Skip to main content
Managed WordPress

Managed WordPress, built into the platform

One-click deployment, automatic updates with smart delays, plugin health monitoring, and SSO admin login. All of it runs at the server level, so there is nothing to install inside WordPress and nothing extra to keep updated.

14 days free. No credit card. No commitment.

Same price

On renewal, every year

99.99%

Uptime, last 12 mo

Daily

Backups kept up to 30 days

E

190+

Tasks Ellie handles

WordPress management

Everything WordPress needs, built in

No plugins to install, no manual configuration. WordPress management is part of the platform.

  • One-click deployment

    Deploy WordPress on any subdomain in ~30 seconds. Database, SSL, caching, admin account, and the Hostney Cache plugin are set up automatically.

  • SSO admin login

    Log into WordPress admin with one click from the control panel. No passwords to remember, no wp-login.php exposed to attackers.

  • Auto-updates with smart delays

    Configure automatic updates for core, plugins, and themes independently. Set delays so updates are tested in the wild before they hit your site.

  • Plugin & theme management

    View, activate, and deactivate plugins across all your WordPress sites. Broken plugin detection runs every 30 minutes.

  • Security hardening

    XML-RPC blocking, REST API protection, SSO-only login, and PHP upload blocking. Server-level enforcement, not a plugin.

  • Snapshots & restore

    Manual snapshots anytime. Automatic snapshots before every core update. One-click restore when things go wrong.

Auto-updates

Updates that wait until they're safe

Configure delays for every update type. Your site only updates after the community has tested the release.

  • Core updates

    Security patches and major version upgrades can apply immediately or with up to 7-day delay, giving the community time to catch issues first.

  • Plugin & theme updates

    Configure delays independently for plugins and themes. Broken plugin detection runs every 30 minutes, so you'll know before your visitors do.

  • Update windows

    Restrict when updates apply. Set a maintenance window so updates never run during peak traffic hours. Supports overnight windows that cross midnight.

WordPress security

Server-level hardening, not a plugin

Security enforced at the web server level. No WordPress plugin can be disabled or bypassed by attackers.

  • SSO-only login

    Block wp-login.php entirely. Login only through the control panel with short-lived one-time tokens.

  • XML-RPC blocking

    Disable xmlrpc.php to prevent brute force attacks and DDoS amplification through pingbacks.

  • REST API protection

    Block user enumeration at /wp-json/wp/v2/users. Prevents attackers from discovering admin usernames.

  • PHP upload blocking

    Block PHP execution in wp-content/uploads. Even if malware is uploaded, it can't execute.

WordPress-specific bot protection

wp-login brute force detection, xmlrpc.php abuse blocking, and plugin scanning detection, all running automatically. Logged-in admins are always exempt.

CVE vulnerability scanning

Your installed plugins, themes, and WordPress core are checked daily against the Wordfence Intelligence vulnerability database. Known CVEs are flagged with severity ratings so you can update or dismiss them before they become a problem.

Safety net

Snapshots before every update

Never worry about updates breaking your site. Snapshots let you roll back in seconds.

  • Create manual snapshots anytime
  • Automatic snapshot before every core update
  • Up to 3 snapshots per WordPress installation
  • One-click restore from the control panel

Migration

Move your WordPress site in minutes

Our SSH-based migration tool transfers your files, exports your database, and handles the domain switch automatically.

  • Auto-detection

    Connects via SSH and automatically finds your WordPress installation, plugins, database, and site URL.

  • Smart file transfer

    Multiple transfer methods with automatic fallbacks ensure your files arrive safely. Progress is tracked in real time.

  • Database migration

    Database is exported from your old host, imported into a new database on Hostney, and all URLs are replaced automatically.

  • wp-config.php handled

    Database credentials, table prefixes, and site URLs are updated in wp-config.php. No manual editing required.

WordPress migration plugin

Install our open-source migration plugin on your old site and migrate without SSH credentials.

More tools

Search & replace, and staging

Two more things you would otherwise reach for a plugin to do.

Database search & replace

Migrating domains? Our search & replace tool updates all URLs in your WordPress database in one step. Job history tracks every operation with replacement counts.

  • Perfect for domain migrations and SSL transitions

Staging environments

Clone any WordPress install to its own staging address with one click. Test theme changes, plugin updates, and a different PHP version, then push the files and only the database tables you pick back to production.

  • One-click login, and every push is logged

Object caching

An object cache WordPress picks up on its own

Nginx caches whole pages for signed-out visitors. An object cache holds the queries behind everything else - wp-admin, the cart, anything personalised - so the same answer is not fetched from MySQL twice.

  • Redis

    Per-key expiry and least-recently-used eviction, so a full cache trims its coldest entries instead of refusing writes. It is what most modern object-cache drop-ins target first, and the key browser shows the time-to-live on every entry.

  • Memcached

    The simpler engine and the one older PHP applications already expect. Lower overhead per entry, the same memory allocation from your plan, and the same stats and browser in the panel.

  • Live stats

    Memory used against your allocation, hit rate, cached keys, and uptime, read from the running instance rather than a stored counter.

  • A real cache browser

    Inspect what is actually cached, sort by size or last access, open a single value, and delete one key without flushing everything else.

  • Private to your account

    Your cache is yours alone. No other account on the server can read it, see what is in it, or clear it - the same isolation your files and databases already sit behind.

