Hosting is the part of a website that business owners think about least, until the site goes down, gets hacked or the person who set it up stops answering. Then it becomes the only thing that matters.
You do not need to become a server expert. You need to understand the main options well enough to choose sensibly, and to make sure the important things, ownership, backups and security, are in your hands. This is how I explain it to clients in Lebanon.
First: own your domain and accounts
Before talking about servers, settle ownership:
- The domain should be registered in your company's name, with your email as the account contact, at a registrar you can log in to. Too many businesses discover their domain was registered by a former developer or agency.
- The hosting account should be yours too, with your developer added as a user if the provider supports it.
- DNS (the settings that point your domain to the server and to your email) should be in an account you control. I often use Cloudflare for DNS because it is reliable and easy to manage.
If your developer disappeared tomorrow, could another developer take over in an hour? If not, fix that first.
Where should the server be?
A common question is whether a Lebanese business needs servers in Lebanon. For most websites, no. What matters for speed is a good host, efficient pages and caching. Reputable providers in Europe are a short network distance from Lebanon, and a CDN can serve static files from locations close to visitors.
There are cases where location matters: specific data regulations for your sector, or contracts that require data to stay in a certain country. If that applies to you, it overrides everything else, and you should get proper advice for your situation.
Local reliability is also worth considering. Your website should not depend on the power and internet in your office. Host it with a provider in a professional data centre, not on a machine in a back room.
Option 1: Shared hosting
Many websites share one server, managed by the provider. You get a control panel, email, databases and one-click WordPress installs.
Good for: small brochure sites with modest traffic and tight budgets.
Watch out for: performance depends on your neighbours, resources are limited, and security isolation varies between providers. Very cheap shared plans are where many hacked WordPress sites live.
Option 2: Managed WordPress hosting
A host specialized in WordPress, handling updates, caching, backups and security hardening for you.
Good for: business websites on WordPress, like the AgriDev and Alpha Green sites, where the team edits content and nobody wants to manage servers.
Watch out for: it costs more than shared hosting, and some hosts restrict certain plugins. Usually the trade is worth it for a site that represents your business.
Option 3: A VPS (virtual private server)
Your own virtual server, where you or your developer install and manage everything.
Good for: web applications, custom stacks, several related services, or when you need full control. My own products, like NeonTask and Pro Clean+, run as Dockerized services on Linux servers with CI/CD pipelines.
Watch out for: someone has to manage it: security updates, firewall, backups, monitoring. A VPS that nobody maintains is a liability. If you go this way, make sure the setup follows a checklist like hardening a new Linux server.
Option 4: Application platforms and static hosting
Platforms that run your app from your code repository, or serve a pre-built static site from a global network. Popular for Next.js and other modern frameworks.
Good for: custom sites and apps where you want deploys to be simple and do not want to manage servers.
Watch out for: costs can grow with usage, and you are tied to the platform's way of doing things. Read the pricing for bandwidth and functions carefully.
Backups: the question that matters most
Ask any host, or any developer setting one up:
- What is backed up: files, database, or both?
- How often, and how many days or weeks back can I restore?
- Where are backups stored? On the same server is not enough.
- Can I restore myself, or do I need to open a ticket?
- When was a restore last tested?
For WordPress sites, I recommend having a host backup plus an independent backup to separate storage. For applications, see Postgres backups that actually restore.
Email: keep it separate
Many businesses run email on the same cheap hosting as their website. When the site has problems, email goes with it. Using a dedicated email provider, and keeping the website hosting separate, makes both more reliable. Set up SPF, DKIM and DMARC records so your emails reach inboxes instead of spam.
Security basics any host should cover
- HTTPS on every page, with automatic certificate renewal.
- Isolation between customer accounts on shared plans.
- A firewall and protection against brute-force logins.
- Regular updates of the server software.
- Malware scanning for WordPress sites.
On your side: strong unique passwords, two-factor authentication on the hosting, domain and DNS accounts, and few admin users.
Uptime and monitoring
Hosts advertise uptime percentages, but what matters is whether you know when your site is down. Add an external uptime check that alerts you, so you are not relying on customers to tell you. It takes minutes to set up. More on this in monitoring and alerts for a small product.
Speed
A fast host helps, but most slow business sites are slow because of heavy images, too many plugins and no caching. Before upgrading hosting, check the site itself. I go into this in SEO basics for businesses in Lebanon, since speed affects search too.
A simple decision guide
- Brochure site on WordPress, team edits content: managed WordPress hosting.
- Very small site, minimal budget: reputable shared hosting, with independent backups.
- Custom Next.js site: static or application platform, or a container on a managed server.
- Web application or several services: VPS or cloud servers, managed properly with Docker, CI/CD, backups and monitoring.
What to ask before you sign
- Who owns the account, and can I add and remove users?
- What exactly is backed up, how often, and where?
- What happens if I exceed my plan's limits?
- How do I get support, and how fast?
- How do I move away if I want to?
If you want help choosing hosting, or moving an existing site to a setup you control, see my work and get in touch.