When 1 of the sites on the server is Compromised is would be better to suspend the SITE and not the whole SERVER including all accounts that has nothing to do with the domain in case. I have servers at 3 locations, including KH. But when a user sites gets Compromised KH is the only Host that suspends the whole server within 48 hours (sometimes 24 hours!) including all shared accounts, instead of just the domain. Example other host: Site X has a lot of flagged files. This account has been suspended. Please clean/take actions, change the cPanel password before you unsuspend the account. KH: "We will need to hear back from you in regards to the issue(s) described in this Abuse ticket within 24 hours or the server will be suspended" I strongly suggest to re-think about this. By suspending the site we have enough time to update the CMS, clean the account, etc. and work with support.