Engineered for Kernel-Level Security, Multi-Runtime Isolation & Autonomous Operations.
Every subsystem in Ai Run Cloud interacts directly with Linux cgroups v2, systemd slices, eBPF/XDP kernel hooks, and Unix domain sockets—eliminating bloated middleware and manual maintenance at $0 cost.
Multi-PHP 8.5 – 5.6 FPM Fleet & Autonomous Worker Recycling
Run bleeding-edge PHP 8.5 alongside legacy PHP 7.4/5.6 workloads with per-tenant systemd cgroup v2 slices and automatic OOM/leak protection.
- ✓ Per-website PHP version assignment with isolated Unix socket FPM pools.
- ✓ Autonomous FPM Worker Recycle Governor prevents memory bloat and stale global state (CVE-2026-109618 / CVE-2026-109619).
- ✓ OPcache JIT tuner and preload generator with real-time hit-rate telemetry.
Autonomous AI Sentinel & Self-Healing Infrastructure Watchdog
Real-time root-cause analysis, automated CVE patching, and self-healing playbooks that recover degraded services before tenants notice.
- ✓ Dynamic synchronization with Ai Run Cloud Security Feed (/v1/advisories.json).
- ✓ Automatic remediation of CRITICAL and IMPORTANT server packages followed by fleet-wide worker restarts.
- ✓ Flapping suppression and per-tenant incident isolation.
eBPF / XDP Kernel Packet Shield & WAF Fleet Authority
Drop volumetric L3/L4/L7 attacks at the Linux network driver level before packets ever reach Nginx or PHP-FPM.
- ✓ eBPF XDP packet filtering combined with Fail2ban brute-force jails and UFW firewall automation.
- ✓ Autonomous Cookie Shield strips server fingerprint headers and enforces Secure/HttpOnly/SameSite attributes.
- ✓ Ephemeral Ed25519 SSH access grants with automatic expiry and audit logging.
5-Engine Database Suite with PITR, Replication & GDPR Anonymization
Provision MariaDB, PostgreSQL, Redis, ClickHouse, and MongoDB instances with Point-in-Time Recovery and zero-lock schema changes.
- ✓ Automated InnoDB fragmentation analysis, slow-query indexing recommendations, and connection pooling.
- ✓ Read-replica health probing, lag monitoring, and autonomous online schema changes.
- ✓ Built-in PII detection and GDPR database anonymization for staging clones.
Automated Migration from cPanel/WHM, Plesk, CyberPanel, DirectAdmin & CloudPanel
Ingest full cpmove / backup archives or stream live accounts over SSH, automatically converting Apache .htaccess rules to native Nginx directives.
- ✓ Full restoration of domains, subdomains, SSL certificates, databases, cron jobs, and mailboxes.
- ✓ Live website relocation between cluster nodes with traffic shadowing verification.
- ✓ Pre-flight SSL and DNS deliverability validation before switching live traffic.
Enterprise Mail Suite, DKIM/DMARC Sentinel & Built-In Webmail
Complete Postfix/Dovecot mail hosting with automated SPF, DKIM, DMARC, RBL blacklist monitoring, and high-speed webmail.
- ✓ Per-domain mail quotas, catch-all routing, autoresponders, and outbound rate limiting.
- ✓ Continuous DNS deliverability auditing and instant RBL reputation alerts.
- ✓ Dedicated webmail client with session pruning and attachment security.
12 Isolated PHP Branches with Minimum Safe RCE Patch Floors
Ai Run Cloud continuously enforces minimum safe patch versions across active PHP branches to neutralize CVE-2026-109618 and CVE-2026-109619.
Built-In Worker Recycling Presets
Automatically recycles PHP-FPM child workers before memory bloat or stale global state can be exploited.