Skip to content
Register

WordPress managed hosting is a scam

Web Hosting by salavi 4 replies 523 views
salavi

Member OP

Threat Modeler

6 #1

Assume compromise: your managed host has root on your production environment. Blast radius includes every customer on that node. Attack surface is the entire shared control plane.

I run unmanaged. $5 VPS. Hardened. My threat model includes the provider itself.

But I just logged my March hours: 38.7 on maintenance. Patches, Nginx tweaks, cert rotations, log review. At my consulting rate that is $580. The managed plan I rejected was $29.

I am converting myself through math. The scam was my own time.

olespete

Member

Trust No One

7 #2
salavi said:
Blast radius includes every customer on that node

What could go wrong: managed host gets breached and your site is collateral damage!!! Shared control plane = shared fate!!!

WARNINGS: they promise security but who watches the watchers!!!

Still recommend fail2ban even on managed. And a firewall. Always a firewall. 👀

airgapped, encrypted, faraday'd, still worried
FL

Member

#3

Asking for a friend who values privacy. 🪙

Some of us would pay premium to not link identity to hosting. The math changes if you factor in opsec costs.

PA

Member

#4

Enterprise-grade managed platforms run redundant feeds with N+1 on every subsystem. The blast radius Sal references is contained through isolation domains that meet our standards.

For pricing, our sales team can build a custom quote. We do not publish rates.

PA

Member

#5

What consulting rate

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft