- Most cPanel accounts run at a fraction of what is actually included — Error Logs, Cron Jobs, Hotlink Protection, and the Email Deliverability tool go unopened on the majority of accounts we review.
- Error Logs and the Bandwidth/Metrics reports can tell a self-managed account owner exactly what is breaking a page or draining bandwidth, without a support ticket.
- The Email Deliverability tool — which checks SPF, DKIM, and PTR records — is the single most consequential feature on this list. Get it wrong and legitimate email lands in spam regardless of how well it is written.
- On the WHM side, scripted account provisioning, DNS cluster management, and MultiPHP/service tuning are what separate a managed hosting provider from a self-managed VPS.
- None of this requires switching hosting providers. Every feature covered here already ships with a standard cPanel or WHM licence.
Most businesses treat their hosting account the way they treat a router in a cupboard — plugged in, forgotten, opened only when something breaks. For the large majority of cPanel and WHM accounts in use across India, the UAE, Qatar, and Saudi Arabia, that means dozens of included tools sit completely unused: log viewers, traffic breakdowns, task scheduling, deliverability checks, and, for anyone with WHM access, an entire server administration layer underneath. House 35 Global Infotech reviews this layer as part of every managed hosting engagement, and the same handful of features come up unopened on nearly every account we take over.
This is not a pitch to switch hosting providers. Every feature below already ships with a standard cPanel or WHM licence — most business owners have simply never had a reason to open the relevant icon. It is the practical companion to our B2B infrastructure and AI-visibility checklist, where Pillar 1 covers the hosting fundamentals every business needs; this article goes one level deeper into the specific tools already sitting inside the panel.
Who this actually matters for
Some of these features matter more depending on how a business is set up and where it operates. A single-domain account on shared hosting has different blind spots than a reseller account running a dozen client sites under one WHM login.
- A manufacturing exporter in Sharjah on shared hosting, watching bandwidth spike every month with no matching rise in real visitors
- A dental clinic group in Mumbai whose appointment reminder emails keep landing in patients’ spam folders
- A logistics operator in Doha running several client-facing portals under one WHM reseller account with no DNS cluster in place
- A food & beverage distributor in Riyadh who has opened cPanel exactly once, to set up a company email address
- A construction contractor in Abu Dhabi whose 404 and 500 error pages still show the host’s default branding to every visitor who hits a broken link
None of these are hosting failures. They are features nobody told the account holder existed.
How H35 reads a control panel
House 35 — H35 for short — treats cPanel and WHM as diagnostic surfaces, not just an email and FTP dashboard, on every managed hosting account it takes on. The first pass through a new client’s panel is rarely about what is broken; it is usually about what has never been touched.
Part 1: cPanel features hiding in plain sight
Everything in this section ships with a standard cPanel account, whether it runs on shared, reseller, or VPS hosting — no upgrade required. Our guide to choosing UAE business hosting covers how these fit into a wider hosting decision.
Where do you actually look when a page throws a 500?
cPanel’s Errors tool, under Metrics, keeps the last few hundred server-side errors for the account — the exact file, the exact timestamp, often the exact line. Most account holders open a support ticket instead of the tab that already has the answer.
Hotlink protection stops other sites spending your bandwidth
Under Security, Hotlink Protection blocks other websites from embedding your images or files directly from your server. A forum post or marketplace listing that hotlinks a product photo draws bandwidth from your account, not theirs, every time the page loads.
Cron Jobs run the maintenance nobody remembers to do by hand
Scheduled backups, cache clears, report generation, database cleanup — anything that should happen on a fixed schedule can run as a cron job under Advanced, on standard cron syntax, without a developer logging in to trigger it manually.
Is your bandwidth spike actually traffic?
The Bandwidth and Visitors reports under Metrics separate real visits from the bot and scraper traffic that quietly consumes a meaningful share of monthly bandwidth on most small business accounts. A spike with no matching rise in enquiries is worth checking here before upgrading a hosting plan.
File Manager does more than upload and delete
Two settings most accounts never touch: showing hidden dotfiles, needed to edit .htaccess or environment files directly, and extracting .zip or .tar.gz archives on the server itself — instead of downloading, unpacking locally, and re-uploading dozens of files one at a time.
Your 404 page is still the host’s, not yours
Custom Error Pages, under Advanced, lets a business replace the generic 404 and 500 pages with something on-brand and useful: a search box, a link back to the homepage, a contact number. Most accounts never open this screen.
Not sure what’s sitting unused in your own hosting account?
House 35 reviews cPanel and WHM configuration as part of every free website audit — deliverability, error logs, and server-side settings included.
Part 2: WHM features that separate a managed host from a self-managed account
WHM sits above cPanel and is only visible to whoever administers the server itself — a VPS owner, a reseller, or, in House 35’s case, the managed hosting provider running client accounts on their behalf. Businesses on basic shared hosting will not see this layer at all; those on a VPS or reseller plan often have access to it and rarely open it beyond initial setup. WHM’s own documentation covers every setting referenced below in full.
