We were privately notified about an Information Disclosure issue affecting HostBill versions released between 2014-12-31 and 2026-11-02. We have no evidence that this issue has been exploited or that it was publicly known before this disclosure.

While the issue is rated medium severity, the practical risk is low. Exploiting it would require specific actions by a privileged staff member in the admin area. Even so, we recommend updating to the latest version.

Advisory details

• Affected versions: 2014-12-31 to 2026-11-02
• Severity: Medium
• Vulnerability class: Information Disclosure
• Known public exploitation: none known
• Fixed in: 2026-11-03 or higher

Resolution

To fix this issue, update your HostBill to the most recent release, version 2026-11-03 or higher. You can update either manually or with the Auto-Update plugin.

If you have questions about this advisory or need help with the update, please contact our support team.

Acknowledgements

We would like to thank HostingTime GmbH (hostingtime.de) for identifying this issue and disclosing it to us responsibly. Coordinated disclosure like this helps keep the HostBill community safe, and we greatly appreciate it.

This week’s update also brings new Admin API methods, enhanced integrations and a range of other improvements.

Promotional Pricing for Products, Components and Domains

The highlight of today’s release is the new Promotional Pricing feature, which allows administrators to configure special pricing for single products, domain TLDs, product components and whole categories directly from the HostBill admin panel.

With promotional pricing you can easily create attractive offers, run seasonal campaigns and introduce limited-time discounts without manually adjusting standard prices. Promotional prices can be configured for specific billing cycles, giving you greater flexibility. Configuring the promotion you can define when the promotion starts and ends, allowing special prices to be activated and deactivated automatically. The feature also provides control over how promotional pricing affects existing services and recurring billing, making it easier to manage discounts while maintaining consistent billing operations.

Whether you’re launching a seasonal sale, promoting selected hosting packages or offering special domain pricing, the new functionality helps simplify promotional campaigns and gives you more control over your pricing strategy.

Learn more in the Promotional Pricing documentation or watch our video tutorial:

Release notes

Apart from the promotional pricing, this week’s release introduces expanded API capabilities and improvements across several integrations and administrative tools.

We’ve expanded the HostBill Admin API with two new methods for managing product form component items:

• addProductFormItem allows administrators to add items to product form components through the API.
• deleteProductFormItem enables removing existing items programmatically.

We’ve also improved the addClientCredit API method. It now prevents credit from being added to clients that do not exist, helping ensure more reliable credit management.

The admin ticket view now includes a dedicated print layout, making it easier to print support ticket information in a clear, readable format. This improvement is especially useful for documentation, internal reviews and maintaining offline records of customer communications.

Several HostBill integrations have received improvements in this release.

QuickBooks Online now supports mapping HostBill products and services to invoice items. Thanks to this feature you have greater control over how billing information is represented in QuickBooks Online and it helps streamline accounting workflows.

OpenRouter now allows administrators to select a region directly in the application connection settings, offering additional configuration flexibility.

Dedicated Servers Manager has increased the uplink port limit from 4 to 48 in item category details, making it easier to manage more extensive dedicated server configurations.

The Baseline client area theme has been updated to correctly handle HTML language attributes when language names are capitalized. The update also adds support for Hindi and Taiwan language options.

The Support PIN module now includes the previously missing JSON file for API routes, completing the required API routing configuration.

Check the Changelog for all the details!

MCP Server Support for AI Prompter

Model Context Protocol (MCP) is an open standard that enables AI applications to communicate with external systems, data sources and tools. MCP provides a standardized connection between AI assistants and business applications, allowing AI tools to access information and perform supported operations without requiring a separate custom integration for every AI client.

With MCP support, HostBill AI Prompter can now expose HostBill Admin API functionality to compatible AI assistants and agents.

This means you can use natural language to interact with HostBill data, making everyday tasks faster and more convenient. Instead of switching between different interfaces or manually searching for information, you can access relevant HostBill data directly from your AI environment. For example, you can ask your connected AI assistant to:

• Find a specific customer and retrieve their account information.
• Look up active services associated with a client.
• Retrieve invoice details and billing information.
• Find support tickets and review their details.
• Work with other HostBill Admin API features permitted by the configured API key.

The new MCP Server offers two connection methods, giving you the flexibility to choose the setup that best suits your environment: Remote Connection via HTTP with OAuth Authentication and Local Connection via CLI (stdio).

The HTTP transport enables external MCP-compatible AI clients to connect remotely to your HostBill installation. With OAuth authentication, you can establish authenticated connections between HostBill and supported AI applications. This approach is ideal for businesses that want to use external AI assistants, such as Claude, ChatGPT or other MCP-capable platforms, to interact with their HostBill environment. Once the connection is configured and authorized, the AI client can access the HostBill Admin API tools exposed through MCP, subject to the permissions granted.

For local integrations, HostBill also supports MCP connections through the command-line interface using stdio transport. This option is designed for locally running AI tools, development environments and agents that communicate with MCP servers through standard input and output. It provides an alternative to remote HTTP connections and is particularly useful when building local AI workflows or integrating HostBill with compatible development tools.

MCP Server functionality is integrated directly into the HostBill AI Prompter module. When generating an integration using your configured Admin API keys, you can now select MCP as the generation target. This allows you to prepare an MCP connection based on the Admin API access you have configured. The available functionality is determined by the permissions associated with the selected API key, giving administrators control over which HostBill operations can be exposed to connected AI tools.

Built-In Security and Access Control

Connecting AI assistants to business-critical systems requires careful control over authentication, permissions and access. That’s why HostBill’s MCP Server includes a comprehensive set of security features designed to help administrators manage and monitor AI connections.

MCP access respects the permissions configured for HostBill Admin API keys. Administrators can define which API operations are available, limiting AI integrations to the functionality they require. Support for dynamic client registration simplifies the process of connecting compatible MCP clients, enabling clients to register as part of the authentication workflow. HTTP transport includes pairing-code consent, adding an authorization step when establishing connections with external AI clients. Built-in rate limiting helps control the frequency of requests, reducing the risk of excessive API usage. Administrators can restrict access based on permitted IP addresses, providing another layer of control over which systems can communicate with the MCP Server. Authentication tokens can be managed throughout their lifecycle, supporting controlled access to MCP connections. An audit trail records MCP-related activity, helping administrators review interactions and maintain visibility into how connected AI tools access HostBill. Together, these capabilities provide a security framework for integrating AI assistants with sensitive hosting and billing operations.

The new MCP Server makes it possible to incorporate HostBill information into AI-assisted workflows without constantly switching between applications. For hosting providers, domain resellers and other service businesses, this creates opportunities to streamline routine administrative work. Developers can also use MCP to build more advanced AI-powered workflows that combine HostBill functionality with other connected systems. As MCP is a standardized protocol, businesses gain more flexibility in choosing the AI tools and environments they want to work with.

