Always on.
And honest about it.
Your website is your business. On Standard it keeps running if a server fails, your database has a live copy ready to take over, and every site is backed up every night. Here’s how that works and what actually happens when something goes wrong. No buzzwords, no fine print.
Built so one failure isn’t your failure
A typical host puts your site on a single server. If that server has a bad day, so does your site. We designed the platform the opposite way: every part has a backup, and most failures are handled by themselves.
A note on plans: the features that need more than one server — running on at least two servers and extra power when you’re busy — come with Standard (from €5.99/mo + VAT). Micro runs a site on one server from €3.49/mo + VAT, ideal for brochure and landing-page sites. You choose the plan for each site and can switch any time.
No single server to fail
On Standard (from €5.99/mo + VAT), your site always runs on at least two servers at once, so if one fails, the other keeps serving visitors while a replacement starts by itself, with nothing for you to do.
Dedicated database with failover
Your site has its own database, and a live copy of it is kept on another server. If the main one fails, the live copy takes over by itself, with no action from you. In our tests that took about 14 seconds, with no lost writes.
Servers that heal themselves
Every copy of your site is checked constantly. If one stops responding or starts misbehaving, visitors stop being sent to it and it's replaced with a fresh, healthy one by itself.
A busy day adds power, not downtime
On Standard, when traffic climbs, extra copies of your site start by themselves on other servers and are removed when it settles. A sudden rush (a campaign, a viral post, a sale) means more power, not a crash. You pay by the hour for what's used.
Isolated from every other site
Your site runs sealed off, with its own reserved CPU and memory, and can't reach or be reached by other sites. Another customer's busy day, runaway plugin or security problem doesn't spill over to you.
Zero-downtime updates
Updates go out by starting fresh copies on the new version, checking they're healthy, then retiring the old ones. Your visitors are always served by a healthy copy: there is no maintenance window and no "be right back" page.
HTTPS that never lapses
Every site gets a free SSL certificate that is set up and renewed by itself. No surprise "this certificate has expired" page: keeping your padlock and your visitors' trust takes nothing from you.
Watched around the clock
Every site is checked around the clock and the platform underneath is monitored automatically. If something looks wrong, we are alerted immediately, and many kinds of failure are fixed by themselves without anyone having to wake up.
Your content, protected and consistent
Staying online is only half of it. Your data also has to be safe, recoverable, and identical on every server running your site. Here is how we make sure of that.
Daily backups, one-click restore
Your database and files are backed up every night and kept for 30 days on separate storage in the EU, apart from the servers your site runs on, so your backups survive even if the live servers are lost. Restore in one click, and a 20-year permanent option for records you must keep.
Images on separate storage
Your uploads (images, PDFs, downloads) don't sit on one server's disk. They live on separate, replicated storage and are served straight from it, not from your web server, so pages load faster and a server failure never loses your media. An optional CDN can be switched on per site.
A clean start, every time
WordPress core runs from a clean, protected copy of WordPress, the same on every server, so a tampered core file doesn't survive a restart. Plugins, themes and uploads are scanned for malware every night.
Consistent across every server
On Standard your site runs on more than one server, so we make sure they always agree. When you install a plugin, change a theme or run an update, the change is applied once and reaches every server within seconds: you never get one version on one server and a different one on another.
You choose the balance, per site
Each site can pick how it balances speed against strict consistency — one click in the dashboard. Most sites run on Balanced. A checkout or membership site can switch to Strict, so every server always reads the very latest data. The choice is yours, and it is set per site.
What actually happens during a failure
Every host promises “reliability.” Fewer will tell you what happens at the exact moment something breaks. Here’s the honest version.
A web server fails
Visitors simply stop being sent to the failed server and a replacement starts by itself. On Standard your site is already running on at least two servers, so visitors keep browsing without noticing.
The database server fails
A live copy of your database takes over by itself and your site reconnects on its own. In our tests that took about 14 seconds, with no lost writes. Because the live copy is kept up to date all the time, at most a fraction of a second of the very latest writes is at risk on a hard crash; everything else is already safe in the copy.
An update goes out
New copies start on the new version and have to pass health checks before they receive any visitors. The old ones are only retired once the new ones are proven healthy. If the new version misbehaves, we roll back to the previous one. You see no downtime either way.
Something corrupts your data
A bad import, a buggy plugin, or a mistaken edit can damage content on any platform. Every site has a nightly backup kept for 30 days, and you restore any of them from your dashboard in one click.
Being straight with you: no host can promise literally zero downtime or zero data loss — anyone who does is selling you something. What we promise is that failures are designed for, recovered automatically wherever possible, and measured in seconds rather than hours. We back a 99.9% uptime SLA.
We don’t just design for failure. We cause it.
Most hosts tell you they’re reliable. We’d rather show you. Under simulated load, in our tests, we deliberately break things — and measure what a visitor would actually see.
We killed a running server mid-request
Not a graceful shutdown — we pulled it mid-request, the worst case, while the site served dozens of simulated visitors at once. The site stayed up on its other copy. One request hung briefly; everything else kept loading.
