Best WHMCS Addons, Modules and Developers: A Buyer's Guide
No single WHMCS addon is best. This buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.
Guides from client work
Step-by-step guides written from my own client work and checked against the official documentation. Each one says when it was last reviewed, and what I sell when it matters.
Editor's pick
No single WHMCS addon is best. This buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.
Latest articles
12 min
A working guide to running an AI agent across WordPress sites: updates that snapshot and roll back, PHP errors grouped by plugin and line, WooCommerce checks worth automating, and the actions that stay with a person.
11 min
Training ChatGPT on your own data is rarely training. I compare the options a business actually has, with the limits, privacy settings and running costs I read on the vendors' own pages today.
12 min
A working guide to running an AI agent against WHMCS: the daily checks worth automating, read-only access, fix policies with approval timers, the billing actions that must stay with a person, and how ticket drafts fit.
12 min
WHMCS email templates checked against the WHMCS 9.1 documentation: where each setting lives, the editor and its merge fields, global header, footer and CSS branding, localization, safe testing and restoring the defaults.
11 min
The WHMCS backup routine checked against the WHMCS 9.1 docs: the three built-in database backup options, the files they never touch, why configuration.php decides what you can restore, and a staging restore test.
11 min
Pterodactyl, Pelican, AMP and TCAdmin side by side: how each panel is built, what a license costs, which games it ships configs for, which WHMCS module exists, and how recently each project shipped code.
11 min
A starting plan for AI freelance work: which AI services clients post, the skills each one needs, the project that proves it, where the first jobs come from and how long the first paid work takes.
11 min
One AI tool per job, priced from each vendor's own page: writing, coding, design, video, meetings and admin. What the free tiers run out of, and which plans keep client files out of model training.
12 min
A worked setup for the official Pterodactyl WHMCS module: which API key it needs, how to add the panel as a server, which product fields map to the panel, and the billing cycle to test before you sell.
11 min
Why an AI-built app that worked at launch starts breaking months later: what code-quality research measured, which updates break it, where it slows under load, and what a developer backing the product does each month.
12 min
A research-led answer: the Upwork study that measured what ChatGPT and image models did to freelance writing and design work, what grew on Upwork and Fiverr at the same time, and what the BLS job outlook adds.
12 min
The AI features already inside Premiere Pro and After Effects, what Descript, Runway and extra Adobe credits cost, how to price AI-assisted editing, and the disclosure and copyright rules that apply.
Every guide on the site, grouped by what you are trying to do. Each one is checked against the official documentation and shows the date it was last reviewed.
What a website costs, who should build it, and how to redesign one without losing the search traffic it already has.
What a web designer charges: my own rate, three public pages with sources, what drives the price of a business website, its running costs and quote red flags.
Hiring a web design agency or a freelancer, compared in one table: when an agency is the better choice, when a freelancer is, a third option, and what to check before you pay either one.
The difference between a web designer and a web developer for business owners: what each delivers, which one a brochure site, store, booking site or web app needs, and where handoffs go wrong.
How a website redesign works: when a smaller fix is enough, each step from audit to Search Console monitoring, an old-URL table checked against Google's documentation, what drives cost, and common mistakes.
A step-by-step Laravel 13 upgrade: how many major versions to hop, the PHP 8.3 minimum, the breaking changes that actually bite, Laravel Boost and Shift compared, and what Filament needs.
Agent site, agency site, listing portal or one ad landing page: what each costs to build, what an MLS or IDX feed adds every month, and the bill after launch, with every figure linked.
The build, the platform bill and the card fees on every order: Shopify, WooCommerce and custom Laravel compared, with Stripe, PayPal and Square rates for the US, Canada and Australia, each one linked and dated.
Service: Web designer and developer
Plain guides for owners and admins: what WHMCS is, what it costs, how to configure it yourself, and how to update, move and troubleshoot it.
A plain explanation of WHMCS for founders: what it automates, a WHMCS vs cPanel and WHM comparison table, who needs it and who does not, its limits, and how the monthly license works.
What a WHMCS license costs per month, read from whmcs.com: every self-hosted and fully managed plan, the client limits, the reseller wholesale rates, and the bills that come after the license.