Release notes

On top of the AI Prompter update, we’re also bringing several other improvements to HostBill this week.

When using the Frontier Theme Dark Mode, HostBill now allows administrators to configure a dedicated logo path for dark mode to make it easier to maintain consistent branding across different interface appearances. Instead of relying on a single logo for every background, administrators can specify a version optimized for dark mode, ensuring better visibility and a more polished look.

We also continue to refine Frontier, the new HostBill admin panel, with interface updates designed to improve usability. The module container interface in Frontier has been updated to provide a cleaner and more consistent experience. We’ve also updated the support ticket layout in the Frontier theme. The refreshed interface improves the presentation of ticket information, helping support teams work with customer requests in a more organized environment.

For businesses managing multiple billing contacts, choosing the right contact during checkout should be simple. With this update, the Billing Contact Select feature now displays the contact’s company name in the cart contact selection interface. This additional information makes it easier for customers to distinguish between contacts, especially when multiple contacts have similar names or belong to different organizations.

A new configuration option has been added to Domain Management. It’s now possible to control whether prices for unconfigured TLD registration periods should be imported into HostBill. The new setting gives domain resellers more flexibility when synchronizing pricing information and reduces the need for unnecessary adjustments after imports.

We’ve introduced improvements to the HostBill updater to make software updates more reliable. The updated logic now:

• Skips migrations that have already been applied, avoiding unnecessary repeated operations.
• Locks the update process, helping prevent overlapping update executions.

These behind-the-scenes improvements support a more controlled update process and reduce the risk of conflicts during software maintenance.

We’ve expanded the Support PIN functionality with new API capabilities. The update introduces Admin API and User API calls to list support PINs, view support PIN details and generate support PINs. These new endpoints make it easier to integrate Support PIN functionality into automated workflows, custom applications and external support systems.

The CentralNic SSL integration now includes an option to set a Certificate ID directly in account details, to give admins more flexibility when managing SSL certificate records through the integration.

What is the issue?

Both vulnerabilities are rated critical (CVSS v4.0 9.2) and can allow an unauthenticated attacker to execute code remotely on a server running PHP:

• CVE-2026-109618: memory corruption when PHP handles an out-of-memory condition during a request.
• CVE-2026-109619: internal state from one request can survive after its memory has been freed and may be reused by a later request.

According to the PHP project, every PHP installation that serves web requests is at risk, regardless of how PHP runs (PHP-FPM, Apache mod_php, CGI, LiteSpeed and others). The risk is highest on Apache with mod_php. Exploitation attempts have already been reported, so we strongly recommend treating this update as urgent.

Fixed PHP versions

• PHP 8.3: 8.3.36 or higher
• PHP 8.2: 8.2.35 or higher
• PHP 8.1 and older: no official fix, as these versions have reached end of life

How does this affect HostBill?

HostBill supports PHP 8.1, 8.2 and 8.3 since April this year. Here is what we recommend depending on your current setup:

• If you run PHP 8.2 or 8.3: update PHP on your server to the patched release (8.2.35 / 8.3.36 or higher) using your operating system packages or control panel.
• If you run PHP 8.1 or older: the PHP project no longer releases security fixes for your version. Some operating system vendors and control panels provide backported patches, but the safest long-term solution is to upgrade to PHP 8.3.

Before you upgrade: create a backup

Before changing or updating your PHP version, we strongly advise creating a full backup or a server snapshot of your HostBill installation, including both the files and the database. This lets you quickly restore your system if anything unexpected happens during the upgrade.

Preparing your modules for PHP 8.3

Before switching PHP versions, make sure that all modules installed in your HostBill support PHP 8.3. The HostBill Auto-Upgrade tool can check and update your modules for PHP 8.3 compatibility before you upgrade.

After updating, click “Reinstall” or “Refresh” in the Auto-Upgrade tool to check again whether any module still needs manual intervention.

Bulk download of modules

If you prefer to download all modules for your HostBill installation at once, use the script in your HostBill client area, available in the license details section.

Changing the PHP version on your server

• Servers without a control panel: if HostBill was installed with our auto-install script on a server that is not managed by any control panel, this step-by-step guide may help: Upgrade PHP 8.1 to 8.3 on CentOS / Alma / Rocky 8 & 9.
• Servers managed by a control panel (such as cPanel, Plesk and others): please refer to your control panel’s documentation for instructions on changing the PHP version.

Seeing ionCube errors after switching PHP?

After upgrading PHP, you may see ionCube errors for some files in your HostBill installation. How to handle them depends on where the files come from:

• Custom-built modules or files that are still in use: please contact us. These files need to be rebuilt for the new PHP version.
• Modules you no longer use: errors related to unused modules can, in most cases, be safely removed. This often happens after using the bulk download script mentioned above, since it downloads every module available for your license. If you are unsure whether a file is safe to remove, please contact us before deleting it.

Coming soon: PHP 8.4 and 8.5 support

Support for PHP 8.4 and PHP 8.5 in HostBill is rolling out over the upcoming weeks. We will announce it on our blog as soon as it is available.

A Modern Interface built for everyday efficiency

Frontier is more than a visual refresh. We’ve revisited virtually every section of the HostBill admin area, introducing improvements that simplify navigation, streamline daily operations, and help your team work more efficiently. The new interface offers three layout options, allowing every staff member to choose their preferred working environment:

• Frontier: A modern, spacious layout featuring rounded cards, updated icons, and improved readability.
• Frontier Condensed: The same modern design with a more compact layout, displaying more information on each screen.
• Legacy: A familiar appearance that preserves the colors, fonts, and density of the previous admin theme.

Switching between layouts takes just one click from the admin header.

Frontier also introduces dark mode, available throughout the admin panel, including tables, forms, charts, and dialogs. You can switch between light and dark modes instantly, with your preference remembered by the browser.

Built on Bootstrap 5.3, Frontier also includes a compatibility layer designed to keep existing plugins and modules developed for the previous interface working.

Smarter Search and faster navigation

Finding the information you need is now easier than ever. Frontier introduces an enhanced Smart Search, accessible from any admin page using Ctrl + K or ⌘ + K. Instead of navigating through multiple menus, administrators can quickly search for clients, services, domains, invoices, tickets, and admin pages, or execute commands directly from the search interface. The new search experience is fully keyboard-friendly, with shortcuts for switching between categories, navigating results, and opening selected items. We’ve also improved navigation throughout the admin panel. Configuration pages now feature convenient vertical menus, while the redesigned settings search helps administrators quickly locate and highlight specific options.

A More powerful Dashboard with KPIs at a glance

The redesigned HostBill dashboard puts essential business information front and center. With Frontier, administrators can instantly monitor key performance indicators, including Monthly Recurring Revenue (MRR), Active accounts and domains, New orders, Customer churn, Open support tickets and more. Each KPI includes a trend line and comparison with the previous period, making it easier to identify changes and monitor business performance. You can switch between different reporting periods – the last 24 hours, 7 days, 30 days, or 90 days – and interact with the charts to explore individual values.

