Security and Updates

Updates and releases

Use AdminPanel → Panel → System Updater for normal production updates. HudsonPanel application updates are signed releases downloaded over encrypted HTTPS from HudsonPanel-controlled servers. The updater creates a protected backup, installs the selected Release, Current, or Edge build, checks service health, and automatically rolls back if activation fails. Administrators can install a release manually from System Updater or enable automatic HudsonPanel updates.

Ubuntu operating-system updates are separate from HudsonPanel releases. System Updater provides dedicated OS update controls and a separate opt-in setting for unattended security maintenance. An OS update may install a new kernel and require a server reboot; a HudsonPanel application update does not replace Ubuntu package maintenance. Use the terminal only for troubleshooting or documented recovery when System Updater cannot complete normally.

Security fixes may be released separately from feature updates. Customers are responsible for keeping both HudsonPanel and the server operating system updated.

Reporting a vulnerability

Email support@hudsonpanel.com with “Security Report” in the subject line. Include the affected feature, steps to reproduce the issue, possible impact, and useful screenshots or logs. Never include live customer data or server credentials.

HudsonPanel will acknowledge a security report within two business days and begin reviewing credible reports within five business days. Critical vulnerabilities are prioritized immediately, but no resolution time is guaranteed. HudsonPanel does not offer a paid bug bounty.

Researchers must not access customer data, damage systems, disrupt services, or disclose a vulnerability publicly before HudsonPanel has had a reasonable opportunity to investigate and release a fix.

License information

The licensing website stores customer identity and account status, plus the license key, payment status, license status, price, associated server hostname and IP when provided, cancellation status, and trial or license dates. HudsonPanel does not send central telemetry or routine license checks from licensed servers.

Credentials and sensitive information

The licensing website does not ask for or store a server root password or SSH private key. Customer passwords are stored as one-way hashes. Server owners should keep root credentials, keys, database passwords, and backups private and rotate them when exposure is suspected.

Support with the yearly license

Email support covers license activation, installation guidance, HudsonPanel features, updates, confirmed panel bugs, and problems directly caused by HudsonPanel. Normal support hours are Monday through Friday, 9:00 AM to 5:00 PM Arizona time, excluding major holidays. The response target is within two business days and is not guaranteed.

General Linux administration, migrations, third-party software, malware cleanup, custom development, unrelated server problems, and emergency support are not included. Additional server administration may be offered for an approved fee.

Shared responsibility

HudsonPanel is responsible for maintaining the panel software, its official update service, and the licensing records it operates. The server owner is responsible for the operating system, access control, network rules, hosted content, third-party software, backups, monitoring, recovery, and applying available updates. No uptime or guaranteed response level is promised here.

Responsible business

HudsonPanel is operated by HudsonHost LLC, an Arizona limited liability company.

Effective September 4, 2026.