Seven WHMCS alternatives with prices read on each vendor's site, the best fit by situation, which ones import WHMCS data, and what never moves cleanly.
The WHMCS PHP, ionCube Loader and MySQL versions for 9.1, 9.0 and 8.13, read on the official docs, plus the System Health checks and what to confirm before an upgrade or a server move.
A do-it-yourself WHMCS setup in the order of work, checked against the WHMCS 9.0 documentation: install, the ten security steps, cron, the wizard, settings, products, automation, backups and test orders.
The WHMCS cron setup checked against the WHMCS 9.1 documentation: the command to copy, how often to run it, the Time of Day setting, cron.php options, status badges and debugging.
A WHMCS multi currency setup step by step from the 9.0 docs: default currency, Base Conv. Rate, ECB rate updates, prices per currency, changing a client's currency, gateways, tax and rounding.
How WHMCS configurable options work according to the current docs: groups, option types, pricing, what a provisioning module receives, the difference from custom fields, upgrades and the country and city question.
Domain registrar setup in WHMCS, checked against the official documentation: activating a module, TLD pricing and terms, the lookup provider, domain sync, registration on payment, transfers, premium domains and errors.
The WHMCS invoice template checked against the official docs: viewinvoice.tpl and invoicepdf.tpl, the logo, Pay To Text, child themes, numbering, proforma invoices, tax IDs, custom fields and testing.
How the built-in WHMCS affiliate program works: the settings to enable, percentage and fixed commissions, per-product and per-affiliate overrides, payout delays, referral cookies, fraud controls and its limits.
How to update WHMCS with the built-in Automatic Updater: where it is, which update channel to pick, what to check and back up first, PHP and ionCube requirements, and what to do when an update fails.
The order I use to move WHMCS to a new server with a maintenance window of minutes: what to copy, what to edit in configuration.php, when to reissue the license and what to check after DNS switches.
A seven-step WHMCS troubleshooting flowchart: System Health, cron status, the right log, the Module Queue and error reporting, plus a symptom table that says where to look and what usually causes it.
WHMCS has no built-in Redis cache, and WHMCS tells you to disable OPcache. What its documentation recommends for a slow install: MySQL settings, logging, cron timing and two configuration switches.
No single WHMCS addon is best. This buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.
A vendor-neutral map of WHMCS AI: what WHMCS itself ships, then AI chat, ticket drafts, content, domain suggestions and API agents compared on the same criteria, with the permissions that keep them safe.
When WHMCS is the right billing system and when a custom one pays off: current license prices, price history from archived pages, my build and upkeep estimates, and a five-year cost example.
What a WHMCS MCP server does, the Marketplace modules, open-source packages and hosted service that exist today, which WHMCS API actions to expose first, and a safety model built on API roles, approvals and audit logs.
How to set up tax in WHMCS 9.1 for UK VAT, EU VAT, Australian GST and US state sales tax: tax rules, inclusive or exclusive prices, VAT number checks, paid invoice numbering and launch checks.
How to add a WHMCS dark mode: what Twenty-One, Nexus and the order forms offer today, a child theme with CSS variables, a toggle that remembers the choice, contrast checks and when a ready-made dark theme fits.
What a WHMCS 9 upgrade actually changes on a self-hosted install: Smarty 4 and the removed tags, PHP 8.2 and ionCube 15.0.0, gateways and modules that stop working, what to test afterwards, and how to roll back.
E-invoicing rules for hosting companies read from government pages: Belgium, France, Poland, the UK and ViDA, what WHMCS does natively today, the hooks to use, and the data a Peppol invoice needs.
The WHMCS backup routine checked against the WHMCS 9.1 docs: the three built-in database backup options, the files they never touch, why configuration.php decides what you can restore, and a staging restore test.
WHMCS email templates checked against the WHMCS 9.1 documentation: where each setting lives, the editor and its merge fields, global header, footer and CSS branding, localization, safe testing and restoring the defaults.
A working guide to running an AI agent against WHMCS: the daily checks worth automating, read-only access, fix policies with approval timers, the billing actions that must stay with a person, and how ticket drafts fit.
