IIXPLANET
Expert 2.0
️ Hi everyone at DWH! ️
Anyone who manages web hosting servers or busy Linux VPS nodes knows how quickly server management gets complicated. Usually, keeping a server safe means piecing together five or six different tools: a firewall like CSF for your ports, a separate malware scanner for user files, a paid ModSecurity ruleset, an outbound spam filter to keep your IP off blacklists, and an expensive monthly OS license just to stop one busy account from hogging all your CPU and RAM.
Paying for all those separate licenses adds up fast—and running multiple heavy background agents wastes RAM, slows down disk speed, and forces you to jump between different dashboards.
We created RoninArmor AV Suite to make server security simple, fast, and affordable again.
Instead of slow Python or PHP scripts, RoninArmor’s core engines are build with C and Go, RoninArmor brings flexible 13 complete security and server management tools into one lightweight suite with a clean Dark & Light mode web dashboard.
Works Out of the Box With Your Stack:
------------------------------------------------------------------------
All 13 Built-In flexible Security & Management Modules ( *Will be more plugin extension in future roadmap )
1. High-Speed File Malware Scanner (Manual & Cron Scans)
2. Ronin Shield (Real-Time File Upload Protection)
3. File Guardian (Real-Time User Directory Watcher)The background filesystem monitor that powers Ronin Shield across thousands of hosting accounts.
4. Ronin RASP (In-Memory PHP 5.6 – 8.3 Runtime App Self Protection)
Hooks directly into the PHP Zend Engine across PHP 5.6–8.3 to block zero-day exploits in memory—even when no file is uploaded!
5. Ronin WAF (Standalone Layer 7 Web Application Firewall)
6. Aegis Firewall & LFD (RAF — Network Firewall & Brute-Force Defense)
A fast & Modern CSF/LFD replacement using iptables, ip6tables, and kernel ipset, managed via Web UI and terminal CLI (raf).
7. NetGuard Sentinel (Live Bandwidth & Traffic Monitor)
8. Capman 3.0 (Layer 7 Anti-DDoS & Captcha Gateway)
9. Ronin DB-Scan (MySQL / MariaDB Database Malware Cleaner)
10. Ronin MailGuard (Exim & Postfix Anti-Spam)
[Enterprise]
11. Ronin Resource Manager / Gov (Per-User CPU, RAM & I/O Limiter) [Enterprise]
12. Ronin EasySSL (5-CA Automated SSL Manager) [Enterprise]
13. Ronin AuthGuard (Root SSH, Sudo & Web Console 2FA) [Enterprise]
------------------------------------------------------------------------
Plans & 1-Minute Installation:
Website & Client Portal: https://roninarmor.net
Questions about how RoninArmor fits your server setup? Please Drop a comment below!
Warm Regards
Anyone who manages web hosting servers or busy Linux VPS nodes knows how quickly server management gets complicated. Usually, keeping a server safe means piecing together five or six different tools: a firewall like CSF for your ports, a separate malware scanner for user files, a paid ModSecurity ruleset, an outbound spam filter to keep your IP off blacklists, and an expensive monthly OS license just to stop one busy account from hogging all your CPU and RAM.
Paying for all those separate licenses adds up fast—and running multiple heavy background agents wastes RAM, slows down disk speed, and forces you to jump between different dashboards.
We created RoninArmor AV Suite to make server security simple, fast, and affordable again.
Instead of slow Python or PHP scripts, RoninArmor’s core engines are build with C and Go, RoninArmor brings flexible 13 complete security and server management tools into one lightweight suite with a clean Dark & Light mode web dashboard.
Works Out of the Box With Your Stack:
- Control Panels: cPanel/WHM, DirectAdmin, Plesk, CyberPanel, aaPanel, RunCloud & Standalone Linux.
- Web & Mail Servers: LiteSpeed, OpenLiteSpeed, Nginx, Apache, Exim & Postfix.
- PHP & OS: PHP 5.6 to 8.5 (EA-PHP, Alt-PHP, LSPHP, PHP-FPM) on AlmaLinux, Rocky, CloudLinux & CentOS (x86_64).
