Humanfrog Lab

Shared hosting, managed WordPress or VPS: what does your site actually need?

Hosting offers look alike at first glance: shared hosting, managed WordPress hosting, VPS, dedicated server, cloud. The differences are large, both in performance and in who takes care of security, updates and backups. Hosting that is too weak shows up during your first campaign; hosting that is too big weighs on the budget for years.

This page explains when shared hosting is enough, when managed WordPress hosting pays off and when you need a VPS or more. Based on the type of site, traffic, special requirements and your team's skills, the tool recommends a hosting type and an indicative server size.

Which hosting does your site need, and how much capacity?

Answer the questions about your type of site, traffic, special requirements and team. The tool uses no prices: the recommendation and ranges are indicative and serve as a starting point for talking to providers.

Answer six short questions. The recommendation and indicative server size update as you go.

What kind of site or application are you hosting?
How many visits does the site get per month?

The total across all sites you want to host. You will find it in your web analytics tool.

How many websites will you host?

Count separate domains or installations, including staging environments.

How many users are on the site at the same time at peak?

For example during a sale, a newsletter send or an ad campaign. The real-time report in your analytics tool gives a rough estimate.

Do you have any special requirements?

Tick everything that applies. Leave empty if none do.

Who will look after the server?

Recommended hosting

Why this recommendation

Indicative size

The ranges are a starting point. After a month in production, check actual CPU, memory and disk usage and adjust the resources.

Managed or unmanaged

When you outgrow it

Risks of undersizing

  • Slow pages, 503 errors and abandoned checkouts exactly when traffic peaks.
  • A full disk stops the database, backups and mail, often without warning.
  • When memory runs out, the system kills processes, causing random errors that are hard to trace.

Risks of oversizing

  • You pay for resources you do not use, often for years because of a contract term.
  • A bigger server does not replace caching and optimisation: a slow site on a server twice the size is often only slightly faster.
  • More resources without management also means more system to maintain and a larger attack surface.

The recommendation is indicative and based on typical workloads. Actual usage depends on code, plugins, caching and traffic patterns. Before deciding, review metrics from your current environment or run a load test.

The calculation runs in your browser. Your answers are only sent if you submit the contact form below.

Five types of hosting at a glance

Hosting types differ in whether you share resources with others, how much control you have over the environment and who looks after the server. Price matters, but it follows from these three properties.

TypeResourcesWho runs the serverSuitable for
Shared web hostingShared with other customersProviderCompany websites, small WordPress sites
Managed WordPress hostingShared or separate, tuned for WordPressProvider, including WordPressBusiness WordPress sites, small shops
Managed VPSGuaranteedProvider or partnerShops, applications, several sites without an in-house admin
Unmanaged VPSGuaranteedYouTeams with Linux skills and time for maintenance
Dedicated server or cloudWhole server or flexible resourcesYou, provider or partner, as agreedHigh traffic, multiple servers, strict requirements

For a quick recommendation for your own site, use the tool above. The sections below explain what it is based on.

Shared hosting: when it is enough

On shared hosting, hundreds of sites belonging to different customers run on one server. The provider looks after the operating system, web server, PHP and database, while you manage domains, mailboxes and files through a control panel such as cPanel or Plesk.

Shared hosting is perfectly fine for a company website, a small blog or a site with a few thousand visits a month. Its limits show when:

  • the site slows down at peak times because the provider caps processes or memory per plan,
  • you need a PHP extension, service or software version the provider does not support,
  • another site on the same server causes problems that affect you too, for example the reputation of the IP address used for sending mail.

When choosing, check the PHP memory limit, the storage type (SSD or NVMe), backup frequency and how restores work, and which PHP versions are available. WordPress currently recommends PHP 8.3 or later, while PHP 8.2 receives security support only until the end of 2026.

Managed WordPress hosting

Managed WordPress hosting sits between shared hosting and your own server. The environment is configured only for WordPress: server-level caching, object caching (Redis or Memcached), automatic core updates, a staging site to test changes and daily backups with one-click restore.

It suits business WordPress sites that generate enquiries or sales, and smaller WooCommerce shops. WooCommerce recommends a WordPress memory limit of at least 256 MB, and the WordPress Hosting Handbook lists 512 MB or more for shops, page builders and multilingual sites. Before signing, check whether the provider also updates plugins, how many sites the plan allows and whether it caps visits.

VPS: managed or unmanaged

A VPS (virtual private server) is a separate virtual server with guaranteed vCPU, RAM and disk and its own operating system. You have root access, so you can install anything: your own application, Docker, background jobs, special PHP extensions or several sites on different technologies.

