Version 1.4.0 · Companion to Arahoster Ultimate Suite for WHMCS — Installation, Setup & How It Works (installation and setup guide). This article explains what every tool does, where to switch it on and what it needs.

New in 1.4.0: the module is now called Arahoster Ultimate Suite for WHMCS (formerly Arahoster AI Ultimate Tools) and adds 15 tools — AI Command Center, Database Manager with bulk client deletion, Payment Gateway Fees, Expense Manager, Monthly Statements, Consolidated Monthly Invoice, WhatsApp Notifications, Staff Clock In / Out, Service Renewal Notices, Hosting Quota Alerts, Verify E-mail Before Activation, Payment Gateways by Country, Hide Old Services and exclusions for Payment Reminders. They are marked (new in 1.4.0) below. Every new tool is installed switched off.

6. How it works

Finding the tools

Open Addons → Arahoster Ultimate Suite for WHMCS. The Dashboard shows every tool grouped by category, with its plan and a short status. The most-used tools are also in the left sidebar. Tools that your plan does not include show a lock and the plan they need; tools hidden by Role Access are not shown at all.

In the lists below, "Switch on:" tells you where an automation is enabled. Tools without a switch are reports or on-demand tools that do nothing until you use them.

6.1 AI Core

• Settings — AI provider, keys, models, limits, chat widget, RAG, SEO and marketing options (see First-time setup).
• AI Brain — builds a searchable knowledge index from your knowledgebase, closed tickets, products, blog posts and announcements, so AI answers are based on your own content. Use Start Reindexing after adding content. Also here: Custom AI Prompts (replace the built-in prompt for a specific feature; one active prompt per feature) and the AI Test Console.
• Livechat & Support — the agent console for the client-area chat. Three modes: Auto-Pilot (AI answers), Co-Pilot (AI drafts, an agent sends) and Human Agent (staff only). You can open any session, read the transcript, reply (with canned responses), send or edit Co-Pilot drafts, switch mode and close chats. Escalated chats are listed first.
• AI Usage Logs — every AI call with feature, provider, model, tokens and cost; filter by feature.
• License — plan status and licence key.

Client-area livechat widget. Switch on: tick Enable AI Livechat in the WHMCS Configure dialog. A floating chat button then appears on every client-area page (through the ClientAreaHeadOutput hook; your theme must output {$headoutput}, which standard WHMCS themes do). There is also a full chat page at index.php?m=arahoster_ai_ultimate_tools.

• New chats start in Auto-Pilot when Enable Livechat Auto-Pilot Mode is ticked in Settings (default on); untick it to start in Co-Pilot.
• Visitors can ask for a human (Visitors can ask for a human, default on). The chat is escalated, the ticket_escalation webhook fires and — if you tick Email support admins when a visitor asks for a human (default off) — support admins get an email.
• Idle chats close after Close idle chats after (hours) (default 24).
• Widget title, welcome message, position and colour are set in Settings → Chat Widget.
• The widget hides itself when the licence, the monthly token limit or the budget hard cap does not allow AI calls. Guests are limited to 200 messages per day per IP, and requests from other websites are rejected.

6.2 Support Automation

Admin ticket-view AI panel. When an admin whose role has access to the addon opens a ticket in WHMCS (Support → Support Tickets → ticket), an Arahoster AI assistant panel appears on the page. Nothing in it is ever sent to the customer — results go into the reply box, and the agent decides what to submit. Each tool in the panel follows your plan and Role Access:

• insert the pending AI draft for the ticket (Approval Queue, Pro);
• reply enhancer with 8 styles and a custom instruction, and triage (Ticket Intelligence, Enterprise);
• AI Agent Coach review of your draft (Enterprise);
• thread summary, with "save as private note" (Thread Summariser, Pro);
• translate the thread or your draft (AI Translation, Pro);
• similar solved tickets (Solution Recommender, Enterprise);
• KB article draft from the ticket (KB Auto-Generator, Pro);
• canned responses with {client_name}, {first_name}, {company_name} and {ticket_id}, and /shortcut + Tab expansion (Canned Responses, Free).