Dashboard widgets remain customizable, allowing you to drag, collapse, and refresh them to create a workspace that suits your daily responsibilities.

Fully responsive – manage your business from anywhere

Frontier brings a fully responsive experience to the HostBill admin panel. Whether you’re working on a large desktop monitor, laptop, tablet, or smartphone, the interface automatically adapts to your screen size. Menus, sidebars, tables, and controls adjust to provide comfortable navigation and usability across devices. Need to approve an order, respond to a support ticket, or check your latest revenue while away from your desk? Frontier makes it easier to handle essential administrative tasks on the go.

Dark mode and all three layout options are available on mobile devices as well.

Redesigned screens and improved workflows

Beyond the dashboard and navigation, Frontier introduces significant improvements to many of the admin pages you use every day.

Support ticket management now features a redesigned conversation view, making communication easier to follow. Client messages, staff replies, and internal notes are visually distinguished, while attachments, pinned or sensitive replies, and long quotations are presented more clearly.

Task list management provides a better overview of automation processes. Administrators can quickly identify healthy, overdue, stuck, failed, or disabled tasks, with live counts and convenient actions for running, editing, or disabling individual tasks.

Statistics and reports have also received an update, allowing staff members to pin their preferred statistics and create personalized reporting overviews.

Configuration and security settings benefit from improved navigation, searchable options, and clearer permission management. API key permissions and staff privileges are organized by area, making them easier to review and manage.

We’ve also refined client, invoice, service, product, and administrator detail pages, along with plugin management, app connections, email templates, and other frequently used sections.

New ready-made Email designs

Frontier also brings improvements beyond the admin interface itself. We’ve introduced four ready-made email wrapper designs to help you create polished, professional-looking client communications with minimal effort:

• Default: The original HostBill email wrapper.
• Clean Card: A modern design with a light background and rounded content area.
• Branded Header: A distinctive dark header displaying the message name and subject.
• Minimal Letter: A clean, letter-inspired design with a subtle accent bar.

These mobile-friendly, email-compatible templates are available under Settings → Messages → Mail customization. Simply select your preferred design to load it into the HTML wrapper editor, where you can further customize it to match your brand.

Hundreds of small improvements that make a difference

Some of Frontier’s most useful enhancements are found in the smallest details. We’ve introduced improved form layouts, clearer labels, more consistent dialogs, updated date pickers, and intuitive toggles throughout the admin area. Password fields now offer convenient options to display, copy, or generate strong passwords that follow your configured password policy. Module settings can be opened in focused modal dialogs, allowing administrators to configure payment gateways, domain modules, and other integrations without losing their place. Email template management, translations, resource navigation, and installation workflows have also received attention.

These are just a few examples. Virtually every section of the HostBill admin panel has been improved in some way, and there are plenty of smaller enhancements waiting to be discovered as you explore Frontier.

Try Frontier today – now available in Open Beta

Frontier is available to all HostBill users starting with HostBill 2026-10-19.

As the new interface is currently in beta, you can explore it at your own pace while continuing to use the existing admin theme. Frontier will eventually become the default HostBill admin interface, with add-on module screens receiving further visual updates before the beta period ends.

Getting started is simple:

1. Update HostBill to version 2026-10-19 or later.
2. Preview Frontier by clicking the “New admin look available: preview this page” notification at the top of your admin area.
3. Make Frontier your default admin theme under Settings → General Settings → Other → Admin Area template.

You can switch back to the previous interface whenever you need to, and your existing settings and data remain unchanged.

Frontier marks a new chapter in the HostBill admin experience – combining a modern design with familiar workflows, improved usability, and greater flexibility.

We encourage all HostBill users to explore the new interface, discover the improvements, and share their feedback as we continue refining Frontier.

Update HostBill, try Frontier today, and experience a smarter way to manage your business!

We were privately notified about an Insecure Direct Object Reference (IDOR) vulnerability in the OnApp module. It affects the entire 6.x branch of the module (all 6.x versions) released before this update. We have no evidence that this issue has been exploited or that it was publicly known before this disclosure.

Advisory details:

• Affected component: HostBill OnApp module
• Affected versions: all 6.x versions
• Severity: Critical
• Vulnerability class: Insecure Direct Object Reference (IDOR)
• Known public exploitation: none known
• Fixed in: 6.0.x.20261015 or higher

An Insecure Direct Object Reference occurs when an application gives access to a resource based on an identifier supplied in a request, without fully checking that the requester is allowed to access, modify or remove that resource. Because this type of issue can expose resources that belong to other accounts, we have rated it critical, and we strongly recommend applying the update without delay.

Resolution:

To fix this issue, update your OnApp module to the most recent release, version 6.0.x.20261015 or higher. You can update either manually or with the Auto-Update plugin.

If you have questions about this advisory or need help with the update, please contact our support team.

Acknowledgements:

We would like to thank Abstract DOO (abstract.rs), in particular Viktor Bajraktar and Mikica Ivosevic, for identifying this issue and disclosing it to us responsibly. Coordinated disclosure like theirs helps keep the HostBill safe, and we greatly appreciate it.

Compact Wizard order page

Compact Wizard is a compact, table-based HostBill order page built specifically for stores with a large number of products. Its streamlined layout makes it easy for customers to browse extensive product catalogs, quickly compare available options and find exactly what they need.

Customers can search, sort and filter products before making their selection, including filtering and searching by product tags. This makes navigating even large and complex product catalogs fast and convenient. You can also configure whether to display other product categories, giving customers an easy way to explore additional offers directly from the order page. For larger catalogs, pagination can be enabled or disabled, allowing you to adjust how products are presented and keep the ordering experience clear and manageable. Compact Wizard focuses on making the initial product discovery and selection as efficient as possible. Once a customer selects a product, all subsequent steps use HostBill’s default order page templates, ensuring a familiar and consistent checkout experience.

Compact Wizard is fully compatible with HostBill Theme 2019, making it an ideal choice for businesses that need a clean, efficient and scalable way to present a large product portfolio.

Release notes

This week’s HostBill release also brings another set of improvements designed to simplify everyday administration.

Managing transaction data just got easier with the new CSV transaction import option available in the Admin Area. Administrators can now import transaction records from CSV files, making it faster and more convenient to bring transaction data into HostBill. This can be particularly useful when migrating data, working with transaction records from external systems or handling larger batches of transactions without entering them manually.

HostBill now offers an additional option for merging invoices. Administrators can choose not to merge services that use different billing types. When enabled, services using pre-paid, post-paid and hybrid billing will not be combined together on the same merged invoice. This gives you more precise control over invoice generation and helps keep services with different billing models properly separated.