We took a whole machine offline
The site’s server was drained out from under it. The site moved to a healthy machine in seconds. A probe checking the site every second saw no failures at all.
We shut down the database mid-checkout
This is the one that matters most. When your database changes hands, the risk isn’t a down page — it’s a half-finished order. We shut down the main database while a stream of orders was being written. The live copy took over on its own; writes paused for a few seconds, then resumed — and when we checked the data afterward, not one confirmed order was lost.
That last one is why we can say “recovery in seconds” without crossing our fingers. We’ve watched it happen — on purpose, more than once.
The short version
Everything on this page is live today — not a roadmap. Here it is in one table.
| Capability | What it means for you | Status |
|---|---|---|
| Keeps running if a server fails | On Standard, your site runs on at least two servers at once, so no single machine can take it down. | Live |
| Automatic database failover | A live copy of your database takes over by itself if the main one fails: about 14 seconds with no lost writes, in our tests. | Live |
| Self-healing & extra power when busy | Unhealthy copies are replaced by themselves; on Standard, a busy day adds power instead of causing downtime. | Live |
| Site isolation | Each site runs walled off from every other — a neighbor’s spike or compromise can’t affect you. | Live |
| Off-site backups & one-click restore | Nightly backups on separate storage in the EU; kept 30 days (20-year option), one-click restore. | Live |
| Images on separate storage | Uploads live on separate, replicated storage and are served straight from it — never lost with a server. | Live |
| Cross-server consistency | Plugin, theme, and update changes apply once and reach every server in seconds. | Live |
| Per-site consistency control | Choose Balanced, Strict, or one server per site, in one click. | Live |
| Zero-downtime updates | New versions roll out behind health checks — no maintenance window. | Live |
| Continuous monitoring | Every site is probed around the clock; failures alert us immediately. | Live |
| EU data residency | Hosted mainly in Germany, always within the EU, in ISO 27001-certified data centres; backups stay in the EU. | Live |
Running on at least two servers and extra power when you’re busy come with Standard (from €5.99/mo + VAT); Micro runs on one server from €3.49/mo + VAT. You choose, and can switch any time.
What if something happens to us?
Reliability also means not depending on any one host, including us. Your site, your data and your domain are yours to take elsewhere.
Your site is standard WordPress
Nothing proprietary to untangle. Take a full backup and go: your database and your files, in standard formats. No exit fee, no lock-in.
Your domain stays in your name
A domain you register through us is registered in your name, so it goes wherever you go.
30 days to export
If you cancel, your website data (files and database) stays available for export for 30 days, as our Terms (section 10.2) set out.
Reliability, in plain language
On Standard, no: your site always runs on at least two servers at once, so if one fails the other keeps serving visitors while a replacement starts. A site on Micro runs on one server and can see a short interruption while a replacement starts. That’s why any site where downtime costs you money belongs on Standard (from €5.99/mo + VAT), which also gets extra power by itself when it’s busy. You choose the plan for each site and can switch any time.
We’re built to make that extremely unlikely. A live copy of your database is kept on another server at all times, and your site is backed up every night, with each backup kept for 30 days. In the worst case, a hard crash of the main database server, at most a fraction of a second of the very latest writes is at risk, because everything else is already in the live copy. We won’t claim it’s impossible to ever lose anything (no honest host can), but realistically your data is safe.
Nothing visible. Updates roll out by starting fresh servers on the new version, checking they’re healthy, and only then retiring the old ones. There’s no maintenance window and no “be right back” page. If a new version ever misbehaves, we roll back to the previous one.
No, and this is something we put real engineering into. When you install a plugin, switch a theme, or run an update, the change is applied once and propagates to every server within seconds. You’ll never get one version of your site on one server and a different one on another. For checkout, membership, or other sites where it matters most, you can switch that site to Strict mode in one click, which guarantees every server always reads the very latest data.
For the database, a live copy takes over by itself: in our tests about 14 seconds, with no lost writes and no action from you. For a failed web server, effectively no interruption — another server keeps serving while a replacement starts. For a full restore from backup, minutes — one click from your dashboard. We back a 99.9% uptime SLA.
Entirely within the European Union. Your site is hosted mainly in Germany, always within the EU, in ISO 27001-certified data centres, and your backups stay in the EU too. Nothing is stored or backed up outside the EU, which keeps you straightforwardly GDPR-compliant. See our GDPR page and DPA for the details.
No. Redundancy, failover, backups, monitoring, and update roll-outs all happen automatically — there’s nothing for you to configure or maintain. The one thing you can control, if you want to, is the per-site consistency mode (Balanced or Strict), and even that is a single click. Everything else is just on.
Founding Member pricing.
Yours while you stay.
From €3.49/mo + VAT — pay only for what your site actually uses. Founding-member pricing stays locked for as long as your account remains active.
Early access means direct access to our team. You’re not a ticket number. You’re a founding partner.
No commitment and no card to start. Takes a minute.
Already hosted elsewhere? Managed migration, zero downtime →