One service per server

On a typical control-panel server (cPanel, DirectAdmin), DNS, mail, web and database all run on one machine. One critical vulnerability in one service hands an attacker the keys to everything: a leaky mail server becomes a leaked customer database. We make it easy to put each service on its own server, so an intrusion in one can't spread to the next.