Skip to main content
Managed WordPress

Managed WordPress, built into the platform

One-click deployment, automatic updates with smart delays, plugin health monitoring, and SSO admin login. All of it runs at the server level, so there is nothing to install inside WordPress and nothing extra to keep updated. Every update gets a snapshot first and is rolled back automatically if WordPress stops loading, and updates that patch a known vulnerability skip the delay.

14 days free. No credit card. No commitment.

A man shipping an order: a parcel under one arm, photographing it with his phone beside a laptop

Same price

On renewal, every year

99.99%

Uptime, last 12 mo

Daily

Backups kept up to 30 days

E

210+

Tasks Ellie handles

WordPress management

Everything WordPress needs, built in

No plugins to install, no manual configuration. WordPress management is part of the platform.

  • One-click deployment

    Deploy WordPress on any subdomain in ~30 seconds. Database, SSL, caching, admin account, and the Hostney Cache plugin are set up automatically.

  • SSO admin login

    Log into WordPress admin with one click from the control panel. No passwords to remember, no wp-login.php exposed to attackers.

  • Auto-updates with smart delays

    Configure automatic updates for core, plugins, and themes independently. Set delays so updates are tested in the wild before they hit your site. Fixes for known vulnerabilities skip the wait.

  • Plugin & theme management

    View, activate, and deactivate plugins across all your WordPress sites. Broken plugin detection runs every 30 minutes.

  • Security hardening

    XML-RPC blocking, REST API protection, SSO-only login, and PHP upload blocking. Server-level enforcement, not a plugin.

  • Snapshots & restore

    Manual snapshots anytime, and an automatic one before every core, plugin, and theme update. One-click restore when things go wrong.

Auto-updates

Updates that wait until they're safe

Configure delays for every update type. Your site only updates after the community has tested the release.

  • Core updates

    Security patches and major version upgrades can apply immediately or with up to 7-day delay, giving the community time to catch issues first. If wordpress.org hasn't published your language's build of a new version yet, the English one goes on with your language pack, and the site keeps its language.

  • Plugin & theme updates

    Configure delays independently for plugins and themes. Broken plugin detection runs every 30 minutes, so you'll know before your visitors do.

  • Update windows

    Restrict when updates apply. Set a maintenance window so updates never run during peak traffic hours. Supports overnight windows that cross midnight.

  • Security fixes go first

    When an update patches a known vulnerability in a version you run, it skips your delay, and critical or high fixes don't wait for the update window either. If auto-updates are off, we email you that the fix is ready instead.

WordPress security

Server-level hardening, not a plugin

Security enforced at the web server level. No WordPress plugin can be disabled or bypassed by attackers.

  • SSO-only login

    Block wp-login.php entirely. Login only through the control panel with short-lived one-time tokens.

  • XML-RPC blocking

    Disable xmlrpc.php to prevent brute force attacks and DDoS amplification through pingbacks.

  • REST API protection

    Block user enumeration at /wp-json/wp/v2/users. Prevents attackers from discovering admin usernames.

  • PHP upload blocking

    Block PHP execution in wp-content/uploads. Even if malware is uploaded, it can't execute.

WordPress-specific bot protection

wp-login brute force detection, xmlrpc.php abuse blocking, and plugin scanning detection, all running automatically. Logged-in admins are always exempt.

CVE vulnerability scanning

Your installed plugins, themes, and WordPress core are checked daily against the Wordfence Intelligence vulnerability database. Known CVEs are flagged with severity ratings so you can update or dismiss them before they become a problem. When a fix is out and auto-updates are on, it goes on without waiting for your delay. When we can't apply it for you, we email you about it.

Safety net

Snapshots before every update

Never worry about updates breaking your site. Snapshots let you roll back in seconds.

A woman wrapped in a blanket with a mug of tea, smiling at her laptop on an evening at home
  • Create manual snapshots anytime

  • Automatic snapshot before every update

  • Rolled back automatically if WordPress stops loading

  • Up to 3 manual snapshots per installation

  • One-click restore from the control panel

Snapshots are not full backups. Use the Backups feature for complete data protection.

Migration

Move your WordPress site in minutes

Our SSH-based migration tool transfers your files, exports your database, and handles the domain switch automatically.

