Website hosting on ServerCrate hardware

Limits we publish.Not limits we imply.

Disk quotas enforced by the filesystem, not promised in marketing. Per-site process caps so a neighbour's runaway script cannot take you down. Post-quantum TLS you can verify from your own terminal in one command.

$5/moNVMe databasesPHP 8.2-8.5Backups included
example.com · Solo
Active
PHP
8.3
TLS group
X25519MLKEM768
Disk quota
15 GB enforced
PHP workers
8
Storage used3.4 GB of 15 GB
files + databasetoday 04:12OK
files + databaseyesterday 04:11OK
files + database2 days ago 04:12OK
Los Angeles, CARetention 7 / 30 / 90 days by plan
Verify it yourself

Post-quantum TLS on every site, provable in one command.

Public TLS terminates on our own edge, not a CDN in front of a reseller. Traffic captured today cannot be decrypted later by a quantum computer. Run this against any site we host and the last line comes back, or we are lying.

Most hosts cannot print it, because their TLS terminates on infrastructure they do not control.

Start Hosting
openssl s_client
$ openssl s_client -groups X25519MLKEM768 \ -connect example.com:443 </dev/null SSL handshake has read 4318 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 256 bit Negotiated TLS1.3 group: X25519MLKEM768 Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384
Moving in

Your domain switches without a broken-certificate window.

Use our nameservers, or add a single CNAME for _acme-challenge, and your certificate is issued before you change a record. Visitors never see a warning mid-migration, which is the part most moves get wrong. Keep your DNS entirely elsewhere and we fall back to issuing at cutover, like everyone else.

A cPanel host using HTTP-01 validation cannot do this. They can only issue once the domain already points at them, which is exactly the window where your site is live and untrusted.

01
Your site goes live immediately
Provisioning finishes in about a minute on a ServerCrate address. Build, import your database, and test everything before touching live DNS.
02
We issue your certificate early
DNS-01 validation against our own nameservers, so the certificate for your domain exists and is trusted while your site is still served elsewhere.
03
You flip the record
Change the A record when you are ready. Traffic arrives at a site that is already built, already tested and already holding a valid certificate.
04
Backups start the same day
Files and database, encrypted before they leave the machine, with retention that follows your plan. Nothing to configure and nothing extra to buy.
Plans

Three sizes, with the limits written down.

 SoloStudioAgency
Price$5/mo$12/mo$25/mo
Websites1520
Disk quota (enforced)15 GB50 GB150 GB
Transfer250 GB1 TB3 TB
Backup retention7 days30 days90 days
PHP-FPM workers per site82040
PHP versions8.2, 8.3, 8.4, 8.5. No end-of-life versions on shared infrastructure.
DatabaseMySQL 8.4 on an NVMe mirror, separate from site files.
CertificatesFree, issued and renewed automatically, including before your domain points at us.
IncludedVarnish and Redis caching, staging sites, one-click WordPress, per-site SFTP and database users.
Email hostingNot offered. See below.

Annual billing is ten months for twelve, taken at checkout. Cancel any time; your data leaves with you.

Start Hosting

Two things we will not pretend about.

Admitting a limit costs one sale and saves a refund, a ticket and a review. Both of these are on the pricing page for the same reason.

01
We do not host email
Our address space is not suitable for sending mail, so your messages would land in spam. Keep your email at Google, Fastmail, Migadu or anywhere else, and we will set the DNS records for you at no charge. A host that bundles mailboxes on residential-adjacent space is betting you never check whether the mail arrives.
02
We can read files on our hosting servers
Any host that runs your code can: PHP has to execute it and MySQL has to read your data. Our backup product is zero-knowledge because Restic encrypts before anything leaves your machine, and that distinction is real. Anyone advertising zero-knowledge shared hosting is redefining the term.
03
Already hosted elsewhere?
If you only want the backups and want to keep your current host, that is Website Protection: the same encrypted vault, pointed at a site we do not run.