Panellicense
KC
Live kernel patching license

Buy a KernelCare license

Genuine KernelCare licenses from an authorised TuxCare partner. Live kernel patching for AlmaLinux, Rocky, Ubuntu, Debian and CloudLinux — apply kernel CVE fixes in production without rebooting. Per-server pricing, prorated monthly.

About KernelCare

What is KernelCare?

KernelCare is TuxCare's rebootless kernel patching service. It installs a userspace agent that patches the running kernel in memory whenever an upstream CVE is released — no reboot, no maintenance window. Supports AlmaLinux, Rocky, RHEL, Ubuntu, Debian and CloudLinux kernels.

Who it's for

Who buys KernelCare from us

Hosts and SaaS operators whose uptime SLO can't absorb a kernel reboot, compliance-driven shops that need same-day CVE patching, and CloudLinux customers extending their existing security posture.

Why Panellicense

Why buy KernelCare through Panellicense

We're an authorised TuxCare partner. Every license is generated against the TuxCare license server and bundles with CloudLinux and Imunify360 at a reseller-friendly rate.

  • Activated in under 60 seconds, per-server
  • AlmaLinux, Rocky, RHEL, Ubuntu, Debian, CloudLinux
  • Fleet rate kicks in at 10+ servers
  • ePortal supported for air-gapped patching
  • L1 support included · TuxCare escalation
  • Bundle pricing with CloudLinux + Imunify360
Authorised reseller
Every license is generated against KernelCare's own license server. No grey-market keys.
60-second issuance
IP-bound key on your dashboard the moment payment clears. Re-bind any time.
L1 support included
A real engineer responds — not a chatbot. Vendor escalation 24/7.
Tiers & pricing

KernelCare pricing

Two tiers — Standard for single servers, Enterprise for 10+ server fleets with ePortal and air-gapped patching.

Live kernel patching
KernelCare
$3.95/mo
Per server
  • Live kernel patching
  • AlmaLinux, Rocky, Ubuntu, Debian
  • CloudLinux kernels included
  • ePortal on-prem patch server
  • Priority TuxCare support

All prices USD, billed monthly, prorated to the 15th. EUR and GBP available. Compare all tiers.

FAQ

KernelCare license questions

Does KernelCare really patch without rebooting?
Yes — it patches the kernel in memory. The first install requires no reboot, and every subsequent CVE patch is applied live. Reboots are only needed for kernel version upgrades you choose to schedule.
Which distributions are supported?
AlmaLinux, Rocky, RHEL, CentOS, Oracle Linux, Ubuntu LTS, Debian, and CloudLinux. Custom-built kernels are supported on Enterprise via TuxCare.
Does it work air-gapped?
Yes — Enterprise includes ePortal, an on-prem patch server you host inside your network for environments without outbound internet.
Knowledge base

Get the most out of KernelCare

All KernelCare articles →
how to
Live-patch glibc and OpenSSL with KernelCare LibCare
KernelCare patches your kernel without a reboot, but a glibc or OpenSSL CVE still lives in every running process. LibCare patches those libraries in memory — here's how to turn it on and verify it.
6 min read
how to
TuxCare ELS for CentOS 7: keep cPanel servers patched past EOL
How to set up TuxCare Extended Lifecycle Support on a CentOS 7 cPanel server — kernel and userspace patches, what's covered, and the migration timeline it buys you.
10 min read
how to
Upgrade KernelCare agent and ePortal in the right order
Step-by-step agent and ePortal upgrade order, version checks, and rollback notes covering the required compatibility cutoff.
4 min read
compare
KernelCare vs Ksplice — live kernel patching compared
Distro coverage, CVE scope, and per-server pricing compared — why Ksplice's Oracle-Linux-only limit pushes mixed fleets to KernelCare.
6 min read
how to
Roll out KernelCare across a production fleet without a window
Pilot plan, monitoring hooks, and rollback path for rolling KernelCare across hundreds of production servers without a maintenance window.
5 min read
how to
Install KernelCare ePortal for an air-gapped patching fleet
Stand up an on-prem ePortal so servers behind the firewall can pull KernelCare patches without each host calling out to TuxCare.
5 min read
Switch in an afternoon

Switch from your current reseller — free.

We migrate active cPanel, Plesk, LiteSpeed and CloudLinux licenses from any reseller. We prorate the first month so you never pay twice, and your customers see zero downtime during the swap.