How to choose web hosting for a small-business website
Pick hosting by what your site is and who looks after it. A WordPress site that brings in business usually belongs on managed WordPress hosting with current PHP, daily off-server backups, staging and real support. A simple brochure site can run on static hosting. Before signing up, make sure you'll own the account and can take a full copy.
The short version
- Match the hosting to the site. WordPress with forms, bookings or a shop: managed WordPress hosting. A small site that rarely changes: static hosting can be enough.
- Check the software. WordPress.org recommends PHP 8.3 or newer and MariaDB 10.11 or MySQL 8.0 or newer.
- Check backups and restores, stored away from the server, with a way for you to restore.
- Check support: who answers, how, and when.
- Check the exit: the account in your business’s name, and a full copy of the site whenever you ask.
What kinds of hosting are there?
| Type | What it is | Suits | Watch for |
|---|---|---|---|
| Shared hosting | Many sites share one server and a control panel | Very small sites with someone technical looking after them | Neighbors slowing you down; you handle updates and security |
| Managed WordPress hosting | Servers set up only for WordPress, with backups, caching and updates handled | Business WordPress sites | What “managed” really includes varies a lot |
| VPS or cloud server | Your own virtual server | Developers who will run it | Someone has to patch and secure the server itself |
| Static hosting | Pre-built pages served from a global network | Small sites without logins or a shop | Edits usually need a developer or a build step |
Our glossary entry on managed hosting explains the term. Hosting is only the server; keeping the site itself updated is separate work, which our answer on what website maintenance includes explains.
What should I check before I sign up?
Ask each host these questions, in writing.
Software and speed
- Which PHP versions do you run, and how do you handle upgrades? WordPress.org’s requirements page recommends PHP 8.3 or newer. PHP.net’s supported versions table shows PHP 8.2 gets only security fixes until December 31, 2026, and anything older gets none.
- Which database versions? WordPress.org recommends MariaDB 10.11 or newer, or MySQL 8.0 or newer.
- Is there server caching, and does it work with your theme and plugins?
- Where are the servers, and is there a content delivery network (CDN) for visitors far away? Our glossary entry on CDNs explains.
HTTPS
- Is a certificate included and renewed automatically? With certificate lifetimes shrinking, manual renewal isn’t realistic. See why SSL certificates expire so often now.
Backups and recovery
- How often are backups taken, and where are they stored? CISA’s backup guidance calls the 3-2-1 rule a trusted guideline: three copies on two different types of storage, with one off-site. A backup on the same server isn’t enough.
- How long are they kept, and can you restore one yourself, or must you ask?
- Is there a staging copy where updates can be tested first? Our answer on staging sites explains why it matters.
Security
- What’s in place at the server: a firewall, malware scanning, isolation between sites, and two-step sign-in for the hosting account?
- What happens if a site is hacked? Who cleans it, and does that cost extra?
Support and ownership
- How do you reach support, and at what hours? Is there a phone number for an outage?
- Will the account be in your business’s name, with you as the owner and your web company added as a user?
- Can you download a full copy of the files and database at any time, without a fee?
- Does the host also run your email? Decide on purpose. Many businesses keep email with Microsoft 365 or Google Workspace so a website move never touches it. Our answer on Microsoft 365 or Google Workspace helps you choose.
Why does the choice matter?
Your host decides how fast your pages leave the server, whether a bad update can be undone in minutes, and who answers when the site goes down on a Saturday. Cheap hosting isn’t wrong, but on a business site the savings disappear the first time a restore takes days or nobody answers the phone.
What are the common mistakes?
- Choosing on price alone, then finding backups, certificates or support cost extra.
- Assuming “managed” means everything is handled. Some managed hosts update WordPress itself but not plugins. Ask exactly what they update and test.
- The hosting account in a former employee’s or web company’s name. See owning your digital assets.
- Moving hosting and email at the same time without planning. One change at a time is safer; our answer on moving to a new host gives the order.
- Ignoring PHP versions. An old PHP version can keep running for years until a plugin update suddenly needs a newer one.
What if my current host is the problem?
Signs it’s time to move: frequent slowness or outages, an old PHP version the host won’t upgrade, backups you can’t get at, or support that doesn’t answer. Get a full backup first, then follow the steps in moving to a new host. Set up uptime monitoring so you have a record of outages either way.
How much does it cost, and how long does it take?
Prices vary widely by type and provider, so compare current published plans and what each includes. Comparing hosts with the checklist above takes an afternoon. A move itself usually happens over a few days, mostly testing and waiting for DNS.
How does E-3 handle this?
E-3’s managed hosting is for WordPress sites, and SSL is included. On the sites we host, our monitoring tracks PHP versions, waiting updates, known plugin vulnerabilities and disk and database space. If you’d like your site moved to us, our help page on moving a site to E-3 explains how it works.
Related questions
Next step
- Next: Set up HTTPS redirects and HSTS the safe wayThe next guide in Website basics.
- Website careUptime monitoring, tested updates, daily backups and security alerts.
Still stuck? Ask E-3 for an answer from our help guides.
Rather we handled website basics for you?
It’s part of what we do every week for small businesses, as part of managed wordpress hosting. Start with a free check of your site and profile, or call and ask.