Cloud VPS 6 GB
Most popularA website checker for one team.
24.99per month
- 6 GB RAM
- 4 vCPU cores
- 100 GB NVMe SSD
- 30 TB
- Unlimited
Web Check hosting runs a website analysis dashboard on your own domain: enter a URL and get DNS records, SSL details, headers, open ports and more in one place. Deploy Web Check 2.3.0 as one stateless pinned container, over HTTPS in minutes. It has no login, so anyone who reaches the address can run the scanner unless you add Basic Auth or an allowlist.
Web Check is an all-in-one website analysis dashboard, described upstream as comprehensive, on-demand open source intelligence for any website. You enter a URL and it reports DNS records, SSL chain, HTTP and security headers, open ports, redirects, tech stack, trace route and a screenshot. A self-hosted Web Check is an alternative to pasting domains into online website scanners, released under the MIT licence.
On xCloud it is Web Check 2.3.0 from the official image, pinned by digest, as one stateless container with no database, accounts or volume. xCloud sets the CORS origin to your site and a default block list for private ranges, and serves it over HTTPS. There is no login: anyone who can reach the address can use the scanner, so add access control.
A Web Check install needs the dashboard, an API, a headless browser, a block list for private ranges, a domain and a certificate before the first scan. This is the same result without assembling any of it.
Step 01
Create your xCloud account and pick Web Check from the OneClick catalog. Choose your domain and target server; the install form has no fields.
Step 02
One click. We start lissy93/web-check:2.3.0, pinned by digest, as one stateless container, set the CORS origin to your site and a default block list for loopback, private, link-local and CGNAT ranges, and publish it over HTTPS.
Step 03
Before sharing the address, add Basic Auth or an IP allowlist in front of it, or set API_ENABLE_RATE_LIMIT=true. Then open the site, enter a URL and review the reports. Nothing is stored between scans.
Web Check runs here as a stateless scanner, with the checks made from your server and nothing kept afterwards.
Reports DNS records and the SSL chain for a domain, so you can see how it is set up from outside.
Shows HTTP headers and security headers and redirects, which helps spot missing hardening on a site.
Checks open ports, identifies the tech stack and runs a trace route, executed inside the container.
Opens the target in headless Chromium for a screenshot. If a check is unavailable on your server, it is reported as skipped.
API_BLOCKED_HOSTS refuses loopback, private, link-local and CGNAT IPv4 ranges as typed. A hostname resolving to a private address is not blocked.
Web Check keeps no data between requests: no database, no accounts and no volume. There is nothing to back up.
Managed hosting for Web Check, so the parts that keep it online are not your problem.
Run DNS, SSL and header checks on domains you own and see what an outsider sees.
Enter a client domain you are authorised to test and review ports, redirects and headers.
Make the lookups from a server you control instead of a third-party scanning website.
Put the dashboard behind Basic Auth so colleagues can check sites without exposing it to everyone.


Dedicated Cloud VPS sizes, pre-configured for Web Check hosting. Pick the one that fits, and resize any time.
A website checker for one team.
24.99per month
More headroom if it shares the server with heavier apps.
59.99per month
Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Web Check is licensed under MIT.
Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Web Check on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.
Start your journey without cost.
$0forever
Your rate with 2–5 servers connected.
$5per server / month
The same platform, discounted at 6–10 servers.
$4per server / month
The same platform, discounted at 11+ servers.
$3per server / month
Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.
Web Check on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Your scans run from your server, behind your own access control.
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
From Server creation to application deployment, everything can be managed from our intuitive control panel.
See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.
xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!
Brian GeovannyI've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.
Kevin PinedaI'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting
Leo KooHow Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud
Ed EllinghamxCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.
Dumitru ButucelxCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.
Waqar AhmedTrust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍
Rahul SinghSo far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.
Massimo VillaCame from cloudways then to runcloud then to xcloud. Looks like I'm staying here.
Gerson ElI've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.
Tony LewisI came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.
Jared McDowellI like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose
David McCanHow Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently
Kevin HeinrichsI had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.
Dan SpinozaDear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.
Rahil MaknojiaCame from runcloud. Tried xcloud and never came back.
Karl FanegaHow Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites
Gary MoodyxCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.
Jorge de los Reyes MartínezI use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.
Jay PaganoHow Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud
Lori NewmanI too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps
John ApertureI went from Cloudways to xCloud. No intention on switching in the foreseeable future.
Blaine MooreFeel free to contact us with any questions or concerns you may have.
No. Web Check has no authentication, so anyone who can reach the site can run every check. The server fetches the address they enter, scans its ports, runs traceroute and opens it in headless Chromium. Add Basic Auth or an IP allowlist before sharing the URL.
By default no. API_BLOCKED_HOSTS blocks loopback, private, link-local and CGNAT IPv4 ranges. The match is on the address as typed, so a hostname that resolves to a private address is not blocked. Remove ranges only if you need to scan your own network.
Put Basic Auth or an IP allowlist in front of the site, which you configure yourself because the template does not enable them. For a public site, set API_ENABLE_RATE_LIMIT=true in the Environment editor and redeploy.
Upstream lists DNS records, the SSL chain, HTTP and security headers, open ports, redirects, tech stack, trace route and a screenshot, among other checks. Some need optional API keys, and a check that cannot run is reported as skipped.
Yes. Upstream publishes a Docker image, and this template is Web Check Docker hosting without the setup: the 2.3.0 image pinned by digest, a default block list and HTTPS on your own domain, with no volume to manage.
The manifest asks for 256 MB of RAM, 1 CPU core and 4 GB of disk. Headless Chromium for screenshots adds load when scans run, though the 6 GB plan leaves ample room for other apps.
No. Nothing is stored between requests. The container is stateless, with no database, no accounts and no data volume, so there is nothing to back up and no history of what anyone scanned. Each request runs its checks fresh from your server.
Yes. Web Check is MIT licensed, so running it has no licence cost. You pay for the Cloud VPS, which gives you a Web Check cloud of your own, and scans originate from that server's address.
Optional settings include SHODAN_API_KEY, GOOGLE_CLOUD_API_KEY, CERTSPOTTER_TOKEN and GITHUB_TOKEN, all commented in the environment file. Add only the ones you need, keep them private, and Save and Redeploy so they apply; none is required for the core checks.
The install stays on its pinned 2.3.0 image until you adopt a newer template version. Review the upstream notes first. Nothing upgrades automatically, and because Web Check is stateless there is no data to migrate.
Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.
Connect your first server in minutes. No plan you have to grow into.