ConfigServer eXploit Scanner (CXS) VDS Setup 2026 | SistemDC

CXS (ConfigServer eXploit Scanner) is a popular tool that performs file-based exploit and malware scanning on cPanel servers.

What Is ConfigServer eXploit Scanner (CXS) and What Does It Do?

CXS scans uploaded and existing files using signatures and heuristics. It scans uploads in real time through cPanel hooks. It comes from the same ecosystem as the CSF firewall.

Benefits

Low cost, CSF integration, cron-based full scans, quarantine support.

Who Should Choose It?

Budget-focused cPanel hosters, servers using CSF, shared hosting.

How Is It Installed?

1. Prepare a VDS with cPanel + the CSF firewall installed.
2. Buy a CXS license (ConfigServer).
3. Install with the cxs.pl install script.
4. Set the scan schedule and e-mail alerts in cxs.conf.
5. Test: verify scanning with the EICAR test file.

Where It Can and Cannot Be Installed

cPanel/WHM, together with CSF. AlmaLinux/Rocky.

SistemDC Ordering Steps

SistemDC cPanel VDS + a CXS license (official ConfigServer).

Frequently Asked Questions

Is CXS enough instead of Imunify360?
For basic scanning, yes; for a proactive WAF, Imunify360 is more comprehensive.

CXS false positives?
Files/paths are excluded with whitelist.conf.

CXS without CSF?
CXS works best with CSF; CSF is recommended.