Skip to content
Shahid Malla

Hosting expert

Web Hosting Expert and Hosting Infrastructure Consultant

I am a web hosting expert and hosting infrastructure consultant for owners, resellers, agencies and SaaS teams who run or are starting a hosting business. I review, build, rescue or advise on Linux servers, cPanel and WHM, WHMCS billing, mail delivery and backups, and you receive the decisions and the reasons in writing.

Discuss my hosting setup Book a 15-minute call

By Shahid Malla, WHMCS developer and hosting infrastructure engineer · Updated

What does a web hosting expert decide for a hosting business?

A web hosting expert makes the infrastructure decisions underneath your brand: the hosting model, how billing, panel and DNS connect, how mail reaches inboxes, and what happens the day something fails. The table gives the options and what I check before recommending one.

DecisionThe optionsWhat I check before recommending
Hosting modelReseller plan, VPS or dedicated server. Plain shared hosting suits your own site, not selling accounts.Expected account count, how much server work you can carry, and how the upstream provider handles support and abuse. See starting a hosting business.
Control panelcPanel and WHM, another panel, or none.Whether customers need self-service, supported operating systems, a license bound to the server IP, and a maintained billing module. See cPanel and WHM setup.
Billing and provisioningWHMCS linked to the panel, another billing tool, or hand-made accounts.Matching package names on both sides, a working cron job, gateways for your countries and suspension rules for unpaid invoices. See my WHMCS work.
DNS and mailYour own nameservers or external DNS; mail on the server or a separate service.PTR record matching the hostname, SPF, DKIM and DMARC records, and the IP's blocklist history.
BackupsProvider snapshots, panel backups, an encrypted off-site copy.Where each copy lives, whether the server can delete it, and a timed restore onto a scratch server. See migration and backup.
Abuse and spamHourly mail limits, outbound alerts, a written suspension process.Exim queue size, whether anyone reads the abuse mailbox, and whether your acceptable use policy is enforceable.
SecurityFirewall, SSH keys, patch schedule, per-account PHP isolation.Ports visible from outside, whether WHM port 2087 is open to everyone, and how updates run. See server hardening.
MonitoringA hosted uptime check, a self-hosted stack, or both.Alerts leave by a channel that survives a server failure and reach a named person. See monitoring and performance.
Capacity and costOne larger server or several smaller ones; when to add another.CPU, memory, disk and inode use per account, and the cost of one account in license share, support time and gateway fees. See server setup.

What are the ways to hire a hosting infrastructure consultant?

You can hire me in four ways: an infrastructure review, a new build, a rescue or ongoing advice. A review is a sensible first step, because it turns a vague worry into a ranked list.

WayIt fits whenWhat you receive
Infrastructure reviewNobody has audited the servers, or you are buying or inheriting a setup.A written report: what exists, what is wrong ranked by effect, what to fix first and what I could not check. I change nothing.
New buildYou are launching a hosting company or adding a server.A working setup on your chosen stack, built in staging, tested with orders, mail and a restore.
RescueMail is blocklisted, servers are full or slow, a move went wrong or an intruder got in.Containment, then the cause, then repairs in small steps with a rollback note each. If root was reached, I advise a rebuild.
Ongoing adviceThe setup works and you want a second opinion on changes, capacity and incidents.Recurring tasks listed in writing, quoted per scope or billed hourly. Alerts go to people you name.

Why does mail from a hosting server go to spam?

Mail goes to spam when receiving servers cannot confirm who sent it, so I check reverse DNS, SPF, DKIM and DMARC first. Three commands show most of it.

dig +short -x 203.0.113.10
dig +short TXT example.com
dig +short TXT _dmarc.example.com

The first should return the server's hostname, matching the name it announces to other mail servers. The second should show one SPF record listing your real senders. The third shows the DMARC policy. A policy of none only reports, so move to quarantine once the reports show your legitimate senders passing. DKIM sits at selector._domainkey.example.com.

Reputation is shared. One hijacked mailbox can blocklist the IP and hurt every customer on it. So I read the queue with exim -bp | exiqsumm, which groups waiting mail by domain, check the hourly send limit in WHM Tweak Settings and ask who reads the abuse mailbox.

Which hosting platforms are my core, and which are not?

My core is Linux servers, cPanel and WHM, and WHMCS. Other panels and Windows hosting are not my core work, and I will tell you so before you commit.

If you run Plesk, DirectAdmin or Windows servers with IIS, ASP.NET or MSSQL, I will say so on the scoping call. I may still help with parts that do not depend on the panel, such as DNS, mail records, backup design and billing, and I will say where that stops. I make no claim to every web server, caching layer or security product sold to hosts. Ask about one by name and I will answer from what I have run. On a cPanel server my review includes WHM Tweak Settings, which cPanel stores in /var/cpanel/cpanel.config.

Do I have a stake in the providers and products I mention?

Yes. I hold roles at several companies in this market, so weigh my recommendations with that in mind.

  • I am CTO at ElySpace, a hosting company.
  • I am Technical Lead at Fada.cloud.
  • I am a backend developer for Nuco Cloud.
  • I founded WHMCSPilot.com, which sells premium WHMCS modules and themes.

I also earn my living from WHMCS and cPanel work, so I am not neutral on billing software or panels either. I do not sell hosting through this site, and this page recommends no provider. When a report of mine names a provider or product I have a stake in, it says so next to the name.

What should I ask a hosting consultant before hiring one?

Ask for evidence of work done and for limits stated, not for a list of tools. Put these questions to me too.

  • Which panels and operating systems have you run in production? A straight answer names a few and admits the rest.
  • Can I see a restore procedure you wrote? It should say how long the restore took. "Backups enabled" proves nothing.
  • Do you or your employer sell what you recommend? You are owed the answer before the advice.
  • What will you not do? A consultant with no limits is guessing somewhere.
  • Who has access, and how is it removed? Expect named accounts or keys, revoked at the end.
  • What do you promise about uptime or speed? Anyone naming a number before measuring your server is guessing.

How much does it cost, and what do I need to provide?

I quote a fixed price per scope after a free scoping call of about 30 minutes, or I bill $55 to $65 per hour. Cost follows the number of servers, the state of their documentation and whether a migration is in scope. To start I need:

  • Your servers, where they run, and the panel and billing system in use.
  • Access you can revoke: SSH, WHM, DNS and the WHMCS admin area.
  • A short description of what hurts today and who depends on the servers.
  • One person who can approve changes.

What will I not do as your hosting expert?

I do not sell hosting or act as a managed-hosting provider. I advise, build and maintain on servers that you own or rent. I also do not do hardware work such as racking or drive swaps, promise uptime figures or speed-ups, install unlicensed software, or give legal or tax advice. I am a freelancer, not a staffed operations center, so alerts go to the people you name.

Who this is for

  • Founders choosing between reseller, VPS and dedicated before they spend money
  • Hosting owners whose mail lands in spam, whose backups were never restored or whose servers slow down
  • Resellers and agencies hosting client sites who have outgrown a single account
  • SaaS teams that host customer sites or run their own provisioning and billing
  • Owners of an inherited setup that nobody documented

What is included

  • A written report with findings ranked by effect and a suggested order of work
  • A recommendation on hosting model, panel and capacity, with the trade-offs stated
  • DNS and mail checks: reverse DNS, SPF, DKIM, DMARC and blocklist status
  • A backup review that includes a restore test onto a scratch server
  • A look at abuse handling: mail limits, queue alerts and a written suspension process
  • Monitoring and alert routing that reaches a named person
  • Plain disclosure of any tie I have to a provider or product I mention
  • Written handover notes and two weeks of post-delivery support

How the work runs

  1. 1

    Scope

    On a free call of about 30 minutes you tell me what is failing, what you plan and who depends on the servers. A fixed quote or an hourly estimate follows within one business day.

  2. 2

    Read first

    I read your setup before I change anything: operating system and panel versions, open ports, DNS and mail records, backup jobs and the billing cron. You get the list of what I could not check.

  3. 3

    Report or build

    A review ends in a ranked written report. Build work happens in a staging copy or on a spare server. Rescue work happens on the affected server in small steps, after a backup, with a rollback note for each change. You get a progress update each day.

  4. 4

    Check from outside

    I test mail delivery, port exposure, backup restores and alerts from outside the server, because settings that look right on the machine can still fail in practice.

  5. 5

    Hand over

    You receive written notes on every decision and change, then two weeks of support for anything that surfaces afterwards.

Frequently asked questions

What does a web hosting consultant do?

A hosting consultant decides and checks the technical foundations of a hosting business: server model, control panel, billing connection, DNS and mail, backups, abuse handling, monitoring, security and capacity. Some consultants only advise. I advise and also build or repair the setup, then document it, so you are not left with a report and no way to act on it.

Do I need a hosting consultant to start a hosting company?

No, but a few early decisions are costly to reverse: the hosting model, the panel, how mail is set up and where backups live. A single review before launch is usually enough for those. You can run a small reseller business without a consultant, provided someone owns abuse reports, billing and backups from the first day.

How do I choose between cPanel and WHM and other control panels?

cPanel is the customer-facing panel and WHM is the server and reseller administration layer. The license is commercial and tied to the server IP address. It runs Exim mail, backups and AutoSSL, and WHMCS has a provisioning module for it. Choose by whether customers expect a self-service panel, whether your billing has a maintained module for it, and the license cost at your account count. I work mainly with cPanel and WHM, so I cannot compare other panels from experience. My ties to hosting companies, listed on this page, mean my view is not neutral.

How much does a hosting consultant cost?

I quote a fixed price per scope after a free scoping call of about 30 minutes, usually within one business day, or I bill $55 to $65 per hour. The price depends on the number of servers, the state of the documentation and whether mail, backups or a migration are in scope. I do not publish prices per task.

Can you take over my existing servers?

Yes, in steps. I review first and change nothing, then give you a ranked list of risks and the part I am willing to take on. After that I maintain the servers for a scope we write down. They stay in your accounts at your provider, and I am a freelancer, not a staffed operations center.

Do you offer managed hosting?

No. I do not sell hosting through this site. I advise, build and maintain on servers that you own or rent from a provider you choose, and the customers, data and accounts stay yours. If you want a company to run the servers and carry the pager, you need a managed hosting provider.

Can you help if I use Plesk, DirectAdmin or Windows servers?

Those are not my core. I work mainly with Linux, cPanel and WHM, and WHMCS. On the scoping call I tell you plainly whether your setup falls inside that, and I will say so before you commit to anything. I can often still help with panel-independent parts such as DNS, mail records and billing.

Related services

Ready to talk about your project?

Send the details and I reply within one business day with questions, an estimate and a plan.

Get a free quote Contact me