We’ve added a new Manual sub-tab under the Messages section in product configuration. It allows administrators to select which email templates should be available for manual sending for a particular product or TLD. Instead of presenting admins with unnecessary templates, you can now define exactly which messages are relevant to each product. With this option manual customer communication is quicker, clearer and less prone to selecting the wrong template.

Admin API key management is becoming more transparent and secure. When creating API keys, administrators can now add a description and define an expiration date. Descriptions make it easier to identify what individual keys are used for, especially when multiple integrations or external applications access HostBill. Expiration dates provide additional control over API access by allowing keys to be issued for a defined period rather than remaining valid indefinitely.

The SSL Automation Helper now comes with an option to configure notifications for administrators. This gives your team better visibility into SSL-related automation and helps ensure that relevant events requiring administrative attention are not overlooked.

And finally, the Domain management is faster for customers using Theme 2019. The domains list now supports bulk cancellation, allowing users to select and cancel multiple domains at once instead of processing each domain individually.

2019 Theme Editor: Dark Mode and Theme presets

he 2019 Theme Editor already gives HostBill administrators extensive control over the appearance of the Client Area without requiring direct template file modifications. From logos, fonts and colors to navigation, custom CSS and layout settings, the editor makes it easy to adapt the Client Area to your brand. Now, we’re taking those customization options a step further with dark mode and theme presets.

With the newly added dark mode support, the 2019 Theme can offer a modern dark interface alongside its traditional appearance. This gives you more flexibility in how your Client Area looks and provides customers with an interface better suited to different viewing preferences.

We’ve also introduced theme presets to the 2019 Theme Editor. Presets make it easier to apply predefined combinations of theme settings instead of configuring individual styling options one by one. This means faster customization, easier experimentation with different looks and a more convenient way to create a consistent Client Area design.

The Theme Editor continues to provide granular control over elements such as fonts, background and text colors, primary and secondary brand colors, borders, navigation bar appearance and the left-hand menu. Together with dark mode and presets, these options give you even more freedom to create a Client Area that matches your brand and preferred visual style.

Pritunl VPN module

Pritunl is an open-source VPN platform designed for creating and managing secure VPN networks. It provides a web-based management interface and supports scalable VPN deployments, making it suitable for businesses and service providers that need to manage secure remote access for multiple users. The Pritunl VPN integration for HostBill allows you to sell and automate VPN services directly from your HostBill platform. The module connects HostBill with Pritunl to streamline VPN account provisioning and management, helping service providers reduce manual work and efficiently manage VPN services throughout the entire customer lifecycle. With built-in automation, HostBill can automatically create VPN accounts as well as suspend, unsuspend and terminate them based on the service status. Administrators can view and manage billing details and control the account lifecycle directly from the HostBill Admin Area, keeping service management and billing conveniently connected in one place. On the client side, customers get easy access to everything they need to start using their VPN service. The HostBill Client Area can display installation instructions for VPN client software and provide links to available VPN profiles, making the setup process straightforward and giving customers convenient access to their connection details.

New BTCPay Integration

We’ve added a new BTCPay module with support for the Greenfield API. The new integration enables HostBill users to connect their billing environment with BTCPay using its modern API and incorporate cryptocurrency payments into their payment workflow.

Release notes

Domain automation gets another useful improvement. HostBill can now automatically create a DNS zone before customer-submitted nameserver changes are pushed to the registrar. This helps ensure that the required DNS zone is already in place as part of the nameserver change workflow and further reduces the need for manual DNS administration.

The PDU SNMP module now gives customers more flexibility when viewing their outlets in the Client Portal. Users can switch between grid and list views, choosing the layout that works best for the number of outlets and the way they prefer to manage their power infrastructure.

We’ve also updated the Ceph S3 module, changing the minimum lock retention value from 1 to 0. The change provides greater flexibility when configuring object lock retention settings for Ceph S3-based storage services.

15% off on Cloud & VPS Hosting modules

Ready to take your cloud or VPS business to the next level? HostBill integrations help you automate the entire service lifecycle – from provisioning and billing to resource management and customer self-service. For the next two weeks, get 15% off all HostBill Cloud & VPS Hosting modules and add powerful automation to your hosting offer for less. Just enter the promo code CLOUD2026 at checkout and claim your discount! The promotion is available for two weeks only.

What’s on sale?

HostBill offers a wide range of Cloud & VPS Hosting integrations designed for different infrastructures and business models. The lineup includes solutions for popular virtualization and cloud platforms such as Proxmox, OpenStack, CloudStack, OpenNebula, SolusVM 2, VirtFusion and VMmanager, as well as integrations for major cloud providers including DigitalOcean, Amazon EC2, Amazon Lightsail, Vultr, Linode, Hetzner Cloud, Scaleway and UpCloud. Depending on the selected module, you can automate provisioning, billing and service management while giving customers convenient self-service tools directly from the HostBill client area.

Choose the integration that fits your infrastructure and start automating your Cloud & VPS business for 15% less!

Email OTP Login module

The new Email OTP Login module provides a simple and secure passwordless login experience for HostBill clients. Instead of entering a traditional password, users can access their accounts using a secure login link or a One-Time Password (OTP) sent directly to the email address registered with their account.

The module helps streamline the login process while maintaining security by ensuring that access is granted only through the user’s verified email address. The module offers additional security and configuration options to give administrators control over the authentication process. OTP login can be restricted to the same browser session in which the login request was initiated, helping prevent unauthorized use of intercepted codes or links. Administrators can also configure how long the OTP or login link remains valid and optionally bypass two-factor authentication when a user has successfully authenticated using an email OTP.

With passwordless email authentication, the Email OTP Login module simplifies account access while providing a secure and flexible alternative to traditional password-based login.

Release notes

The Mollie payment gateway integration has been expanded with support for additional payment methods. HostBill users can now offer Pay by Bank, BLIK, Satispay, Swish and MB WAY, making it easier to provide payment options tailored to customers in different European markets.

Easier payment link generation – working with Payment Links is now more convenient for administrators. A new button has been added directly to the admin invoice interface, allowing staff to quickly generate and copy a Pay Now link for a specific invoice. The link can then be easily shared with the customer whenever direct access to the invoice payment page is needed.

The SSL Automation Helper has gained new configuration capabilities. Administrators can now configure notifications related to the automation process, providing greater control over how relevant events are communicated. The module can also be configured to delete old DNS records, helping automate cleanup after DNS-based certificate validation and reducing the need for manual DNS record management.

The Ceph S3 integration now supports Immutable Storage for buckets. Immutable storage can prevent stored objects from being modified or deleted for a defined period, providing an additional layer of protection for data that needs to remain unchanged. This can be particularly useful for backups, archives and workloads with data retention requirements.

The Gateway Per Client module now provides greater control over how gateway rules are applied. Administrators can change the application order and priorities of configured rules, making it easier to manage more complex payment gateway configurations and determine which rules should take precedence.

