Kiravo platform changelog

Updates and improvements to the Kiravo platform. Newest entries at the top.

September 2026, More control panel languages

The control panel now includes additional language packs and updates to existing ones. If you prefer to work in a language other than English, check your account language setting.

Newly available (beta): Slovenian, Traditional Chinese (Taiwan).

Updated translations: Polish, Danish, Hebrew, Portuguese, Vietnamese.

These packs cover the hosting control panel interface. Documentation on this site remains in English.

August 2026, Safer SVG uploads and PHP maintenance

SVG files uploaded through the control panel are now checked for embedded JavaScript before they are accepted. This reduces the risk of a malicious SVG executing in a browser if opened directly.

We have also applied the latest PHP security and stability packages across the platform:

PHP 8.5.10
PHP 8.4.25
PHP 8.3.33
PHP 8.2.33

No action is required. Sites continue on their current PHP version; the packages apply the next time the PHP service for a site restarts.

July 2026, Default DMARC on new DNS zones

New DNS zones created for your websites now include a default DMARC record with policy p=none. That is a monitor-only starting point: receiving mail servers begin reporting spoofing attempts, without rejecting mail yet.

You can edit the record under Website → Domains → DNS records when you are ready to tighten the policy. Existing zones are unchanged; only new zones get the default.

July 2026, Staging push-live and developer tools

Several improvements to day-to-day site management:

Push live. When you push a staging site live, cron jobs and the IonCube setting are now copied with the site. Previously those had to be reconfigured by hand.

Cron jobs over SSH. In Developer tools, you can allow cron jobs to be edited from SSH (or any process running inside the website container). Useful if you manage schedules from the command line rather than only from the panel. See Cron jobs and SSH access.

Quick Links. The website dashboard now includes a Quick Links section for common actions.

Webmail. Roundcube (the webmail interface) has been updated through the 1.6.x line.

June 2026, Higher default upload limits and more reliable cloning

The default PHP upload limits (post_max_size and upload_max_filesize) are now 1000M when no custom limit is set on the site. Large media uploads in WordPress are less likely to fail for size alone.

Cloning and staging search-and-replace now set WordPress siteurl and home explicitly, which avoids broken clones when an object cache is in play. Error messages for clone and push-live failures are clearer. The wp-admin button on the website dashboard opens the install in public_html ahead of any addon-domain installs.

May 2026, Hardened website containers

We have further restricted what is visible inside each website’s isolated container. Known setuid binaries are hidden from the container environment, which narrows the attack surface if a CMS or plugin is compromised.

Nginx packages on the platform were also updated to address recent CVEs.

These changes are active across the network. You do not need to take any action.

May 2026, Clearer databases, backups, and file manager

Small control panel improvements that make routine work faster:

A phpMyAdmin button on each database in the listing, plus connection guidance on the database page.
Database size shown in the backup listing.
Document roots marked with a globe icon in the file manager.

See Databases and Backups.

April 2026, PHP extensions that survive migrations

Under Developer tools → PHP, built-in extensions are now listed alongside the ones you can toggle. Extensions you enable stay enabled after a server migration. When you change PHP version, incompatible extensions are disabled automatically so the site does not start with a broken combination.

Details: PHP version.

January 2026, Restore individual files from a backup

You can now restore specific files or folders from an Enhance website backup, without rolling back the entire site.

In Backups, open Restore → Custom, then tick only the files you need. The rest of the site stays as it is. Useful when a single theme file, plugin, or upload was overwritten and everything else is fine.

Full walkthrough: Custom restore.

January 2026, Staging shortcut and clearer site sizes

Clone to staging is available from the website dashboard hero, so spinning up a staging copy takes fewer clicks. See Staging sites.

PHP defaults. On PHP 8.5, imagick is enabled by default. On PHP 8.4 and 8.5, the IMAP module is enabled by default (new and existing sites).

Usage display. Database sizes appear in the database list. Website size now includes the home directory, databases, and email, not only files.

December 2025, PHP 8.5 available on all plans

PHP 8.5 is now implemented and ready to use on our WordPress hosting packages. This update represents a natural step towards maintaining a modern and secure hosting environment for our clients’ projects.