Tools:

• Canned Responses (Free) — library of saved replies with categories and shortcuts, used from the ticket panel.
• Ticket Tagging Engine (Free) — rules that scan subject/message and attach tags. Switch on automatic tagging: Tag new tickets automatically on the tool's page (default off).
• First Response Tracker / Resolution Time Tracker (Free) — reports on time to first staff reply and time to close, per department and agent.
• KB Suggestion (Free) — suggests matching public knowledgebase articles in WHMCS's built-in suggestions box on the client Open Ticket form. Switch on: enable switch on its page.
• Training Data (Pro) — curated question-and-answer pairs the AI prefers over general knowledge; CSV/JSON import and export.
• AI Content Tools (Pro) — on-demand generators for product descriptions, announcements and KB articles, plus "Ask AI".
• Auto Ticket Reply (Pro) — drafts replies to new tickets and posts them as a selected admin after a delay (default 2 minutes), up to a maximum per ticket (default 3), only in allowed departments. Requires Enable Ticket AI (Configure dialog). Switch on: Enable Auto Ticket Reply (default off). Require human approval for every AI reply is on by default, so drafts wait in the Approval Queue; drafts below Minimum analyzer confidence also go there. Context sent to the AI can include client services/domains/invoices, private admin notes and ticket custom fields (each a tickbox, default on). Departments handled by the Human Support Agent are skipped automatically.
• Human Support Agent (Pro) — answers customer tickets the way a member of your team would, after checking the customer's account. See section 7 for everything about it.
• Approval Queue (Pro) — review AI drafts (Auto Ticket Reply, background suggestions, Human Support Agent in Review mode) and approve, reject or post them. You can choose which admin roles may approve. Also offers batch generation of drafts for open tickets.
• Department Config (Pro) — per-department prompt, default tone and language, auto-reply and analyzer toggles, and "require approval".
• SLA Management (Pro) — SLA targets per priority/department with live countdowns. Switch on alerts: Send SLA alerts (default off); options to alert at 80% of target, add a private note, and email support admins.
• Auto-Assignment (Pro) — rules by department, priority or keywords that assign tickets to an agent, a round-robin pool or the least-loaded agent. Switch on: Assign new tickets automatically (default off).
• AI Translation (Pro) — translate text or whole ticket threads; results are cached per ticket and language.
• AI Thread Summariser (Pro) — one-paragraph internal summary of long threads, cached until new replies arrive.
• KB Auto-Generator (Pro) — turns resolved tickets into KB article drafts that you review, edit and publish into your WHMCS knowledgebase.
• Workload Balancer (Pro) — open-ticket backlog per admin; suggestions can be applied with one click.
• Ticket Merge Suggestions (Pro) — flags likely duplicate tickets from the same client; one-click merge via WHMCS's own merge function.
• Ticket Intelligence (Enterprise) — sentiment, urgency and language analysis of tickets.
• AI Quality Score (Enterprise) — scores staff replies 0–100 on five dimensions with a per-agent leaderboard. Switch on automatic scoring: Score new staff replies automatically (default off; up to 10 per cron run).
• Escalation Detector (Enterprise) — finds anger, legal threats, chargeback or cancellation signals. Switch on: Scan active tickets automatically (default off); it can raise priority and add a private note on high/critical risk.
• Solution Recommender (Enterprise) — finds similar closed tickets and shows how they were solved.
• AI Chatbot Pre-Ticket (Enterprise) — an AI chatbot on the client Open Ticket form that answers simple questions first. Switch on: enable switch on its page.
• CSAT / NPS Surveys (Enterprise) — emails a survey after a ticket closes (only tickets closed after you switch it on, one per ticket, client accounts only), with AI sentiment on comments. Low scores add a ticket note and fire the csat_low webhook. Switch on: enable and auto-send switches on its page.
• PII Redaction (Enterprise) — detects and removes card numbers (Luhn-checked), IBANs, SSNs, phone numbers, emails and long API keys from ticket text. Switch on: Redact PII automatically in new tickets and client replies (default off).
• Multi-Channel Inbox (Enterprise) — messages to your Telegram bot, WhatsApp Business number or Facebook Page become WHMCS tickets, and staff replies go back to the chat. Needs: a Telegram bot token and/or Meta (WhatsApp Cloud API / Messenger) credentials.
• Voice-to-Text (Enterprise) — transcribes MP3/WAV/M4A/OGG attachments on tickets and adds the text as a private note. Needs: an OpenAI (Whisper) or AssemblyAI API key.
• AI Agent Coach (Enterprise) — reviews a staff draft for tone, policy, completeness and grammar, per admin role. Switch on: enable switch on its page.