Cloud Signup has received several new configuration options for controlling the information collected during account registration. Administrators can now force users to register a company account where required. The update also introduces conditional and postponed full-details requirements. This provides greater flexibility in determining when complete customer information needs to be provided, helping businesses adapt the signup process to different account types and onboarding scenarios.

We’ve also made several usability improvements to order drafts in the admin area. The Service Group field has been renamed and repositioned above the Billing Cycle field for a clearer order configuration workflow. Additionally, the PO Number field is now visually marked as required when the administrator does not have permission to place an order without a PO Number. This makes requirements immediately visible and helps avoid unnecessary validation errors during order creation.

Multiportal.io integration

HostBill integration with Multiportal.io brings billing, automation and VDC management together in one powerful solution, helping cloud and infrastructure providers streamline service delivery, reduce manual work and monetize resource usage more effectively.

With flexible billing options, you can charge customers based on the resources they actually consume. HostBill automatically fetches usage data from Multiportal.io for CPU, memory, storage, virtual machine count and running virtual machines. Choose between flat/resource-based pricing and PAYG billing to create service plans that fit your business model and give you greater control over how infrastructure usage translates into revenue.

The integration automates the complete VDC lifecycle, allowing HostBill to create, update, suspend and delete VDCs as services change. Built-in multi-tenant support enables automatic tenant isolation and management, while resource thresholds can trigger alerts and automated actions, helping you stay ahead of usage limits and minimize the need for manual intervention.

Customers get convenient access to their services directly from the HostBill Client Portal, where they can view current resource usage and access their Multiportal login details. This gives customers greater visibility into their consumption while keeping service management simple and accessible. For administrators, the integration provides centralized control over billing, usage and account management. Track resource consumption, manage billing details and control the customer account lifecycle without switching between multiple systems.

By connecting Multiportal.io with HostBill, you can turn VDC infrastructure into a fully automated, billable service — from provisioning and tenant management to usage tracking and invoicing — while delivering a smoother experience for both your team and your customers.

More flexibility in order and service management

Managing orders from the admin area is now more convenient. When adding or editing a service or domain on an order draft, administrators can select the appropriate service group, providing greater control over how services are organized before an order is finalized.

We’ve also added a Customer PO Number field for orders created by administrators. Together with this change, a new ACL allows organizations to control which staff members are permitted to place orders without a PO number. This makes it easier to align HostBill order workflows with internal purchasing and approval policies.

To make account management more transparent, discounted services can now be identified at a glance. A new discount tag icon is displayed next to the price on the accounts list as well as on the Accounts and Domains tabs within the client profile.

Enhanced TLD pricing and domain management

This release brings further improvements to domain pricing automation. TLD price import profiles now support a percent tiers margin option, giving administrators more flexibility when defining margins and automatically calculating domain prices across different pricing levels.

Administrators can also choose to skip importing multi-year transfer fees when they were not initially configured for a TLD. This provides greater control over imported registrar pricing and helps keep transfer fee configurations aligned with the existing TLD setup.

On the client side, domain-related communication is now more flexible. A separate Client Notifications preference allows customers to independently control whether they want to receive domain expiration emails, giving them more granular control over the notifications they receive from HostBill.

Better DNS collaboration

The DNS Services module now allows customers to view and edit comments associated with DNS zone records. Comments can provide additional context about individual records, making DNS zones easier to understand and manage, particularly in more complex configurations or when multiple users are involved in maintaining a domain.

Modules: Hetzner Cloud and SolusVM update

Our Hetzner Cloud integration has been expanded with User API support. This makes it possible to access supported Hetzner Cloud service information and functionality through HostBill’s User API, opening additional possibilities for customer-facing integrations and automated workflows.

The SolusVM 2 integration now includes a new connection configuration option that enables IP address synchronization with HostBill’s IPAM module. This helps keep IP allocation data synchronized between systems and provides administrators with more consistent visibility and control over IP resources used by virtual machines.

ClamAV module for HostBill

HostBill is expanding its security capabilities with a new ClamAV integration, bringing automated malware scanning directly into your everyday file-handling workflow. The ClamAV module connects HostBill with your existing Clamd socket, adding automated malware scanning directly to your file upload workflow. All attachments uploaded by both administrators and clients are automatically scanned, helping detect potentially infected files before they can pose a threat to your HostBill environment. The integration also scans files uploaded to the Downloads section, extending protection beyond standard ticket and communication attachments. For additional security and control, HostBill can optionally retain copies of infected files in quarantine, allowing administrators to review and investigate suspicious uploads when necessary. With ClamAV integration, malware scanning becomes a seamless part of everyday file handling in HostBill, helping protect your system, staff, and customers without adding extra steps to your workflow!

Anthropic/Claude Agents for AI Prompter module

Claude Agents is a new AI-powered module for HostBill and an extension of the AI Prompter module.

The module is built on Anthropic’s Managed Agents API, enabling fully context-aware conversations within support tickets. Instead of responding only to the most recent message, Claude Agents treats each ticket as a persistent agent session, taking the entire ticket history into account to ensure replies remain accurate, consistent, and relevant throughout long or complex discussions. By maintaining conversational context across the session, Claude Agents significantly improves the quality and continuity of AI-assisted support. Claude Agents integrates seamlessly with the existing AI Prompter module, sharing its configuration, permissions, and workflows while introducing advanced conversational capabilities. Designed specifically for multi-turn support interactions, it is ideal for technical support, billing inquiries, and other service-related conversations that develop over time.

The module is meant to be used with AI Support Agent, which gives you extensive control over how AI participates in your support workflow. You can choose which staff member the AI agent should act as, exclude selected support departments from AI handling, and configure separate AI Prompter prompts for new tickets and customer replies. Configurable initial and subsequent reply delays allow responses to be timed more naturally, with support for multiple delay values for randomized timing. AI Support Agent also includes safeguards that help you decide when AI should—and should not—respond. Messages marked as sensitive can be excluded from AI processing, while a configurable AI stop word can prevent a response from being sent when the AI determines that it cannot provide an appropriate answer. Ticket tags can be automatically added to identify conversations handled by AI, and a separate stop-handling tag lets your staff easily take a ticket out of the automated workflow whenever human assistance is required. For cases that require human attention, the module provides a dedicated AI escalation workflow. You can instruct the AI to return a predefined AI Escalate word or phrase whenever it determines that a ticket should be handled manually. When the AI response exactly matches this value, the module does not send the response to the customer and instead triggers the configured escalation action. The ticket can automatically receive a designated Escalate tag, making escalated cases easy to identify, and an Escalate macro can be executed to perform additional predefined ticket actions.

By combining automated ticket handling with the flexibility of AI Prompter, AI Support Agent helps reduce repetitive support work while giving your team control over where and how AI is used.