Service: WHMCS development
For developers and technical owners: module types, hooks, the API, provisioning, themes and connecting WHMCS to other systems.
Does WHMCS bill by the hour? What usage billing, billable items and credit can and cannot do, five ways to bill VPS hourly, how a custom module charges and suspends, what breaks, and a test checklist.
What each WHMCS module type does, where its files go, which functions WHMCS calls, when a hook is enough and what WHMCS 9.0 changed, checked against the developer docs.
A checked guide to building a WHMCS provisioning module: where the files go, the naming rule, eleven functions and when WHMCS calls them, the $params array, a minimal _CreateAccount, logging, testing and limits.
A checked guide to WHMCS hooks: the includes/hooks folder, add_hook and priorities, nine common hook points, examples for InvoicePaid, ClientAreaHeadOutput and DailyCronJob, and when a hook is the wrong tool.
A checked guide to the WHMCS API: API roles and credentials, the IP allow-list and access key, a first call to includes/api.php, nine common actions, localAPI, paging, debugging and the risks.
How a WHMCS theme and an order form template are laid out, how theme.yaml and child themes work, which files and variables matter, what survives an update and how to test before going live.
How to connect WHMCS to a cPanel & WHM server: the API token and the privileges it needs, package mapping, server groups, usage sync, single sign-on, Sync Accounts and the errors you will see.
What a WHMCS Proxmox integration has to do, which modules the WHMCS Marketplace lists, how a custom module calls the Proxmox VE API with a scoped token, and what to check before you choose.
How WHMCS VPS provisioning works: the module functions behind create, suspend, terminate and upgrade, the Virtualizor and SolusVM modules, configurable options for resources and templates, and a lifecycle test.
Google Tag Manager and GA4 in WHMCS without template edits: the output hooks, a purchase event built from the order, consent mode, keeping staff and personal data out, and testing with Tag Assistant.
Every way to get live chat into WHMCS compared on the same criteria, then the upgrade-safe hook setup: passing the signed-in client with a server-side signature and turning finished chats into tickets.
What the free WHMCS live chat modules and plans really include, their limits on seats, history and branding, how to add any free widget with a hook, and when free stops being the cheaper choice.
How to bill a SaaS or software product with WHMCS: plans and cycles, provisioning through a custom module or the Software Licensing addon, upgrades, usage charges, cancellations, dunning and when to use something else.
Where AI coding assistants help and fail on WHMCS module work, how to give them the official developer docs, what never to paste into a prompt, the review and test routine, and what still needs a developer.
A setup guide for billing an XUI One, NXT or Xtream UI panel from WHMCS: prerequisites, choosing the module, locking down panel access, adding the server, building products and testing every billing event.
Service: WHMCS custom module development
Setting up and testing the gateways hosting companies use most, and what to check when a payment does not arrive.
How to connect Stripe to WHMCS with the official modules: the four gateways, publishable and restricted keys, the webhooks WHMCS registers itself, Apple Pay, renewals, test cards and common errors.
Which PayPal module to use in WHMCS, what WHMCS 9.1 did to PayPal Basic and PayPal Checkout, what happens to existing subscriptions, plus webhooks, refunds, sandbox testing and the documented errors.
WHMCS ships no Razorpay module, so this covers Razorpay's own open-source plugin: which version to install, keys, the order.paid webhook, currencies, testing, refunds, renewals and common errors.
Service: WHMCS payment gateway integration
Where AI chatbots and agents help a support team, how to choose a stack for a first SaaS product, and how AI coding agents such as Claude Code change build times.
A step-by-step plan to start an AI business: choose a model that fits your skills, prove people will pay, set up the company, accounts and AI rules, price above model cost, and win your first clients.
Build hours by cost driver, monthly token bills worked out with Anthropic and OpenAI prices, the costs people forget, a quote checklist and when not to build.
A practical build guide for WooCommerce, Shopify, WHMCS and custom sites: where the assistant's knowledge comes from, how it calls your API, how payment hand-off works, and how to test, measure and cap costs.
