v3.0.0
xCloud 3.0: One Server for Everything. We Keep It Safe.
Since last Black Friday we shipped 97 releases, with more than 200 new features and over 1,000 fixes and improvements. xCloud 3.0 brings them together. You can now run WordPress, Node.js and Docker apps on one server, put apps live from GitHub without downtime, and manage everything by asking AI. And when a dangerous security hole appears, we close it on your server for you.
This page explains each part in plain words and links the guide for it.
🔥 New Features
🆕 Everything on One Server: WordPress, Node.js and Docker Together
Before, Docker apps needed a server of their own. Now one xCloud server runs your WordPress sites, PHP and Laravel apps, Node.js apps, static sites and Docker apps side by side. You need fewer servers, and you pay for fewer servers.
Who it’s for: anyone running more than one kind of site or app, and agencies who want fewer servers to look after.
- Install Docker from the server’s Management → Settings → Install a Service, or let xCloud install it the first time a Docker app needs it.
- For busy WordPress or WooCommerce stores, we still recommend a separate server, because Docker apps share the server’s CPU and memory.
- Shipped in v2.9.0.
Learn more: Enable Docker on an NGINX server · Docker hosting on xCloud
🆕 Docker Hosting and Docker Compose
Bring any app that ships as a Docker image or a Docker Compose file. xCloud deploys it, gives it a domain with free SSL, and backs it up.
Who it’s for: developers and teams who package their apps with Docker, or run open-source tools that come as a Compose file.
- Deploy from a Compose file, or straight from a Git repository.
- Point several domains at the different parts of one app.
- Back up and restore a Docker app, including its data, its Compose file and its settings, to your own storage.
- Shipped in v2.2.2, v2.5.1 and v2.8.6.
Learn more: Deploy a custom Docker app · Deploy a Docker app from Git · Back up and restore Docker apps
🆕 Put Your App Online from GitHub, with No Downtime
Paste a repository and xCloud works out what kind of app it is, writes the deploy steps for you, and puts it live. Every push after that goes live by itself.
Who it’s for: developers shipping Node.js, PHP, Laravel, Docker or WordPress projects from Git.
- One-click deploy from Git: xCloud detects the app type, the runtime and the settings it needs.
- No downtime: each new version is built next to the live one, checked, and only then switched in. Visitors never see a half-finished update.
- One-click undo: if a new version misbehaves, roll back to the one before.
- Staging for Git sites: test a branch before it reaches your live site.
- Shipped in v2.7.1 and v2.8.7; zero-downtime deploys are now on for every team.
Learn more: Deploy Git projects in one click · Zero-downtime deploys · Roll back a deployment
🆕 Start Over on the Same Server
Changed your mind about what a server is for? Rebuild it into something else. You keep the same server, the same IP address and the same bill, so there is nothing new to buy.
Who it’s for: anyone who wants to switch a server from WordPress to Node.js, Docker apps or an AI agent, or simply start fresh.
- Pick the new setup and confirm. xCloud wipes the server and sets it up again.
- Back up anything you want to keep first, because a rebuild clears the disk.
- Shipped in v2.6.1.
Learn more: Rebuild a server
🆕 1,000+ Apps You Install in One Click
Open-source tools like n8n, Ghost, Nextcloud, Supabase, Uptime Kuma and Immich now install in one click on your own server, with SSL and backups set up.
Who it’s for: anyone who wants their own copy of a popular tool instead of paying for someone else’s cloud.
- Apps can now have several domains and public TCP and UDP endpoints.
- Update an app, edit its settings and back it up from the dashboard.
- Shipped across v2.7.4 to v2.9.0.
Learn more: All one-click apps · Use one-click app templates · Apps with several domains
🆕 New Server Types: Plain Servers and Managed PostgreSQL
Not every project needs a web server. A plain server is a clean, secured Ubuntu server you shape yourself. Apps that use PostgreSQL can now have it managed by xCloud.
Who it’s for: developers who want a blank, safe starting point, and apps built on PostgreSQL.
- Plain server: firewall, login protection, key-only SSH and automatic security updates from the start. Add NGINX or OpenLiteSpeed later.
- Managed PostgreSQL: one per server, with pgAdmin over HTTPS, next to MySQL.
- Shipped in v2.9.3 and v2.9.7.
Learn more: Create a plain server · Install managed PostgreSQL and pgAdmin
🆕 Just Ask: AI That Manages Your Servers
Tell xCloud what you want in plain words, and AI does it. It asks you before it changes anything.
Who it’s for: everyone. You don’t need to know where a setting lives to change it.
- AI Assistant in the dashboard: ask “why is this site slow?” or “update all my plugins”. It reads logs, SSL, speed and updates, and makes changes only after you click Confirm. Press ⌘K to ask from anywhere.
- xCloud MCP: connect Claude, ChatGPT, Cursor, Gemini or another AI app to your account. It can create, deploy, check and fix your servers and sites.
- xCloud plugin for ChatGPT: ask ChatGPT about your updates, security and backups. It can look, but never change anything.
- Shipped in v2.7.5 and v2.9.5.
