CloudLinux hosting at Theory7

Why does Theory7 run CloudLinux on all shared hosting servers?

Theory7 runs CloudLinux on all shared hosting servers because we believe affordable hosting shouldn't come at the cost of stability and security. CloudLinux isn't an optional extra or premium add-on with us: it's standard on every package, from the Mini package at €0.49 per month to the Ultimate package. Whether you choose regular web hosting, WordPress hosting, or reseller hosting, your website always runs on CloudLinux.

CageFS: every website in its own isolated environment

In practice, this means the following: if you have a hosting account at Theory7, your website runs in its own virtual environment. You can only see your own files, databases, and processes. The files of other customers on the same server are completely invisible and inaccessible. This works both ways: other customers can't access your files either.

What CageFS protects against

CageFS isolation protects against a range of security risks inherent to shared hosting:

• Symlink attacks, a common technique where an attacker tries to read files from other accounts via symbolic links. CageFS makes this impossible because the files of other accounts simply don't exist within your virtual environment.
• Process inspection, on a regular Linux server, any user can see the running processes of all other users. CageFS limits the process list to only your own processes.
• Sensitive system files, CageFS hides sensitive configuration files and system information that an attacker could use to further compromise the server.
• Horizontal escalation, if an attacker gains access to an account through a vulnerability in a WordPress plugin, the damage stays limited to that one account. The attacker can't move on to other accounts thanks to CageFS isolation.

LVE: guaranteed resources for every website

LVE manages four critical resources:

• CPU, every account gets a maximum percentage of CPU time allocated. A website with inefficient code or a sudden traffic spike can't use more CPU than what's allocated, so other websites keep running undisturbed.
• Memory (RAM), the amount of working memory per account is limited. A memory leak in a PHP script or a heavy database query can't consume the available memory for the entire server.
• I/O (disk access), the speed at which an account can read and write data to disk is capped. According to Google, load time is a critical ranking factor for websites. A heavy backup or import can't affect disk performance for all other accounts as a result.
• Processes, the maximum number of concurrently running processes per account is limited. A fork bomb or uncontrolled script can't fill up the server's process table.

The result is that your website consistently performs well, regardless of what other websites on the same server do. This predictable performance is one of the major advantages of CloudLinux hosting compared to shared hosting on standard Linux.

Hardened kernel: extra protection at the system level

The hardened kernel provides protection against kernel-level exploits that an attacker could use to break the isolation of individual accounts. Even if a zero-day vulnerability is discovered in the standard Linux kernel, the hardened CloudLinux kernel often already offers protection thanks to additional security mechanisms such as extra system-call filtering and memory protection.

Imunify: advanced security suite

The main components of Imunify are:

• Malware scanner, automatically scans files for known malware, web shells, and suspicious code. Infected files are detected and quarantined.
• Web application firewall, filters incoming web traffic and blocks known attack patterns such as SQL injection, cross-site scripting (XSS), and remote file inclusion.
• Brute-force protection, automatically detects and blocks repeated login attempts on WordPress, DirectAdmin, and other applications.
• Proactive defense, analyzes PHP scripts in real time and blocks suspicious actions before they can cause damage, even if the malware isn't yet in the database.

These security measures all work in the background without requiring any configuration from you. They're active by default on all hosting packages, at no extra cost.

CloudLinux hosting vs standard shared hosting

With providers that don't use CloudLinux, you run the risk of the so-called noisy neighbor problem: another website on the same server consumes so many resources that your website becomes slower or even unreachable. With CloudLinux and LVE, this problem is fully solved.

Combined with LiteSpeed and NVMe for maximum performance

LiteSpeed Enterprise processes PHP requests up to 12 times faster than Apache, making it the fastest web server technology on the market. Combined with NVMe SSD storage, which delivers read speeds up to 7,000 MB/s, web pages load blazingly fast. CloudLinux ensures this speed is consistently available for every website thanks to LVE resource management.

The combination means you get fast web hosting at Theory7 that's also stable and secure. You don't have to choose between speed and security: with CloudLinux, LiteSpeed, and NVMe, you get both. Check out our hosting packages and discover why more and more website managers choose the stability and security of CloudLinux hosting at Theory7.