Release notes

The latest HostBill releases also introduced new API capabilities to further expand integration possibilities and improvements across Colocation Manager, Gateway Per Client and PDU SNMP:

The Admin API has been extended with a new call that allows you to delete ticket notes via API. This provides additional flexibility when building custom support workflows or automating ticket management tasks.

We’ve also introduced a new ACL for contacts, client teams and guest clients: Receive final invoices. The new permission gives administrators more precise control over which users associated with a client account should receive final invoice communications.

Customer communication has gained another useful enhancement. When composing a message to customers, administrators can now pass additional variables to the message or template. This makes it easier to create more dynamic and personalized communications using data relevant to a particular workflow.

Ticket view permissions have also become more granular. The existing Manage own & public ticket views permission has been split into two separate permissions, allowing administrators to control access to managing personal and public ticket views independently.

Managing larger colocation environments often means working with a significant number of network and power connections. The latest update to Colocation Manager makes this process faster by introducing the ability to assign all currently unassigned PDU or switch ports at once. Instead of assigning available ports individually, administrators can now handle them in bulk, reducing repetitive work and making initial configuration or larger infrastructure changes much more efficient.

The Gateway Per Client module has gained new Admin API calls for managing client gateways. This extends the module’s automation capabilities and makes it possible to integrate client-specific payment gateway management into external tools, scripts and custom workflows without requiring administrators to make every change manually through the HostBill interface.

The latest release also introduced several improvements to PDU SNMP, with a particular focus on making the PDU Reboots view more informative and easier to work with. Administrators can now preview related metered billing charges directly from the PDU Reboots view, providing quick access to the billing information associated with power usage or operations without having to navigate away from the page. Customers can also add an individual note to each assigned PDU outlet. This provides a simple way to record useful information about connected equipment, outlet purpose or other details that can make individual assignments easier to identify and manage. Finally, the PDU Reboots view has been redesigned with collapsible sections. This is particularly useful for customers with a large number of PDU assignments, as individual sections can be expanded only when needed, keeping the interface cleaner and making it easier to navigate complex infrastructure setups.

We have identified a security issue that affects all HostBill versions until 2026-08-31 release.  This issue involves a High-severity Cross-Site Scripting (XSS) vulnerability.

Resolution:

To mitigate this issue please update your HostBill to the most recent release, version 2026-08-31, either manually or using the Auto-Update plugin.

We do not have any basis to think the issue is known in public.

15% discount on Dedicated Servers modules

Ready to take your dedicated server offering to the next level? Whether you’re already selling dedicated servers or just getting started, HostBill integrations help you automate the entire service lifecycle – from provisioning and billing to server management, all from one convenient client area. For the next two weeks, get 15% off all HostBill Dedicated Servers modules and make server automation simpler, faster and more efficient. Just enter the promo code DEDI2026 at checkout and claim your discount! The promotion is available for two weeks only.

What’s on sale?

HostBill Dedicated Servers integrations are designed to help hosting providers automate server sales and management while giving customers convenient self-service tools. Depending on the selected integration, you can automate provisioning, bill customers for servers and resource usage, manage the service lifecycle and give clients access to server management options directly from the HostBill client area.

The current Dedicated Servers lineup includes OVH Dedicated Servers, DCImanager 6, Hetzner Robot, SynergyCP and TenantOS, giving you a choice of integrations for different dedicated server infrastructures and business models.

With HostBill taking care of billing and automation, you can spend less time on repetitive administrative tasks and focus on growing your dedicated server business.

Browse Dedicated Servers modules and choose your integration!

Release notes

HostBill’s Admin API has been expanded with new calls for managing reports. The new API functionality makes it easier to integrate report-related operations into external applications and automated workflows without requiring administrators to perform every action manually in the HostBill interface. Whether reports are used for internal analysis, business intelligence or data synchronization, the new calls provide developers with more opportunities to incorporate HostBill reporting into their existing processes and tools.

Administrators can now generate a recurring invoice immediately using the new Generate now button. Instead of waiting for the invoice to be created automatically according to its regular schedule, staff can trigger its generation whenever needed. You can use this option when an invoice needs to be prepared ahead of schedule, verified before a billing date or generated in response to an individual customer request. It provides administrators with greater control while preserving the existing recurring invoice configuration for subsequent billing periods.

Metered billing configurations often combine usage-based charges with a fixed recurring fee. HostBill now allows administrators to decide whether that fixed recurring component should be captured upfront. The new setting provides greater flexibility in designing billing models for cloud, infrastructure and other consumption-based services. Providers can collect the fixed recurring fee at the beginning of the billing period while calculating variable usage charges separately, or keep the fee aligned with the existing metered billing cycle. This makes it easier to match invoice timing to the commercial model of each service.

HostBill’s ticket prefiltering system has gained another useful condition. Administrators can now create a Block Ticket prefilter based on the submitter’s email domain. This makes it possible to automatically reject incoming tickets originating from selected domains rather than blocking individual email addresses one at a time. The new option can help reduce unwanted messages, limit recurring spam and prevent tickets from domains that should not be accepted by the support system.

The Gandi.net integration now supports defining default contact data directly in the connection settings. Administrators can configure the contact information that should be used by default when processing domain-related operations through a particular connection.

The complete list of changes and fixes included in this release is available in the HostBill Changelog.

Release notes

Managing Service Level Agreements becomes much faster when working with larger groups of customers. HostBill now allows administrators to update the SLA using the Bulk Clients Update tool directly from the Clients view. Instead of opening individual client profiles and changing their SLA settings one by one, administrators can select multiple clients and assign or update their SLA in a single operation. When reorganizing customer groups, introducing new service tiers, migrating customers to new support plans, or applying SLA changes across a larger number of accounts this can prove to be particularly useful.

HostBill now gives administrators more granular control over discounts for services using metered billing. When defining a custom service discount, as well as group or personal client discounts, admins can now set individual discount values for specific metered billing variables. This means that instead of applying a single discount uniformly to the entire service, you can decide exactly which usage-based components should be discounted and by how much. The same flexibility is available when configuring discounts for a client or client group, as well as when applying a custom discount during the ordering process. Whether you want to offer special pricing for selected usage metrics, create tailored deals for individual customers, or build more sophisticated discount structures for different client groups, the new options make metered billing discounts much more precise and flexible.

The DNS Zone Editor has gained support for TSIG key management, providing administrators with additional tools for managing secure DNS communication. TSIG (Transaction SIGnature) is a mechanism used to authenticate DNS messages exchanged between servers. It uses shared secret keys to verify that DNS requests originate from a trusted source and that the transmitted data has not been modified in transit. With the new functionality, TSIG keys can now be managed directly within HostBill’s DNS management environment, making it easier to configure DNS infrastructures that rely on authenticated communication. The feature can be especially useful in environments using secure zone transfers, DNS updates and communication between authoritative DNS servers.