6.3 Growth & Marketing

All growth emails go through WHMCS's own email system, only to clients who opted in to marketing email (never to Closed accounts), and include a one-click unsubscribe link. Automations are off by default and only act on events after they are switched on.

• CMS & SEO (Free) — AI article generation with an SEO score. Publishing creates a public WHMCS Announcement (WHMCS has no blog) and can submit the URL to Google/Bing. Needs for auto-submission: a Google Indexing service-account JSON file and/or a Bing Webmaster API key (Settings → SEO & Blog Settings).
• Promo Codes (Free) — create, bulk-generate and track coupon codes that are synced to WHMCS Promotions.
• Reviews & Testimonials (Free) — clients with active services submit reviews; moderate manually or with AI; show approved reviews with an embeddable widget. Switch on: review collection switch on its page.
• AI Blog Scheduler (Pro) — set topics and a cadence; the cron writes one post per period. With auto-publish on, posts go live 24 hours later as Announcements; otherwise they wait as drafts in CMS & SEO. Switch on: enable switch on its page.
• SEO Auditor (Pro) — about 30 technical and on-page checks on a live page; can run on a schedule.
• Keyword Research (Pro) — real Google Autocomplete suggestions scored by your AI provider. Volume and difficulty are AI estimates, clearly labelled as such.
• Marketing Suite (Pro) — AI-written email campaigns with segments, scheduling and A/B subject lines.
• Newsletter Builder (Pro) — templates or AI-written newsletters, delivered in batches by the cron.
• Cart Recovery (Pro) — emails clients whose order is Pending with an unpaid invoice, with a link to pay and an optional discount code. Runs hourly. Switch on: enable switch on its page.
• Social Auto-Post (Pro) — schedule and AI-write posts for X, Facebook Pages and LinkedIn; optional auto-share of new blog posts. Needs: your own X (API v2, OAuth 1.0a user keys), Facebook Page and LinkedIn credentials.
• Drip Sequences (Enterprise) — multi-step email sequences triggered by events such as a new client, an overdue invoice, a service expiring in 7 days or no login for 30 days.
• Win-Back Campaigns (Enterprise) — emails former customers a unique single-use promo code and tracks who orders again. Runs daily. Switch on: enable switch on its page.
• Affiliate Manager (Enterprise) — affiliate links with a 90-day cookie, commission on paid invoices, fraud flags held for review, payout as WHMCS account credit. Switch on: enable switch on its page.
• Referral Program (Enterprise) — personal referral links for clients; the referrer receives account credit once the new client's paid invoices reach a minimum spend. Switch on: enable switch on its page.
• Landing Page Builder (Enterprise) — AI generates a landing page from a brief; published pages get a public URL.
• A/B Testing Studio (Enterprise) — split-test website content with an embed snippet and a conversion pixel.
• SMS Marketing (Enterprise) — SMS campaigns with opt-in and STOP opt-out handling. Needs: a Twilio or Vonage account.

6.4 Security & Fraud

Most client-area protections also require Enable Security & Fraud Protection in the WHMCS Configure dialog.

