Starting the process to move our 100-site plan away from Nexcess. They used to be great, but everything has gone downhill over the last year. Some thoughts for those considering Nexcess:

- We used to pay $638/month for our plan. This recently increased to $849/month with no added benefits

- Nexcess bought the Kadence plugins. It sounds good, but they don't give you the premium versions, only the free stuff. The plugins are trash - buggy, slow, and unreliable. Stick with Wordfence for security and something else for general WP site management. I pity anyone who tries to use these interfaces.

- Nexcess was the last of all web hosts I am aware of to patch the most recent PHP vulnerabilities. Took over a day with little to no communication. Clients asked when this would be fixed and were left in the dark.

- The support experience is all India-based. Half the time, support does more harm than good on the site.

- The "CDN" they include doesn't work well - typically causes HTTPS errors.

- They supposedly monitor your site for visual changes after updating a plugin. I've had updates break several sites and never got a notification.

- The automatic theme and plugin updates don't run.

- Their managed hosting runs a Linux kernel that stops receiving security updates on January 1. They have no plan to upgrade servers. Confirmed this with support this week.

Long story short, stay far away from Nexcess. We were originally drawn in by their site speeds. The speeds are still great, but the experience is so bad I wouldn't recommend them to anyone.

I want to connect multiple servers for my clients, most of which host WooCommerce sites. I’m looking for a control panel that allows me to manage multiple WordPress servers.

I’m looking for an affordable option that doesn’t charge an additional fee for each server i connect.

OpsShield's incident notice says an attacker used compromised credentials to push fake cPGuard updates (5.88.12 to 5.88.19) at 02:06 UTC on Nov 2. The update ran as root. OpsShield estimates about 2,950 servers executed it, and the script collected /etc/shadow and the root MySQL config. It also took root's shell history and SSH files. Help Net Security adds that about 7,900 billing-portal accounts (names, emails, bcrypt hashes) were copied too.

To see whether a server installed an affected version, OpsShield gives this check:

grep 'Successfully updated' /opt/cpguard/logs/install_log

A match only proves the update was installed, not what was sent out. OpsShield's advice for those servers: update to 5.88.26 or later and reset root and other local passwords from a trusted environment. Then rotate database and cloud keys, and replace the SSH keys under /root/.ssh. It says a full rebuild is not routine, but that is provisional.

Question for people who run hosting servers: do you let security agents auto-update as root on their own schedule, or stage updates first? And how would you have noticed a 70-minute window like this one?

Sources: OpsShield notice (Nov 3), Help Net Security and SecurityWeek (Nov 4).

I'm getting ready to launch a website and comparing different hosting providers. What features should I pay attention to besides price? I'd like something reliable with good uptime, decent speed, and support that actually responds when there's a problem. What has worked well for you?

I've been with Hosting.com since March of 2021. It's been about 5 years and it's time to move on. They've increased my price 3 times this year! Starting on March 24, 2026 my price for their "Kickstart Reseller" had a name change to "Reseller 25" and a price increase to $39.60. Now as of October 25, 2026 that price increased to $48.60 - This will be my last month with them. I'm ready to back up my stuff and move. Can anyone recommend good hosting? Seems like a lot of people are leaving because they are price gouging.