The NIC.at domain registrar integration now includes a new App Connection option that allows HostBill to set or update domain contacts after a domain transfer. Domain transfers can involve more than simply moving the domain between registrars. Depending on the registrar and registry workflow, contact information may also need to be synchronized or updated once the transfer has been completed.

The QuickBooks Online module has also received an under-the-hood update. Its module library has been upgraded to version 6.3.1. Keeping integration libraries current helps maintain compatibility with external platforms and provides a solid foundation for reliable communication between HostBill and QuickBooks Online. While this change does not introduce a new configuration workflow for administrators, it ensures that the integration continues to rely on an up-to-date version of its underlying library.

Inventory Manager update: Ownership tab & file attachments

Inventory Manager is designed to help businesses keep track of physical and virtual assets, their availability, ownership and lifecycle. With this release, finding assets assigned to particular owners becomes much easier thanks to the new Ownership tab. The new tab provides administrators with a dedicated place to search for inventory items by owner. Instead of navigating through individual items to determine who an asset belongs to, admins can quickly find all relevant items based on ownership information. This new option can be especially useful for businesses managing large inventories of servers, hardware components, networking equipment, licenses or other resources distributed among multiple clients, employees or locations. The new ownership-focused view makes it easier to answer questions about who currently holds a particular asset and quickly locate all items associated with a given owner.

Deliveries in Inventory Manager can now include file attachments. Administrators can attach relevant documents directly to a delivery, keeping important information together with the corresponding delivery record. Depending on your workflow, these attachments could include delivery documentation, invoices, receipts, shipping documents, signed confirmations, equipment specifications or other files related to the transaction.

File management has also been extended to individual inventory items. Administrators can now upload files and associate them directly with a specific item. This opens up many possibilities for organizing asset documentation. A server or network device could have its specification sheet attached, hardware could include warranty documentation or photographs, and other inventory items could have manuals, certificates, purchase records or configuration documents stored directly alongside their HostBill records.

Inventory Manager now also allows administrators to assign accounts to inventory items. This provides another layer of information that can be stored and managed directly with an asset. It makes it easier to establish relationships between inventory items and the accounts associated with them, improving organization and providing administrators with additional context when viewing or managing individual assets.

Together with the new Ownership search and file attachment capabilities, this update makes Inventory Manager an even more comprehensive tool for tracking not only what assets you have, but also who they belong to, which accounts are associated with them and which documents accompany them.

Client comments for DNS zones

DNS management receives several related improvements in this release. Clients can now add and edit a short comment for their DNS zones. A simple comment can make a significant difference when an account contains numerous DNS zones. Clients can use comments to record the purpose of a zone, identify the project or service associated with it, leave an internal note or simply add information that makes individual zones easier to recognize.

DNS zone comments are available through the DNS Services functionality and can also be viewed and edited in the DNS Zone Editor, keeping the information accessible wherever clients manage their zones. Support for DNS zone comments has additionally been introduced to the UserAPI, allowing the same information to be incorporated into custom applications, client portals and automated workflows.

Fetch DNSKEY records directly from authoritative nameservers

HostBill’s domain management capabilities have been expanded with a new configuration option for the DNSSEC widget. Administrators can now configure the widget to allow clients to fetch DNSKEY records from authoritative nameservers. This can simplify DNSSEC management by allowing the required DNSKEY information to be retrieved directly from the authoritative DNS infrastructure rather than requiring clients to obtain and enter the data separately. The new option gives hosting providers additional flexibility in deciding how DNSSEC should be handled within their client-facing domain management workflow.

New Client SLA management

One of the major administration improvements in this release is the introduction of Client SLA management, available in Clients -> Clients SLAs. Administrators can now create custom SLAs associated with clients and have this information highlighted throughout relevant areas of the HostBill admin interface. SLA information is visible across client listings, client details and single-item views, making important service-level information easier to notice during everyday work.

For businesses serving customers under different contractual or support arrangements, immediate SLA visibility can be particularly valuable. Support and administrative teams can identify the applicable service level without having to search through external notes or documentation. This helps teams maintain awareness of client-specific obligations while handling accounts and services and makes SLA information a practical part of the day-to-day HostBill workflow rather than a detail stored outside the billing and automation platform.

Other improvements

The Client IP Whitelist now displays the description associated with each allowed IP address. Descriptions provide useful context, especially when a client has multiple addresses on the whitelist. Rather than seeing only a list of IP addresses, users can immediately understand what a particular entry represents, making whitelist management clearer and reducing the chance of removing or modifying the wrong address.

Domain ordering can now be streamlined by hiding unavailable domains from search results. A new configuration option has been introduced for the Domain R16 order page, allowing administrators to configure domain searches so that only available domains are displayed. The same option has also been added to the Domain 2019 order page. This gives hosting providers greater control over the domain purchasing experience. When enabled, customers can focus entirely on domain names they can actually register rather than browsing results that include unavailable options. It can make the search interface cleaner and shorten the path from searching for a domain to placing an order.

Clients using the 2019 Theme and Nextgen Clean can now add comments to individual Security Rules. Comments can provide useful context for custom security configurations. Clients may use them to describe why a particular rule exists, which service or application it relates to, or what purpose a specific configuration serves. This becomes particularly useful as the number of security rules grows. Instead of relying only on technical parameters to identify a rule later, users can leave a human-readable explanation directly alongside it, making configurations easier to understand and maintain over time.

New in Modules

The PowerDNS integration gains a new connection configuration option for managing the SOA serial format. SOA serial numbers play an important role in DNS zone management by allowing DNS servers to determine whether zone information has changed. The new setting gives administrators additional control over how SOA serials are formatted when working with PowerDNS, allowing the integration to better match different DNS infrastructure requirements and operational practices.

The SolusVM 2 integration now includes User API support. This extends the integration’s automation possibilities and makes it easier to incorporate SolusVM 2 services into workflows and applications that rely on HostBill’s User API. Providers using SolusVM 2 can take advantage of API-based access when building their own client-side integrations and automated processes.

The Joker.com domain registrar integration has been expanded with support for Registrar Lock management. Registrar Lock is an important domain security mechanism that helps prevent unauthorized or accidental domain transfers. With the new integration capability, the lock status can be managed through HostBill as part of the domain administration workflow, reducing the need to perform the same operation separately through the registrar.

Ticket Macros

Support teams rely on ticket macros to answer common requests quickly. This release introduces two highly requested enhancements that make macros significantly more versatile. Ticket macros can now include file attachments. Whenever a macro is used, its configured attachments are automatically added to the ticket reply. This is ideal for frequently shared resources such as: product documentation, setup instructions, PDF guides, configuration files, terms and policy documents. Instead of searching for files every time, your team can deliver complete responses with a single click. Additionally, macros can now automatically update the ticket subject. This allows support agents to standardize ticket naming, improve categorization, and make searching and reporting more consistent—especially when handling repetitive requests such as cancellations, migrations, verification, or onboarding.

