You may be interested to take a look at Rack911 Lab's Security Analysis of various cPanel alternatives from late last year:-
https://www.rack911labs.com/research/security-analysis-of-alternative-control-panels/
Especially the conclusion reached:-
For us personally, we would stick with DirectAdmin, Plesk or InterWorx just because we know firsthand not only how good the security is, but also how effective the developers are at fixing flaws.
With that said, if we had to pick from the 6 alternative control panels above it would be ISPConfig, Virtualmin & APNSCP. We would strongly recommend users avoid CentOS Web Panel and VestaCP. The developers are terrible at communicating and it’s our opinion that their programming experience has no security mindset in place which would likely lead to further security vulnerabilities in the future.
As for CyberPanel, while they did have the highest amount of security vulnerabilities found, they also patched everything in a timely manner and their communication was decent. The developers do seem keen on improving their product and while we’re not ready to recommend them just yet, we also don’t think they deserve to be avoided. It’s safe to assume we will revisit CyberPanel in the future for another audit to see where things stand.
