WordPress hosting
Managed WordPress hosting with Imunify360 security, Plesk and daily backups.
Managed WordPress hosting on WebCrafters Cloud runs on Nginx and PHP-FPM with Redis caching, behind a web application firewall. Every account gets a licensed Plesk control panel, licensed Imunify360 malware scanning and intrusion protection, SSL, and an automatic daily backup. Sites are hosted in Canada or the United States, and we can move an existing site over for you, quoted before we start.
Since 2021 serving Canadian businesses
Vancouver based, working across Canada
Automatic daily backup on every plan
Chosen by
WordPress hosting plans
Four hosting plans, each with Plesk, Imunify360 and daily backups.
Each plan is billed monthly or yearly, with a lower price on the yearly term. Ordering takes you to the client portal, where the account is created.
Starter Hosting Plan
$15.99 CAD per month
$149.99 CAD billed yearly, 22% less
- 50GB Bandwidth
- 2GB Disk Space
- 1 Domains
- 10 Sub-Domains
- 2 MySQL Databases
- 1 FTP Accounts
- PHP Access
- SSL Access
- Cron Jobs
- DNS Control
- Automatic Daily Backup
Most popular
Pro Hosting Plan
$29.99 CAD per month
$299.99 CAD billed yearly, 17% less
- 100GB Bandwidth
- 5GB Disk Space
- 1 Domains
- 20 Sub-Domains
- 5 MySQL Databases
- 3 FTP Accounts
- PHP Access
- SSL Access
- Cron Jobs
- DNS Control
- Automatic Daily Backup
Business Hosting Plan
$39.99 CAD per month
$419.99 CAD billed yearly, 12% less
- 200GB Bandwidth
- 20GB Disk Space
- 1 Domains
- 30 Sub-Domains
- 10 MySQL Databases
- 10 FTP Accounts
- PHP Access
- SSL Access
- Cron Jobs
- DNS Control
- Automatic Daily Backup
Business Pro Hosting Plan
$59.99 CAD per month
$699.99 CAD billed yearly, 3% less
- 500GB Bandwidth
- 50GB Disk Space
- 5 Domains
- 60 Sub-Domains
- 30 MySQL Databases
- 30 FTP Accounts
- PHP Access
- SSL Access
- Cron Jobs
- DNS Control
- Automatic Daily Backup
Security and licensed software
Eleven layers of protection on every hosting account.
Cheap hosting leaves security to a plugin inside your site. Here it is handled on the server, by commercial software we license for every account. Each card names what it does and how.
Imunify360 web application firewall
Every request is checked against rules written for WordPress and its plugins. Injection, cross-site scripting and known exploits are stopped before PHP runs.
WAF rules · virtual patching · bot filtering
Malware scanning and clean-up
Files are scanned as they change and again on a schedule. Infected files are cleaned automatically, and the original is kept so it can be restored.
Real-time scan · scheduled scan · automatic clean-up
Proactive Defense
PHP scripts are watched while they execute. When a script behaves like malware it is stopped, even if no scanner has seen that code before.
Runtime analysis · zero-day protection · kill on detection
Intrusion detection and prevention
Probing requests and repeated failed logins get the source address blocked for the whole server, not only for your site.
IDS and IPS · IP reputation lists · server-wide blocks
WordPress login protection
wp-login.php and xmlrpc.php are guarded with rate limits, and suspicious visitors get a challenge before they can try a password.
Brute-force limits · CAPTCHA challenge · greylisting
Network firewall and DDoS filtering
Floods and malformed traffic are filtered at the network edge, before they reach the server your site runs on.
Edge filtering · rate limits · DDoS mitigation
Account isolation
Each hosting account has its own system user and its own PHP-FPM pool, so one compromised site cannot read another site’s files.
Per-account PHP-FPM · separate system users · file permissions
SSL certificates
A certificate for every domain, issued and renewed automatically, with the HTTPS redirect set in the panel.
TLS · automatic renewal · HTTPS redirect
Automatic daily backups
Files and databases are backed up every day and stored away from the server. One file, one database or the whole account can be restored.
Daily schedule · off-site storage · restore by date
Licensed Plesk control panel
Your own login for files, databases, DNS, cron jobs and PHP settings, on a panel we license and keep updated.
File manager · phpMyAdmin · DNS editor · cron
WordPress management in Plesk
Create a staging copy, clone a site and run a security check of your WordPress install from the panel.
Staging copy · cloning · hardening checks
How it is built
What a request passes through before it reaches WordPress.
