Your website, professionally secured.
Secure, AI-ready hosting for business websites, built on the same protected platform we run our own sites on. Every website is onboarded by our team, then managed and monitored around the clock with AI working alongside our engineers, so it starts clean and stays protected.
Security first, from the ground up
Most hosting puts hundreds of websites on one shared server and leaves security to you. We do the opposite.
Isolated by design
Each website runs in its own environment with its own database, so a problem on one site can’t spill onto another.
Protected at the edge
Traffic passes through the Cloudflare® global edge network, with DDoS protection, content delivery and SSL. Fully Managed and Business Critical include Cloudflare Pro for faster WordPress pages, image optimization and stronger bot blocking, upgradeable to Cloudflare Business.
Sophos web application firewall
A second layer inspects every request on every plan. Its rules follow the OWASP Core Rule Set, the industry standard, and block SQL injection, cross-site scripting, directory traversal, protocol abuse and vulnerability scanners before they reach your server.
No open doors
There is no customer control panel to attack. Developers get browser-based SSH through a secure Cloudflare Tunnel, with no SSH port open to the Internet. On Business Critical, the WordPress login sits behind Cloudflare Access.
Backups out of reach
Backups are kept separately from your website, where a compromised site can’t delete them. On Fully Managed and Business Critical, our team handles restores for you.
DNS handled for you
Your domain’s DNS lives in our Cloudflare account and our team manages the records, including email records such as Microsoft 365, SPF, DKIM and DMARC. You keep ownership of your domain, and we can give you your own Cloudflare login limited to just your domain.
AI-assisted management and monitoring
AI works alongside our engineers to manage and monitor the platform: checking every file during onboarding, watching around the clock, and helping keep servers, security settings and updates in order. People make the decisions.
AI-ready website management
We set up Claude Code working directly on your hosting server. Connect with your own Claude account and manage your website in plain English from the Claude app on your desktop, tablet or phone, without ever logging in to WordPress admin.
Built around your application
Business Critical hosting is customized for your application or website: server resources, caching, firewall rules, PHP and database settings, and connections to the other systems it works with.
Choose the level of care your website needs
Every plan runs on our protected hosting platform, and every website is onboarded by our team.
Web Presence
$35per website, per month*†
2 GB storage · 25 GB transfer per month
A secure, professional website for businesses that simply need an online presence.
- Same protected hosting platform
- Cloudflare edge network with DDoS protection, CDN and SSLVisitors connect to the Cloudflare network first. It absorbs floods of attack traffic (DDoS), serves your pages and images from locations near each visitor (CDN), and encrypts every connection (SSL).
- Sophos web application firewallEvery request passes through a Sophos web application firewall before it reaches your site. Its rules follow the OWASP Core Rule Set and block SQL injection, cross-site scripting, directory traversal, protocol abuse and vulnerability scanners.
- AI-assisted management and monitoringAI works alongside our engineers to manage and monitor the hosting platform and your site around the clock: flagging anything unusual and helping keep servers, security settings and updates in order. Our engineers decide and act.
- Backups kept off the website
Protected Web Hosting
$95per website, per month*
10 GB storage · 100 GB transfer per month
Your website on isolated, professionally secured infrastructure.
- Isolated hosting environment
- Cloudflare edge network with DDoS protection, CDN and SSLVisitors connect to the Cloudflare network first. It absorbs floods of attack traffic (DDoS), serves your pages and images from locations near each visitor (CDN), and encrypts every connection (SSL).
- Sophos web application firewallEvery request passes through a Sophos web application firewall before it reaches your site. Its rules follow the OWASP Core Rule Set and block SQL injection, cross-site scripting, directory traversal, protocol abuse and vulnerability scanners.
- AI-assisted management and monitoringAI works alongside our engineers to manage and monitor the hosting platform and your site around the clock: flagging anything unusual and helping keep servers, security settings and updates in order. Our engineers decide and act.
- AI website management with ClaudeWe set up Claude Code from Anthropic working directly on your hosting server. You connect with your own Claude account and manage your site in plain English from the Claude app on your desktop, tablet or phone, with no need to log in to WordPress admin. Setup is part of onboarding.
