Roadmap

Where Reqad is headed

Reqad is in active early-access development. Here's the build plan step by step, what's working today, and what we're exploring. Plans evolve - this isn't a fixed commitment.

Ready for the next release In progress Next Planned

Secure web login

core ready for the next release

Login page for the admin panel, with brute-force protection and automatic firewall bans
Two-factor authentication with recovery codes, and passkeys
Confirmation before sensitive changes, remembered devices, email codes for new devices and login alerts
Firewall allowlist for the panel port, with automatic rollback if you lock yourself out
Brute-force protection for webmail logins

Account isolation

core ready for the next release

Hardened kernel settings and tighter file permissions between sites
Accounts see only their own processes
CPU, memory and process limits for SSH, cron and the browser terminal
Shell access per account: full, jailed (own home only) or SFTP only
MySQL connection limit per account

Foundations

core in progress

Per-account scope, limits and events - the base for hosting packages and the account panel
Groundwork for more web server stacks
"Needs attention" on the dashboard: certificates, SPF/DKIM/DMARC, PHP versions, WordPress updates, disk, services and backups
REST API with scoped access tokens (off by default)

Deployments

core planned

Git deployments from GitHub, GitLab or Gitea, by webhook or git push, with build steps, atomic releases and one-click rollback
Node.js and Python apps, run as the account's own user and served through nginx with SSL and websockets

AI integration via MCP

core planned

Manage your server from your own AI assistant (Claude, Cursor and other MCP clients) over SSH or HTTPS, with scoped, expiring tokens and an audit log. Off by default.

Reqad Hosting Pro

premium planned

Hosting packages and limits: disk and mailbox quotas, bandwidth, databases, domains, resource limits and account suspension
Scheduled malware scanning per account
Import accounts from a backup archive, with no SSH access to the old server needed
nginx in front of Apache with php-fpm: full .htaccess support, static files served by nginx

Account panel on port 2083

premium planned

A separate control panel for each hosting account: a familiar card layout, issues that need attention up front with one-click fixes, and WP Toolkit.

Account-level MCP

premium planned

MCP access for hosting customers, scoped to their own account.

Updated 11 October 2026

Available now

Hosting accounts, one isolated system account per domain
Email - exim, dovecot, Roundcube, SpamAssassin; forwarders & autoresponders
DNS via Cloudflare, cPanel or PowerDNS
Let's Encrypt SSL for the panel and hosted domains
MariaDB databases + phpMyAdmin
Multiple PHP versions per account (OPcache, APCu)
WordPress one-click install, with Wordfence
Backups, cron, SSH keys, browser terminal, service control
cPanel transfer / import wizard

Also planned

Magento 2 one-click install
Built-in CLI tools: wp-cli, wordfence-cli and magerun-cli
Onboarding wizard - connect external DNS & backup servers, install extra PHP versions
Automated security patching: patch just the vulnerable code, or update via the package manager
Member accounts & subscriptions (premium)
Centralized hub to manage multiple Reqad servers from one place premium
Integration with external authentication - SSO, LDAP or OAuth premium

Exploring

Debian and NixOS support (in addition to Rocky / Alma / RHEL 8 & 9)
Translations / multi-language interface
Independent external code audit before the first production release
Billing-system integrations and multi-instance management (premium)
Optional AI assistant in the panel, using your own API key

Want a say in what's next?

Create a free account - testers help shape the roadmap, and premium subscribers can request features that fit the project's direction.