Four filters stand between a visitor and your PHP code. The diagram shows the order, and the table lists the software at each layer.
Edge
The CDN answers requests for images, CSS and JavaScript from a location near the visitor. The network firewall drops floods before they reach the server.
Imunify360 firewall
Each remaining request is compared with WAF rules and IP reputation lists. Known exploit patterns and blocked addresses stop here.
Nginx
Nginx terminates TLS, serves cached pages and static files directly, and passes only dynamic requests on to PHP.
PHP-FPM, per account
WordPress runs in a PHP-FPM pool that belongs to your account alone, under its own system user. Proactive Defense watches the scripts as they run.
Redis and the database
Repeated database queries are answered from the Redis object cache. The database accepts connections only from users that belong to your account.
Scan and back up
Changed files are scanned for malware as they are written. Every day, files and databases are backed up and the copy is sent off the server.
The hosting stack, layer by layer
| Layer | What runs there | Why it matters |
|---|---|---|
| Control panel | Plesk, licensed, with WordPress management tools. | You manage files, databases, DNS and PHP without a ticket. |
| Security suite | Imunify360, licensed: web application firewall, malware scanner with automatic clean-up, Proactive Defense, intrusion detection and prevention. | Protection runs on the server, where malware cannot switch it off. |
| Web server | Nginx, serving static files and cached pages directly. | Less work reaches PHP, so pages answer faster. |
| PHP | PHP-FPM with a separate pool and system user per account. PHP settings adjustable per site in Plesk. | Accounts cannot read each other’s files. |
| Caching | Redis object cache and an edge CDN. | Fewer database queries, and static files served near the visitor. |
| Network | Web application firewall and DDoS filtering in front of the servers. | Attacks are absorbed before they reach your site. |
| SSL | A certificate per domain, issued and renewed automatically. | HTTPS never lapses. |
| Backups | Automatic daily backup of files and databases, stored off the server, with restore by date. | A bad update or a deleted file is a restore, not a rebuild. |
| Access | Plesk file manager, FTP accounts, phpMyAdmin, cron jobs and full DNS control. | The site and its data are reachable by you at any time. |
| Location | Data centres in Canada or the United States. | You choose where your data lives. |
On every plan
Eight things every hosting account has, from Starter up.
The plans differ in disk space, bandwidth and the number of sites and databases. The security, the control panel and the backups are the same on all of them.
Licensed Plesk control panel
Files, databases, DNS, cron jobs and PHP settings in one panel, with your own login. No ticket needed to add a database or change a PHP setting.
Licensed Imunify360
A commercial security suite, paid for by us on every server: web application firewall, malware scanner with automatic clean-up, intrusion prevention and runtime protection for PHP.
Automatic daily backup
Files and databases are backed up every day without anyone pressing a button, and the copies are stored away from the server.
SSL on every site
A certificate for each domain, renewed automatically, so the padlock never lapses because someone missed a reminder.
DNS control
Edit the zone for your domain yourself: A, AAAA, CNAME and TXT records, with changes live as soon as you save them.
Databases and file access
MySQL databases managed through phpMyAdmin, and FTP accounts for your developer, each with its own login you can revoke.
PHP access and cron jobs
Choose PHP settings per site and schedule real cron jobs, so WordPress tasks run on time and not only when a visitor happens to arrive.
Help moving in
Coming from another host? Our cloud migration service copies the site, tests it here and switches DNS only after it is verified.
Hosting is not maintenance
Hosting keeps the server fast, secured and backed up. Updating WordPress, plugins and themes inside your site is the job of a care plan, which is optional.
Compare plans
Every hosting plan, line by line.
The same plans as the cards, laid out as a table so you or your IT person can compare storage, bandwidth, domains and databases line by line.
| Plan | Starter | Pro | Business | Business Pro |
|---|---|---|---|---|
| Price per month | $15.99 CAD | $29.99 CAD | $39.99 CAD | $59.99 CAD |
| Bandwidth | 50GB | 100GB | 200GB | 500GB |
| Disk Space | 2GB | 5GB | 20GB | 50GB |
| Domains | 1 | 1 | 1 | 5 |
| Sub-Domains | 10 | 20 | 30 | 60 |
| MySQL Databases | 2 | 5 | 10 | 30 |
| FTP Accounts | 1 | 3 | 10 | 30 |
| PHP Access | Included | Included | Included | Included |
| SSL Access | Included | Included | Included | Included |
| Cron Jobs | Included | Included | Included | Included |
| DNS Control | Included | Included | Included | Included |
| Automatic Daily Backup | Included | Included | Included | Included |
| Order | Order now: Starter Hosting Plan | Order now: Pro Hosting Plan | Order now: Business Hosting Plan | Order now: Business Pro Hosting Plan |
Not sure which plan fits?
