{"id":1370,"date":"2026-01-21T12:23:40","date_gmt":"2026-01-21T12:23:40","guid":{"rendered":"https:\/\/hostinguk.net\/blog\/?p=1370"},"modified":"2026-01-22T11:02:02","modified_gmt":"2026-01-22T11:02:02","slug":"important-update-about-csf-keeping-your-servers-secure-going-forward","status":"publish","type":"post","link":"https:\/\/hostinguk.net\/blog\/important-update-about-csf-keeping-your-servers-secure-going-forward\/","title":{"rendered":"Important Update About CSF: Keeping Your Servers Secure Going Forward"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

ConfigServer Security & Firewall (CSF) is widely used to protect cPanel & WHM servers. The original developer, Way to the Web (W2W\/ConfigServer), closed on August 31, 2025<\/strong>, ending all updates and support. Their update servers are now offline, which means CSF can no longer receive security fixes from the original source.<\/p>\n\n\n\n

To keep CSF secure, cPanel is now maintaining a public, open-source fork<\/strong> focused on essential security and stability updates.<\/p>\n\n\n\n

What\u2019s Changing?<\/strong><\/h2>\n\n\n\n

Many servers are still configured to check W2W\u2019s old update server \u2014 which no longer exists. This can cause update errors and prevent future security patches.<\/p>\n\n\n\n

On February 18, 2026<\/strong>, cPanel will automatically update eligible servers so CSF can receive updates from cPanel\u2019s new mirrors.<\/p>\n\n\n\n

Your server will<\/em> be updated if:<\/strong><\/p>\n\n\n\n

    \n
  • You use cPanel\u2019s original CSF plugin<\/li>\n\n\n\n
  • CSF still points to W2W\u2019s outdated update server<\/li>\n\n\n\n
  • You\u2019re running CSF 14.0+<\/strong><\/li>\n\n\n\n
  • AUTO_UPDATES<\/strong> is enabled<\/li>\n<\/ul>\n\n\n\n

    Your server will not<\/em> be changed if:<\/strong><\/p>\n\n\n\n

      \n
    • You use a different CSF source<\/li>\n\n\n\n
    • You\u2019re running CSF 13.x or older<\/strong><\/li>\n\n\n\n
    • AUTO_UPDATES<\/strong> is disabled<\/li>\n<\/ul>\n\n\n\n

      This does not<\/strong> modify your firewall rules \u2014 it only restores the update path.<\/p>\n\n\n\n

      Want to Opt Out?<\/strong><\/h2>\n\n\n\n

      If you prefer to manage updates manually, turn off AUTO_UPDATES before February 18:<\/p>\n\n\n\n

        \n
      • Open ConfigServer Security & Firewall<\/strong><\/li>\n\n\n\n
      • Go to csf – ConfigServer Firewall<\/strong><\/li>\n\n\n\n
      • Open Firewall Configuration<\/strong><\/li>\n\n\n\n
      • Set AUTO_UPDATES = off<\/strong><\/li>\n\n\n\n
      • Save<\/li>\n<\/ul>\n\n\n\n

        If you later want updates from cPanel\u2019s fork, run:<\/p>\n\n\n\n