Basic
- 2 vCore CPU
- 2 GB Memory
- NVME 40 GB Disk
- Unlimited Traffic
HestiaCP is a free panel for hosting websites, email, DNS and databases on a single server. At Mega Dedicados it comes installed on Debian 13, with HTTPS on the panel, on NVMe VPS in Rio de Janeiro or São Paulo, Brazil.

The four plans in the VPS with Control Panel group (Basic, Plus, Pro and Turbo) include 1 IPv4, IPv6 and root access over SSH. For most cases, Plus is the most balanced starting point.
Billed monthly in US dollars, with the panel installed. Rio de Janeiro or São Paulo, same price. Need more than the largest plan shown? Upgrade from the client area, without reinstalling.
With Rio de Janeiro selected, your VPS with HestiaCP runs in Mega's original data center, on our own network with a presence at the Rio internet exchange (IX.br) and redundant transit. It is the lowest latency for users in Rio, Espírito Santo and Minas Gerais, and our support team works in the same city as the server.
With São Paulo selected, your VPS with HestiaCP runs in our environment next to the busiest internet exchange in Latin America, on our own network with redundant transit. It is the shortest path to users across Brazil and South America and to banks, payment gateways and APIs hosted in São Paulo. Same price as Rio.
Hestia Control Panel is an open-source hosting panel, licensed under the GPLv3 with no license fee. It started as a fork of VestaCP and is now maintained by the community, with version 1.10.5 as the current release in 2026. The web interface runs on port 8083, has a dark theme and is available in several languages.
For websites, Nginx works as a proxy in front of Apache with PHP-FPM, or serves directly with PHP-FPM, with FastCGI and proxy caching. You can keep several PHP versions running at once, from 5.6 to 8.3, and issue a Let's Encrypt certificate for each domain. Email uses Exim 4 and Dovecot, with SpamAssassin, ClamAV and Roundcube or SnappyMail webmail, and DNS runs on Bind, with custom nameservers, clustering and DNSSEC.
Databases can be MariaDB 10.11 (the default), MySQL 8 or PostgreSQL, managed through phpMyAdmin or phpPgAdmin. It also offers FTP, SFTP and chrooted SSH, users with limit packages, 2FA, SSH keys, scheduled backups, an iptables and fail2ban firewall, a REST API and a CLI. The project runs on Debian 12 and 13 and on Ubuntu 22.04, 24.04 and 26.04 LTS, on x86_64 and ARM64, and installation requires a clean system.
Source: Official Hestia Control Panel website, accessed October 2026
Each client gets a user with its own package of limits for domains, mailboxes, databases and disk, with no access to other clients' data.
Mailboxes, webmail, antispam and antivirus on the same server as your website, with TLS per domain and a sending limit per user.
WordPress, Drupal, Joomla, Laravel, Nextcloud, PrestaShop, OpenCart, Grav and MediaWiki can be installed with 1 click.
PrestaShop and OpenCart with a certificate per domain, a dedicated database and Nginx caching to take load off PHP.
Several PHP versions run side by side on the same VPS, which makes it easy to validate an old project and a new one together.
The built-in Bind lets you publish your domains' zones and create nameservers branded with your company name.

The images come from a Mega test installation and contain no customer data.
HestiaCP is delivered installed on Debian 13 and reachable on port 8083 over a secure connection.
Nginx, Apache and PHP-FPM ready to host your domains, with Let's Encrypt certificates available per site.
Exim, Dovecot, SpamAssassin, ClamAV and webmail integrated into the panel, with an SMTP relay option.
Bind for your zones and MariaDB 10.11 as the default database, with phpMyAdmin to manage it.
iptables with fail2ban managed from the panel, plus inline DDoS protection on the Mega network.
Scheduled backup routines, local or remote, and a REST API with a CLI to automate tasks.
Select Basic, Plus, Pro or Turbo based on the number of websites and mailboxes you plan to host.
Pay by card, Pix or boleto, on a monthly, semiannual or annual cycle, with no lock-in.
When the server starts for the first time, passwords, keys and certificates are generated on it. The details arrive by email and WhatsApp.
Open HestiaCP on port 8083, create your user, add your domains and point DNS to the VPS IP.
HestiaCP works from 1024 MB of free memory, as long as antispam and antivirus are turned off. The project recommends 4 GB to run the full stack, and Plus is the plan we suggest to start with.
| Plan | Best for |
|---|---|
| Basic 2 vCore · 2 GB | At {preco:Basic}, with 1 vCore, 2 GB and 40 GB NVMe, it fits one or a few light websites. If memory gets tight, keep ClamAV turned off. |
| Plus 2 vCore · 4 GB | At {preco:Plus}, with 2 vCore, 2 GB and 80 GB NVMe, it is our recommendation for small business websites with email and more disk space. |
| Pro 4 vCore · 6 GB | At {preco:Pro}, with 2 vCore, 4 GB and 120 GB NVMe, it reaches the memory level the project recommends for keeping antispam and antivirus running. |
| Turbo 4 vCore · 12 GB | At {preco:Turbo}, with 4 vCore, 6 GB and 160 GB NVMe, it handles many domains, online stores and several PHP versions in use. |
Yes. The panel is open source, licensed under the GPLv3, and has no license fee. You only pay for the VPS it runs on.
The minimum is 1 GB of RAM with antispam and antivirus turned off, and the project recommends 4 GB to use everything. Besides memory, the panel needs about 10 GB of disk.
It runs on Debian 12 and 13 and on Ubuntu 22.04, 24.04 and 26.04 LTS, on x86_64 or ARM64. At Mega, it is delivered installed on Debian 13.
Through your browser, at the server address on port 8083. Your access details arrive by email and WhatsApp, and the panel already responds over HTTPS.
Yes. It includes Exim 4, Dovecot, SpamAssassin, ClamAV and Roundcube or SnappyMail webmail. If port 25 is blocked, you can set up an SMTP relay. For anyone looking for a panel with its own email without paying per mailbox, it is one of the most complete options.
Yes. The panel supports PHP versions from 5.6 to 8.3 at the same time, chosen per domain. WordPress and other apps, such as Laravel and Nextcloud, install with 1 click.
24/7 support looks after the server: hardware, network, system and performance. Using the panel itself is covered by the vendor's documentation.
Yes. There is no lock-in and a 7-day refund window. You can pay by card, Pix or boleto.
Updated on October 19, 2026
Tell us what you will host and we will suggest the panel and the size. Delivered installed.