Tell Ella about your site. Ella will tell you which hosting plan fits.
Six quick questions about what the site runs, how busy it is and where it is hosted now. You get a plain-words recommendation of the plan that fits, the reasons for it and what a move would involve. Two minutes, no obligation.
Ella is automated and can make mistakes. Your written quote from a project lead is the final word.
How it works
From order to a live site in four steps.
Ordering is online in the client portal. If you are moving an existing site, the move is planned so the old one stays live until the new one has been checked.
01
Choose a plan and order
Pick the plan that fits your disk space, bandwidth and number of sites, and order it in the client portal with a monthly or yearly term.
Order
02
Account and Plesk login
Your hosting account is created as its own isolated subscription. You receive the Plesk login, where files, databases and DNS are managed.
Setup
03
Install or move WordPress
Start a fresh WordPress install from Plesk, or have us migrate your existing site, with a fixed price quoted first. A migrated site is tested at a private address before anything is switched.
Move in
04
Point the domain and go live
DNS is pointed at the new server, the SSL certificate is issued, and the first daily backup runs that night. Imunify360 is protecting the site from the first request.
Go live
After you sign up
Backups, renewals, support and cancelling.
The everyday details of running a site on WebCrafters Cloud, so you know what to expect before you order. The full terms are in our refund and cancellation policy.
Backups you can restore yourself
Daily off-site backups are kept for 30 days. Restore a file, a database or the whole site by date in Plesk, or open a ticket and we restore it for you.
Renewals and plan changes
Plans renew automatically, monthly or yearly, and every invoice is in the client portal at my.webcrafters.ca. Upgrade or downgrade your plan there at any time.
Support for the hosting
Open a ticket in the client portal or email [email protected] about anything to do with the hosting, from SSL to restores. Changes to the site itself are covered by a care plan or our hourly rate.
Cancelling
Cancel any time, at least 5 days before your next billing date. Unused months on a yearly plan are not refunded. Ask for a full backup to take with you; backups are deleted 30 days after cancellation.
Questions
What owners ask about WordPress hosting.
If yours is not here, the full list is one click away, or just pick up the phone.
Still have a question?
Call us on a weekday, or send a note and we will get back to you within one business day.
What does Imunify360 do that a security plugin does not?
A security plugin runs inside WordPress, so it only starts working after PHP and WordPress have loaded, and malware that disables plugins can switch it off. Imunify360 runs on the server, outside your site. Its firewall inspects a request before WordPress sees it, its scanner reads files directly on disk, and its runtime protection watches PHP as it executes. It also protects every site on the server at once, so an attack blocked on one account is blocked for all.
How do backups work on WebCrafters Cloud hosting?
Every account is backed up automatically each day, files and databases together. Copies are stored away from the server, so a hardware failure does not take the backups with it. A single file, one database or the whole account can be restored from a chosen date.
What do I get with the Plesk control panel?
With Plesk you get your own login to a licensed control panel. From there you manage files, databases through phpMyAdmin, the DNS zone, SSL certificates, PHP settings and cron jobs. Plesk also keeps each hosting account under its own system user with its own PHP-FPM pool, which is what stops a problem on one site from reaching another.
Can you move my website from another host?
Yes, we move websites from other hosts. Our cloud migration service copies the site to your new account, tests it at a private address, lowers the DNS TTL ahead of time and switches only after files and database are verified. The old host stays untouched as a rollback, and your URLs do not change.
Is hosting included when you build my website?
Hosting is quoted, not free. A website we design and build is quoted with its hosting on WebCrafters Cloud priced separately, paid monthly or yearly, on the same servers and with the same security described on this page. The plans on this page are for sites we did not build, or for owners who want hosting on its own.
Where is my hosting data stored?
Your hosting data is stored in a data centre in Canada or the United States, chosen when the account is set up. Backups are kept at a separate location from the server that runs the site.
Start today
Not sure which plan, or need a site moved? A project lead replies within one business day.
Two minutes to fill in, no obligation. Tell us the address of the site, where it is hosted now and roughly how busy it is. We recommend a plan and, if you want it moved, quote the migration.
- Licensed Imunify360 and Plesk on every account
- Automatic daily backup, stored off the server
- Canadian or US data centre
"*" indicates required fields