A chatbot answers from your content and an agent calls tools that change things. How tool calls work per the provider docs, the workflow option between them, how each is billed, and a decision table.
The requirements any WHMCS AI chatbot should meet, checked against the WHMCS developer docs: identity from the session, which fields to drop, API role limits, safe actions, hand-off, and ten tests to run before launch.
A founder's guide to a SaaS MVP tech stack: Laravel with Filament, Next.js with NestJS or no-code first, where to host, which billing provider fits, how to separate tenants and what to leave out of version one.
A dated, hands-on comparison of Claude Code and Codex for founders and teams: surfaces, CLAUDE.md and AGENTS.md, extensions, parallel tasks, sign-in and billing, GitHub review, and which to pick for your situation.
How I run Claude Code, with Codex as a second agent, on paid client projects: the spec, the rules files, plan mode, worktrees, hooks, reviews, MCP limits, staging and the handover your team keeps.
A phase-by-phase answer: what decides a custom CRM timeline, typical scopes and what makes them longer, a day-by-day plan for a 7-day build, and what you as the buyer can do to make it faster.
The difference between AI-assisted development and vibe coding is not the model. It is whether anyone reads, tests and owns the code. Definitions, verified risks, a review checklist and a rescue plan.
Most site owners choose between a hosted AI chatbot tool on a monthly plan and a custom bot trained on their own content. I compare four real tools' plans and limits, the costs of each route, and how to judge answers.
Google says there are no extra requirements to appear in AI Mode or AI Overviews. What its documentation actually says, which vendor tactics are myths, the technical checklist that follows, and how to measure results.
A founder's guide to fixing an app built with Lovable, Bolt, v0, Replit, Cursor or Claude Code: the triage order, a one-day code assessment, repair vs refactor vs rebuild criteria and what to hand a developer.
What OpenAI, Perplexity, Microsoft and Anthropic say a site needs to be found and cited by their AI search, which popular tactics are myths, a technical checklist and how to measure AI referral traffic.
A dated comparison of the vibe coding tools people use: browser app builders versus coding agents, entry plan prices from each vendor's own page, what you can export, and when to bring in a developer.
A RAG chatbot looks up your own documents before it answers. I explain each step in plain words, when fine-tuning or a long prompt fits better, why RAG answers go wrong, and what to ask about data and cost.
A checklist for an AI-ready website: crawler access, the newer Search Console and Cloudflare AI settings, pages AI can read, forms agents can use, and how to measure it.
The three bills behind a WhatsApp AI chatbot: the build, Meta's per-message fees with US, UK and EU rates, and AI model usage, worked through for one month.
Seven business ideas for Kashmir, checked against official J&K figures: GI saffron, crafts with QR labels, direct-booking stays, honey, digital services and more, with the risk and first step for each.
A step-by-step guide to starting an online business in Kashmir: J&K registrations, when GST applies, opening a payment gateway, GI labels, where to sell and which schemes still fund you.
Google does not penalize content just because AI wrote it, but it does act against scaled, low-value pages. What Google's own pages say, where the line sits, and a checklist for using AI safely.
A plain-English guide to the Model Context Protocol: host, client and server, tools versus resources, which AI apps accept MCP servers, when you need one, what drives cost and the security risks.
The eight steps I follow to build a business AI agent: one job with a finish line, a tool inventory, workflow or agent, model and SDK choice, read-only tools and approvals, a real test set, and a supervised launch.
Eight small-business tasks ranked by payoff and risk, with whether each needs AI or plain rules, where a human must approve, which data never goes to a model, and how vendors treat your data.
Five honest ways to make money with AI, from doing paid work faster to selling AI services and building a small tool: what each route needs, what it costs to start, how clients pay, and how to spot AI income scams.
How I choose between Flutter and React Native for a business app: what each one draws on screen, which platforms are first-party, how fast a fix reaches users, and how often each forces an upgrade.
How developers, video editors, designers, writers, marketers and virtual assistants use AI in client work: what it speeds up, what stays human, pricing, Fiverr and Upwork rules, data and copyright.
A legal IPTV business starts with distribution rights. US and EU enforcement, four legal models from church OTT to hotel IPTV, the tech stack, real cost drivers and billing with WHMCS.
The AI features already inside Premiere Pro and After Effects, what Descript, Runway and extra Adobe credits cost, how to price AI-assisted editing, and the disclosure and copyright rules that apply.
A research-led answer: the Upwork study that measured what ChatGPT and image models did to freelance writing and design work, what grew on Upwork and Fiverr at the same time, and what the BLS job outlook adds.
Why an AI-built app that worked at launch starts breaking months later: what code-quality research measured, which updates break it, where it slows under load, and what a developer backing the product does each month.
One AI tool per job, priced from each vendor's own page: writing, coding, design, video, meetings and admin. What the free tiers run out of, and which plans keep client files out of model training.
A starting plan for AI freelance work: which AI services clients post, the skills each one needs, the project that proves it, where the first jobs come from and how long the first paid work takes.
A working guide to running an AI agent across WordPress sites: updates that snapshot and roll back, PHP errors grouped by plugin and line, WooCommerce checks worth automating, and the actions that stay with a person.
Training ChatGPT on your own data is rarely training. I compare the options a business actually has, with the limits, privacy settings and running costs I read on the vendors' own pages today.
Service: AI chatbot development
Starting a hosting business, mail that lands in the inbox, and keeping cPanel and WHMCS servers out of trouble.
A hosting CTO's plan in order: choose reseller, VPS or dedicated, budget the WHMCS and cPanel licenses, cover legal and abuse basics, automate WHMCS, then win your first customers.
How a hosting company should run live chat: which questions belong in chat, a ticket or the status page, how to staff the hours, what agents need from WHMCS, where AI stops, and which numbers to watch.
How to run reseller hosting on WHMCS with cPanel and WHM reseller accounts: the privileges to ask for, the API token, prefixed packages, product types, provisioning errors, branding, per-account billing and limits.
An advisory for CVE-2026-41940, the critical cPanel and WHM authentication bypass exploited before cPanel released its patch: fixed builds, update steps, mitigations, compromise checks and recovery.
A hardening checklist for a self-hosted WHMCS server, checked against the WHMCS, cPanel and firewalld documentation: ports, the cPanel CSF fork, admin lockdown, forcing SSL, permissions and database privileges.
A public .git folder lets anyone rebuild your WHMCS code and any configuration.php ever committed. How to test for it, block it in Apache, LiteSpeed or Nginx, and rotate what leaked.
Which WHMCS settings help with GDPR, from the current WHMCS docs: automatic deletion of inactive clients, marketing opt-in, terms acceptance, JSON export, client deletion, and the gaps you cover yourself.
How I diagnose cPanel mail that lands in spam, checked against cPanel's docs and the Gmail and Yahoo sender requirements: headers, reverse DNS, SPF, DKIM, DMARC, blocklists and the Exim queue.
CloudLinux's knowledge base ties the Reboot your system to update the kernel message to an LVE module that is not loaded. The checks to run, what KernelCare changes, and a safe reboot routine for cPanel.
A buyer's guide, not a sales page: match your site type to shared, managed WordPress, business or cloud hosting, then check location, backups, support and the renewal price before you pay.
A step-by-step tutorial on PHP2Shell: how CVE-2026-109618 and CVE-2026-109619 work inside a PHP worker, the fixed releases, and how to patch and verify PHP on cPanel, Plesk, CloudLinux and Docker.
The security failures that show up in AI-generated apps, each mapped to the OWASP Top 10:2025 and the OWASP Top 10 for LLM Applications, with a pre-launch checklist, free tests and safer ways to keep using AI tools.
How to update PHP on AlmaLinux, Rocky, Ubuntu, Debian, cPanel, Plesk, DirectAdmin, CloudLinux and Docker, checked against each vendor's docs, plus a server hardening checklist with one reason per item.
How to set up DMARC under the new RFC 9989: inventory senders, align SPF and DKIM, publish p=none with reports, read them, then move to quarantine and reject. Includes Google Workspace, Microsoft 365 and cPanel notes.
ZDI-CAN-33367, the skb_zerocopy Linux kernel zero-day, for hosting teams: who is exposed, the one-line check, the mitigation and what it breaks, and the fixed kernels and livepatches to install.
What to check before you buy a web hosting business: how to rebuild the revenue from WHMCS reports, which licenses legally transfer, what the license stack costs, and how to price the migration.
What a penetration test costs and why: my fixed prices for website, API and server tests, public list prices, the scope drivers, PCI DSS and SOC 2 needs, and how to compare quotes.
The order I use to answer who hosts this website: the RDAP registration record, the nameservers, the owner of the IP address, the response headers and the TLS certificate. What a CDN hides, and how to confirm it.
How a hosting CTO would start a VPS company: where the servers come from, panel license costs from vendor pages, IPv4 through ARIN or RIPE, WHMCS provisioning, abuse handling, DDoS, backups and first customers.
A hosting CTO's order for starting a game server company: clear each game's hosting terms, place and size nodes, filter UDP attacks, pick a panel, wire up WHMCS billing, then price plans and launch.
A worked setup for the official Pterodactyl WHMCS module: which API key it needs, how to add the panel as a server, which product fields map to the panel, and the billing cycle to test before you sell.
Pterodactyl, Pelican, AMP and TCAdmin side by side: how each panel is built, what a license costs, which games it ships configs for, which WHMCS module exists, and how recently each project shipped code.
Service: Web hosting expert
What WHMCS and module work costs, how to vet a developer, and when a freelancer, an agency or a ready-made module fits.
What a WHMCS developer costs per hour: my own rate, three public listings with their sources, six things that change the price and a quote checklist.
What a custom WHMCS module costs: hours times rate, five ready-made module prices and twenty fixed-price offers, what each module type involves, and what cheap quotes leave out.
Four ways to get WHMCS work done, compared in one table: a freelance developer, an agency, a vendor module and an in-house hire, with honest notes on when a freelancer is the wrong choice.
A vetting checklist for hiring a WHMCS developer on Fiverr or Upwork: what Top Rated and Job Success Score measure, seven checks before you pay, and how each platform handles milestones, review windows and ownership.
How hourly billing, fixed-price projects and a monthly developer retainer work, who carries the risk in each, which kind of work suits which, and what to write into a retainer agreement.
A hirer's guide to vetting a Claude Code developer: what the work is, the skills and controls to test, interview questions, a small paid test task, red flags, and how to think about the rate.
An independent developer compares hiring an AI chatbot development company with a freelancer: Clutch rates and minimums read today, continuity, contracts, who owns the accounts and data, and a decision flow.
A hiring guide to the AI chatbot developer role: the work, how it differs from prompt engineers and agent developers, skills to check, interview questions, a paid test task, red flags and rates.
Fiverr and Upwork compared for developers from their own help pages: freelancer and client fees, what you keep from a $100 job, when money clears, levels and badges, and a decision flow for where to start.
How to write a winning Upwork proposal as a developer: the five-part structure, what to cut, screening questions, fixed or hourly bids, when to spend Connects, a before-and-after rewrite and three examples.
The real Fiverr Top Rated seller requirements, from Fiverr's help center: the six metrics, the manual review, priority review categories, how status lasts, and how it compares with Upwork's badges.
The Upwork Top Rated requirements, taken from Upwork's help center: the eight criteria, the Rising Talent shortcut, how the Job Success Score is calculated daily, and what makes a badge disappear.
A working method for your first freelance client as a developer: the five routes first clients come from, the proof buyers check, how to size and price the first job, what to put in writing, and when to walk away.
Build hours by work area for a first SaaS release, the seven decisions that move a quote, monthly running costs from vendor pricing pages, and how to compare the bids you get back.
What a mobile app costs to build, publish and keep running: my fixed package prices and hourly rate, Apple and Google fees and commissions, and the figures to re-check every year.
What website maintenance covers, the vendor bills that keep coming (domain, hosting, SSL, plugin licenses) with vendor prices, what the labor costs, and what to put in a maintenance agreement.
Service: Hire a WHMCS developer
Want it built for you?
The guides cover what you can do yourself. For custom modules, integrations, websites, apps and AI chatbots, send a short brief and get a written quote within one business day.