Get in touch
Vermont time
Vermont-based WordPress hosting
WordPress Hosting and a WordPress Dev, together.
I’ve hosted and managed hundreds of WordPress sites for small businesses, nonprofits and schools, many of them here in Vermont. I keep them fast, secure and backed up, and when you email, I’m the one who answers.
What’s included
Your worries, handled.
You have a lot on your plate. Modern complexities and the rise of AI-based hacking and intrusion are adding more. Let me manage the infrastructure, so you can manage your project.
Backed up every night
Your whole site is copied every night to separate storage and kept for 30 days, with a monthly copy kept for 90 days somewhere else again. If something breaks, I put it back the way it was.
Patched and scanned
The server installs security updates every night, and every site is scanned for vulnerable plugins and themes. When something turns up, I patch it. When a serious PHP flaw went public in October 2026, every site I host was safe the same day.
Locked down
Each site runs walled off from the others, behind a firewall that blocks repeated bad logins and attack traffic. Cloudflare stands in front to soak up floods of junk requests.
Watched around the clock
Every site is checked every five minutes, day and night. If a core service stops, the server restarts it on its own. If your site still isn’t answering, I get the alert and fix it.
Fast for every visitor
Pages are cached on the server and served through Cloudflare’s network, so they load quickly whether your visitors are in Burlington or Berlin.
Email that arrives
Contact form and order emails go out through a proper mail service, set up with your domain, so they land in inboxes.
Who’s watching
The alerts come to me.
I’m Tanner (the Tanner in Tannermooredesign). I’ve built and managed WordPress sites for nearly twenty years, and I know the WordPress ecosystem back to front.
When a site goes down or a security issue turns up, I’m alerted immediately, and I deal with it before you even know there’s an issue. If you need to be looped in, I’ll be in touch. Otherwise I stay out of your hair.
I’m not out to host thousands of websites as cheaply as possible. I host a small number of sites and look after each one properly: securely, personally, with the kind of care I’d want for my own.
Cloudflare, included
Cloudflare, set up and managed.
Every plan includes Cloudflare. When I migrate your site, I configure Cloudflare to manage your DNS. Your domain stays registered where it is and your email keeps working as it was.
With your site behind Cloudflare, I can see its traffic and threats, and stop a problem before it reaches you.
Cloudflare comes with a whole host of necessary features and protections, including:
- DNS managed by me, with every existing record kept
- SSL all the way from Cloudflare to your server, renewed automatically
- A global CDN, so pages and images load from near each visitor, no matter where they’re visiting from
- Always-on DDoS protection
- Firewall rules and bot blocking, tuned to your site
- HTTP/3 and modern compression
- Email records (SPF, DKIM, DMARC) checked, so it’s harder for anyone to send email pretending to be you
- DNSSEC, where your registrar supports it
Wordfence · Patchstack
Security, by design.
Every site I host is checked against Wordfence’s vulnerability database, one of the largest records of known holes in WordPress, plugins and themes. New holes are added as soon as they’re disclosed. When something on your site matches, I hear about it and patch it.
Premium plans add Patchstack, which goes a step further. When a new hole turns up, Patchstack adds a small protective rule to your site that blocks attacks on it, even before the plugin’s developer has released a fix. The rule holds the line until the official update is out, and then I install that too. On Standard, you can add Patchstack for $25 a year.
- WordPress, every plugin and every theme checked against Wordfence’s vulnerability database
- An alert to me when something on your site is affected
- Security fixes applied fast, with routine updates every month
- A server firewall and brute-force blocking
- Patchstack virtual patches that block known exploits before an official update exists
- Early warning of new vulnerabilities, often up to 48 hours before they’re widely public
- Cover for abandoned plugins while we plan a replacement
- Login hardening, like two-factor sign-in and brute-force protection
Plans
Simple pricing, per site.
Pay monthly or save by paying for the year. Nonprofits and schools get 10% off any plan. No contracts: cancel with 30 days’ notice and I’ll hand you a full copy of your site.
Most sites
Standard
$25 / month, or $280 a year
For brochure sites: small businesses, nonprofits and schools.
- Everything in What’s included
- Monthly WordPress and plugin updates, done for you
- Security monitoring and plugin advice, free
- Free SSL and Cloudflare
- Support by email and phone, from me
Premium
from $150 / month
For stores, memberships and sites with real traffic, on top-tier cloud hardware.
- Everything in Standard
- High-frequency Vultr cloud servers, shared with fewer sites
- Patchstack virtual patching
- A staging copy, so updates and changes are tested before they go live
- Same-day replies
Custom
Let’s talk
Several sites, agencies, or something unusual.
