In development

QuroPanel is under active development. Follow the roadmap and join the first public testing group.

View roadmap Development updates
QuroPanel
Follow development
Platform overviewAll featuresIntegrationsQuroAdminQuroResellerQuroControlQuroCommerceQuroDeployQuroShieldQuroSupportNative appsQuroDeskQuroCLI
Hosting providersResellersAgenciesDevelopersWordPress hostingApplication hostingMigrating inCompare panels
Why open sourceLicenceContributeRoadmapSecurity overviewArchitectureResponsible disclosureRelease signing
Download and installSystem requirementsDocumentationMigration guideDevelopment updatesChangelogCommunityBrand and press
Pricing
Follow development

Roadmap

What is done, what is next, what is still an idea.

The specification is complete and 0.1 is being built now. Everything beyond it is honestly marked planned, and this page changes as that changes.

Where 0.1 actually is

0.1 is being built now. These numbers come from the repository itself, not from a plan, and they are updated when the site is rebuilt. QuroPanel is not installable yet and there is no web interface — this is the engine being assembled underneath one.

15 of 15
Privileged operations implemented
89
Automated tests passing
3,542 lines
Production code
1,665 lines
Test code
7
Control-plane tables
Not started
Web interface

Privileged operations

The node agent runs a closed list of typed operations and nothing else. There is no endpoint that accepts a command to run, and there never will be — adding a capability means adding an entry to the contract, which is a reviewable change in one file.

Implemented

  • Scheduled drift repair that converges nodes back to desired state
  • Roles and permissions, with delegation that cannot escalate
  • Create a hosting account and its isolated Linux user
  • Configure a per-account PHP-FPM pool
  • Create a website and its Nginx vhost
  • Create a database and a scoped database user
  • Issue a certificate, then verify it actually reached the vhost
  • Validate and reload Nginx
  • Apply and update filesystem quota
  • Remove an account, a website or a database
  • Start and stop managed applications
  • Create and restore backups, with the archive verified both ways
  • Apply firewall rules

Not yet implemented

  • The web interface — no panel exists yet
  • The installer, so a node can be set up without hand-placing certificates
  • SFTP, cron and scheduled jobs
  • WordPress installation and the application catalogue
  • Email hosting

Release phases

Specification

Complete
  • Platform vision and product scope frozen
  • 22 panels, 8 workspaces and 14 applications specified
  • Security architecture and threat model
  • Public website brand system and information architecture

0.1 — Internal alpha

In progress
  • Node agent, mutual-TLS transport and the typed operation contract
  • All 15 privileged operations implemented and tested
  • Accounts, isolation, PHP-FPM pools, websites, databases, SSL, backups
  • Audit log, desired-state records and the reconciler
  • Still to come: the web interface, authentication and the installer

0.2 — Managed WordPress

Planned
  • Staging, cloning and migration
  • Transactional updates with automatic rollback
  • Checksum verification and the security scanner
  • Object cache and Redis

0.3 — App platform

Planned
  • Node.js, Python and static applications
  • Git deployment and the build pipeline
  • Workers, cron and rootless containers
  • Deployment rollback

0.4 — Reseller platform

Planned
  • Resellers and master resellers
  • White-label branding and package delegation
  • Multiple nodes and the placement scheduler

0.5 — Infrastructure

Planned
  • DNS cluster, dedicated database and backup nodes
  • Migration framework
  • High-availability control plane

1.0

Planned
  • Stable APIs and signed updates
  • Security audit and upgrade guarantees
  • Plugin SDK, MCP server and full documentation
  • First production deployment with Hostiquro

Follow the build

The roadmap shows what is specified, what is being built and what is still only planned.

View the roadmap

Contribute

Drivers, integrations, translations and documentation are all places to start.

How to contribute

Report a security issue

Responsible disclosure, with a stated response commitment.

Disclosure policy