StarkOne replaces 12 hosting and infrastructure tools with one fast, secure, Go-powered control panel. Run WordPress fleets, MySQL replication, WireGuard VPN, BGP routing, F5-style ACLs and centralized logs - from a single binary.
curl -fsSL https://dl.starkone.io/install.sh | bash
Running in production. Trusted by hosting providers and infrastructure teams.
Stop gluing cPanel, ProxySQL, OpenVPN, ELK, FRR, Cloudflare's dashboard and a dozen others into a fragile pipeline. StarkOne ships it all - coherent, observable, scriptable.
Multi-PHP (5.6 → 8.4), Nginx ↔ Apache hot-swap, Varnish, Let's Encrypt, WordPress one-click login, per-site CPU/RAM limits, daily backups. Built to host thousands of sites.
BGP with FRR, WireGuard (Headscale), IPSec, GRE/VXLAN, Keepalived, static routes. The same panel runs a hosting node or an edge router.
CSF firewall, ModSecurity WAF with auto-updating rules, Nginx ACL policies (F5-style), 2FA, granular RBAC, LVM snapshots. Security designed in, not bolted on.
Every UI action is a documented REST endpoint. The whole panel is a single Go binary with SQLite - no external dependencies, no Node runtime, nothing to orchestrate. Boot it on a tin server in seconds. AI agents are first-class citizens: every panel speaks MCP, and this site itself serves markdown to any agent that asks (Accept: text/markdown, llms.txt included).
Everything you need to run production servers - from web hosting and MySQL replication to BGP routing - in a single, unified interface.
any or all match logic (OR / AND)starkone-m365-backup CLIStarkOne's new ACL engine treats every ruleset as a policy: a list of matching rules combined with any or all logic, and a single ruleset-level action - block, allow, redirect, reset, or forward to a backend pool.
Conditions cover URI, headers, host, method, user-agent, cookies, GeoIP, CPU load, client IP, and reusable IP groups with CIDR. The whole policy is compiled to njs (NGINX JavaScript) so matching happens inside the worker - no extra hops, no Lua, no detours.
any-of matching with chip UI// Ruleset: ProtectAdmin (2 rules, match=all → block) function evaluate(r) { if ( /* wp-admin */ (r.uri.indexOf('wp-login') !== -1 || r.uri.indexOf('wp-admin') !== -1) && /* office-only */ (!ipMatchesList( (r.headersIn['CF-Connecting-IP'] || r.headersIn['X-Forwarded-For'] || r.remoteAddress || '') .split(',')[0].trim(), ip_group_uPress)) ) { return 'block'; } return 'pass'; }
No bloat. No dependencies. No surprises. StarkOne is engineered for speed, simplicity, and the kind of reliability your customers don't notice - because it never breaks.
Single ~30MB binary. Native compilation. Starts in milliseconds. Zero runtime dependencies on the host.
The panel itself needs no MySQL. The database is a file in /etc/starkone/. Backups are a cp.
Alpine.js + Tailwind - instant updates, no full reloads, no SPA framework lock-in. Built from source files, not a monolithic blob.
Enable only what you need. Each plugin owns its routes, UI, and lifecycle - keeping the core lean.
Every action in the UI is also a documented endpoint. Bearer-auth, typed JSON. Build CI/CD, scripts, and integrations.
One command: starkone-cli selfupdate. Atomic binary swap. Migrations are idempotent and replay-safe.
Most teams cobble together a half-dozen panels and a wiki of shell scripts. StarkOne replaces all of that with one tool that operations engineers actually want to use.
.conf files over SSH20+ plugins that can be enabled or disabled on demand. Only load what your infrastructure actually needs.
One command. That's it. No wizards, no config files, no dependencies to install first.
curl -fsSL https://dl.starkone.io/install.sh | bash