Skip to main content

Is your website getting hammered by vulnerability scanners, brute-force bots, content scrapers, AI crawlers and botnets?

Not on Hostney.

Hosting for WordPress, Drupal and apps from Git, each in its own container. Scanners, login bots and scrapers are challenged or banned before your site's code runs, while your visitors and Google get through. 14 days free, no card required.

14-day free trialNo credit cardFree starter address
A woman in a blue shirt at her laptop by a tall window, looking outside

Same price

On renewal, every year

99.99%

Uptime, last 12 mo

Daily

Backups kept up to 30 days

E

210+

Tasks Ellie handles

Bot protection

Stop bots from burning your resources

Up to 40% of web traffic is automated. Scrapers, scanners, and credential stuffers waste your CPU, RAM, and bandwidth. Our bot detection catches them automatically so your resources serve real visitors.

  • Proof-of-work challenges

    Suspicious IPs get a computational puzzle. Real browsers solve it in 2 seconds. Bots can't.

  • Machine learning model

    An adaptive ML model trains on real traffic patterns, improving detection accuracy over time with every challenge outcome.

  • Verified bot protection

    Googlebot, Bingbot, and 25+ verified crawlers are exempted by dual-verification: UA match plus IP range confirmation.

  • Zero configuration

    Active from the moment your site goes live. No plugins, no setup, no maintenance. It just works.

Requests to yourshop.com

Answered before your site's code runs

Example
  • ScannerGET /.envChallenged
  • Login botPOST /wp-login.phpRate limited
  • ScraperGET /shop/*Challenged
  • AI crawlerGET /blog/*Blocked
  • BotnetPOST /xmlrpc.phpBanned
  • Googlebot, verifiedGET /sitemap.xmlLet through
  • VisitorGET /checkoutLet through

Real-time threat scoring

20+ signals. One score.

  • 0-20Clean
  • 21-50Watched
  • 51-80Challenged
  • 81-100Banned

Meet Ellie

Skip the menus. Just tell her what you need.

Ellie is your AI server admin. She doesn't link to docs or open tickets. She deploys sites, creates databases, fixes performance issues, and manages your entire stack through plain conversation.

210+tasks she can handle

From deploying WordPress to managing cron jobs, server resource usage to database backups. No menus to navigate, no documentation to read.

  • WordPress management
  • Database operations
  • Cron jobs
  • Performance tuning
  • Caching & CDN
  • Resource usage
See everything Ellie can do

Built to assist, not override

Ellie never exceeds your permissions, never accesses secrets, and never acts without consent. Every action is logged and auditable.
A woman relaxing on a sofa with a laptop on her lap, hands behind her head

Security by design

Security at every layer

Container isolation, SELinux enforcing, real-time malware detection, and kernel hardening. Every component is locked down from the moment it runs.

Container isolation

Every account runs in its own isolated container with dedicated resources and traffic-based throttling. One site's spike never affects another.

  • Dedicated CPU, RAM, and I/O
  • Traffic-based throttle system
  • Full neighbor isolation

SELinux enforced

We run SELinux in enforcing mode. Every file access, network connection, and process is validated against mandatory access control policies.

  • Privilege escalation prevention
  • Zero-day exploit mitigation
  • Enterprise-grade security

Real-time malware detection

A custom file monitoring daemon watches every change in real time. Threats are caught the moment they appear, not during a daily scan.

  • Instant file scanning
  • Auto-quarantine threats
  • ModSecurity WAF included
  • noexec filesystems

    Uploaded binaries cannot be executed on the server

  • no-new-privileges

    Processes cannot gain additional privileges after startup

  • Kernel hardening

    User namespace restrictions prevent container escape attacks

  • Hostney's orchestrator

    Purpose-built infrastructure with 100+ operations

Features

Everything in one panel

Managed WordPress, resource monitoring, layered security, and SSH access to all of it.

Hands typing on a laptop and writing in a notebook at a wooden desk by a window

Managed WordPress

Manage WordPress your way

Deploy, update, and secure your WordPress sites from one dashboard. One-click admin login, auto-updates with configurable delays, and built-in security hardening.

  • Auto-updates
  • Plugin management
  • SSO login
  • Security hardening
  • Auto-updatesConfigurable delay for safe rollouts
  • SSO loginOne-click admin access, no passwords
  • Security hardeningXML-RPC blocking, REST API protection
  • Migration toolSSH-based transfer with live progress

Know what's happening

Real-time CPU, RAM, and storage monitoring. See exactly what's using resources. Get alerts before problems become outages.

  • Real-time resource monitoring
  • Traffic analytics
  • Performance insights

Sleep tight

Malware detection, behavioral bot scoring, web application firewall, and container isolation. Threats are caught before they reach your application.

  • Real-time malware detection
  • Automated bot detection
  • ModSecurity WAF

Developer tools built-in

SSH access. Web terminal. Git deployment from GitHub, GitLab, or Bitbucket. PHP version per subdomain. Memcached cache browser.

  • SSH + web terminal
  • Git integration
  • PHP version selector
Three colleagues unpacking boxes in a new office

Free migration

WordPress migration is on us.

Free white-glove migration, or move it yourself with the plugin or over SSH.

Risk-free

See for yourself

No commitments. No credit card. Just 14 days to explore everything.

A man with a coffee smiling at his phone at a kitchen table
  • 14

    days free trial

    No credit card required

  • 100%

    full access

    Including Ellie

  • 0

    risk

    Cancel anytime

Get started

Security that works before your site even loads.

Behavioral bot detection, hardened containers, and daily backups.
All included with Ellie from day one.

  • 14-day free trial
  • No credit card
A developer working at two monitors

Frequently asked questions

Why choose Hostney?

Everything you need to know about our hosting platform, security, and support. Can't find the answer you're looking for? Check our blog.

What makes Hostney different from other hosting providers?
Every account runs in an isolated Linux container with SELinux in enforcing mode - the same security standard used by government agencies. Our custom control panel, CLI orchestrator, and Ellie AI assistant (210+ server management tasks through plain conversation) are all designed specifically for this platform.
Do I need technical knowledge to use Hostney?
Not at all. While we offer powerful developer tools like SSH access and Git integration, our control panel is designed to be intuitive for everyone. One-click WordPress deployment, automatic updates, and managed security features mean you can focus on your website rather than server management.
Can I migrate my existing website to Hostney?
Yes! We provide a built-in migration tool that makes transferring your sites from other hosts seamless. For WordPress sites, we can auto-discover your installation and handle the migration automatically. Our support team is also available to assist with more complex migrations.
What kind of support do you offer?
All plans include comprehensive support through our ticketing system. Our team is experienced with both traditional hosting setups and modern development workflows, so whether you're running WordPress or a custom application, we've got you covered.
Is my data backed up automatically?
Yes, we perform daily backups for all accounts. You also have file-level backup access, meaning you can restore specific files or directories whenever you need them, not just full-site backups.
Can I upgrade my plan anytime?
Yes! You can upgrade from Startup to Advanced or Pro at any time. Upgrades are prorated, so you only pay for the difference in your billing cycle.
How does bot detection work?
Every IP that sends requests to your site gets a threat score from 0 to 100, computed from 20+ independent signals including rate patterns, scanner behavior, cookie handling, and more. Suspicious IPs get proof-of-work challenges. Malicious ones are banned across all servers. It runs automatically, no plugins or configuration needed.