------------------------------------------------------------------------
All 13 Built-In flexible Security & Management Modules ( *Will be more plugin extension in future roadmap )
1. High-Speed File Malware Scanner (Manual & Cron Scans)
- 3 Detection Engines: Ultra Fast Hyperscan engine , MD5/SHA-256 Hash, and YARA Engine to catch PHP web shells (W), backdoors, symlinks, and ELF binary rootkits/miners.
- Smart Incremental Mode & Low I/O: Only scans newly created or modified files (finishes daily scans in seconds) and lets you cap CPU cores at lowest disk priority .
- AES-256 Quarantine, File Lock (.rshield) & Code Editor: Encrypts quarantined files with 1-click restore (keeps original UID/GID), locks files in place (chmod 0000), or lets you clean code right in the browser.
2. Ronin Shield (Real-Time File Upload Protection)
- Instant Upload Interception: Scans files the millisecond they are uploaded or edited via WordPress, FTP/SFTP, or File Manager.
- With HydraVision Engine & Spam Filters: Catches scrambled PHP code (eval, base64, gzinflate), fake image shells (.jpg/.png containing PHP), malicious .htaccess rules, plus built-in Gambling/Slot, Phishing & Adult SEO Spam filters.
- Immunity Mode: Auto-locks or quarantines bad files on sight with instant Telegram & Email alerts.
3. File Guardian (Real-Time User Directory Watcher)The background filesystem monitor that powers Ronin Shield across thousands of hosting accounts.
- Automatic Multi-Panel Folder Tracking: Watches /home (and /home2 through /home9), /var/www/vhosts (Plesk), /www/wwwroot (aaPanel), and optionally /tmp (to stop hackers from running temporary exploit scripts in world-writable temp folders).
- Live Account Sync: Whenever you create a new hosting account or terminate an old one in your control panel, File Guardian updates its watch list automatically in the background without needing a service restart.
4. Ronin RASP (In-Memory PHP 5.6 – 8.3 Runtime App Self Protection)
Hooks directly into the PHP Zend Engine across PHP 5.6–8.3 to block zero-day exploits in memory—even when no file is uploaded!
- Blocks Terminal Commands (Anti-RCE): Stops PHP scripts from running system(), exec(), shell_exec(), passthru(), and proc_open()—making uploaded PHP web shells completely useless.
- Full Runtime Shields & 1-Click Whitelist: Blocks hidden eval(), runtime SQLi (MySQLi/PDO), file droppers, LFI (/etc/passwd), XSS, and LD_PRELOAD bypasses, with 1-click whitelisting per user, folder, or file.
5. Ronin WAF (Standalone Layer 7 Web Application Firewall)
- OWASP CRS + Zero-Day Rules & CMS Patching: Protects Apache, Nginx & LiteSpeed against SQLi, XSS, RCE, LFI, bad uploads, and scanners (sqlmap, Nikto, Nuclei, WPScan), with virtual patches for WordPress, WooCommerce, Elementor, Joomla & Laravel.
- Zero-I/O RAM Logging (/dev/shm): Busy servers generate thousands of WAF log lines. Instead of thrashing your SSD/NVMe drive, Ronin WAF writes live audit logs directly to RAM (/dev/shm) with SQLite indexing and a Deep Payload Inspector that shows full HTTP headers, payloads, matched rules, and anomaly scores.
- Visual Custom Rule Builder & Login Rate Limiter: Build your own custom WAF rules using simple dropdowns (no complex SecRule syntax needed), manage L7 IP Whitelists/Blacklists, and set rate limits on sensitive URLs like /wp-login.php or /xmlrpc.php (HTTP 429 or DROP).
6. Aegis Firewall & LFD (RAF — Network Firewall & Brute-Force Defense)
A fast & Modern CSF/LFD replacement using iptables, ip6tables, and kernel ipset, managed via Web UI and terminal CLI (raf).