PHP Selector: multiple PHP versions per account

Say you run a WordPress website that works optimally on PHP 8.2, but you also host an older web application that still depends on PHP 7.4. On a server without CloudLinux, you'd have to choose: either run all websites on the same PHP version, or set up separate hosting accounts. With the CloudLinux PHP Selector, you set the optimal version per domain, with no compromises.

The PHP Selector also lets you configure individual PHP extensions and settings per account. Need the ionCube Loader for a specific application, or want to raise the upload limit? Through the DirectAdmin control panel, you adjust these settings easily without having to contact support. This flexibility is unique to CloudLinux and is missing on servers with standard Linux distributions.

MySQL Governor: database resources under control

The MySQL Governor monitors database usage per account in real time and automatically intervenes when an account consumes an excessive amount of database resources. This works the same way as the LVE limits for CPU and memory: every account gets a fair share of database capacity and can't come at the expense of other accounts.

In practice, this means an online store with thousands of products and complex search queries can't affect the database performance of your WordPress blog on the same server. The MySQL Governor ensures every website has consistently fast database access, regardless of the load from other accounts. This is one of the reasons our web hosting delivers reliable performance, even during peak moments. Research by Uptime Institute shows that 99.9% uptime is the industry standard for professional hosting.

CloudLinux versus Docker and containerization

Docker containers are designed for packaging and deploying applications. Every container holds a complete application with all its dependencies. Docker is popular among developers and in cloud-native environments, but it's not specifically designed for the challenges of shared web hosting.

CloudLinux is built specifically for the web hosting environment. CageFS provides file system isolation that works transparently with existing control panels such as DirectAdmin, without customers having to change their workflow. LVE provides fine-grained resource management that integrates seamlessly with the web hosting stack. The hardened kernel and Imunify specifically target the security challenges of shared hosting.

The difference comes down to focus. Docker solves a broad range of problems in software development, while CloudLinux is specifically optimized for running hundreds of websites securely and stably on the same server. For shared hosting, CloudLinux is the superior choice, and that's exactly why Theory7 uses it on all servers.

Why most budget hosts don't use CloudLinux

Many budget hosting providers therefore run on free alternatives such as AlmaLinux or Rocky Linux. These operating systems are stable and reliable, but lack the specialized isolation, resource management, and security features of CloudLinux. Without CageFS, there's no account isolation. Without LVE, there's no per-account resource limiting. Without the hardened kernel, you miss an extra layer of security.

At Theory7, we've deliberately chosen to run CloudLinux on all shared hosting servers, including the cheapest Mini package at just €0.49 per month. We absorb the licensing costs of CloudLinux ourselves because we believe security and stability shouldn't be premium features. Every customer deserves the same protection, regardless of the package they choose.

Theory7's choice for quality infrastructure

This approach sets Theory7 apart from providers that offer basic hosting and then sell essential features as paid add-ons. With us, you pay a fair price for a complete package. SSH access is available on all packages, including shared hosting, made possible thanks to CloudLinux's CageFS isolation. With providers that don't use CloudLinux, SSH on shared hosting is often unavailable due to the security risks.

Whether you choose web hosting, WordPress hosting, or reseller hosting, you always get the full CloudLinux stack with CageFS, LVE, hardened kernel, and Imunify. Combined with LiteSpeed Enterprise and NVMe SSD, we offer a hosting platform that competes on performance, security, and stability with solutions that cost many times more. That's the Theory7 promise: professional hosting without compromise, affordable for everyone.

Performance improvement in practice

For WordPress websites, the difference is especially noticeable. WordPress depends on PHP and MySQL, exactly the two components CloudLinux optimizes best. The PHP Selector ensures you can always use the fastest PHP version, the MySQL Governor guarantees fast database access, and the LVE limits prevent other sites from slowing down your WordPress installation. Combined with LiteSpeed Cache, available by default on all our servers, a WordPress website at Theory7 loads significantly faster than at providers on standard Linux.

Sources and references

• Google, Core Web Vitals, web.dev
• HTTP Archive, httparchive.org
• Uptime Institute, uptimeinstitute.com