Premium NVMe, no SATA layer
Enterprise NVMe on tuned bare metal. No networked SAN, no spinning disks behind an SSD cache.
We've spent more time tuning database engines and web servers than we'd like to admit. Here's what that gets you.
Every layer pulls its weight — from kernel buffers to the page cache. Here's the actual stack, with the numbers we run it at.
Enterprise NVMe on tuned bare metal. No networked SAN, no spinning disks behind an SSD cache.
LSCache for WordPress pre-tuned. Brotli compression. HTTP/3 + QUIC negotiated on every request.
OPcache and JIT tracing enabled. Generous per-request memory so heavy plugins don't OOM.
Deep buffer pools, threaded query handling, IO tuned for NVMe latency. Redis sits on top as an object cache.
Cloudflare's edge fronts the LiteSpeed page cache. Redis fronts the DB. The WP options table never touches disk on a warm cache.
BBR congestion control, tuned TCP buffers, jumbo frames where supported. Throughput holds under congestion instead of collapsing.
A request from the open internet passes through five layers before it can touch a database row. Each one is configured on day one — no add-ons, no premium SKUs.
Volumetric floods, SYN attacks, and HTTP request floods are dropped before they touch your origin. Origin IP is never exposed.
ModSecurity OWASP CRS plus Cloudflare's Bot Fight Mode. Injection, XSS, and credential-stuffing get the 403 before PHP runs.
The origin firewall accepts inbound 443 from Cloudflare's published IP ranges and nothing else. SSH is key-only on a non-22 port.
Tunable rate-limit on /wp-login.php and /xmlrpc.php. Daily ImunifyAV malware scans. Every change is recorded in a per-site audit log.
TOTP 2FA is mandatory for the customer panel. Sessions auto-expire, SSH keys are scoped per environment, and IP allowlists are supported.
99.99% works out to a maximum of 4 m 23 s of downtime per month. Anything more and we credit your account before you have to ask.
Origin, database, edge and email each check in every 60 seconds. The dashboard at status.serverborn.com is the same one our on-call rotation watches — no curated marketing version.
Root over SSH on a non-22 port, key-auth only. WP-CLI, Composer, git, rsync, all pre-installed. Tail logs from your terminal.
Spin up an identical staging clone in 30 seconds. Push changes back to production from the panel, no SCP gymnastics.
Connect a GitHub repo, choose a branch, set the deploy path. Every push triggers a pull. Slack notifications optional.
A dark, fast, keyboard-friendly admin UI. File manager, terminal, log viewer, DNS, email — all in one place. No 2003-era cPanel.
Hit ⌘K in the panel and jump to any setting, site, or log in a couple of keystrokes.
Access, error, modsec, and PHP-FPM logs all tailable from the panel or over SSH. No stripped-down "log view" widget.