Our prices didn't survive Black Friday.
80% off your first year of hosting.
No tent on the sidewalk, no 5 a.m. alarm, no tug-of-war over the last TV. Hosting for WordPress, Drupal and apps from Git, each in its own container, with bot protection and Ellie on every plan.
For new customers on annual plans. Enter the code at checkout, or when you upgrade a free trial before the sale ends. The 80% comes off your first year; renewals are at the plan's regular price. Ends 11:59 p.m. Eastern on Monday, November 30.
Your Black Friday haul
- Startup hosting, year onewas
$94.99now $19.00 - Elbows thrown0
- Hours spent in line0
Renews at $94.99 a year
No add-ons
Security and backups built in
99.99%
Uptime, last 12 mo
Daily
Backups kept up to 30 days
210+
Tasks Ellie handles
Bot protection
Stop bots from burning your resources
Up to 40% of web traffic is automated. Scrapers, scanners, and credential stuffers waste your CPU, RAM, and bandwidth. Our bot detection catches them automatically so your resources serve real visitors.
Proof-of-work challenges
Suspicious IPs get a computational puzzle. Real browsers solve it in 2 seconds. Bots can't.
Machine learning model
An adaptive ML model trains on real traffic patterns, improving detection accuracy over time with every challenge outcome.
Verified bot protection
Googlebot, Bingbot, and 25+ verified crawlers are exempted by dual-verification: UA match plus IP range confirmation.
Zero configuration
Active from the moment your site goes live. No plugins, no setup, no maintenance. It just works.
Requests to yourshop.com
Answered before your site's code runs
- ScannerGET /.envChallenged
- Login botPOST /wp-login.phpRate limited
- ScraperGET /shop/*Challenged
- AI crawlerGET /blog/*Blocked
- BotnetPOST /xmlrpc.phpBanned
- Googlebot, verifiedGET /sitemap.xmlLet through
- VisitorGET /checkoutLet through
Real-time threat scoring
20+ signals. One score.
- 0-20Clean
- 21-50Watched
- 51-80Challenged
- 81-100Banned
Meet Ellie
Skip the menus. Just tell her what you need.
Ellie is your AI server admin. She doesn't link to docs or open tickets. She deploys sites, creates databases, fixes performance issues, and manages your entire stack through plain conversation.
From deploying WordPress to managing cron jobs, server resource usage to database backups. No menus to navigate, no documentation to read.
- WordPress management
- Database operations
- Cron jobs
- Performance tuning
- Caching & CDN
- Resource usage
Built to assist, not override
Security by design
Every host says secure. Here is what that means on Hostney.
Each account runs within its own resource limits, files are scanned the moment they are written, and a web application firewall stops the classic attacks before your code sees them.
Isolated per account
Every account is its own system user with its own CPU, memory and I/O limits, and its PHP workers run inside them. One site's spike can't take another account's share.
- Dedicated CPU, RAM, and I/O
- Traffic-based throttle system
- A system user per account
A locked-down shell
SSH and the web terminal run in a container of your own that drops SYS_ADMIN, the capability behind mounting, namespace tricks and most container-escape research, and cannot gain privileges after it starts. The hosts underneath run SELinux in enforcing mode rather than switching it off to make a panel work.
- SYS_ADMIN capability dropped
- A container of your own for SSH
- SELinux enforcing on the hosts
Real-time malware detection
A custom file monitoring daemon watches every change in real time. Threats are caught the moment they appear, not during a daily scan.
- Instant file scanning
- Auto-quarantine threats
- ModSecurity WAF included
noexec filesystems
In your shell container, nothing runs from your home folder or /tmp
no-new-privileges
Your shell’s processes cannot gain privileges after they start
Kernel hardening
ptrace locked down, unprivileged BPF off, and symlink and hardlink tricks refused
restart=always
A crashed container comes back within seconds, before anyone has to notice
Features
Everything in one panel
Managed WordPress, resource monitoring, layered security, and SSH access to all of it.
Managed WordPress
Manage WordPress your way
Deploy, update, and secure your WordPress sites from one dashboard. One-click admin login, auto-updates with configurable delays, and built-in security hardening.
- Auto-updates
- Plugin management
- SSO login
- Security hardening
- Auto-updatesConfigurable delay for safe rollouts
- SSO loginOne-click admin access, no passwords
- Security hardeningXML-RPC blocking, REST API protection
- Migration toolSSH-based transfer with live progress
Know what's happening
Real-time CPU, RAM, and storage monitoring. See exactly what's using resources. Get alerts before problems become outages.
- Real-time resource monitoring
- Traffic analytics
- Performance insights
Sleep tight
Malware detection, behavioral bot scoring, web application firewall, and container isolation. Threats are caught before they reach your application.
- Real-time malware detection
- Automated bot detection
- ModSecurity WAF
Developer tools built-in
SSH access. Web terminal. Git deployment from GitHub, GitLab, or Bitbucket. PHP version per subdomain. Memcached cache browser.
- SSH + web terminal
- Git integration
- PHP version selector
Free migration
WordPress migration is on us.
Free white-glove migration, or move it yourself with the plugin or over SSH.
Before you switch
What you’re probably thinking about a host you haven’t heard of
Switching hosts is a risk, and we’re new. Here are the doubts that come with that, answered with things you can check.
“I’ve never heard of you.”
That’s true, we’re young. It’s why the trial takes no card: you judge the platform for 14 days, not our marketing.
“If you disappear, my site goes with you.”
Download your backups whenever you like, or have every backup copied to your own S3-compatible bucket. If you ever leave, what’s in your bucket stays there.
“Moving hosts always breaks something.”
Your old host keeps serving while the copy runs on a Hostney address. You check it, and DNS moves only when you say so.
“The first-year discount hides a renewal trap.”
Every plan renews at the regular price on its card. There’s no separate, higher renewal rate waiting in year two.
“I don’t want an AI changing my server.”
Ellie shows a confirmation card for every change and runs nothing until you click it. Each action lands in the audit log, like anything you do by hand.
“On shared hosting, the neighbours slow my site down.”
Each account has its own CPU, memory and I/O limits, and its PHP workers run inside them. A neighbour under load can’t take your share.
Risk-free
See for yourself
No commitments. No credit card. 14 days on the same platform paying customers run.
14
days free trial
No credit card required
Full
security stack
The same as paid plans, Ellie included
0
risk
Nothing to cancel when it ends
Would it be a bad idea to try us on a copy of your current site first? Add its domain (your visitors notice nothing), and if it’s WordPress, the migration plugin copies it onto a temporary Hostney address. Your live site isn’t touched until you move DNS.
Get started
Security that works before your site even loads.
Behavioral bot detection, hardened containers, and daily backups.
All included with Ellie from day one.
- 14-day free trial
- No credit card
Frequently asked questions
Why choose Hostney?
Everything you need to know about our hosting platform, security, and support. Can't find the answer you're looking for? Check our blog.