- Port Control, Testing Mode & 11-Service LFD: Auto-bans brute-force attacks on SSH, FTP, Mail, cPanel, DirectAdmin, Plesk, CyberPanel, aaPanel, Webmail, phpMyAdmin & ModSecurity.
- DDoS, GeoIP & Outbound SMTP Block: Temp/Perm bans with live timers, Timed SSH Allows, SYN/Port Flood & Connection Limits (CT_LIMIT), 404 scanner bans, GeoIP Country & ASN blocking, Spamhaus/DShield sync, outgoing SMTP spam block (ports 25/465/587), NAT forwarding, and OS file/process watching.
7. NetGuard Sentinel (Live Bandwidth & Traffic Monitor)
- Network Monitoring realtime, shows real-time per-IP speed (Mbps), packet rate (PPS), and active connections with auto-blocking for bandwidth hogs, Redis-cached AbuseIPDB defense, 60-day traffic charts, WHOIS lookup, and CSV export.
See real-time Inbound/Outbound bandwidth (Mbps), packet rate (PPS), active TCP/UDP sockets, and target ports for every connected IP—with 1-click Block, Unblock, and Whitelist buttons.
8. Capman 3.0 (Layer 7 Anti-DDoS & Captcha Gateway)
- Captcha Manager protection on your own server (Invisible JS, Math Puzzle, or Image Captcha). Automatically turns on when a domain’s RPS spikes during an HTTP flood and turns off when normal! Zero idle latency, auto-bypasses Googlebot/Bingbot, and includes custom logo/color branding.
9. Ronin DB-Scan (MySQL / MariaDB Database Malware Cleaner)
- Auto-discovers databases from wp-config.php & .env. Strips out injected <script>/<iframe> spam and automatically recalculates PHP serialized string lengths so WordPress themes/Elementor layouts never break! Includes side-by-side Diff Viewer, 1-click Undo, and .sql.gz backups.
10. Ronin MailGuard (Exim & Postfix Anti-Spam)
[Enterprise]- SpamAssassin/Rspamd replacement , Trainable Bayesian AI & cloud spam rules, SPF/DKIM/DMARC anti-spoofing, executable attachment blocking, RBL radar, SMTP tarpitting, Visual Queue & EML Quarantine Manager, plus an Outbound Spam Rate Limiter (caps hourly emails per hosting account to protect your IP reputation!).
11. Ronin Resource Manager / Gov (Per-User CPU, RAM & I/O Limiter)
[Enterprise]- Enforces per-account CPU (%), RAM (MB), Disk I/O (MB/s), Concurrent Entry Processes (HTTP 508 page), and NPROC limits using Linux cgroups v2—no expensive kernel license needed! Includes CPU bursting, hosting plans (Starter/Business/VIP), crypto-miner auto-kill, and a live Process Manager.
12. Ronin EasySSL (5-CA Automated SSL Manager)
[Enterprise]- Auto-issues and renews SSL certs across Let's Encrypt, ZeroSSL, Google Trust, Actalis & Cloudflare Origin CA (15-Year) with automatic CA failover if one provider hits a rate limit! Installs directly into your panel's native SSL storage.
13. Ronin AuthGuard (Root SSH, Sudo & Web Console 2FA)
[Enterprise]- Protects RoninArmor Web Console, SSH Root Login, and su/sudo using Telegram OTP, Authenticator App (TOTP), Email Code, or Hardware Passkeys (Finger Print / Face ID)—complete with recovery keys and emergency CLI unlock.
------------------------------------------------------------------------
Plans & 1-Minute Installation:
- Standard Plan: Includes Modules #1 to #9.
- Enterprise Plan: Includes All 13 Modules (#1–#9 + MailGuard, Resource Manager/Gov, EasySSL & AuthGuard 2FA).
- Free Trial Mode
Code:
wget -O install.sh https://repo.roninarmor.net/install.sh
sudo bash install.sh --license YOUR-LICENSE-KEYWebsite & Client Portal: https://roninarmor.net
Questions about how RoninArmor fits your server setup? Please Drop a comment below!
Warm Regards
Last edited:
