WebPros International GmbH

Switzerland · owned by WebPros International GmbH (Switzerland) · www.plesk.com · 20 vendors

Plesk, operated by WebPros International GmbH, is a leading WebOps hosting control panel platform used to build, secure, and run websites and applications in the cloud. It runs on over 380,000 servers, automating more than 11 million websites and 15 million mailboxes across 140 countries. Spun out from Parallels in January 2016, it is now part of the broader WebPros family of web hosting and infrastructure software products.

Resilience scores

Disruption prediction

WebPros International GmbH has an estimated 27% probability of disruption in the next 6 months.

14 of WebPros International GmbH's 20 vendors monitored for disruptions.

Technology vendors

Services catalogue

9 services in catalogue across 5 categories; runs on 20 sub-vendors.

Insights

Last updated 2026-07-01 · revision 3

20 direct vendors, 278 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

WebPros International GmbH exhibits high migration readiness, primarily driven by its modern and flexible technology stack. The extensive use of virtualization (KVM, OpenVZ, Virtuozzo) and containerization (Docker) across its products and internal stack significantly enhances the portability of its applications and services. The API-first design of platforms like SolusVM and Plesk's own APIs facilitates seamless integration with new environments. Support for multiple programming languages (PHP, Python, Node.js) and database systems (MariaDB, MySQL, PostgreSQL) provides considerable flexibility for re-platforming or re-hosting. Existing integrations with cloud services such as AWS S3 for backup and Cloudflare for CDN demonstrate prior experience and capability in leveraging cloud infrastructure. The vendor ecosystem, with services from vendors across 10 unique countries, suggests a diverse base, which generally implies lower vendor lock-in compared to a highly concentrated vendor landscape, thus simplifying potential transitions. However, several factors introduce complexity. Adherence to regulatory requirements like GDPR and the applicable NIS2 directive necessitates meticulous planning during any migration to ensure continuous compliance, particularly concerning data processing and security standards in new environments. Similarly, strict data residency requirements, mandating data storage and processing in the EU (Germany) and USA, impose geographical constraints on potential migration targets. The absence of data on the company's financial stability (revenue concentration, growth) makes it challenging to assess its capacity to fund a significant migration initiative. Lastly, while vendor diversity is a strength, the specific 'Vendor Lock-in Risk' is noted as 'Unknown,' which could hide unforeseen complexities or costs associated with transitioning away from existing vendor services.

Compliance

10 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 certification is highly relevant for WebPros International GmbH given its role as a global SaaS/software provider handling customer data, license keys, server IP addresses, and payment information. The company's Privacy Policy references 'sufficient technical and organizational measures' (a GDPR requirement aligned with ISO 27001 principles), but no ISO 27001 certificate has been publicly disclosed. Risk is Medium because: (1) ISO 27001 is increasingly expected by enterprise customers and is often a contractual requirement in B2B relationships; (2) the company's multi-country operations (12 entities) and complex data flows increase information security risk; (3) without certification, there is no independent assurance of the ISMS. The risk is not High because ISO 27001 is voluntary, and the company may have equivalent internal controls. However, the lack of certification is a notable gap for a company of this profile.

Evidence: https://www.plesk.com/legal/, https://www.plesk.com/

ISAE 3000 (source) — Assessment Required

ISAE 3000 is an assurance standard used by auditors to provide assurance on non-financial information, including sustainability reports, internal controls, and data protection compliance. It is less commonly required for technology companies unless they are providing assurance services themselves or are subject to specific regulatory reporting requirements. For WebPros, ISAE 3000 could be relevant in the context of GDPR compliance assurance reporting (e.g., an ISAE 3000 report on data processing activities) or as an alternative to SOC 2 for European customers. Risk is Low because ISAE 3000 is not a legal requirement for this type of company, and its absence does not create direct regulatory risk. However, some European enterprise customers may request ISAE 3000 assurance reports as part of vendor due diligence.

Evidence: https://www.plesk.com/legal/

SOC 2 (source) — Assessment Required

WebPros International GmbH is a cloud services and SaaS provider (Plesk is delivered as a subscription/SaaS platform), which is precisely the type of organization for which SOC 2 is designed. Many enterprise and hosting customers require SOC 2 Type II reports from their software vendors as part of vendor due diligence. The absence of any publicly disclosed SOC 2 report or attestation on the company's website is notable for a company of this scale and global reach. Risk is Medium because: (1) the company's customers (web hosting providers, enterprises, IT admins) increasingly require SOC 2 attestations; (2) lack of SOC 2 may create competitive disadvantage and customer trust issues; (3) without a SOC 2 report, there is no independent assurance over the company's security, availability, processing integrity, confidentiality, and privacy controls. The risk is not High because SOC 2 is a voluntary framework in the US (not a legal requirement), and the company may have equivalent controls assessed under other frameworks.

Evidence: https://www.plesk.com/legal/, https://www.plesk.com/

Financials

Three-year financials

Financial Resilience Score: 7/10

WebPros demonstrates strong financial resilience underpinned by a highly recurring subscription/licensing revenue model across its portfolio of hosting-automation brands (cPanel, Plesk, WHMCS, SolusVM, Sitejet). Press-reported EBITDA margins consistently above 50% and category leadership in the Linux/Windows control-panel market provide predictable cash flow and pricing power. The diversified customer base across 140 countries and thousands of hosting resellers mitigates concentration risk, and successive PE ownership (Oakley, CVC, EQT) has ensured continued capital access, with enterprise value roughly doubling from ~USD 1.5B in 2020 to ~USD 3.5B in 2024. However, resilience is tempered by significant leverage typical of PE-backed buyouts, limited financial transparency as a private Swiss GmbH, and maturity of the core shared-hosting control-panel market. Customer retention risks emerged following the 2019 cPanel price change controversy, and competition from managed cloud providers (AWS, Azure) and no-code website builders continues to pressure the traditional hoster segment. Growth increasingly depends on cross-selling extensions and bolt-on M&A rather than organic core expansion.

Key strengths: Recurring subscription/licensing revenue model with high renewal rates, Category leadership: majority share of global control-panel market, Diversified customer base across 140 countries and thousands of resellers, High operating margins (EBITDA reportedly 50%+), Strong PE sponsorship providing capital access (Oakley → CVC → EQT), Scale: 384,000+ servers, 11M+ websites, 15M+ mailboxes automated

Risk factors: Significant leverage from PE buyout structures, Mature/slow-growing core control-panel market, Customer retention risk following 2019 cPanel pricing controversy, Competition from managed cloud (AWS, Azure) and no-code site builders, Hosting industry consolidation reducing customer base, Limited financial transparency as private Swiss GmbH

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report