Hosting & Security

Managed website hosting from Harrogate, on servers we run ourselves

Tier 3 UK data centres in London and Manchester, behind Cloudflare, managed by us rather than rented from a reseller. We host sites we built and plenty we didn't.

Start here

Hosting, maintenance, or both

Hosting and developer time are two different things, and most of the confusion about what an agency charges for comes from the two being sold as one.

Hosting plan

The site running, staying up, staying patched at the server and network level, being backed up, and being watched. New hosting goes on one of the three plans below. If the site mostly ticks along and you want someone competent looking after the thing it runs on, that is all you need.

Maintenance plan

Developer time every month: things built, fixed, changed and improved. If there is a list of jobs for the site most months, that is maintenance and support, and it is priced separately from hosting. Maintenance clients hosted with us take Hosting Only at £30 a month alongside their plan, because the maintenance plan already covers the updates and the security work that Care and Care Plus exist to provide.

Care and Care Plus are for sites without a maintenance plan. You will never need both.

Hosting plans

Three plans, and what each one includes

All prices ex VAT, billed monthly, rolling, 30 days' notice.

Feature Hosting Only Recommended Care Care Plus
Managed hosting on UK data centres Yes Yes Yes
SSL and DNS managed by us Yes Yes Yes
Cloudflare edge security Yes Yes Yes
Backups, held away from the server, kept four weeks Weekly Daily Every 6 hours
Uptime monitoring Yes Yes Yes
WordPress and plugin updates You manage them We manage them We manage them
Proactive security monitoring No Yes Yes
Basic content changes included No Up to 1 hour a month Up to 3 hours a month
Core Web Vitals monitoring No No Yes
Support Standard Next business day First in queue
Monthly £30+ VAT£85+ VAT£145+ VAT
Hosting Only
Managed hosting on UK data centres Yes
SSL and DNS managed by us Yes
Cloudflare edge security Yes
Backups, held away from the server, kept four weeks Weekly
Uptime monitoring Yes
WordPress and plugin updates You manage them
Proactive security monitoring No
Basic content changes included No
Core Web Vitals monitoring No
Support Standard
Monthly £30+ VAT
Recommended Care
Managed hosting on UK data centres Yes
SSL and DNS managed by us Yes
Cloudflare edge security Yes
Backups, held away from the server, kept four weeks Daily
Uptime monitoring Yes
WordPress and plugin updates We manage them
Proactive security monitoring Yes
Basic content changes included Up to 1 hour a month
Core Web Vitals monitoring No
Support Next business day
Monthly £85+ VAT
Care Plus
Managed hosting on UK data centres Yes
SSL and DNS managed by us Yes
Cloudflare edge security Yes
Backups, held away from the server, kept four weeks Every 6 hours
Uptime monitoring Yes
WordPress and plugin updates We manage them
Proactive security monitoring Yes
Basic content changes included Up to 3 hours a month
Core Web Vitals monitoring Yes
Support First in queue
Monthly £145+ VAT

Hours included on Care and Care Plus are for basic content changes - text, images, simple page edits. They are not development time.

Development, integration work and custom code are not part of a hosting plan. That work is covered by a maintenance plan, or quoted separately as its own piece of work.

Domains and DNS can sit alongside your hosting - we will register and manage them for you.

High-traffic sites and custom systems can run on dedicated resources, sized to what they need.

Where you are now

Most sites arrive here from somewhere that stopped answering

We host sites we built and sites we didn't. The ones that come from elsewhere tend to arrive for one of four reasons.

The host has gone quiet.

Tickets get answered in two days by somebody reading from a script, and nobody at the other end has ever seen the site. That is a problem the day something is genuinely broken.

The site is sharing a server with hundreds of others.

It is fine until a neighbour gets busy or gets attacked, at which point your site slows down or falls over for reasons nothing to do with you.

Nobody is sure where the data is.

Cheap hosting is often somewhere else entirely, which is an awkward answer to give a client, a public-sector buyer or anyone asking a GDPR question.

The developer who set it up has moved on.

The site works, nobody knows how, and the login details are in somebody's old inbox.

None of those need a rebuild. We host for businesses in Harrogate, Knaresborough, Ripon, Wetherby, York, Leeds and across Yorkshire, and for clients around the UK - hosting is the one service where it genuinely does not matter where you are.

Uptime

99.999% average uptime, published live

Industry-typical hosting runs at 99.9% - that's nearly nine hours of downtime a year you'd notice. We aim an order of magnitude higher, and typically hit it. The number above is our live rolling 90-day figure across every site we host, not a marketing round-up.