Learn more: Use the AI Assistant · Connect xCloud MCP to your AI app · The xCloud plugin for ChatGPT
🆕 AI Agents in One Click
Run your own AI assistant that works around the clock, answers on Telegram and other chat apps, and remembers what you told it. We set up and look after the server.
Who it’s for: people who want a personal or team AI agent without touching Docker or a terminal.
- Choose OpenClaw, Hermes Agent, Paperclip or DeepSeek Harness, bring your own model key, and it’s live in minutes.
- Done with an agent? Rebuild the same server for something else.
- Shipped from v2.3.2 to v2.8.1.
Learn more: AI agent hosting · Deploy OpenClaw · Deploy Hermes Agent
🆕 One List of Everything That Needs You
No more opening every server and site to find problems. xCloud collects them in one place, tells you what each fix will change, and does it with one click.
Who it’s for: anyone looking after more than a handful of sites.
- To-Do Center: updates, expiring SSL, missing backups and more, each with a preview of the fix. Snooze or ignore what doesn’t matter.
- Security Center: every known vulnerability, server patch and outdated version across your team, worst first.
- Fleet Monitoring: the health of every server on one page, with the ones in trouble at the top.
- Shipped in v2.9.3, v2.9.8.2 and v2.9.8.3.
Learn more: Use the To-Do Center · Find and fix security issues · Monitor all your servers
🆕 WordPress Care Without Extra Plugins
The jobs you used to install plugins for now live in xCloud.
Who it’s for: WordPress site owners and agencies.
- Undo a bad update: roll a plugin, theme or WordPress itself back to an earlier version, with a backup taken first.
- Safer updates, premium plugins included: see PRO plugin updates in xCloud, with a backup before and a cache clear after.
- Clean up your database: preview, back up, clean and optimize, or put it on a schedule.
- Login protection: BetterShield blocks repeated failed logins and bots on every site.
- Snapshots, client reports and broken-link checks: copy a finished site, send clients a branded report, and find broken links before visitors do.
- Shipped across v2.2.3 to v2.9.9.6.
Learn more: Manage WordPress updates · Clean up your database · Set up login protection · Maintenance reports
🆕 Faster Sites: xSpeed Cache and Cloudflare Enterprise
Our own xSpeed Cache now runs on more than 10,000 WordPress sites, and it’s on by default for new ones. For the biggest speed boost, add Cloudflare Enterprise to any domain.
Who it’s for: anyone who wants faster pages without tuning caches by hand.
- xSpeed Cache: page and object caching, managed from the dashboard.
- Cloudflare Enterprise: 330+ locations, full-page caching at the edge, image optimization and the Enterprise firewall, for $5 per domain per month.
- Shipped in v2.7.6 and v2.8.7.
Learn more: Configure xSpeed Cache · Activate Cloudflare Enterprise
🔒 Security
The biggest change in xCloud this year: when a dangerous security hole appears, closing it on your server is our job, not yours. This covers every connected server, ours and yours.
- PHP2Shell (October 2026): we protected every connected server hours before PHP released its own fix, then rolled out the fixed PHP versions. v2.9.4 · Upgrade or patch PHP
- Copy Fail and Dirty Frag (May 2026): two Linux kernel holes closed on every connected server, with no reboot and nothing for you to do. v2.5.3 · v2.5.5
- MariaDB (October 2026): the security fix applied to existing database servers; new servers start on MariaDB 11.8. Apply the MariaDB security patch
- Known vulnerabilities fixed for you: Site Security Pro, powered by Patchstack, blocks attacks on known plugin and theme holes and can update the affected plugin for you. Set up Site Security Pro
- Safer access: two-factor sign-in is now required for high-risk tools, sudo users can expire after 12 hours, root password login is off, and SSH can be limited to your own IPs. Two-factor authentication
⚡ Improvements
- Backups: send each site’s backups to two places, keep a backup forever, run several schedules, and get a weekly email about servers with no backup. Keep a backup and run several schedules
- Teams: give a member access to all servers, selected ones, or selected ones plus any added later. Manage team access
- Email: a free mailbox for every domain on servers we provide. Claim your free mailbox
- Billing: a Free plan, all your purchases on one page, account credit, and paying for a package in monthly installments. Pay in installments
- Dashboard: a redesigned dashboard, a mobile view and search from anywhere with ⌘K.
🧑💻 For Developers: Public API and MCP
- The xCloud Public API covers servers, sites, Git deploys, one-click apps, backups, security fixes and billing, so you can script anything you can click.
- xCloud MCP gives AI apps access to more than 300 operations through a compact set of 5 tools, and one connection can cover several teams. Multi-team tokens and MCP access
- Fix known vulnerabilities on up to 100 sites in one request, with a backup first. Fix vulnerabilities on many sites
- Get every server and site in one request. Fleet overview
- Turn zero-downtime deploys on, off and roll back from the API. Release mode through the API and MCP
Please note
- Nothing changes for your existing servers and sites. Everything in xCloud 3.0 is already in your dashboard.
- For the full detail on any feature, open the release it shipped in from the changelog.