As of this morning, every server that hosts our customers’ websites runs CloudLinux. On its own, that brings us level with a lot of other hosts. What it makes possible is the real news: every plan, Starter and up, now comes with a WordPress staging site where your own AI agent can build pages, and we supply the Novamira Pro licence that lets it. There is nothing to buy and no extra charge.
This post covers both halves. First, briefly and honestly, what the move to CloudLinux is. Then what it lets us offer, which is the part we are excited about.
The move, in one paragraph and a caveat
CloudLinux is an operating system built for hosting many accounts on one server. It does two things that matter here. CageFS gives each hosting account its own walled-off view of the server: from inside your account you see your own site and nothing else, with no other customer’s files, databases or user names in sight. LVE gives each account its own share of processor, memory and processes, so one very busy site cannot take the whole machine.
The caveat: none of that is new to the industry. Per-account isolation, SSH and SFTP access for customers, and per-account resource limits have been standard at many hosts for years. We did not offer shell access before, and the reason is simple. The isolation we had until now covered the web server’s PHP processes and nothing else. A customer logging in over SSH would have seen the whole server, so we did not hand out logins. CloudLinux applies its walls to every process an account runs, including an SSH session, and that closed the gap.
We converted one server at a time over the last week, each in an early-morning window we announced to the customers on each server ahead of time. We rehearsed the whole procedure on a disposable server first, started with the server carrying the least traffic, took a fresh backup of each server’s whole disk shortly before its window, and checked every one against the same list before moving on to the next. The last server carrying customer sites converted this morning.
If you host with us, there is nothing you need to do.
SSH and SFTP, on request
The first thing the move unlocks is the one developers have asked for longest. If you or your developer work from the command line, we can now give your site SSH and SFTP access:
-
As your site's own user.
Files you upload have the same owner and permissions your website uses.
-
Inside your own walled-off space.
Your session sees your site and nothing else on the server.
-
With the tools developers expect.
WP-CLI, git and PHP on the command line, and any SFTP client with the same key.
-
By key only.
There are no passwords to guess. We keep login keys in a separate store your website cannot write to, so a compromised plugin cannot give itself a login.
Open a support ticket with your public key and we switch it on. The details, including how to create a key on a Mac or on Windows, are in the knowledgebase: SSH and SFTP access on WebOps Hosting.
That is parity. Here is the part that is new.
A staging site your AI agent can build on
AI agents such as Claude Code, Claude Desktop and Cursor can now build WordPress pages directly, through a standard connection called MCP. What they need on the WordPress side is a plugin that gives them working knowledge of your page builder. Novamira Pro is that plugin: it teaches an agent the page builders, blocks, forms and field plugins a site runs on, so it can add sections, write content and fill in fields the way a person would in the editor.
Here is what every WebOps plan now includes, under the name Governed AI Builder:
-
A staging copy of your site
where the agent works, kept apart from the live site.
-
Novamira Pro installed on that copy under our agency licence.
The licence is ours. You do not buy one, and it does not appear on your invoice.
-
Nightly backups of both copies,
staging and live.
-
Plugin updates and the staging copy's upkeep,
handled by us.
-
A Promote button
that puts your work live when you are ready (more on that below).
You bring the agent and your own AI subscription. Any agent that speaks MCP connects, so it works with the one you already use, with no hub or extra app required.
We are supplying the licence on purpose. Anyone can buy a builder plugin and install it wherever they like. We would sooner provide it ourselves, set up properly on a copy, backed up, with a safe route to production, and explain why each of those matters. Handing it to you already done is the simplest way to make that the normal case.
Why the included copy is governed
The staging copy lives in your own hosting account, right next to the live site. An AI agent can do anything the plugin lets it do, and it moves faster than anyone can watch. On a copy that shares an account with the live site, anything the agent could do to the copy, it could do to the live site too.
So on the included copy, we hold Novamira to a checked list.
-
Your agent can
build and edit pages and posts, and fill in custom fields, in the tools we license: ACF, JetEngine, and Elementor with Ultimate Addons and JetElements. It reads your Gravity Forms and code snippets so it can build around them. That is the launch list, and it grows.
-
Your agent cannot
run PHP, use WP-CLI, write files, add code snippets, create admin access links, use the atomic widget (it writes PHP) or upload media. Images go in through wp-admin.
We re-check that list after every plugin update, because a plugin update can add abilities. The practical result: your agent builds pages and content, and it cannot run code or touch files.
Promote is the only way to live
You build on the copy, look at it in the editor and in a browser, and click Promote in your dashboard when you are happy. The platform then:
-
Snapshots the live site.
-
Runs its checks:
nothing on the live site is newer than your copy, licences are in order, monitoring is in place, and Novamira is off the live site and locked out.
-
Copies the staging build over.
-
Emails you the report.
A failed check moves nothing. If you change your mind after a promotion, one click restores the snapshot taken just before it. Nobody has to book a time with us to make a change go live.
The live site is watched as well. The platform checks every live site for AI builder plugins and flags any it finds, and every promotion removes Novamira from the live site and confirms it is locked out. Novamira never runs on production, by design.
Where CloudLinux comes back in: the AI Builder Workspace
Some agents need everything switched on: running PHP, WP-CLI, writing files. That is reasonable for a developer building something custom, and it is exactly what the checked list holds back on a copy that shares an account with your live site.
It costs what an extra website costs, because that is what it is. And it is the clearest example of why the move matters to you: the wall that makes an ungoverned copy safe to run is the same CageFS wall that went onto the servers hosting your sites this month.
What support covers
We want the boundary to be plain before you start.
-
Covered:
the platform. That means the staging copy, backups, promotion, updates, the checked list and the live-site watch. If the agent makes a mess of staging, we restore it from the last nightly backup on request, and the live site is untouched.
-
Yours:
what your agent writes. Pages built to order are quoted work at our usual rates.
-
Yours as well:
the agent itself. Claude, Cursor and the rest are your subscriptions and your prompts.
Is this for you?
Three quick questions.
Do you already use an AI agent for other work?
If you use Claude Code, Claude Desktop, Cursor or another MCP-capable agent, you can point it at a staging copy of your WordPress site and have it build pages while you review the result before anything goes live.
Have you avoided AI builder plugins because of the risk to your live site?
That is the risk the included copy is designed around. The agent works on a copy held to a checked list, and Promote is the only way its work reaches production.
Does your developer need the command line, or an agent with everything switched on?
SSH and SFTP are available on request, and the AI Builder Workspace gives an agent full abilities in an account of its own for $20 a month.
What to do next
If you host with us, the Governed AI Builder is set up on request once your site is live on its plan. Open a support ticket and ask for it. For SSH and SFTP, send your public key in the same way. The full details, prices and FAQ are on the add-ons page.
If you are thinking of moving to us, the plans page has every tier. The Governed AI Builder comes with all of them, Starter and up, and migrations in are free. Any questions, send us a note.
Ask for the Governed AI Builder