PHP version change

November 2025, Upgrade to AMD EPYC Gen 4 & 5

True to our commitment to remaining at the forefront, we are announcing a new hardware renewal cycle. We have begun the process of migrating our entire hosting platform to the newest generation of servers, powered by AMD EPYC Gen 4 (“Genoa”) and Gen 5 (“Turin”) processors.

DDR5 RAM support. Our new servers utilize DDR5 RAM, which provides significantly more memory bandwidth and faster speeds than the previous DDR4 generation. In an environment optimized for WordPress, where database queries (MariaDB) and object caching (Redis) are critical, faster memory translates directly to more responsive data processing and a lower overall Time to First Byte (TTFB).

PCIe 5.0 support. Our platform uses 100% NVMe storage. The PCIe 5.0 standard, supported by these new processors, effectively doubles the available bandwidth to those storage devices. This completely removes the last potential bottleneck for file reads/writes, ensuring that data moves without congestion.

Zen 4/5 architecture. Beyond these core changes, the new architectures bring even greater single-core performance (IPC), vital for fast PHP execution, and advanced hardware-level security features, further hardening the platform’s foundation.

As always, our commitment to performance is matched by our commitment to stability. This upgrade process will be managed entirely by our team in a gradual and controlled manner.

The migration will be performed live, requiring no downtime for your website. You will be notified in your client area in advance of your scheduled migration window, and the only effect you will feel is an even faster platform.

September 2025, Update to our backup service - download archive

We have added a new function to our website backup service. Alongside the existing options to create manual backups and restore from automatic snapshots, you can now download a complete backup of your website. This allows you to store a copy locally.

Download website

You will find the new download website data option in the main section of your website on our hosting control panel.

We’ve written a comprehensive tutorial on our blog and created a video tutorial on YouTube that shows you how to download your website.

August 2025, Our WAF is now proxy-aware and IPv6 compatible

We are focused on providing a secure and stable environment for your services. To that end, we have released two important updates for our Web Application Firewall (WAF).

Security solution

First, the WAF can now more accurately identify the source of web traffic. When requests pass through trusted proxy services, such as Cloudflare or Fastly, it can be difficult to see the original client’s IP address. Our module now correctly identifies this original IP, allowing it to stop malicious traffic that might otherwise have been masked.

Second, we have implemented full IPv6 support. We have observed that a significant volume of automated attacks, including brute-force and DDoS attacks, now originates from IPv6 sources. This update ensures our WAF can filter and block these threats effectively, providing a more complete layer of protection.

These updates are now active across our network. You don’t need to take any action.

August 2025, Moving to European providers

Over the past few months, we implemented several important changes to the infrastructure and tools we use at Kiravo. The goal was simple: reduce our reliance on non-European providers and consolidate our operations with stable, efficient partners that align with EU regulations.

We’re migrating away from AWS, DigitalOcean, and Vultr, and moving to three European cloud providers: Hetzner (Germany), UpCloud (Finland), and Scaleway (France).

We’re migrating away from eNom and Namecheap and consolidating all domain registrations under Openprovider, based in the Netherlands.

We’ve already moved from WHMCS to HostBill, a billing and automation platform developed in Poland.

These changes will not cause any downtime or service disruption. Everything will continue to run as usual.

What will change is the client area, which will move to a new, more modern interface. We’ll be publishing both video and written tutorials to help you become familiar with the new system, including how to manage services, domains, invoices, and support tickets.

August 2025, Hosting location: Frankfurt, Germany

Server placement

We have expanded our hosting options to include a new location in Frankfurt, Germany.

This data center operates on 100% renewable energy. It is engineered for high availability and meets rigorous international standards for security, energy management, and quality.

We selected this facility for its reliable infrastructure and its commitment to sustainability. The Frankfurt location is a fast, stable, and eco-friendly option for your services. It is now the default location for all our hosting plans.

July 2025, PHP updated on all servers

We have updated the PHP versions available for all websites hosted on our platform. The following versions are now active:

PHP 8.4.10
PHP 8.3.23
PHP 8.2.29
PHP 8.1.33

These releases include important security patches, performance enhancements, and stability improvements. This maintenance helps ensure a secure and reliable environment for your applications.