- Backups kept off the website
- Browser-based SSH access on requestYour developers open an SSH terminal in their web browser, connected through a secure Cloudflare Tunnel. No SSH port is open to the Internet, and access is set up per person.
Fully Managed Web Hosting
$199per website, per month*
25 GB storage · 250 GB transfer per month
We manage the server, security, backups and WordPress platform for you.
- Everything in Protected
- Sophos web application firewallEvery request passes through a Sophos web application firewall before it reaches your site. Its rules follow the OWASP Core Rule Set and block SQL injection, cross-site scripting, directory traversal, protocol abuse and vulnerability scanners.
- Cloudflare Pro standardThe paid Cloudflare Pro plan is included in the price, with the speed and security features listed below.
- Faster WordPress: whole pages served from the Cloudflare network worldwideCloudflare Automatic Platform Optimization (APO) keeps complete copies of your WordPress pages close to visitors around the world, so pages load faster and your server does less work.
- Automatic image optimizationImages are compressed without visible loss of quality, so pages load faster, especially on phones.
- More firewall rules and stronger bot blockingMore room for custom Cloudflare firewall rules tuned to your site, and automatic blocking of easy-to-detect bots.
- WordPress platform managed and kept up to date
- Backups and restores handled by our team
Business Critical Hosting
from $359per website, per month*
50 GB+ storage · 500 GB+ transfer per month
Managed protected hosting for websites and applications that are important to business operations.
- Everything in Fully Managed
- Sophos web application firewallEvery request passes through a Sophos web application firewall before it reaches your site. Its rules follow the OWASP Core Rule Set and block SQL injection, cross-site scripting, directory traversal, protocol abuse and vulnerability scanners.
- Admin login locked to your team with Cloudflare AccessYour WordPress admin page sits behind a sign-in check on the Cloudflare network. Only people on your approved list can even reach the login screen.
- Hosting customized for your application or websiteWe plan the hosting with you: server resources, caching, firewall rules, PHP and database settings, and connections to the other systems your site works with, tuned to what your application needs.
- Cloudflare Pro included, upgradeable to Cloudflare Business‡ for a 100% Cloudflare uptime SLA, PCI DSS compliance and advanced bot protectionCloudflare Pro is included. Upgrading to Cloudflare Business adds a 100% uptime service-level agreement for the Cloudflare network, PCI DSS compliance for sites that take card payments, protection against sophisticated bots, and chat support from Cloudflare.
- Built for sites your business depends on
* Prices are per website, per month. A one-time onboarding fee applies to every website. We quote it after we review your site, because the work depends on the site’s size and condition. Business Critical pricing, storage and transfer depend on your application and are confirmed after review. Monthly storage and data-transfer allocations are generous and intended to accommodate normal website use. FTI will contact you before assessing additional charges or requiring a plan change because of sustained usage above your plan’s allocation. Hosting plans are not intended for video streaming, bulk file distribution, public software repositories, large backup repositories, customer file-storage services, high-volume API traffic or similar bandwidth-intensive uses; we can host those as custom Business Critical hosting. These are not self-service hosting accounts: because of the security features, there is no customer control panel, and changes to hosting, security and server settings are made by our team. Browser-based SSH access for your developers, through a secure Cloudflare Tunnel with no SSH port open to the Internet, is available on request on Protected, Fully Managed and Business Critical plans; it is not included with Web Presence. Help setting up Claude is included in the onboarding fee; a Claude account or subscription from Anthropic is not included and is arranged by you. Every plan requires your domain’s DNS to be hosted in our Cloudflare account: you point your domain’s nameservers to Cloudflare, and our team manages the DNS records, including email records such as Microsoft 365, SPF, DKIM and DMARC. You keep ownership and registration of your domain, and on request we can give you your own Cloudflare login with access limited to your domain.
† Web Presence is available only to current FTI Managed IT and IBeXc customers.
‡ Cloudflare Business is an optional upgrade from the included Cloudflare Pro, quoted separately. Its uptime SLA covers the Cloudflare network; Business Critical hosting is planned with you so the site behind it is built to stay up too.