• Login Guard (Free) — login history for clients and admins, notification preferences (clients can override per account).
• IP Allow / Block List (Free) — IPv4/IPv6/CIDR rules. Whitelisted IPs skip this module's checks. Blocking is only enforced when you switch on enforcement on this page; rules that match your own IP or any IP an admin used in the last 7 days are refused.
• Brute-Force Protection (Free) — temporary IP bans after repeated failed logins in a time window; admin IPs are exempt. Switch on: enable switch on its page (default off).
• Disposable Email Filter (Free) — blocks known disposable email domains at signup, contact form and ticket open; you can add your own domains. Switch on: enable switch (default off).
• CAPTCHA Integration (Free) — hCaptcha, Cloudflare Turnstile or reCAPTCHA v2/v3 on selected forms. Needs: site and secret keys from the CAPTCHA provider.
• 2FA Challenge (Pro) — email one-time codes after login for clients who opt in on their Account Security page (index.php?m=arahoster_ai_ultimate_tools&action=security). Switch on: master switch on this page. (App-based TOTP is WHMCS's own built-in 2FA.)
• Geo-Anomaly Detection (Pro) — flags logins from unusual countries or impossible travel and can act on them. Switch on: enable switch (default off).
• VPN / Proxy Detection (Pro) — detects VPNs, proxies and Tor exit nodes; log, challenge or block.
• Velocity Checks (Pro) — caps signups, orders and tickets per IP per hour/day; real-time blocking is a separate switch.
• Suspicious Activity Log (Pro) — one newest-first view of security events, logins, bans and alerts, with CSV export.
• Staff Activity Log (Pro) — every admin action in the module plus the latest staff entries from the WHMCS activity log.
• Session Manager (Pro) — recent admin sessions and clients signed in during the last 24 hours; sign a user out on their next page load.
• Security & Fraud page (Enterprise) — tabs for Event Log, Login History, IP Rules, Country Restriction, Login Guard & 2FA, Content Protection (right-click, copy, iframe) and Fraud Config (disposable and free-email blocking).
• Order Fraud Score (Enterprise) — scores new orders from IP, velocity and account signals (rule-based, no AI call). Automatic Fraud/Cancel actions only apply to Pending orders placed after you enabled them.
• Chargeback Predictor (Enterprise) — predicts chargeback risk from refunds, previous fraud orders, country mismatch, proxy use and disposable email; emails admins on high risk. Switch on: enable switch (default off).
• AI Phishing Detector (Enterprise) — keyword/URL rules plus an AI second opinion on inbound tickets. Automatic scanning of new tickets is a separate opt-in.
• Account Takeover Detection (Enterprise) — credential stuffing, impossible travel and new device + new country; optional forced password reset or suspension. Switch on: enable switch (default off).
• External Reputation (Enterprise) — IP reputation lookups with caching. Needs: a MaxMind minFraud account (billed per query by MaxMind) and/or an AbuseIPDB key; StopForumSpam can be switched on without a key.
• Security Webhooks (Enterprise) — sends security events to Slack, Discord, Microsoft Teams or any URL (signed with HMAC-SHA256 when you set a secret).
• Domain Abuse Monitoring (Enterprise) — checks hosted and registered domains against Google Safe Browsing; optional admin notification or hosting suspension for new detections. Needs: a Google Safe Browsing API key. Switch on: enable switch (default off).
• Staff Clock In / Out (Pro) (new in 1.4.0) — a clock bar in the admin footer to clock in, take a break and clock out. Shows hours, breaks and ticket response times per staff member; a shift left open is closed automatically after inactivity. The worked hours also feed the support cost in Expense Manager. Switch on: enable switch.
• Account Security (Pro) — one page with a tab per area; every tool is off until you switch it on and each tab saves only its own settings. Login & PIN: an e-mailed PIN at sign-in for every client, trusted devices, exclusions by group or client, and passkeys (fingerprint, face or device PIN) instead of codes. Passwords: length and complexity rules, refusal of passwords found in known data breaches (only 5 characters of a hash leave your server), expiry and no reuse. Sessions: idle sign-out with a warning, and clients see and sign out their other devices. Account changes: a new e-mail address takes effect only after approval from the current one; security e-mails; client account numbers. Domains: EPP code, nameserver, lock and contact changes need a code or passkey, with an optional cooling-off period after a password, e-mail or passkey change. Checkout: card-testing limits per IP, client, invoice and card, with a site-wide restriction after a spike of failed card payments. Ticket attachments: blocked types, double extensions, fake files, scripts and an optional ClamAV scan. Admin area: IP allow-list (emergency bypass: create an empty file ADMIN_IP_BYPASS in the module folder), password confirmation when opening the gateway, admin, role and API pages and before other sensitive actions, refund limits and new-IP sign-in alerts. Lockdown: one switch for an incident. Each client also gets a security score with tips.
• Security Monitor (Pro) — tabs Overview (security score out of 100 with a grade, score per area, 90-day trend and a Fix first list), Hardening checks (45+ checks for the WHMCS installation, settings, administrators, PHP, the web server, file integrity and the Arahoster protections, each with what was found and how to fix it), File integrity (the cron fingerprints every WHMCS file in batches; after the first full pass new, changed and deleted files are reported and scripts are checked for web-shell and backdoor code; use Accept all changes after updating WHMCS or a module), Change watch (administrators, roles, payment gateways, API credentials, servers, addons and system settings; only fingerprints are stored), Events (timeline with filters and acknowledgement) and Settings (alerts by e-mail and Security Webhooks, weekly report every Monday). Switch on: file monitoring and change watch under Settings (default off).