Provisioning a new account by hand does not scale past a handful of clients
WHM’s account creation can run through its API rather than the manual form, so a reseller or managed host can provision a new client account, package, and DNS zone in one scripted step instead of clicking through the same fields every time.
DNS cluster management
A server outage that also takes down DNS resolution for every domain on it is avoidable. WHM’s DNS clustering feature synchronises zone records across multiple nameservers, so one server failure does not remove every hosted domain from the internet at the same time — House 35 runs this across regional server pairs for exactly this reason.
MultiPHP and service tuning are not set-and-forget
MultiPHP Manager lets each domain on a server run its own PHP version, useful when one client’s application needs an older version than another’s. Paired with Apache and MySQL tuning under Service Configuration, this is the difference between a server that degrades gracefully under load and one that falls over the first time a client site sees an unexpected traffic spike.
Email deliverability: the one most self-managed accounts never touch
Of everything covered in this article, cPanel’s Email Deliverability tool has the most direct effect on a business’s actual operations, and it is the one most self-managed accounts get wrong by default.
The tool, under the Email section, checks three records for every domain on the account. SPF states which mail servers are allowed to send as your domain. DKIM attaches a cryptographic signature proving a message was not altered in transit. PTR is a reverse DNS record confirming the sending server’s IP matches its hostname. Missing or misconfigured, any one of the three is enough to send legitimate marketing emails, invoices, or appointment reminders straight to spam — regardless of how well the email itself is written. Google’s own email sender guidelines now treat SPF and DKIM as a baseline requirement for any domain sending meaningful volume to Gmail addresses, not an optional extra.
This is exactly the layer House 35 configures for every client it manages — checking SPF, DKIM, and PTR alignment for every sending domain, not just the primary one, since subdomains and third-party sending tools such as invoicing platforms or marketing automation each need their own alignment. For a business handling its own hosting, this tool is the single highest-value five minutes available in the entire panel. For the wider security picture beyond email, see our guide to protecting a UAE business website.
Should you check this yourself, or let a managed host handle it?
Every feature in this article is available on a standard hosting account, and none of it requires a developer to configure. What it requires is knowing the feature exists and setting aside the time to open it. For a single-site business with no in-house technical staff, that time rarely gets found — which is the actual reason these tools go unused, not any lack of availability.
“A hosting account is not underpowered because it is on a budget plan. It is underused because nobody ever opened the tools that were already included.”
House 35 runs this exact review — error logs, bandwidth sources, deliverability, and, where relevant, WHM-level settings — as standard on every managed hosting client across India, the UAE, Qatar, and Saudi Arabia. If you are reading this because something has already gone wrong rather than as a preventative check, our guide to what to do after a UAE website hack covers the recovery steps.
Frequently asked questions
cPanel is the account-level control panel a business owner uses to manage their own website, email, files, and domains. WHM (Web Host Manager) sits above it and manages the server itself — creating accounts, configuring DNS clustering, tuning PHP and service settings, and administering every cPanel account hosted on that server. Most single-site business owners only ever see cPanel; WHM access belongs to resellers, VPS owners, and hosting providers.
In cPanel, open the Email Deliverability tool under the Email section. It checks SPF, DKIM, and PTR records for each domain on the account and flags anything missing or misconfigured, along with the exact DNS record needed to fix it. DMARC is configured separately as a DNS TXT record and builds on top of a correctly configured SPF and DKIM.
Bandwidth consumption and human traffic are not the same number. Bot and scraper crawling, hotlinked images drawing bandwidth from another site’s page, and large uncompressed files can all consume significant bandwidth without a corresponding rise in real visitors. cPanel’s Bandwidth and Visitors reports under Metrics, along with Hotlink Protection under Security, are the first place to check before assuming a hosting plan needs upgrading.
No. WHM is a server administration layer relevant to resellers, VPS owners, and hosting providers managing multiple accounts. A single-site business on shared hosting only needs cPanel, and every feature covered in Part 1 of this article — Error Logs, Hotlink Protection, Cron Jobs, Metrics, File Manager, Custom Error Pages, and Email Deliverability — is available there without WHM access.
It depends on whether the business has time and technical familiarity to review these settings periodically, not just at setup. A managed hosting provider such as House 35 (H35) checks error logs, deliverability, and server-level configuration as a standard part of ongoing management, rather than leaving it to be discovered after email starts landing in spam or a page starts throwing errors.
Let House 35 audit your cPanel and WHM setup
Error logs, bandwidth sources, deliverability, and server-side configuration — reviewed as part of a free website audit for businesses across India, UAE, Qatar, and Saudi Arabia.
Need help with your IT strategy?
House 35 Global Infotech LLP serves businesses across India, UAE, Qatar, and Saudi Arabia.