Imunify360 is a security suite for Linux web servers from CloudLinux. It combines a firewall, a web application firewall, malware scanning and cleanup, and protection against brute-force logins. This guide installs it on a cPanel & WHM server.
Quick answer
As root, download the installer and run it with your license key:
wget https://repo.imunify360.cloudlinux.com/defence360/i360deploy.sh -O i360deploy.sh
bash i360deploy.sh --key YOUR_KEY
With an IP-based license, run it without a key: bash i360deploy.sh. When it finishes, open WHM › Plugins › Imunify360. Imunify360
What you need: Imunify360
- A cPanel & WHM server on AlmaLinux 8, 9 or 10 or CloudLinux OS. On Ubuntu, check Imunify360's requirements page first: cPanel now supports only Ubuntu 24.04, and Imunify360 lists its cPanel support per Ubuntu version.
- At least 1 GB of RAM and 20 GB of free disk space, on a 64-bit x86_64 CPU.
- An Imunify360 license key (bought or a trial from imunify360.com), or an IP-based license from your provider.
- Root SSH access.
Before you install: what it changes
Imunify360 takes over some jobs from other security tools. Check these first, so nothing surprises you: Imunify360
| Tool | What happens |
|---|---|
| cPHulk (cPanel's brute-force protection) | Disabled during installation. If you turn it back on later, Imunify360 works with it. |
| fail2ban | Disabled, because it resets the firewall rules Imunify360 relies on. |
| CSF | Works alongside Imunify360, which integrates with it. |
| CXS | Needs extra steps to run with Imunify360. |
| Atomicorp Secured Linux (ASL) | Not compatible. Remove one of them. |
If you use Cloudflare, Imunify360 can handle visitors' real IP addresses behind it. Imunify360
Step 1: Get your license key
- Key-based license: buy one or start a trial at imunify360.com. The key arrives by email.
- IP-based license: your hosting or license provider ties the license to the server's IP address. You do not need a key.
Step 2: Run the installer
-
Log in to the server over SSH as root and go to your home folder (
cd ~). -
Download the installer:
wget https://repo.imunify360.cloudlinux.com/defence360/i360deploy.sh -O i360deploy.sh -
Run it with your key:
bash i360deploy.sh --key YOUR_KEYOr, with an IP-based license:
bash i360deploy.sh
The installation takes several minutes. To see all installer options, run bash i360deploy.sh -h. Imunify360
If you install first and get the key later, register it afterwards with: Imunify360
imunify360-agent register YOUR_KEY
For an IP-based license, use imunify360-agent register IPL.
On servers with SELinux turned on, the installer sets up the SELinux rules it needs by itself. Imunify360
Step 3: Check it worked
-
Log in to WHM and open Plugins › Imunify360. The dashboard should open without a license warning.
-
From SSH, check that the service runs:
systemctl status imunify360It should say
active (running). -
Users get an Imunify360 page in cPanel, under Security, where they can see and clean malware in their own files.
Troubleshooting
The installer stops with an unsupported OS message. Imunify360 supports only the systems listed on its requirements page. CentOS 7 still appears there, but cPanel itself no longer supports CentOS 7, so move the server to AlmaLinux or CloudLinux.
WHM shows the license as invalid. For a key, run imunify360-agent register YOUR_KEY again and check the key for typos. For an IP-based license, check that it was issued for the server's main IP address.
Logins that used to work are now blocked. Imunify360's firewall may have greylisted or blocked the IP address after failed logins. Find the IP in WHM › Plugins › Imunify360 › Firewall and remove it, or add trusted IPs (such as your office) to the white list there.
You enabled fail2ban again. Turn it off. It conflicts with Imunify360's firewall rules. Imunify360