Website hosting on ServerCrate hardware

Limits we publish.Not limits we imply.

Disk quotas enforced by the filesystem, not promised in marketing. Per-site process caps so a neighbor's runaway script never takes you down. Post-quantum TLS you can verify from your own terminal in one command.

Price: From $3/mo
Database: MySQL 8.4, NVMe
PHP: 8.2 to 8.5
Backups: Encrypted, included

example.com · Solo

Active

TLS group

X25519MLKEM768

Disk quota

15 GB enforced

PHP workers

Storage used3.4 GB of 15 GB

files + databasetoday 04:12OK

files + databaseyesterday 04:11OK

files + database2 days ago 04:12OK

Los Angeles, CARetention 7 / 30 / 90 days by plan

Verify it yourself

Post-quantum TLS on every site, provable in one command.

Public TLS terminates on our own edge, not a CDN in front of a reseller. Traffic captured today stays sealed against a future quantum computer. Run this against any site we host and the last line comes back, or we are lying.

Most hosts are unable to print it, because their TLS terminates on infrastructure they do not control.

Start Hosting

openssl s_client

$ openssl s_client -groups X25519MLKEM768 \ -connect example.com:443 </dev/null SSL handshake has read 4318 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Negotiated TLS1.3 group: X25519MLKEM768 Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384

Moving in

Your domain switches without a broken-certificate window.

Use our nameservers, or add a single CNAME for _acme-challenge, and your certificate is issued before you change a record. Visitors never see a warning mid-migration, which is the part most moves get wrong. Keep your DNS entirely elsewhere and we fall back to issuing at cutover, like everyone else.

A cPanel host using HTTP-01 validation has no way to do this. They can only issue once the domain already points at them, which is exactly the window where your site is live and untrusted.

Your site goes live immediately

Provisioning finishes in about a minute on a ServerCrate address. Build, import your database, and test everything before touching live DNS.

We issue your certificate early

DNS-01 validation against our own nameservers, so the certificate for your domain exists and is trusted while your site is still served elsewhere.

You flip the record

Change the A record when you are ready. Traffic arrives at a site that is already built, already tested and already holding a valid certificate.

Backups start the same day

Files and database, encrypted before they leave the machine, with retention that follows your plan. Nothing to configure and nothing extra to buy.

Plans

Four sizes, with the limits written down.

Mini

$3/mo$30/yr

or $30/yr, 2 months free$2.50/mo, billed yearly

1 website
5 GB disk, enforced quota
100 GB transfer
3-day backup retention
4 PHP-FPM workers
Free certificates, staging, SFTP

Start Mini

Solo

$5/mo$50/yr

or $50/yr, 2 months free$4.17/mo, billed yearly

3 websites
20 GB disk, enforced quota
250 GB transfer
7-day backup retention
8 PHP-FPM workers
Free certificates, staging, SFTP

Start Solo

Most popular

Studio

$10/mo$100/yr

or $100/yr, 2 months free$8.33/mo, billed yearly

10 websites
50 GB disk, enforced quota
1 TB transfer
30-day backup retention
20 PHP-FPM workers
Free certificates, staging, SFTP

Start Studio

Agency

$20/mo$200/yr

or $200/yr, 2 months free$16.67/mo, billed yearly

25 websites
150 GB disk, enforced quota
3 TB transfer
90-day backup retention
40 PHP-FPM workers
Free certificates, staging, SFTP

Start Agency

Quotas are enforced, not aspirational: you are told the number and the number is what the disk allows. Annual billing is ten months for twelve, taken at checkout. Cancel any time; your data leaves with you.

PHP versions	8.2, 8.3, 8.4, 8.5. No end-of-life versions on shared infrastructure.
Database	MySQL 8.4 on an NVMe mirror, separate from site files.
Certificates	Free, issued and renewed automatically, including before your domain points at us.
Included	Varnish and Redis caching, staging sites, one-click WordPress, per-site SFTP and database users.
Backups	Encrypted off-site backups of your site, on the same storage our backup product runs on. Not a bolted-on add-on.
Email hosting	Not offered. See below for why.

Two things we will not pretend about.

Admitting a limit costs one sale and saves a refund, a ticket and a review. Both of these are on the pricing page for the same reason.

We do not host email

Our address space is not suitable for sending mail, so your messages would land in spam. Keep your email at Google, Fastmail, Migadu or anywhere else, and we will set the DNS records for you at no charge. A host that bundles mailboxes on residential-adjacent space is betting you never check whether the mail arrives.

We can read files on our hosting servers

Any host that runs your code can: PHP has to execute it and MySQL has to read your data. Our backup product is zero-knowledge because Restic encrypts before anything leaves your machine, and that distinction is real. Anyone advertising zero-knowledge shared hosting is redefining the term.

Already hosted elsewhere?

If you only want the backups and want to keep your current host, that is Website Protection: the same encrypted vault, pointed at a site we do not run.