SERVERBORNForged for speed
The full stack

Every layer, tuned by hand.

We've spent more time tuning database engines and web servers than we'd like to admit. Here's what that gets you.

PremiumNVMe Lightning-fast storage
Cloudflareedge DDoS shielded
0.00% Uptime SLA
24/7 Monitoring
Performance

Speed isn't a feature. It's the architecture.

Every layer pulls its weight, from kernel buffers to the page cache. Here's the actual stack, with the numbers we run it at.

Storage NVMe-only

Premium NVMe, no SATA layer

Enterprise NVMe on tuned bare metal. No networked SAN, no spinning disks behind an SSD cache.

HDD~120
SATA SSD~85K
NVMe850K
Random read · 4K · IOPS
Web server LiteSpeed

LiteSpeed engine, not Apache

LSCache for WordPress pre-tuned. Brotli compression. HTTP/3 + QUIC negotiated on every request.

HTTP/3 QUIC Brotli 0-RTT
Protocols · always-on
PHP runtime 8.3 + JIT

PHP 8.3, tuned for WordPress

OPcache and JIT tracing enabled. Generous per-request memory so heavy plugins don't OOM.

1 GB
Memory · Launch
3 GB
Memory · Pro
6 GB
Memory · Studio
Database MariaDB

MariaDB, tuned for WP queries

Deep buffer pools, threaded query handling, IO tuned for NVMe latency. Redis sits on top as an object cache.

RedisHOT
InnoDBWARM
NVMeDISK
Caching Layered

Edge, page, and object, layered

Cloudflare's edge fronts the LiteSpeed page cache. Redis fronts the DB. The WP options table never touches disk on a warm cache.

HIT
Network 10 Gbit+

Tuned kernel network stack

BBR congestion control, tuned TCP buffers, jumbo frames where supported. Throughput holds under congestion instead of collapsing.

050100250+ ms
8.2 ms · cold-origin TTFB
Security

Defense in depth. Not as an upsell.

A request from the open internet passes through five layers before it can touch a database row. Each one is configured on day one: no add-ons, no premium SKUs.

01
Cloudflare edge

L3 / L4 / L7 DDoS scrubbing

Volumetric floods, SYN attacks, and HTTP request floods are dropped before they touch your origin. Origin IP is never exposed.

Always-on Origin hidden
02
WAF + Bot fight

OWASP ruleset + bot management

ModSecurity OWASP CRS plus Cloudflare's Bot Fight Mode. Injection, XSS, and credential-stuffing get the 403 before PHP runs.

OWASP CRS Bot Fight Mode
03
Origin firewall

Allowlist to Cloudflare's edge only

The origin firewall accepts inbound 443 from Cloudflare's published IP ranges and nothing else. SSH is key-only on a non-22 port.

CF allowlist Key-auth only
04
Application

Rate-limited login + audit log

Tunable rate-limit on /wp-login.php and /xmlrpc.php. Daily ImunifyAV malware scans. Every change is recorded in a per-site audit log.

Rate-limited Audit log
05
User auth

2FA on the hosting panel

TOTP 2FA is mandatory for the customer panel. Sessions auto-expire, SSH keys are scoped per environment, and IP allowlists are supported.

TOTP 2FA Session timeout
Reliability

Uptime measured. Credited automatically.

99.9% works out to a maximum of 43 m 12 s of downtime per month. Anything more and we credit your account before you have to ask.

Live status All systems operational

Real-time monitoring,
public and unfiltered.

Origin, database, edge and email each check in every 60 seconds. The dashboard at status.serverborn.com is the same one our on-call rotation watches, not a curated marketing version.

60s
Heartbeat interval
3
External regions
<60s
Page on-call
View live status → Powered by Uptime Kuma · public incident archive
SLA budget

What 99.9% means, in minutes

Monthly budget4 m 23 s
Used this month0 m 0 s
Remaining4 m 23 s
If we miss · automatic 10% credit on your next invoice
How it's defended

The mechanics behind the number

  • 30-second heartbeats from three external regions
  • Daily encrypted snapshots replicated to a second region · 30-day retention (60 on Studio)
  • One-click restore at file or full-site granularity
  • On-call paging within 60 seconds of a failed check
  • Public incident timeline · no after-the-fact spin
Developer experience

The tooling you'd actually wire up if you were running it yourself.

Browser terminal + WP-CLI

A real shell inside your own container, one click from the panel, on a laptop or a phone. WP-CLI, PHP, MySQL and curl are ready; every session is isolated to your pod, timed, and logged.

Self-service migrations

Bring any site in from a backup: WordPress exports, cPanel backups or a plain zip plus the database. The panel unpacks, imports, rewrites the address, cleans up the old host's leftovers and switches on caching, usually in under ten minutes.

Git push to deploy + previews

Connect a GitHub repo, pick a branch and a folder. Every push is live in seconds, with a signed webhook and a full deploy log. Push any other branch and get its own preview site: 1 on Launch, 3 on Pro, 10 on Studio.

Modern panel

A dark, fast, keyboard-friendly admin UI. File manager, browser terminal, cron, DNS and email, all in one place, with a live picture of every site. No 2003-era cPanel.

Staging + safe updates

A private copy of any site, files and database, hidden from search engines. Push to live when it looks right, or let Safe updates test every waiting WordPress update on a copy first, with before and after pictures. Every night, updates that pass the test are applied for you; anything that looks off waits for your call. The live site is saved first, so undo is one click. Every plan.

Real logs, not summaries

Access, error, modsec, and PHP-FPM logs all tailable from the panel or over SSH. No stripped-down "log view" widget.

Redirects manager

Point old addresses at new pages from the panel, permanent or temporary, whole sections at once. Your server answers before WordPress loads, so they are instant and work on any site.

Search and replace, with undo

Change an old domain or a phone number across the whole database, page builders included. Preview every match first; the database is saved first, so one click undoes it.

One-click database cleanup

Clear the old revisions, spam, trash and expired data that slow down the admin. See the count and the space first, tick what goes, undo it if you change your mind.

Automatic WebP images

Every JPEG and PNG gets a lighter WebP copy, usually 25 to 70 percent smaller, and your pages use it automatically. No plugin, and the originals are never touched.

Blueprints for new sites

Save a finished site as a starter, then spin up every new website from it in one click: theme, plugins, pages and settings included. Built for agencies.

Backups you can open

Open any nightly backup in a private staging copy to look around, grab a file or bring back a page, without touching the live site. Or restore everything in one click.

Forged for builders

Tooling that gets out of your way.
Hosting that stays out of the news.