Arahoster Ultimate Suite for WHMCS

Turn WHMCS into one command center for your whole hosting business

Support in one tab, billing in another, a security addon here, a spreadsheet for expenses there, and a database nobody dares to touch. Arahoster Ultimate Suite brings all of it into one clean admin area. It has 140+ tools that answer tickets, chase unpaid invoices, stop fraud, keep your database healthy and show where your money really goes, so your team spends less time on admin and more time growing the business.

Formerly Arahoster AI Ultimate Tools. Version 1.4.0 adds 17 new tools and a new name for a suite that now covers far more than AI.

What changes on day one

• Tickets answer themselves, in your voice. The Human Support Agent reads the ticket, checks the client's account and replies like a member of your team, at a human pace. It knows when to hand over to a person.
• Invoices get paid faster. Reminders, smart dunning, late fees and WhatsApp invoice alerts run on their own, and every message goes out exactly once.
• You see your real profit. The Expense Manager shows margin per product, server, client and TLD, not just revenue.
• You can ask your business anything. "Why did income drop this week?" "What's going on with client #123?" The AI Command Center answers from your live WHMCS data.
• Fraud and abuse are stopped at the door. Login PIN and passkeys, breached-password checks, card-testing protection, CAPTCHA, VPN/Tor detection and an order fraud score work together.
• You know the moment WHMCS changes. File integrity monitoring, a security score and alerts for new admins or changed gateways.
• Your database stops being a black box. Clean up tbllog_register and the other log tables, clear out tables left behind by addons you removed, optimize, take verified backups and bulk delete old clients, safely.

New in 1.4.0: 17 tools every WHMCS admin needs

The everyday jobs that cost a hosting team hours each week, now handled for you in one place:

• Clean up tbllog_register for good. The Database Manager purges bloated log tables (tbllog_register, activity log, module log, gateway log, e-mail log and more) with retention rules you set, then optimizes the tables, converts them to InnoDB/utf8mb4 and gives your database a health score. Every change is backed by a verified backup.
• Bulk delete clients. Remove old, inactive or test clients in one go: you see the exact list first, clients with active services or domains, credit, payments or open tickets are always left out, and WHMCS' own delete does the work.
• Clear out leftovers from old addons. Every addon you ever tried leaves its tables behind, even after you deactivate or delete it. The Database Manager finds them, shows which module each one belongs to and whether it is still in use, and moves the unused ones aside with one click. They are archived, not deleted, so any table comes back instantly. No SQL, no phpMyAdmin, no guesswork.
• WhatsApp notifications from WHMCS. Invoice created, payment received, renewal reminder, suspension, ticket reply and quota alerts are sent as approved WhatsApp templates. Clients opt in, with quiet hours and read receipts.
• Statement of account (PDF). A monthly statement per client with invoices, payments, credits and balance, e-mailed on your chosen day and downloadable in the client area.
• One invoice per month. Consolidated billing moves every service to the same billing date with pro-rata, so each client gets a single monthly invoice. Preview first, undo any time.
• Payment gateway fees and surcharges. Add a transaction fee (or a discount) per payment method and currency, with gross-up and min/max, shown to the client before they pay.
• Hide terminated and cancelled services from the client area, with a "show old services" link.
• Disk and bandwidth usage alerts at 80, 90 and 100 %, with an upgrade link that sells the next plan for you.
• E-mail verification before provisioning. Nothing is activated until the client verifies their e-mail, then the service is created right away.
• Payment methods by country. Show or hide gateways per client country, enforced at checkout.
• Service renewal reminders. One clear e-mail listing every service, addon and domain that renews soon.
• Exclude clients from payment reminders and overdue notices, per client or client group.
• Staff time tracking. Clock in, clock out and breaks, with hours and response times per staff member.
• Expense tracking and real profit. Recurring costs in any currency, with profit per product, server and client and domain margins per TLD.
• Account Security and Security Monitor: protection for every client account and for WHMCS itself, described below.
• AI Command Center: your AI business partner, described in the next section.

AI Command Center: an AI business partner inside WHMCS

• Copilot: ask questions in plain language and get answers from your real figures, tickets and clients. It is read-only, and suggested actions wait for your click.
• Briefings: a management briefing every week (every day on Enterprise) with three concrete things to do next.
• Staff coaching (Enterprise): speed, resolution time, CSAT and reply quality per person, with a better version of a real reply.
• Store content: product descriptions and FAQs in any language, previewed side by side, applied on click and revertible.
• You stay in control: every AI tool is off until you switch it on, has its own monthly budget and stops by itself. Personal data is redacted before anything is sent.

Security that closes every gap: Account Security and Security Monitor

Account Security protects every client account, from sign-in to checkout:

• Login PIN and passkeys. An e-mailed PIN at sign-in for every client, trusted devices, and passkeys (fingerprint, face or device PIN) in place of codes.
• Breached-password check. Passwords found in known data breaches are refused (only 5 characters of a hash ever leave your server), plus length and complexity rules, expiry and no reuse.
• Client sessions. Clients see every device they are signed in on and sign out any of them; idle sign-out with a friendly warning.
• E-mail change confirmation. A new e-mail address only takes effect after it is approved from the current one.
• Domain theft protection. EPP codes, nameserver, lock and contact changes need a confirmation code or passkey, with an optional cooling-off period after a password change.
• Card-testing protection. Bots testing stolen cards on checkout and invoices are stopped by limits per IP, client, invoice and card.
• Safe ticket attachments. Dangerous file types, disguised double extensions, fake images and scripts are blocked, with an optional virus scan.
• Admin protection. Admin IP allow-list, password confirmation before sensitive pages and actions, refund limits and alerts for sign-ins from new IPs.
• Lockdown. One switch for an incident: PIN for everyone, sign-ups or orders paused, all sessions ended.
• Client security score for every account, with tips the client sees too.

Security Monitor watches your WHMCS installation itself:

• Security score. 45+ hardening checks across WHMCS, PHP, the web server, admin accounts and file permissions, each with a clear fix, a grade and a 90-day trend.
• File integrity monitoring. Every WHMCS file is fingerprinted; new, changed and deleted files are reported and web shells and backdoors are flagged right away.
• Change watch. New admins, role changes, payment gateway settings, API credentials, servers, addons and key settings are recorded the moment they change.
• Alerts and a weekly report by e-mail and to Slack, Discord, Telegram or Teams.

Favourites that are already inside

• Cloudflare Turnstile, reCAPTCHA and hCaptcha on login, registration, checkout and tickets
• AI quote generator: a complete WHMCS quote drafted from a plain-language request
• SMS marketing with Twilio and Vonage

Everything else in the box

AI support: Human Support Agent, AI Brain trained on your KB and tickets, auto-replies with an approval queue, an AI panel in the ticket view, SLA tracking and escalation, KB article generator, translation, thread summaries, CSAT/NPS surveys, a multi-channel inbox (Telegram, WhatsApp, Messenger) and livechat with Auto-Pilot, Co-Pilot and Human modes.

Billing and finance: payment reminders and smart dunning, late fees, payment plans, refunds with approval, bank reconciliation (CSV/OFX), FX rate sync, EU VAT validation, gateway fee analyzer, AI financial analyst, cash-flow forecast, P&L statement and tax export.

Security and fraud: Account Security, Security Monitor, login guard, e-mail 2FA, IP rules, brute-force protection, disposable-email filter, VPN/Tor detection, velocity checks, order fraud score, chargeback predictor, phishing detector, account-takeover signals, staff activity log and session manager.

Growth and marketing: e-mail campaigns and newsletters, drip sequences, cart recovery, win-back offers, promo codes, affiliates and referrals, reviews, AI blog scheduler, SEO auditor, landing pages and A/B tests.

Optimization: server health score, backup verifier, DB optimizer, slow-query analyzer, index recommender, cron monitor, MRR/ARR dashboard, renewal forecast, lifetime value, pricing optimizer and an AI cost tracker with budgets.

Operations: setup wizard, health check, role-based access per admin role, audit trail, webhooks to Slack/Discord/Teams, settings backup and restore, and update notices right on the dashboard.

Built to be safe

• Off until you turn it on. Anything that e-mails clients, touches money or deletes data ships switched off.
• Preview first. Database changes, bulk deletions, billing-day moves and AI content show exactly what will happen before you confirm.
• No duplicates. If cron runs twice, an e-mail, charge or message still goes out only once.
• Your data stays on your server. Only the text needed for an AI request goes to the provider you choose.

Bring your own AI

DeepSeek (recommended, very low cost), OpenAI, Anthropic Claude or Google Gemini. You use your own key, pay the provider directly and see the cost of every call. The non-AI tools work without a key.

Plans

• Free ($0): core AI, livechat and the essential tools. Free forever.
• Pro ($9.99/month): all 1.4.0 tools, the Human Support Agent, AI Command Center (Copilot, weekly briefing, store content), Account Security, Security Monitor and the advanced support, security and marketing tools.
• Enterprise ($19.99/month): everything, including daily briefings, staff coaching, Copilot actions, bulk content and the full finance and optimization suites.

Up and running in minutes

Upload the files, activate the addon and the Setup Wizard walks you through provider, key, licence and budget. Upgrading is just as simple: upload over the old files, and your licence and settings stay.

The full guide covers installation, every tool and troubleshooting. It is in our knowledgebase at me.arahoster.com and ships with the download. Questions? E-mail [email protected] or open a ticket at me.arahoster.com.

Start on the Free plan today and upgrade whenever you need more.