6.5 Optimization

• Churn Risk Dashboard (Free) — at-risk clients and disk upsell candidates (read-only).
• Server Health Score (Free) — CPU, RAM, disk, swap and an overall score per enabled server, using the server credentials stored in WHMCS.
• Storage Audit (Free) — sizes of your WHMCS folders and the 10 largest database tables.
• Session Cleanup (Free) — removes only expired data (expired PHP sessions and expired rows in the module's own cache, rate-limit and login-code tables). WHMCS core tables are never changed.
• WHMCS Cron Monitor (Free) — times every WHMCS automation task and cron run, shows overdue tasks and emails admins once per day per failing task.
• Disk Upsell Predictor (Pro) — clients near their resource limits with a suggested upgrade; recommendations can be emailed and conversions tracked.
• Suspended Revenue Recovery (Pro) — recovery emails for suspended services with a link to the unpaid invoice. Switch on: Automatically email suspended clients (default off; each service is emailed once per billing cycle, only services that reach the threshold after you enable it).
• DB Table Optimizer (Pro) — table sizes and fragmentation; optimise selected tables (max 25 per run), manually or on a weekly/monthly schedule.
• Log Cleanup Automation (Pro) — daily purge of old log rows with minimum retention enforced (for example activity log ≥ 7 days, AI usage ≥ 35 days, emails ≥ 90 days). Switch on: enable switch (default off).
• Orphan Record Cleanup (Pro) — finds orphaned rows; deletion requires typing DELETE, is capped, never touches paid invoices or live services, and archives deleted rows for 30 days with one-click restore.
• Slow Query Analyzer (Pro) — slow queries from MySQL performance schema or the slow query log.
• Cache Monitor (Pro) — PHP OPcache and WHMCS compiled-template cache status, with flush buttons.
• Backup Verifier (Pro) — checks that backup files exist, are recent and are not shrinking. Switch on daily checks: Verify daily (WHMCS cron) and alert on problems.
• Auto-Pruning Execution (Enterprise) — scheduled deletion of old log records with server-side minimum retention.
• Performance Tuning (Enterprise) — analysis of MySQL variables, status counters and PHP settings with recommendations; also controls the module's own cache.
• Index Recommender (Enterprise) — suggests missing database indexes and applies them with one click.
• Lifetime Value Calculator, Product Mix Analyzer, Renewal Forecaster, MRR / ARR Dashboard (Enterprise) — revenue analytics built from your WHMCS services, invoices and payments, converted to your default currency.
• Pricing Optimizer (Enterprise) — demand-based price suggestions; applying one changes the price for new orders only.
• Token Usage Optimizer and Model Selection Advisor (Enterprise) — AI spend per feature, savings estimates and per-feature model overrides (used only when that provider has an API key).
• Hosting Plan Recommender (Enterprise) — upgrade suggestions for services using ≥ 60% of their limits and downgrade suggestions for services using < 10% for 90+ days.
• CDN Recommendation Engine (Enterprise) — checks hosted domains for a CDN via DNS and HTTP headers; optional automatic scan.
• Database Manager (Pro) (new in 1.4.0) — see and maintain your WHMCS database safely: table sizes and growth, a health score, a data viewer that masks passwords and card data, log cleanup with retention rules, maintenance (optimize, InnoDB and utf8mb4 conversion), verified backups and bulk client deletion (the exact list first, safety exclusions, deleted with WHMCS's own delete). Every write action needs a Full Administrator, a one-time acceptance, a verified backup younger than 24 hours, a dry run and a typed confirmation, and every action is logged. Core customer and financial tables are never altered. Always keep your own backup too.

