Sentora is an open-source web hosting control panel that emerged from ZPanel, continuing the legacy of accessible server management tools for Linux administrators.
ZPanel was created in the early 2010s as an open-source alternative to commercial hosting control panels. It aimed to provide:
- Free web-based server management
- Support for multiple Linux distributions
- Essential hosting features (domains, email, databases, DNS)
- Easy installation and configuration
ZPanel introduced several innovative features:
- Automated service configuration (Apache, MySQL, BIND, ProFTPd)
- Modular architecture for extensibility
- Template-based theming system
- Multi-language support
By 2014, ZPanel faced several challenges:
- Aging codebase (PHP 5.x)
- Security vulnerabilities discovered
- Limited development resources
- Need for architectural modernization
In 2014, key members of the ZPanel development team (TGates, Me.B, and Jettaman) announced a fork of the project, creating Sentora. The decision was driven by:
- Need for complete codebase rewrite
- Modern PHP architecture (PHP 7+)
- Improved security model
- Better community governance
“Sentora” was chosen as a distinctive name reflecting the project’s evolution from ZPanel while establishing its own identity.
The Sentora project established clear goals:
- Security First: Address vulnerabilities from ZPanel era
- Modern Stack: PHP 7+, modern JavaScript, Twig templates
- Community Driven: Open governance and contribution model
- Extensibility: Module and theme marketplace
- Documentation: Comprehensive user and developer guides
First stable Sentora release included:
- Complete UI redesign
- Improved installer
- Module system overhaul
- Security hardening
The project encountered typical open-source challenges:
- Volunteer developer availability
- Balancing features vs. stability
- Security vulnerability disclosures
In 2017, SSD Secure Disclosure published advisories about critical vulnerabilities:
April 2017 - Multiple Vulnerabilities:
- Authenticated Remote Code Execution (cron module)
- Privilege Escalation (zsudo binary)
September 2017 - Password Reset Bypass:
- Design flaw in password reset token validation
Project Response:
- Released patched versions
- Improved security review process
- Established security disclosure policy
Major release featuring:
- PHP 7.4 support
- Modernized codebase
- Improved MySQL/MariaDB compatibility
- Enhanced security features
- Better error handling
- Active forum community (5,000+ members)
- Regular community contributions
- Third-party module development
- Multi-language localization efforts
- GitHub repository migration
- Automated testing implementation
- Continuous integration setup
- Improved documentation
Latest stable release:
- PHP 7.4 (stable)
- Security patches applied
- Bug fixes from community reports
- Improved installer reliability
Development branch features:
- PHP 8.2 support
- Modern framework components
- Enhanced security features
- Improved API support
⚠️ Note: v2.1.0 is NOT recommended for production use
¶ Active Maintenance (2026)
As of March 2026:
- Status: Actively maintained
- Team: Original ZPanel/Sentora developers (TGates, Me.B, Jettaman)
- Repository: 673 stars, 2,220+ commits on GitHub
- Community: Active forums with recent announcements
- Latest Announcement: “We are still here!” (March 5, 2026)
| Era |
PHP Version |
Architecture |
Notes |
| ZPanel (2010-2014) |
PHP 5.x |
Monolithic |
Legacy architecture |
| Sentora 1.x (2015-2018) |
PHP 5.6/7.0 |
Modular |
Initial fork |
| Sentora 2.0 (2019-2023) |
PHP 7.4 |
Modernized |
Stable release |
| Sentora 2.1 (2024+) |
PHP 8.2 |
Modern |
Development |
2017 (Post-Advisory):
- Fixed RCE in cron module
- Secured zsudo binary
- Improved password reset mechanism
- Added CSRF protection
2019-2024:
- Regular security audits
- Community vulnerability reporting
- Security policy documentation
- GitHub Security tab enabled
| Version |
Key Features |
| 1.0.0 |
Base fork from ZPanel, new UI |
| 1.0.3 |
Module marketplace, improved installer |
| 2.0.0 |
PHP 7.4, modern architecture |
| 2.0.2 |
Security patches, bug fixes |
| 2.1.0 |
PHP 8.2, enhanced API (dev) |
¶ Community and Ecosystem
The Sentora forums serve as the primary community hub:
- Members: 5,300+ registered users
- Posts: 23,000+ community posts
- Sections: Support, development, announcements
- Moderation: Active dev team presence
- Repository: sentora/sentora-core
- Stars: 673
- Forks: 441
- Contributors: Multiple community contributors
- Issues: Active issue tracking (16 open issues as of 2026)
Community-developed modules and themes:
- Custom authentication modules
- Backup automation tools
- Monitoring integrations
- Custom themes and branding
| Aspect |
Sentora |
cPanel |
| License |
GPL-3.0 (Free) |
Commercial |
| Target |
Small-medium hosting |
Enterprise |
| Stack |
Apache/PHP/MySQL |
Proprietary |
| Support |
Community + Premium |
Commercial |
| Panel |
Status |
Notes |
| Sentora |
✅ Active |
ZPanel fork, PHP-based |
| VestaCP |
⚠️ Forked |
HestiaCP now primary fork |
| HestiaCP |
✅ Active |
VestaCP fork, modern |
| Virtualmin |
✅ Active |
Webmin-based, mature |
| ISPConfig |
✅ Active |
Enterprise-focused |
The 2017 vulnerabilities taught the project valuable lessons:
- Importance of secure code review
- Need for responsible disclosure process
- Value of community security research
- Continuous security monitoring
Sentora’s longevity demonstrates:
- Importance of dedicated core team
- Value of community engagement
- Need for clear governance
- Balance between features and stability
The project balances:
- Modernizing technology stack
- Maintaining backward compatibility
- Addressing security promptly
- Supporting existing users
¶ Current Status and Future
Sentora continues as a viable option for:
- Small to medium hosting providers
- Homelab enthusiasts
- Educational environments
- Budget-conscious deployments
Version 2.1.0 Goals:
- PHP 8.2 full support
- Enhanced API capabilities
- Improved Docker compatibility
- Modern frontend framework
Long-term Vision:
- Containerized deployment options
- Enhanced security features
- Better multi-server support
- Expanded module ecosystem
- Competition from newer panels
- Expectations for container support
- Security landscape evolution
- Developer recruitment and retention
¶ References and Resources
Note: This history is based on publicly available information from the Sentora project. For the most current information, visit the official Sentora website and forums.