Every website is onboarded by our team
This isn’t sign-up-and-go hosting. Before a website goes live on our platform, our team reviews it, checks it for malware and outdated components, cleans up what it finds, and sets up protection. Then we move it across.
Review and clean
We check the site, its plugins and its code before it moves, so problems don’t come with it.
Protect and harden
Firewall rules, secure settings and hardened WordPress configuration from day one.
Watch and maintain
Once it’s live, the same team that runs our managed IT keeps an eye on it.
Secure web hosting questions
How is this different from ordinary web hosting?
Commodity hosting puts many websites on one shared server and leaves security to you. FTI isolates each website in its own environment, puts security layers in front of it, and onboards every site with our team.
What protects my website?
Traffic passes through the Cloudflare global edge network, with DDoS protection, content delivery and SSL, then through a Sophos web application firewall built on the OWASP Core Rule Set, which blocks SQL injection, cross-site scripting, directory traversal and scanner probes before they reach your site.
What happens to my site when you onboard it?
Our team reviews the site, checks it for malware and outdated components, cleans up what it finds and sets up protection before moving it across.
Where are backups kept?
Backups are kept separately from your website, where a compromised site cannot reach or delete them.
Do you manage WordPress for us?
Yes, on the Fully Managed and Business Critical plans we manage the server, security, backups and WordPress platform.
Can existing FTI customers get a simple website?
Yes. Our Web Presence plan, at $35 per month with 2 GB of storage and 25 GB of transfer, is available only to current FTI Managed IT and IBeXc customers.
How much does it cost?
Protected Web Hosting is $95 per website per month, Fully Managed Web Hosting is $199, and Business Critical Hosting starts at $359. A one-time onboarding fee applies to every website and is quoted after we review the site. Web Presence, at $35, is available only to current FTI Managed IT and IBeXc customers.
Are there storage or bandwidth limits?
Yes, and they are generous. Web Presence includes 2 GB of storage and 25 GB of data transfer per month, Protected Web Hosting 10 GB and 100 GB, Fully Managed 25 GB and 250 GB, and Business Critical 50 GB and 500 GB or more. If a site uses more than its plan over time, we contact you before any extra charge or plan change. Video streaming, bulk downloads and other bandwidth-heavy uses are handled as custom Business Critical hosting.
What do the higher plans add?
Fully Managed includes Cloudflare Pro as standard: whole WordPress pages served from the Cloudflare network for speed, automatic image optimization, more firewall rules and stronger bot blocking, plus our team managing WordPress, backups and restores. Business Critical adds an admin login that only your team can reach, hosting customized for your application or website, and includes Cloudflare Pro, upgradeable to Cloudflare Business, quoted separately.
Can I manage the hosting myself?
There is no customer control panel, because of the security features: changes to hosting, security and server settings are made by our team. On Protected, Fully Managed and Business Critical plans, browser-based SSH access to your server is available on request for your developers, through a secure Cloudflare Tunnel with no SSH port open to the Internet. We can also help you set up Claude from Anthropic so you can manage your website with AI assistance. That setup is part of onboarding; you’ll need your own Claude account.
How does AI fit into your web hosting?
Two ways. AI works alongside our engineers to manage and monitor the hosting platform: checking every file during onboarding, watching around the clock, and helping keep servers, security settings and updates in order, with people making the decisions. And on Protected, Fully Managed and Business Critical plans we set up Claude from Anthropic during onboarding, so you can manage and update your website with AI. You need your own Claude account.
Can hosting be customized for my application?
Yes. Business Critical hosting is planned with you and customized for your application or website: server resources, caching, firewall rules, PHP and database settings, and connections to the other systems it works with. Tell us what you run and we will quote it.
How does my domain need to be set up?
Your domain’s DNS is hosted in our Cloudflare account. You point your domain’s nameservers to Cloudflare, and our team manages the DNS records, including email records such as Microsoft 365, SPF, DKIM and DMARC. You keep ownership and registration of your domain, and we can give you your own Cloudflare login with access limited to just your domain. We help with the switch during onboarding.
Is your website a risk to your business?
Tell us where your site is hosted today and we’ll show you what secure hosting from FTI would look like.