6.6 Billing & Finance

Money and customer-email automations here are off by default, only act on invoices that became due after you switched them on, and are recorded so a cron re-run never repeats them.

• Invoice PDF Customizer (Free) — adds an accent line and your footer text to invoice PDFs. Requires a one-line include in your theme's invoicepdffooter.tpl; the page shows the exact line and whether it is detected. Switch on: enable switch.
• Payment Reminders (Free) — overdue-invoice reminder emails on a schedule (daily cron). Switch on: enable switch (default off). (new in 1.4.0) Exclusions: choose clients or client groups that never get reminders.
• Recurring Invoice Monitor (Free) — upcoming renewals of services, addons and domains.
• Currency Display (Free) — edits WHMCS's per-currency format and can show guests prices in their local currency (geo switch).
• FX Rate Sync (Pro) — exchange rates from ECB or ExchangeRate-API (free) or Fixer / Open Exchange Rates (need an API key), with preview, history and a maximum-change guard. Switch on automatic sync: enable switch. If WHMCS's own "Auto Update Exchange Rates" is also on, turn one of them off.
• Tax Rules Manager (Pro) — view, add and delete WHMCS tax rules; tax-by-country report.
• VAT Number Validator (Pro) — EU VIES validation, with optional automatic validation on signup/checkout.
• Late Fee Manager (Pro) — flat or percentage late fees with grace periods and a waiver option. Switch on: enable switch (default off).
• Partial Payments (Pro) — instalment plans with balance reminders. Switch on: enable switch (default off).
• Smart Dunning (Pro) — step sequences for unpaid invoices (daily cron); retrying a stored card is a separate opt-in. Switch on: Enable Smart Dunning (default off).
• Refund Manager (Pro) — refund requests against a specific payment, approval (optional four-eyes rule) and execution through WHMCS.
• Aged Receivables Report (Pro) — open balances in ageing buckets, CSV export and an optional weekly digest.
• Gateway Health Monitor (Pro) — success and failure rates per gateway from the WHMCS gateway log; optional alert email.
• Volume Discounts (Pro) — tier-based cart discounts with a simulator. Switch on: enable switch.
• Gateway Fee Analyzer (Enterprise) — real fees and net amounts per gateway and country, with expected-fee rules.
• Crypto Payments (Enterprise) — status and 12-month volume of crypto payment gateway modules installed in WHMCS (for example CoinGate, NOWPayments, BitPay, BTCPay). The gateway itself is a separate WHMCS gateway module and account.
• Gateway Rotation (Enterprise) — chooses the payment gateway for new invoices by weight or fallback order. Switch on: enable switch.
• Bank Reconciliation (Enterprise) — import CSV or OFX/QFX statements, match them to payments and record matched payments in WHMCS.
• AI Financial Analyst (Enterprise) — questions and quarterly/annual reports answered from a prepared set of your real figures (it does not write SQL).
• Cash Flow Forecast and P&L Statement (Enterprise) — projections and cash-basis profit and loss, with a manual expense ledger.
• Chargeback Dispute Helper (Enterprise) — builds an evidence pack from WHMCS records and an AI letter limited to those facts, for you to download.
• Financial Anomaly Detection (Enterprise) — flags unusual patterns such as refund spikes.
• Tax Audit Export (Enterprise) — accountant CSV exports (generic and Xero) for a chosen period.
• AI Quote Generator (Enterprise) — AI builds a quote from your real catalogue and prices; create it in WHMCS and send it.
• Hide Old Services (Pro) (new in 1.4.0) — hides terminated and cancelled services from the client's My Services list, with a "show old services" link. Switch on: enable switch.
• Service Renewal Notices (Pro) (new in 1.4.0) — one e-mail per client listing every service, addon and domain that renews in the next days (you choose how many days ahead), sent once per renewal date.
• Hosting Quota Alerts (Pro) (new in 1.4.0) — disk and bandwidth warnings at 80, 90 and 100 % from WHMCS's usage figures, with an upgrade link; each level is sent once. Can also go out on WhatsApp.