A café owner in an apron smiling beside the door's Open sign
  • Auto-detection

    Connects via SSH and automatically finds your WordPress installation, plugins, database, and site URL.

  • Smart file transfer

    Multiple transfer methods with automatic fallbacks ensure your files arrive safely. Progress is tracked in real time.

  • Database migration

    Database is exported from your old host, imported into a new database on Hostney, and all URLs are replaced automatically.

  • wp-config.php handled

    Database credentials, table prefixes, and site URLs are updated in wp-config.php. No manual editing required. Your own settings in it come along too, like a custom constant or DISALLOW_FILE_EDIT.

  • Checked after the move

    Once everything is in, we check that WordPress loads with its plugins, and the migration log tells you if it doesn't.

WordPress migration plugin

Install our open-source migration plugin on your old site and migrate without SSH credentials. It checks the old site before anything copies, so a multisite network, an unusual folder layout, or files that won't fit your disk space are flagged up front. Every wordpress.org plugin is checked against its official file list, so none of its files get left behind, and you can pause, resume, or continue a stopped migration where it left off.

More tools

Search & replace, and staging

Two more things you would otherwise reach for a plugin to do.

Database search & replace

Migrating domains? Our search & replace tool updates all URLs in your WordPress database in one step. Job history tracks every operation with replacement counts.

  • Perfect for domain migrations and SSL transitions

Staging environments

Clone any WordPress install to its own staging address with one click. Test theme changes, plugin updates, and a different PHP version, then push the files and only the database tables you pick back to production.

  • One-click login, and every push is logged

Object caching

An object cache WordPress picks up on its own

Nginx caches whole pages for signed-out visitors. An object cache holds the queries behind everything else - wp-admin, the cart, anything personalised - so the same answer is not fetched from MySQL twice.

  • Redis

    Per-key expiry and least-recently-used eviction, so a full cache trims its coldest entries instead of refusing writes. It is what most modern object-cache drop-ins target first, and the key browser shows the time-to-live on every entry.

  • Memcached

    The simpler engine and the one older PHP applications already expect. Lower overhead per entry, the same memory allocation from your plan, and the same stats and browser in the panel.

  • Live stats

    Memory used against your allocation, hit rate, cached keys, and uptime, read from the running instance rather than a stored counter.

  • A real cache browser

    Inspect what is actually cached, sort by size or last access, open a single value, and delete one key without flushing everything else.

  • Private to your account

    Your cache is yours alone. No other account on the server can read it, see what is in it, or clear it - the same isolation your files and databases already sit behind.

One engine at a time

An account runs Redis or Memcached, never both: one allocation, one socket, one set of stats. Switching is a single confirmation in the panel. The engine you were using stops, the new one starts, and the cache refills itself over the next few requests - nothing else about the site changes.

WordPress connects itself

The Hostney Cache plugin installs a WordPress object-cache drop-in that detects which engine is running and connects to it. There is nothing to configure, and nothing to change if you switch engines later - the same drop-in speaks to both.

WordPress plugins

Open-source plugins built for Hostney

Purpose-built WordPress plugins that integrate with the Hostney platform. Free, open-source, and automatically installed on new deployments.

Hostney Cache

Automatically purges nginx cached pages and manages the object cache - Redis or Memcached, whichever your account is running - when content changes. Handles posts, pages, taxonomies, and comments with smart URL collection, deduplication, and batch overflow protection.

View on GitHub

Hostney Migration

Migrate your WordPress site to Hostney without SSH access. Install the plugin on your current site, enter a migration token from the control panel, and the plugin transfers your database and files over a secure REST API.

View on GitHub

AI-powered WordPress

Manage WordPress with Ellie

Skip the menus. Tell Ellie what you need and she'll handle the rest.

A woman at a café table typing on her phone, a laptop and a coffee in front of her
210+tasks she can handle

Deploy, update, secure, and troubleshoot WordPress through conversation.

  • Deploy WordPress
  • Updates and auto-update delays
  • Plugin management
  • One-click admin login
  • Caching
  • Diagnosing a slow site
See everything Ellie can do

Built to assist, not override

Ellie never exceeds your permissions, never accesses secrets, and never acts without consent. Every action is logged and auditable.

