Web Hosting

Yes, all our hosting plans include a free Let's Encrypt SSL certificate that renews automatically. HTTPS is enabled as soon as your site goes live.

Start (199 DH/year) is suitable for a showcase site, Business (399 DH/year — recommended) for SMEs with several sites and mailboxes, and Pro (799 DH/year) for demanding projects. Compare the resource details on the Web Hosting page.

We offer an assisted migration service (available on Business and Pro). Our team transfers your website, emails and databases with no service interruption.

Yes. cPanel includes Softaculous: WordPress installs in one click on all our shared hosting plans. For a showcase site or a blog, Start is enough; Business suits WooCommerce or several sites; Pro suits high-traffic projects. Details are on the WordPress Hosting page.

Yes, and we publish the numbers — which is uncommon in this market. Every account runs in its own CloudLinux container: a busy neighbour can never take resources from you. Start gets 2 CPU cores, 10 GB of memory and 100 PHP requests served concurrently; Business 4 cores, 15 GB and 150 requests; Pro 8 cores, 25 GB and 250 requests. On top of that: disk space (50, 150 or 300 GB) and a per-plan file count (250,000 to 1 million). These are per-account ceilings, not reservations: you don't pay for idle capacity, and nothing stops you reaching them when your traffic calls for it.

The Start plan is suitable for a single site with moderate traffic. Business is recommended for SMEs with several sites and emails. Pro offers high resources for demanding projects.

Yes, all our web hosting plans include cPanel, as well as Softaculous to install WordPress and many applications in one click.

The number of sites allowed depends on your plan: only one on the entry-level offer, several on the higher offers. The details per plan are shown on the Web Hosting page.

Yes: hosting is always tied to a domain. In your cart, choose one of the two options for your hosting plan — register a new domain with us, or enter a domain you already own (you'll then point it to your hosting). Without a linked domain, the order cannot be completed. If the name you enter is still available, we tell you right there: it cannot be yours, and you can register it in one click — it is then added to your order and stays attached to that hosting plan.

Yes, you can move up to a higher plan at any time from your client area. The difference is calculated on a pro rata basis.

A downgrade takes effect at the end of the current cycle, at the next renewal: the Client keeps their current offer until the term already paid for, at no charge and with no refund, and may cancel the scheduled downgrade before its due date. (see article 8 of the General Terms and Conditions of Sale).

You receive reminders 30, 15 and 7 days before expiry. If you don't renew, your account is suspended and then deleted after a grace period. We export your data on request.

Yes. You can buy a standalone license — Plesk (Web Admin, Web Pro, Web Host) or cPanel/WHM — for your VPS or dedicated server, without taking out hosting with us. You choose the edition, provide your server's IP address, and receive your activation code. See the Plesk Licenses and cPanel/WHM Licenses pages.

Plesk runs on Linux AND Windows, offers a unified interface and is billed per edition (number of domains); it's the choice for Windows or a developer/agency profile. cPanel/WHM is Linux-only, separates administration (WHM) from the client area (cPanel) and is billed per number of accounts; it's the standard for large-scale shared hosting. Both are available on our Licenses pages.

Web Admin handles up to 10 domains (single-site server or a few sites), Web Pro up to 30 domains with tools for developers and agencies, and Web Host an unlimited number of domains for hosts and resellers. Web Pro and Web Host can include CloudLinux to isolate accounts. Full details are on the Plesk Licenses page.

The license is bound to the public IP address of the server on which you install it. You provide this IP when ordering, then you install the activation code received by email. If your server's IP changes, contact support to re-bind the license.

CloudLinux isolates each account in its own environment (LVE technology) so that a resource-hungry site doesn't penalize the others; Imunify360 is a server security suite (application firewall, antivirus, automatic patching); JetBackup automates backups and one-click restore. These modules complement cPanel/WHM and are ordered as server licenses (cPanel/WHM Licenses page).

Yes. If you order a Cloud VPS from us, the panel can be installed automatically — you don't have to enter the IP manually or apply the key yourself. On a server you already own, you provide its IP address and install the key we supply.

No. On the license pages, simply pick the server from the list of your VPS: its IP address is filled in automatically. From the client area, the "Add a license" entry in a VPS's options takes you there with that server already selected. Licenses your distribution does not support stay visible but greyed out, with the reason shown. You can still enter an IP by hand for a server hosted elsewhere.

Yes, you have several levels of control. The simplest is to add directives to your robots.txt file: the main AI training crawlers declare that they respect this file (OpenAI's GPTBot, Common Crawl's CCBot, Google's Google-Extended), even though none are legally required to do so. For stricter blocking, Cloudflare — included with our hosting — offers WAF rules and User-Agent filtering that actively block requests, even from bots that might ignore robots.txt. On VPS, you can go further with Nginx rules or iptables. Our support team can guide you to the right configuration.

Once PHP 8.2 reaches end of life on December 31, 2026, no further security patches will be released, leaving your applications exposed to any vulnerabilities discovered afterward. Popular frameworks and plugins such as Laravel and WordPress will gradually drop PHP 8.2 compatibility. It is strongly recommended to migrate to PHP 8.3 or 8.4 before that date to keep your environment secure and fully supported.

No. A freshly provisioned Linux server exposes SSH password authentication on port 22 by default, has no active firewall and leaves unnecessary services listening. The minimum hardening steps are: disable SSH password authentication and allow only keys (`PasswordAuthentication no` in `/etc/ssh/sshd_config`), change the SSH port or protect it with a filter, enable `ufw` or `firewalld` to block all ports except those needed (22 SSH, 80 HTTP, 443 HTTPS), disable unnecessary services with `systemctl disable`, and automate security updates via `unattended-upgrades` (Debian/Ubuntu) or `dnf-automatic` (AlmaLinux/Rocky). These steps reduce the attack surface of an internet-facing server by 90%.

It is the **processing** that is declared to the CNDP, wherever it is hosted; the transfer out of Morocco is handled separately. Law 09-08 (art. 43) reserves the **authorisation request** — Form F118, up to two months of review — for countries **absent** from the list of states providing a sufficient level of protection, set by deliberation no. 236-2015 of 18 December 2015. Our servers are in Helsinki (Finland) and Falkenstein (Germany), two countries named on that list: for a site hosted with us there is therefore **no F118 to file** — the transfer still has to be **mentioned** in the processing declaration. Our support team will send you in writing the hosting location and the identity of the host to enter there, via [email protected]. For your own situation, a legal adviser or the CNDP remain the right people to ask.

Law 09-08 on the protection of individuals with regard to the processing of personal data covers any collection, storage or processing of identifying data: names, contact details, connection logs or information about your clients and visitors. If your website collects such data, a prior declaration — or authorisation for sensitive categories — is required from the CNDP, regardless of where the data is hosted. If you are unsure of your obligations, consult a legal adviser or your national supervisory authority.

Two options, both carried out at the provider where the domain is registered. Option 1 — an A record: create an `A` record pointing to your hosting's IP address, shown in your client area on the service page, section “Point your domain here”. Your domain then reaches us, but its DNS zone stays with your current provider — so you keep maintaining email (MX, SPF) and subdomains there. Option 2 — delegate DNS to us: replace ALL of the domain's nameservers with ns1.megadomaine.com and ns2.megadomaine.com, and REMOVE your previous provider's. Leaving even one is enough to break the domain: if it no longer serves your zone it answers “this domain does not exist” authoritatively, and roughly one visitor in two lands on it — the outage then looks intermittent and unexplainable. Once the delegation is clean, we manage the whole zone and the DNS tab in your client area becomes available. Allow up to 24 hours for propagation, often just a few minutes. If nothing changes after that, write to [email protected] and we will check the setup with you.

VAT applies to digital services purchased in Morocco regardless of the provider's country: a foreign provider not registered in Morocco shifts the declaration obligation to you (reverse charge), while a Moroccan-established provider such as MEGALOGI collects it directly and issues a compliant invoice. From a tax standpoint, the final cost is comparable; what changes is your administrative workload. Consult your accountant to confirm the right treatment for your status.

ServOrbit offers localised hosting compliant with ANRT guidelines for sites operating under the .ma national extension: your visitors' data remains hosted in data centres that meet Moroccan regulatory requirements. We provide on request a hosting certificate stating server location, useful for your administrative procedures. For obligations specific to your sector of activity, contact ANRT or a specialised legal adviser; our role is to provide you with technical and documentary support.

Yes. Choose the « Subdomain » tab in your cart: we provide a free address of the form web-xxxxxxx.servorbit-dns.com, active as soon as your account is set up, on which your site and its SSL certificate work straight away. This address is not yours and cannot be transferred — it is a starter address, for as long as you do not have your own domain name. When you are ready, register your domain with us then open a ticket from your client area: we switch it to become the main domain of your hosting plan.

PrestaShop 8.x requires PHP 8.1 as a minimum and works best with PHP 8.2 (recommended). PHP 8.3 is supported from PrestaShop 8.1.7 onwards. Make sure the extensions curl, gd, intl, mbstring, zip, xml and pdo_mysql are enabled; on cPanel, switch PHP versions via the PHP Version Manager.

ServOrbit shared hosting is optimised for PHP (WordPress, PrestaShop, Joomla…) and does not support persistent Node.js or Python application processes. To deploy a Next.js, FastAPI, Django or Flask application requiring a dedicated application server, a ServOrbit VPS is the right solution: it gives you root access, the ability to install your runtimes, and to manage processes with PM2 or systemd. Check our VPS plans starting from 99 DH/month to choose the configuration that matches your workload.

Yes, migrating from shared hosting to a ServOrbit VPS can be done without any perceptible downtime for your visitors. The process involves preparing the VPS in parallel (web server setup, file and database copy), testing the site via the server's IP before switching DNS, then lowering the DNS TTL a few days before the final cutover. Our team can support you through this transition — open a ticket or contact us via `/contact` to plan the migration according to your schedule.

Yes, directly. TTFB (Time to First Byte) — which measures server response time — is one of the metrics most sensitive to infrastructure: shared hosting distributes CPU and disk resources among multiple sites, which can increase TTFB during traffic spikes. A VPS provides guaranteed resources and a more consistent TTFB, which improves LCP (Largest Contentful Paint) and INP (Interaction to Next Paint), the two Core Web Vitals most impactful for search ranking. If your scores only drop during peak hours, shared hosting is often the first cause to investigate.

PageSpeed Insights shows a synthetic (lab) score, but your Search Console Core Web Vitals reflect real user experiences over a 28-day window. High TTFB during peak hours or on mobile can fail INP or LCP in real conditions without affecting the synthetic test. Use WebPageTest under real-world conditions to isolate the hosting variable.

Yes, a ServOrbit VPS can host as many domains as you like on the same machine. Simply configure one Nginx `server` block (or Apache VirtualHost) per domain, each pointing to its own root directory or Docker application. The DNS for each domain must point to your VPS IP address. There is no software limit imposed by ServOrbit; the only constraint is your server capacity (RAM, CPU, storage). If you manage many client sites, reseller plans with a cPanel/WHM control panel are also available.