Guest Management API – Automate Client Collaboration

HostBill’s Guest Management feature makes it possible to securely invite additional users to access and collaborate within a client account without sharing the primary login credentials. This is particularly useful for businesses where multiple employees, departments, or external contractors need controlled access to services and billing. With this release, Guest Management becomes fully accessible through the API with six new calls:

• addClientGuest
• removeClientGuest
• editClientGuestPermissions
• setClientGuestStatus
• getClientMemberships
• convertContactToClient

These endpoints allow developers to fully automate guest lifecycle management, synchronize access with external applications, build custom onboarding workflows, or integrate HostBill with internal identity management systems.

Managing affiliate relationships programmatically is now even easier with two new Admin API endpoints: assignClientAffiliate and unassignClientAffiliate. These new calls allow administrators and external integrations to automatically assign or remove affiliates from client accounts without requiring manual intervention in the admin area. This is particularly useful for custom sales pipelines, CRM integrations, and partner onboarding automation.

The addTicketReply Admin API call now supports a new optional parameter: mark_as_pendingreview. This enhancement allows integrations and automation tools to create ticket replies that remain in the Pending Review state before being sent to the client. It gives support teams an additional approval layer for AI-generated responses, automated workflows, or internal review processes, helping maintain communication quality while still benefiting from automation.

Other release notes

Administrators can now generate a dedicated Orders Listing Export report. The new report provides a convenient way to export order information for further processing, auditing, external reporting, or custom business analysis. Whether you’re preparing financial reports, importing data into external systems, or simply reviewing order history, exporting order listings is now faster and easier.

The Stripe Intents 3DS module now includes a new configuration option: Allow client choose other card. When enabled, customers who encounter 3D Secure authentication can choose to complete the payment using a different saved or newly added payment card instead of being limited to the original payment method. This provides greater flexibility during checkout and helps improve payment success rates while delivering a smoother customer experience.

For users managing physical infrastructure with Colocation Manager, editing blade devices has become more intuitive. A new breadcrumb link to the parent item has been added to the blade edit screen, making navigation through rack structures quicker and reducing the number of clicks required when managing large deployments.

The Zoho CRM integration now supports mapping the Owner merge field to the HostBill administrator assigned in the Staff Sales role. This improvement helps maintain ownership consistency between both platforms, ensuring customer records are assigned to the appropriate sales representative throughout the sales process and simplifying synchronization between HostBill and Zoho CRM.

More Flexible Billing Settings for Client Groups

Managing different types of customers often requires different billing rules. With the latest update, administrators can now override the Default billing cycle setting directly within Client or Client Group Orders Settings.

HostBill has long offered powerful client management capabilities through Client Groups, allowing businesses to organize customers based on virtually any criteria—such as resellers, enterprise clients, partners, or internal departments. Each group can have its own configuration, making it easy to tailor the customer experience without creating complex custom workflows. From ordering behavior and pricing policies to permissions and automation settings, Client Groups help businesses manage diverse customer bases from a single installation while keeping administration simple and scalable.

The new billing cycle override extends this flexibility even further. You can now define a different default billing cycle for individual client groups, ensuring that each segment of your customer base automatically receives the billing frequency that best matches your business model

Inventory Manager – Import Inventory Delivery Details from XLSX

Managing deliveries for larger orders is now even easier. The Inventory Manager now supports importing delivery details directly from XLSX spreadsheets. Instead of entering individual delivery items manually, administrators can prepare or export data in Excel and import it into HostBill in a single step. This enhancement speeds up inventory operations, reduces manual work, and minimizes the risk of data entry errors, making it especially useful when processing large shipments or migrating existing inventory records.

New Translation Support for SEPA Direct Debit Debtor Templates

The SEPA Direct Debit module has been enhanced with translation support for the Add/Update Debtor template file. This feature allows administrators to localize debtor-related communication more easily, ensuring customers receive documents and notifications in their preferred language. It is particularly valuable for businesses operating across multiple countries or serving multilingual customer bases, helping deliver a more consistent and professional customer experience.

Improved cPanel Service Termination Reliability

The cPanel integration has been updated with an increased service termination timeout from 60 seconds to 180 seconds. On busy servers or environments with longer account removal processes, termination requests may occasionally require more time to complete. The extended timeout helps prevent unnecessary timeout errors and allows HostBill to wait longer for the operation to finish successfully, resulting in more reliable automation.

Better control over disabled affiliate accounts

A new Disabled account handling option has been added to Affiliate Settings (Clients → Affiliates → Affiliate Settings). This setting allows administrators to define how disabled affiliate accounts should be handled, providing greater flexibility in managing affiliate programs and ensuring account behavior matches your business policies. You can now choose between two handling modes:

• Notify, disable new commissions – the affiliate is informed that their account has been disabled, no new commissions are generated, but they retain access to the Affiliate section where they can view their existing commission history and account information.
• Disable affiliate section – the affiliate is notified that their account has been disabled, new commissions are stopped, and access to the entire Affiliate section is blocked.

These options allow you to choose the approach that best fits your affiliate program, whether you want former affiliates to retain read-only access to their historical data or completely disable access after the account has been deactivated.

Editable API keys

Managing API access is now easier than ever. Administrators can now edit existing API keys instead of creating new ones whenever changes are required. Additionally, every API key now has an Active/Inactive status, making it simple to temporarily disable access without deleting the key entirely. This improves both administration and security, especially when rotating credentials or troubleshooting API integrations.

OpenStack: Cloud-init scripts per operating system

HostBill’s OpenStack integration has become even more flexible. Instead of relying on a single cloud-init script for all virtual machines, administrators can now configure different cloud-init scripts for individual operating system images within the product configuration. When a client deploys a server, HostBill automatically applies the script assigned to the selected OS image. This makes it much easier to tailor initialization tasks to the specific requirements of Linux distributions, Windows images, or custom templates without maintaining multiple products.

Other improvements

A new Hide graph source name option has been added to the Graphs dashboard widget so that administrators can simplify graph presentation by hiding the source name when it is unnecessary, resulting in a cleaner and more focused dashboard.

The Date To filter in CSV Export has been improved. Previously, selecting an end date could unintentionally exclude records created later on that same day. The filter now correctly includes all records from the selected end date, making exported reports more accurate and eliminating the need for date workarounds.

To help protect both administrators and customers against brute-force login attempts, HostBill now supports login rate limiting for both the admin and client areas. This additional security layer limits repeated authentication attempts, helping safeguard accounts while maintaining a seamless login experience for legitimate users.

The User API has been extended with additional service information. Service details now include information about any submitted cancellation request, allowing API integrations to detect pending cancellations without requiring additional queries or manual verification. This enhancement makes it easier to synchronize external systems and automate service lifecycle management.