Pricing

Simple, transparent pricing

Every plan includes managed WordPress, SSH access, daily backups, and enterprise-grade security. Start with a 14-day free trial.

Startup

Great for growing businesses

$7.99/mo

$94.99 billed annually

  • 1 website
  • 10 GB storage
  • ~10,000 visits/month
  • 5 MySQL databases
  • 250,000 inodes
  • 5 FTP users

What's included:

SSL & Domain

  • Free SSL certificate
  • Free starter domain

Email

  • 2 mailboxes
  • 3 GB per mailbox
  • Webmail, IMAP and SMTP
Most popular

Advanced

For professional websites

$14.99/mo

$179.99 billed annually

  • 5 websites
  • 20 GB storage
  • ~110,000 visits/month
  • 10 MySQL databases
  • 500,000 inodes
  • 10 FTP users

Everything in Startup, plus:

Email

  • 5 mailboxes
  • 5 GB per mailbox

Backups

  • 14 days of backup history

Performance

  • Memcached object cache
  • Redis object cache

Pro

Maximum performance and features

$22.99/mo

$274.99 billed annually

  • 10 websites
  • 40 GB storage
  • ~200,000 visits/month
  • 20 MySQL databases
  • 750,000 inodes
  • 20 FTP users

Everything in Advanced, plus:

Email

  • 10 mailboxes
  • 10 GB per mailbox

Deployment

  • 2 SSR applications

Backups

  • 30 days of backup history

Monitoring

  • 1 minute between checks

Get started

Deploy your first WordPress site in 30 seconds

Auto-updates, security hardening, and Ellie included in every plan.
Start free for 14 days, no credit card required.

A couple at a table smiling at a laptop together

Questions

Frequently asked questions

How fast is WordPress deployment?
WordPress is typically deployed and ready in under 30 seconds. This includes installing WordPress, setting up the database, and enabling caching. You can do it through the control panel or just ask Ellie.
How do auto-updates work?
We check for available updates every 4 hours. When an update is found, it waits for your configured delay period (e.g., 3 days for minor updates, 7 days for major). Updates only apply during your set maintenance window. A snapshot is taken before every update, and an update that patches a known vulnerability skips the delay.
What if a plugin update breaks my site?
If WordPress stops loading right after an update we apply, the snapshot taken just before it is restored automatically. Our plugin health monitoring runs every 30 minutes and detects PHP fatal errors caused by incompatible plugins. If a broken plugin is found, you're notified immediately. You can restore from a snapshot with one click, or ask Ellie to deactivate the problematic plugin.
Can I use WooCommerce?
Yes. WordPress with WooCommerce works great on Hostney. Our container isolation ensures your store has dedicated resources, and our caching layer is configured to exclude cart and checkout pages automatically.
What PHP versions work with WordPress?
We support PHP 5.6 through 8.5, and you can set a different version for each subdomain. While we recommend using a currently supported PHP version, older versions are available for legacy sites that need them. This is especially useful when running multiple WordPress sites with different requirements. Changing versions takes seconds through the panel or Ellie.
How does SSO login work?
Click "Admin login" from the control panel and you're automatically logged into WordPress admin using a short-lived one-time token. No wp-login.php is exposed to the internet, eliminating brute force attacks entirely.
Can I migrate from another host?
Yes. Our migration tool uses SSH to transfer files, export the database, and import everything into your Hostney account. It handles wp-config.php updates, domain search-and-replace, and SSL configuration. You can also scan your account for existing WordPress installations, or use our open-source WordPress migration plugin to migrate without SSH credentials.
How does CVE vulnerability scanning work?
We sync the Wordfence Intelligence vulnerability database daily and match it against your installed plugins, themes, and WordPress core version. If a known CVE affects something you have installed, it appears in your dashboard with a severity rating. You can update the affected software or dismiss the alert if it doesn't apply to your configuration.
Is managed WordPress included in all plans?
Yes. Every feature (deployment, auto-updates, plugin management, security hardening, snapshots, SSO login, and search & replace) is included in every Hostney plan at no extra cost.

Recent articles