• Verify E-mail Before Activation (Pro) (new in 1.4.0) — new services are not provisioned until the client has verified their e-mail address; they are created automatically as soon as the client verifies.
• Payment Gateways by Country (Pro) (new in 1.4.0) — show or hide payment methods per client country; the rule is enforced at checkout and on invoices, not only hidden in the list.
• WhatsApp Notifications (Pro) (new in 1.4.0) — invoice created, payment received, renewal reminder, suspension, ticket reply and quota alerts as approved WhatsApp templates. Clients opt in from the client area; quiet hours, up to three retries, delivery and read receipts and a monthly budget. A message is never sent twice, even if cron runs twice.
• Monthly Statements (Pro) (new in 1.4.0) — a PDF statement of account per client and month (invoices, payments, credits and balance). E-mailed on the day you choose; clients can also download them under Billing → Statements and opt out of the e-mail.
• Consolidated Monthly Invoice (Pro) (new in 1.4.0) — moves a client's services to one billing day with a pro-rata charge, so they get one invoice a month. Shows a preview first and can be undone.
• Payment Gateway Fees (Pro) (new in 1.4.0) — a fee or a discount per payment method and currency: percentage, fixed or both, with minimum, maximum and optional gross-up (you receive the full amount after the gateway's own fee). The fee is a separate invoice line, recalculated when the client changes payment method, and shown next to each method before paying. Exclusions per client group and product. Rules from the separate Arahoster Gateway Fee Manager are imported with one click — deactivate that addon afterwards, or clients pay twice. Check your gateway's terms and local law first: card surcharges are restricted in some regions (for example for consumers in the EU/EEA and UK); a discount for a cheaper method is usually allowed.
• Expense Manager (Pro) (new in 1.4.0) — record costs in any currency, including recurring bills; server costs come from each server's monthly cost in WHMCS and support cost from Staff Clock hours. Shows real profit per product, server and client, domain margins per TLD, and a CSV export. Its figures also feed the AI Financial Analyst and the P&L Statement.
• AI Command Center (Pro; parts Enterprise) (new in 1.4.0) — Copilot: ask about your business in plain language ("Why did income drop this week?") and get answers from live WHMCS data, read-only; on Enterprise it can propose actions that wait for your click. Briefings: a weekly management briefing with three concrete recommendations by e-mail (daily on Enterprise). Staff coaching (Enterprise): speed, resolution time, CSAT and reply quality per person. Store content: product descriptions and FAQs in any language, previewed side by side, applied on click and revertible (bulk on Enterprise). Each part is off until you switch it on, has its own monthly budget and stops by itself; personal data is redacted before anything is sent to the AI provider.

6.7 Operations & Admin

• Setup Wizard — guided first setup (see Installation).
• Cost & Budget — AI spend, budget, alerts and hard cap (see First-time setup).
• Health Check — one-click diagnostics.
• Updates — the module asks the Arahoster licence server for new releases once a day and when you open the page; it shows the latest version and changelog. Updates are installed manually (see Upgrading).
• Audit Trail — append-only record of every change made in the module; searchable and exportable as CSV.
• Role Access — per-role section access (see First-time setup).
• Webhooks — send events such as fraud alerts, ticket escalations, SLA breaches, low CSAT, budget warnings, health failures, licence changes and available updates to Slack, Discord, Microsoft Teams or any HTTP(S) URL.
• Backup & Restore — export settings, training data, prompts, departments, canned responses and webhooks as one JSON file, and import it on any install. API keys and secrets are only included if you tick Include secrets; licence state is never included.
• Risk Disclaimer — view or revoke the acceptance.
• AI First-Run Audit (always available) — one-click scan of your WHMCS data, public site and system health; the AI returns a prioritised to-do list.