New features, improvements and fixes across the control panel, our WordPress plugins, the infrastructure your sites run on and Ellie, newest first.
This is a selection of the changes you're most likely to notice, not everything we ship: much of our work happens behind the scenes. The page isn't updated in real time, so a change can take a few days to show up here after it goes live.
No renewal trap
Renews at the regular price
99.99%
Uptime, last 12 mo
Daily
Backups kept up to 30 days
210+
Tasks Ellie handles
Node.js 20 reached end of life in April 2026 and gets no more security fixes, so the app builder no longer offers it. Every app had already moved to a newer version, so no running app is affected.
Every plugin and theme now has a Change version option and a version history that shows each change, when it happened and whether it came from you, an automatic update or WordPress itself.
WordPress > Settings > Cache clears your site's caches and pre-fetches your pages, so the first visitor after a change gets a fast, cached page. You can see how the last run went.
When an update, a rollback, a snapshot or backup restore, a search and replace or a staging push changes your site, we clear its object cache and page cache and then pre-fetch your pages.
wp hostney-cache commands we use for this.Install Joomla 6.2 or PrestaShop 9.2 from the App installer, next to Drupal.
If a plugin, theme or WordPress itself has a critical or high-severity vulnerability that we can't fix because automatic updates are off, you get one email every Tuesday covering all your sites until it's fixed.
When automatic updates install something on your site, you get one summary a day at 9 AM in your time zone. Security fixes, rollbacks and a site that stopped loading are emailed right away.
Paste a full URL, a www. address or a subdomain and the Add domain page takes what it can and explains the rest, instead of a bare "Invalid domain name".
Refreshing the page or opening a second tab no longer cancels the code we already emailed. Send the code again resends the same code, at most once a minute.
Turning bot protection, datacenter blocking, Check every visitor, invisible checks or lockdown on or off now emails the account owner, and names the delegate who did it.
The Integrity tab compares WordPress core, plugins and themes with the copies published on wordpress.org and flags files that were added, changed or removed.
Leave a page with unsaved edits through the sidebar, a link, Ellie or the browser's Back button, and the panel asks first.
The file manager downloads a single file as it is. Several files or a folder still come as a .tar.gz, and the download says so.
Login activity shows how each sign-in happened, the account's roles and when a new administrator appears. Two new switches per site email you about administrator sign-ins. Both are off by default.
The app builder offers Node.js 26 and recommends 24. If a security update comes out for the Node.js version your app runs on, a banner on the app's page tells you.
A site on a PHP version that no longer gets security fixes shows a warning that says what that means: known critical vulnerabilities that will never be fixed upstream.
Planned maintenance and incidents now show as a notice strip on every panel page, so you hear about them where you work.
All our emails share one new design, come with a plain-text version and read properly in dark mode.
When you restore from a backup, you can save the databases you pick as .sql files in .recovery instead of replacing the live ones.
If Hostney Cache is missing from a site, the WordPress pages show a notice with an Install button.
object-cache.php holds the drop-in slot, with the choice to keep it or replace it.Leave the source path empty and turn on Redirect the whole website to send every page of a site to one address. Certificate renewals keep working while it's on.
Heads-up: Redirects saved earlier with an empty source path used to cover the homepage only. They now forward every page.
A per-site switch on the WAF page that checks each visitor's browser before the first page loads. Made for sites scraped from a new address on every request. Off by default.
The Nginx page lists the pages that are never cached and why, for example a plugin that sets a cookie on every page.
Outlook, Apple Mail and phone mail apps now sign in with an app password instead of your mailbox password. Create one from the mailbox's App passwords drawer in the panel.
Heads-up: If a mail app keeps asking for your password, create an app password for it and enter that instead.
Rename, copy, move and new files refuse a name that's already taken. Uploads and archive extraction skip existing files unless you tick Replace files that already exist.
The WordPress migration plugin flags a multisite network, an unusual folder layout or a site bigger than your disk space up front, before anything is copied.
When wordpress.org hasn't published a release in your site's language, we install the English release and your language pack instead of waiting.
The WordPress pages show a banner when your site fails to load with its plugins active, so you know why panel actions on it aren't working.
Search, register, transfer in and renew domains in the panel, with nameservers, DNSSEC, glue records and DNS records on one page per domain.
Heads-up: Early access: turned on account by account. Ask support if you'd like it.
Select records on the DNS page, or all of them, and delete them in one go.
A cron job can now run a shell command inside your account's SSH container, not only call a URL. Any job can be switched off without deleting it.
Lists, tables and cards in the panel's dark mode are easier to tell apart, and text uses neutral greys instead of blue-tinted ones.
If your domain's CAA records don't allow Let's Encrypt, the Health check says so and shows the record that fixes it.
When your bank declines a card, the panel says it was declined instead of asking you to enter it again.
Ellie runs on Claude Sonnet 5.5, keeps your chat when you reload the page and answers in the language you write in.
The WordPress auto-update window uses your local time, and both the page and Ellie name the zone.
Choose your backup window on plans that include it. Ellie can change it too, and shows the time in your zone.
A card that removes or switches off something stops working 15 minutes after Ellie offers it, so an old card can't be clicked by mistake later.
Give a delegate only the areas you choose, view-only or full, on all or some of your hosting accounts. Ellie follows the same limits.
This changelog starts in September 2026.
Try it yourself
Start a 14-day free trial. No credit card needed.
Simple, transparent pricing
Every plan includes managed WordPress, SSH access, daily backups, and enterprise-grade security. Start with a 14-day free trial.
Black Friday30% off up to 3 years with code BLACKFRIDAY30Ends Cyber Monday, November 30
Great for growing businesses
$7.89
$66.29 a year for up to 3 years, then $94.70/yr
What's included:
SSL & Domain
For professional websites
$14.97
$125.79 a year for up to 3 years, then $179.70/yr
Everything in Startup, plus:
Backups
Performance
Maximum performance and features
$22.89
$192.29 a year for up to 3 years, then $274.70/yr
Everything in Advanced, plus:
Deployment
Backups
Monitoring
For new customers on annual plans. Enter the code at checkout, or when you upgrade a free trial before the sale ends. The 30% comes off every year you pay for up front, 1 to 3 years; after that, renewals are at the plan's regular price. Ends 11:59 p.m. Eastern on Monday, November 30.