We don't call 99.999% a guarantee. Upstream providers fail, certificates expire, the internet changes - anyone who promises five nines as a contract is either insuring against it or hasn't been doing this long enough. What we do promise is the infrastructure, monitoring and response on this page. That's what keeps the real number close to the target, month after month. If we slip, you'll hear it from us first.

Sites we build on the edge platform - Astro served from Cloudflare's network - sit outside this figure, because there is no server of ours in the path between the visitor and the page.

How that compares
Typical 99.9% Up to 8 hrs 45 min downtime per year
Good 99.99% Under 53 minutes downtime per year
Ours 99.999% Under 6 minutes downtime per year
Security

We know before you do

Firewalls are the first line of defence and they are the easy part. Most of what keeps a site safe is somebody looking at what is happening to it, and almost all of that work happens in the background where you never see it.

Proactive security monitoring on your individual site, and WordPress and plugin updates handled by us, start at Care. On those plans security updates are applied as soon as they are available - we do not wait for a scheduled maintenance window when a critical CMS or plugin vulnerability is disclosed. We patch and confirm.

When something does go wrong, there's one person to call and they already know your setup.

Traffic patterns, watched for what is out of place.

Repeated requests from a single address, or a sudden surge across a site that does not normally get one. That is either genuine demand or somebody probing, and the two look similar until you look properly.

Suspicious addresses investigated, then blocked by hand.

We check where traffic is coming from, so Googlebot and other legitimate crawlers get through, and where it is malicious we write manual Cloudflare blocking rules, repeated across as many addresses as it takes.

Server load read for what it is telling us.

CPU and memory are an early warning. Abnormal load usually means an attack or an exploit attempt before anything visible has happened, and the logs say where it is coming from.

Alerts the moment a site stops responding.

Every site we host is checked continuously. On the rare occasion a site on our infrastructure does go down, we know about it inside a couple of minutes, we have the access to fix it without waiting for a call, and it is usually sorted before anyone has noticed. That's not a selling point - it's how it should work.

Infrastructure

What your site runs on

Most hosting questions only get asked after something goes wrong. We'd rather you know exactly what you're running on before that happens.

Your site runs at Tier 3 data centres in London and Manchester, including Digital Realty - the same facilities used by major banks, cloud providers and the London Internet Exchange. Site data and backups are held in the UK.

A small number of sites share a server rather than hundreds, so yours is not competing for resources with whatever the neighbours are doing, and we manage the servers ourselves rather than renting space from a reseller. That is also where the speed comes from: a handful of sites per server, and Cloudflare caching in front of every one of them.

Every site sits behind Cloudflare at the DNS level: DDoS mitigation, WAF rules, bot filtering and edge caching, on every plan. Cloudflare is the edge in front of the servers, not the host.

There is nothing for you to log into and nothing for you to manage. Management access is locked down to us, which also means there is no extra door for anyone else to find.

Tier 3 data centres
London and Manchester, including Digital Realty. Trusted by major banks and the London Internet Exchange.
ISO 27001 - PCI-DSS - SOC 2
The data centres your site runs in are certified to all three: information security, payment card, and service organisation controls. Those are the facilities' accreditations, covering the buildings, power and physical security your site sits in.
GDPR-compliant by design
Your site and its backups are stored in UK data centres. We never store payment data. All card transactions are handled via Stripe tokenisation.
Backups

Backups that are somewhere else, and go back four weeks

Backups are held away from the server they came from and kept for four weeks on every plan. How often they run is what separates the three: weekly, daily, or every six hours.

They are encrypted before they leave the server, and stored with an enterprise object-storage provider in a separate location - not a folder on somebody's laptop and not a drive under a desk. We hold the key. Nobody at the storage provider can read the contents, and neither can anyone who gets hold of the files.

Four weeks matters more than most people expect. If something breaks on a Monday and you don't notice until Wednesday, we can still roll it back. We've had to do this - it works.

A backup sitting on the same server as the site is not a backup, which is why ours are not.

Migrations

Moving your site across, without it going down

Changing host has a reputation it mostly does not deserve. The reason it goes wrong is that people move the site by switching the DNS and hoping, rather than by getting it working somewhere else first.

We build the site on our servers and check it there before anything changes publicly. Your site keeps serving from where it is until the moment it is serving from us. We need access to your current host and to the domain to do it.

Comparing hosting

Where we sit against cheaper hosting

Hosting is sold in categories rather than by name, and the categories are more useful than a league table of brands. Plenty of serious businesses are on the first column without realising what it costs them when something goes wrong.