The key question is not the size of the VPS but who runs it:

  • An unmanaged VPS is the cheapest. The provider supplies the server and network; everything else, from security patches and the firewall to backups and monitoring, is your job. It makes sense if you have an administrator with Linux skills and time.
  • A managed VPS means the provider or a partner looks after the system. Agree exactly what is included: PHP and database updates, monitoring, response times and out-of-hours incident handling.

An unmanaged server that in practice nobody looks after is one of the bigger security risks in smaller companies. The savings disappear quickly after the first breach or data loss.

VPS vs dedicated server and cloud

When the load outgrows a single VPS, when you host many sites or when isolation requirements rule out a shared platform, it is time for a dedicated server, several servers with a separate database or a virtual data centre. At this size you are making architecture decisions: database separation, load balancing, a content delivery network (CDN), replication and a disaster recovery plan.

Whether it is cheaper to buy a server, rent one or use a virtual data centre can be worked out with the server TCO calculator. How much availability you actually need, and what an SLA promise really means, is covered in the SLA and uptime guide.

How to size vCPU, RAM and disk

A reliable estimate is based on measurements from your current environment. Where there are none, three figures help: monthly visits, concurrent users at peak and the type of site.

  • vCPU determines how many uncacheable requests the server can handle at once. A shop or application needs more than a company website, because carts, checkouts and logged-in users cannot be served from cache.
  • RAM is used by PHP processes, the database and the cache. For a small WordPress site with the database on the same VPS, 2 to 4 GB is a common starting point; shops and applications need more.
  • Disk should be SSD or NVMe, with headroom for growth, logs and local backups. A full disk is one of the most common causes of a sudden outage.

Time to first byte (TTFB) is a useful measure of server responsiveness. Google's web.dev gives 0.8 seconds or less as a rough target. If your site exceeds it even without load, a bigger server usually helps less than caching and code optimisation.

Data location, e-mail and security

A server close to your visitors shortens response times, and location also matters for data protection. Transferring personal data outside the EU is allowed only under specific GDPR conditions, so for European companies a provider with a data centre in the EU is usually the simplest choice. Sign a data processing agreement with the provider and check where backups are stored.

Do not host e-mail on the same server as the website. That way a breach or overload of the site does not stop your mail, and business e-mail generally works better in a dedicated service such as Microsoft 365 or Google Workspace.

Whatever the hosting type, you need off-site backups and a tested restore. How to set recovery targets is explained in the backup, RPO and RTO guide.

Checklist before choosing a provider

  • Do you know your monthly visits and concurrent users at peak?
  • Do you need root access or software that shared hosting does not allow?
  • Who will handle updates, security and backups, and who is reachable during an outage?
  • Which PHP and database versions does the provider support, and how fast does it adopt new ones?
  • How often are backups taken, where are they stored and how fast is a restore?
  • Where is the data centre, and will the provider sign a data processing agreement?
  • Can you scale resources without migrating, and how hard is it to move to another provider?

Humanfrog provides hosting and a virtual data centre on its own cloud platform in TIER III data centres in Slovenia, as well as managed IT services in which we look after servers, updates and backups. If you would like to check the tool's recommendation against your own metrics, talk to us.

Frequently asked questions

What is the difference between a VPS and shared hosting?
With shared hosting, many customers share one server and its resources, and the provider runs the server entirely. A VPS (virtual private server) is a separate virtual server with guaranteed resources and its own operating system, giving you full control but also more responsibility for running it.
When do I need a VPS instead of shared hosting?
When you need root access or custom software, when you host your own application or API, when shared plan limits slow you down at peak times, or when security and compliance require isolation from other customers. A small company website usually does not need a VPS.
What is managed WordPress hosting?
It is hosting built specifically for WordPress. Besides the server, the provider usually takes care of caching, WordPress core updates, daily backups, a staging site and a web application firewall. It suits companies with an important WordPress site or shop but no in-house server administrator.
What is the difference between a VPS and a dedicated server?
A VPS is a virtual slice of a physical server with guaranteed resources. A dedicated server gives you the whole physical machine, with no other customers on the hardware. A dedicated server or cloud infrastructure makes sense when the load, number of sites or isolation requirements go beyond a single VPS.
How much memory does a WordPress site need?
The WordPress Hosting Handbook lists 256 MB as the recommended default PHP memory limit, and 512 MB or more for WooCommerce, page builders and multilingual sites. On a VPS, 2 to 4 GB of RAM is a common starting point for a small site with its database, and more for a shop. Measure actual usage after launch and adjust.
Does server location matter?
Yes. A server close to your visitors shortens response times, and location also affects data protection. If personal data leaves the EU, special GDPR transfer rules apply. A provider with a data centre in the EU makes meeting these requirements simpler.

Stay up to date

Regulations, licence prices and technology change fast. When we update the guides and tools in the Lab or publish a new article, we let you know by e-mail. Occasional, and never spam.

Subscribe to the newsletter