One engine at a time

An account runs Redis or Memcached, never both: one allocation, one socket, one set of stats. Switching is a single confirmation in the panel. The engine you were using stops, the new one starts, and the cache refills itself over the next few requests - nothing else about the site changes.

WordPress connects itself

The Hostney Cache plugin installs a WordPress object-cache drop-in that detects which engine is running and connects to it. There is nothing to configure, and nothing to change if you switch engines later - the same drop-in speaks to both.

WordPress plugins

Open-source plugins built for Hostney

Purpose-built WordPress plugins that integrate with the Hostney platform. Free, open-source, and automatically installed on new deployments.

Hostney Cache

Automatically purges nginx cached pages and manages the object cache - Redis or Memcached, whichever your account is running - when content changes. Handles posts, pages, taxonomies, and comments with smart URL collection, deduplication, and batch overflow protection.

View on GitHub

Hostney Migration

Migrate your WordPress site to Hostney without SSH access. Install the plugin on your current site, enter a migration token from the control panel, and the plugin transfers your database and files over a secure REST API.

View on GitHub

AI-powered WordPress

Manage WordPress with Ellie

Skip the menus. Tell Ellie what you need and she'll handle the rest.

  • E

    "Deploy WordPress on shop.mydomain.com"

  • E

    "Update all WordPress plugins"

  • E

    "Log me into WordPress admin"

  • E

    "Enable auto-updates with 3-day delay"

  • E

    "Why is my site slow?"

190+

tasks she can handle

Deploy, update, secure, and troubleshoot WordPress through conversation.

DeployUpdatePluginsLoginCacheDiagnose

Pricing

Simple, transparent pricing

Every plan includes managed WordPress, SSH access, daily backups, and enterprise-grade security. Start with a 14-day free trial.

Startup

Great for growing businesses

$7.99/mo

$94.99 billed annually

  • 1 website
  • 10 GB storage
  • ~10,000 visits/month
  • 5 MySQL databases
  • 250,000 inodes
  • 5 FTP users

What's included:

SSL & Domain

  • Free SSL certificate
  • Free starter domain

Apps & CMS

  • 1-click WordPress
  • Managed WordPress
  • WordPress staging
Most popular

Advanced

For professional websites

$14.99/mo

$179.99 billed annually

  • 5 websites
  • 20 GB storage
  • ~110,000 visits/month
  • 10 MySQL databases
  • 500,000 inodes
  • 10 FTP users

Everything in Startup, plus:

Backups

  • 14 days of backup history

Performance

  • Memcached object cache
  • Redis object cache

Monitoring

  • 5 minutes between checks

Pro

Maximum performance and features

$22.99/mo

$274.99 billed annually

  • 10 websites
  • 40 GB storage
  • ~200,000 visits/month
  • 20 MySQL databases
  • 750,000 inodes
  • 20 FTP users

Everything in Advanced, plus:

Deployment

  • 2 SSR applications

Backups

  • 30 days of backup history

Monitoring

  • 1 minute between checks

Get started

Deploy your first WordPress site in 30 seconds

Auto-updates, security hardening, and Ellie included in every plan.
Start free for 14 days, no credit card required.

Questions

Frequently asked questions

How fast is WordPress deployment?
WordPress is typically deployed and ready in under 30 seconds. This includes installing WordPress, setting up the database, and enabling caching. You can do it through the control panel or just ask Ellie.
How do auto-updates work?
We check for available updates every 4 hours. When an update is found, it waits for your configured delay period (e.g., 3 days for minor updates, 7 days for major). Updates only apply during your set maintenance window. A database snapshot is automatically created before every core update.
What if a plugin update breaks my site?
Our plugin health monitoring runs every 30 minutes and detects PHP fatal errors caused by incompatible plugins. If a broken plugin is found, you're notified immediately. You can restore from a snapshot with one click, or ask Ellie to deactivate the problematic plugin.
Can I use WooCommerce?
Yes. WordPress with WooCommerce works great on Hostney. Our container isolation ensures your store has dedicated resources, and our caching layer is configured to exclude cart and checkout pages automatically.
What PHP versions work with WordPress?
We support PHP 5.6 through 8.5, and you can set a different version for each subdomain. While we recommend using a currently supported PHP version, older versions are available for legacy sites that need them. This is especially useful when running multiple WordPress sites with different requirements. Changing versions takes seconds through the panel or Ellie.
How does SSO login work?
Click "Admin login" from the control panel and you're automatically logged into WordPress admin using a short-lived one-time token. No wp-login.php is exposed to the internet, eliminating brute force attacks entirely.
Can I migrate from another host?
Yes. Our migration tool uses SSH to transfer files, export the database, and import everything into your Hostney account. It handles wp-config.php updates, domain search-and-replace, and SSL configuration. You can also scan your account for existing WordPress installations, or use our open-source WordPress migration plugin to migrate without SSH credentials.
How does CVE vulnerability scanning work?
We sync the Wordfence Intelligence vulnerability database daily and match it against your installed plugins, themes, and WordPress core version. If a known CVE affects something you have installed, it appears in your dashboard with a severity rating. You can update the affected software or dismiss the alert if it doesn't apply to your configuration.
Is managed WordPress included in all plans?
Yes. Every feature (deployment, auto-updates, plugin management, security hardening, snapshots, SSO login, and search & replace) is included in every Hostney plan at no extra cost.