Category Mass-market shared hostingPremium managed WordPress hostingWonder Media
Typical price From around £3-£10 a monthFrom around £20-£30 a monthFrom £30 a month
Sites per server Hundreds to thousandsVaries, rarely publishedA small number, managed by us
Who manages it YouPartly you, partly automatedUs. There is nothing for you to log into
Backups Often an extra, daily at bestDailyWeekly, daily or every 6 hours by plan, held away from the server, kept four weeks
Updates and patching YouAutomatedA person, on Care and above
Server security Shared logins, software often years behindPlatform patched, your site is yours to patchServer and site both patched by us, on Care and above
Someone to speak to Ticket queueTicket queueDirectly with a developer
Uptime figures Rarely publishedPublished, usually 99.9%99.999% average, published live on a rolling 90 days
Where the data sits Often outside the UKOften US or EUUK
Mass-market shared hosting
Typical price From around £3-£10 a month
Sites per server Hundreds to thousands
Who manages it You
Backups Often an extra, daily at best
Updates and patching You
Server security Shared logins, software often years behind
Someone to speak to Ticket queue
Uptime figures Rarely published
Where the data sits Often outside the UK
Premium managed WordPress hosting
Typical price From around £20-£30 a month
Sites per server Varies, rarely published
Who manages it Partly you, partly automated
Backups Daily
Updates and patching Automated
Server security Platform patched, your site is yours to patch
Someone to speak to Ticket queue
Uptime figures Published, usually 99.9%
Where the data sits Often US or EU
Wonder Media
Typical price From £30 a month
Sites per server A small number, managed by us
Who manages it Us. There is nothing for you to log into
Backups Weekly, daily or every 6 hours by plan, held away from the server, kept four weeks
Updates and patching A person, on Care and above
Server security Server and site both patched by us, on Care and above
Someone to speak to Directly with a developer
Uptime figures 99.999% average, published live on a rolling 90 days
Where the data sits UK

Category descriptions based on publicly advertised plans at September 2026. Individual providers vary.

High availability

Mission-critical? We can configure failover

For systems where downtime has a direct financial or operational impact, we can configure active-passive failover with two synchronised servers behind Cloudflare's load balancing. If one server fails, traffic routes to the standby automatically - usually within seconds, with no manual intervention required.

This setup is suited to e-commerce platforms processing live transactions, portals where staff depend on access during working hours, or any system where even a few minutes of downtime has consequences. It's an additional investment, but for the right use case it removes the single point of failure that standard hosting can't avoid. Talk to us about your requirements.

Before you move

What people ask before moving their hosting

Yes, and plenty of what we host arrived that way. A WordPress install that several different people have had a go at over the years is familiar ground rather than a problem, and so is an old site nobody has touched since it launched. What matters for hosting is whether the site runs cleanly on a properly configured server, and most do once they are off whatever they were on.

Text, images, simple page edits - the kind of change that would take a few minutes if you knew your way around the admin. Swapping a phone number, updating opening hours, changing a photo, adding a news post. What it is not is development: new features, layout changes, plugin work, anything involving code or a third-party system. Those need developer time, which is a different plan and priced differently, and we will always say which one a job falls under before doing it.

It depends what has gone wrong, and the difference matters. If a site stops responding, we know within a couple of minutes whatever the day or the hour, and we deal with it then. Our own business runs on the same infrastructure and so do the businesses of everyone else on it, so nobody is waiting until Monday to look at a server. What does wait is everything that is not the site being down. Support hours are Monday to Thursday, 8am to 6pm, urgent issues are dealt with the same day where we can, and a change request raised on a Friday afternoon is picked up Monday morning. We would rather be straight about that than imply there is a night shift standing by for content edits.

In the UK. Sites run at Tier 3 data centres in London and Manchester, and backups are held in the UK as well, not shipped off to whichever region was cheapest. That is usually the answer people need when a client, a public-sector buyer or a procurement questionnaire asks where the data lives, and it is a question worth asking your current host if you have never had it in writing.

Both. WordPress and WooCommerce, Shopify-connected sites, and custom applications - portals, booking systems, CRMs - built in PHP and MySQL or on Node. Sites and applications we build on the edge platform run on Cloudflare's network instead of a server, which changes the shape of the hosting but not who looks after it. If you have something unusual, tell us what it is and we will tell you honestly whether we are the right people to run it.

Hosting plans are rolling and monthly with 30 days' notice, so you are never more than a month from leaving. Maintenance plans are the ones with a 12-month term, and that is a separate agreement from hosting - you can have one without the other. In nearly twenty years almost nobody has left, which is the number we would rather be judged on than a minimum term. We would sooner earn the next month than lock you into twelve, and if you ever do want to move, the site and its data go with you.

Get in touch

Let's talk about where the site lives

Tell us what you are on now and we will tell you what moving looks like, what it costs and what it would change. You will be speaking to the person who runs the servers.