly in your Mac menu bar, helping you check important site and server information without opening the browser every time.
Take full control of your servers and sites through a modern RESTful API. Automate repetitive tasks, scale your infrastructure, and build directly on top of xCloud, all with enterprise-grade security. Create a token in your dashboard settings, set the permissions you need, and start building in about a minute.
Installing and managing PHP extensions no longer requires SSH access or command-line work. xCloud now lets you view, install, and remove PHP extensions for every PHP version directly from the dashboard.
Find anything in xCloud instantly. Press Cmd+K to search across all your servers, sites, and feature pages from anywhere in the dashboard. When you’re on a server page, the search automatically scopes to that server’s sites.
You’ll also see smart hints showing which features are available based on your server stack and site type, your recent searches, and provider and site-type logos to help you spot results faster. The old sidebar search has been retired, the new search palette replaces it. Keyboard and accessibility behavior has been polished too (focus handling, Esc to close, scroll-lock).
xCloud v2.6.2 introduces a new interactive browser SSH terminal, a redesigned server creation experience, new Hermes management panels, smarter Docker Compose environment setup, and safer confirmation modals for risky server actions. This release also includes server setup improvements, Mailbox validation updates, and multiple reliability fixes across sites, servers, backups, Supabase, WordPress, and dashboard workflows.
Reset your server to a day-one clean state without decommissioning, re-provisioning, or starting a new billing cycle. One click resets the stack while your IP, DNS records, firewall rules, and invoice stay exactly where they are.
Build Trust With Clear Website Maintenance Reports for Your Clients. Generate professional, fully branded site reports for your clients directly from the xCloud dashboard in just a few clicks.
Manage HTTP Headers & Redirects for WordPress Sites. Create and manage HTTP headers and redirect rules for WordPress sites running OLS directly from the xCloud dashboard.
Improved Mailbox Admin Visibility – NEW Mailbox management now has better admin tooling and reporting support.
Safer Staging Pull from Production – Pulling data from production to staging is now safer. – Sensitive mailer credentials are sanitized during staging sync. WordPress salts are refreshed for staging environments.PHP version parity is improved between production and staging. Helps prevent accidental use of production credentials in staging
Faster OpenClaw Server Readiness – We improved the infrastructure flow for OpenClaw server creation so eligible OpenClaw servers can be prepared and assigned faster.
Better Server Resize Billing Flow – Server resize billing now works more smoothly with the invoice payment modal.
Improved Service Sync ReliabilityWe added a more reliable server service sync flow to keep server service records aligned.
Cleaner Alert Notifications – We improved alert handling to prevent duplicate notifications for some alert events.This helps reduce noise and keeps notifications more accurate.
Stronger Supply Chain Protection – We added an npm package safety guard to reduce the risk of installing newly published potentially unsafe packages too quickly.
The server creation stack input has been updated with better design and positioning.
The xCloud MailBox Addon is now a complete business productivity suite — not just email anymore. Create professional email addresses with your own domain (e.g., [email protected]), build trust with customers, and manage everything from one place.
Dirty Frag mitigation has been applied across all connected xCloud servers, including xCloud-managed and self-managed servers, via the existing security patch system. The vulnerable kernel modules are safely disabled and unloaded where applicable. Nothing needs to be done from your end, and there is no downtime or reboot requirement.
– Resellers can offer fully managed OpenClaw, Hermes & Paperclip hosting to their own customers.
– Customers get AI agent hosting powered by xCloud, while resellers manage sales and customer access from one place.
– This makes it easier for agencies, hosting providers, and AI service businesses to launch their own AI hosting services without building the infrastructure themselves.
Security Release – 🔒 CVE-2026-31431 (“Copy Fail”) Mitigation Applied
Automatically disables the vulnerable algif_aead Linux kernel module across all connected servers — both xCloud-managed and non-managed — via the existing security patch system. The module is permanently blacklisted, safely unloaded if running, and verified blocked without impacting older or custom server configurations. No action required from your side.
Deploy your own self-improving AI agent with persistent memory, auto-built skills, and multi-platform messaging — fully managed on xCloud. No terminal or DevOps experience needed.
Hermes Agent remembers you across sessions, builds new skills as it works, and runs 24/7 on autopilot. You sign up, we deploy, you start chatting.
Deploy and run an autonomous company powered entirely by AI agents — fully managed on xCloud. No coding or server skills needed.
Paperclip lets you hire AI employees, set goals and budgets, and let your agents run 24/7. You stay in control. They handle the work.
The xCloud infrastructure upgrade brings major improvements to the performance, security, and long-term stability of your dashboard. This release focuses on faster operations, near-instant navigation, and a modern foundation that keeps xCloud reliable as it continues to grow.
Create and manage HTTP header and redirect rules for WordPress sites running NGINX directly from the xCloud UI – no manual nginx config editing required.
Cloudflare WAF rule management is now available directly inside xCloud. You can apply common WordPress security protections without creating manual rules in the Cloudflare dashboard.
Transactional emails are essential for WordPress websites. When an email quota runs out unnoticed, emails can suddenly stop sending. This update introduces smarter Mail Delivery subscription management with Auto Upgrade and 1-click Cloudflare DNS setup to keep email delivery uninterrupted.
A brand-new Site Insights menu providing real-time analytics for PHP performance, MySQL queries, and traffic patterns directly from the site dashboard. Gives site owners deep visibility into their application performance without needing external tools.
🌟 OpenClaw Repair: AI-Powered OpenClaw Repair Agent is now available inside the xCloud dashboard for instant diagnosis and recovery. Run one-click AI-assisted health checks for the gateway – no SSH or manual debugging required.
📌Added temporary sudo users with 12-hour auto-expiration.
📌Added granular domain search & replace controls for updates and SSL changes.
📌Improved domain updates with real-time progress and duplicate prevention.
📌Improved UI consistency across buttons, layouts, and mobile views.
📌Improved OpenClaw Control UI domain and alias access handling.
🌟 Update: OpenClaw Reset (No new server needed): You can now reinstall OpenClaw from scratch on the same server using OpenClaw Reset. With one click, it creates a backup, reinstalls a clean setup, and generates fresh credentials.
🌟 FPM Configuration: Site-Level PHP-FPM Configuration Is Now Available on xCloud. You can now control PHP-FPM settings for each site directly from the dashboard without SSH access or manual configuration files. This update lets you tune PHP worker behavior, manage resource usage per site, and handle traffic spikes more reliably while avoiding risky server-wide changes.🚀
WordPress🦀 OpenClaw Hosting — Update.
Big improvements to the OpenClaw one-click hosting on xCloud:
🌟 OpenClaw Hosting (Beta): Launch a fully managed AI agent on xCloud with one-click deployment and zero setup. OpenClaw runs on a dedicated managed server, comes pre-configured with messaging channels like Telegram, and lets you control real tasks, workflows, and integrations entirely through chat.
Ideal for individuals and teams who want a powerful AI assistant without handling infrastructure, updates, or security.
xCloud UI 2.0 introduces a redesigned dashboard built to make site and server management more intuitive and efficient. This release focuses on faster navigation, clearer visibility, and simpler daily workflows through a more structured and organized xCloud control panel.
The new Main Overview Dashboard provides a single place to view your overall activities of your team. It shows key information such as servers, sites, vulnerable sites, backups, and billing, helping you manage more quickly.
Nothing matches that. Try a version number or a keyword.