- Several sites on one plan
- White-label hosting for agencies
- A server of your own
- Backups and monitoring to your spec
Want help with edits and questions too? Add a care plan: $90 a month includes an hour of my time, whenever you need it.
Prices are per site. Domain names and email mailboxes aren’t included; I’ll keep yours working as they are.
Under the hood
The details, for whoever asks.
For your IT person, your board or anyone who asks. You don’t need to know any of this; it’s here so you can see what you’re getting.
- Cloud servers with 16 GB of memory; each site runs as its own user with its own PHP
- Premium: Vultr high-frequency cloud servers with fast CPUs and NVMe storage
- Ubuntu 24.04 LTS, NGINX, PHP 8.3, MariaDB 11.8 and Redis
- Operating system and server software patched automatically every night
- Cloudflare in front: managed DNS, SSL, global CDN, firewall and DDoS protection
- Daily incremental and weekly full backups kept 30 days, plus a monthly full copy kept 90 days elsewhere
- WordPress, plugins and themes checked against Wordfence’s vulnerability database
- Premium: Patchstack virtual patching for known exploits
- Firewall and brute-force blocking
- Uptime monitoring with alerts to me
- Form and order email delivery with SPF and DKIM
- SFTP and WordPress admin access whenever you want it
- Your site, your domain, your data: you can take a full copy any time
Free migration
Moving is free, and I do the work.
I copy your site over, test it, move your domain’s DNS to Cloudflare and switch it over when it’s ready, with little or no downtime. You keep your domain, your email and your logins. Most moves take a day or two.
1. Send me your site.
The web address, where it’s hosted now and where your domain is registered.
2. I copy and check it.
You get a preview link to look over.
3. We switch it over.
I set up your DNS and SSL on Cloudflare, switch over at a quiet time and check that everything works, email included. Then you cancel your old host.
Free for WordPress sites in working order, with no commitment. If yours needs repairs first, I’ll tell you what and quote it before I start.
Questions
The things people ask first.
Something I haven’t covered? Email me.
What if something happens to you, or you’re unavailable?
Your site keeps running without me. The server installs its own security updates and restarts its own services, and backups run every night whether I’m at my desk or not.
You also have your own logins to everything (see the next question), and I keep a written record of how your site is set up, so another developer could pick it up quickly.
Do I own my site? Can I get access?
Yes. Your content, files, database and domain are yours, and you can ask for a full copy any time.
On request you get your own logins: WordPress admin, Cloudflare for your domain, and the hosting dashboard for your site, where you can see and download your backups. If your developer needs SFTP access, I’ll set that up too.
What happens if my site gets hacked?
Hacks at the server level are on me: I clean them up and close the gap at no charge. Backups are kept in two places, away from the server, so there’s always a clean copy to go back to.
Most hacks come in through an outdated or abandoned plugin. I watch for those and tell you when one needs updating or replacing, free of charge. If a site is hacked through its own plugins or settings, the repair is billed by the hour.
What if my site goes down at night or on a weekend?
The server restarts its own core services, which fixes most problems before anyone notices. Alerts reach me whenever they fire, and I fix what’s left as soon as I see it.
Will moving break my email?
No. Your mailboxes stay where they are. I copy every email record when I move your DNS and check that mail still flows after the switch.
Can I still edit my site myself?
Yes. It’s the same WordPress site with the same logins. Nothing changes for you or your editors.
Where is my site hosted?
On cloud servers in the United States, with Cloudflare serving it from locations around the world. I’m based in Vermont and look after sites for organizations across Vermont, New England and beyond.
Do you update WordPress and plugins?
Yes, on every plan. Once a month I update WordPress, plugins and themes, with a backup first. On Premium, I test them on a staging copy before they go live. If an update I run breaks something, I fix it.
Bigger upgrades, like a major WordPress version or a plugin that changes how your site works, I check first and handle separately, under a care plan or by the hour. I’ll always tell you before that happens.
Do you host sites you didn’t build?
Yes. Most of the sites I host started somewhere else.
Do you host email?
I make sure your site’s emails get delivered. Mailboxes stay where they are now, and I’ll keep them working through the move.
What if I want to leave?
Give me 30 days’ notice and I’ll hand you a full backup and help you move. No hard feelings.
Do you work with agencies?
Yes. I host sites for agencies under their name, with me as their back office.
Get started
Tell me about your site.
Ask for a free move, or just a chat first. I’ll reply within a business day.
Not sure where your site stands? Ask for a free site evaluation. I’ll check your speed, security and setup, and tell you what I’d fix first.