/ cloud Log in The hosting root · WordPress
WordPress.
We patch it.
We watch it.
Managed WordPress in the EU. When a PHP hole goes public, we roll out the fix. When a plugin is vulnerable, you hear it from us before an attacker finds it.
PHP 8.4 · MariaDB · backups every 6 h · EU data · no card
Wednesday 21 October 2026 · PHP hole (PHP2Shell)
Attacks began.
The PHP fix only shipped at 16:00. Anyone waiting for their host or admin was six hours behind. Government offices in the Netherlands and Finland took their sites offline.
Shield up.
On Grove Cloud we switch on the PHP shield for every site at once: the attack stops before it reaches PHP. We then roll out the fix ourselves as soon as it ships — you don't have to do anything.
What we watch.
Same-day patches
New PHP or WordPress version? We rebuild one site first as a test, then the rest. If it fails the checks, the old one keeps running.
PHP shield
A virtual patch for a hole that has no fix yet. Stops the attack before PHP — on every site with one switch.
Backups every 6 hours
Database and media, a copy on a second server and a weekly restore drill proving the site really comes back.
Grove Check included
Regular site scans. Vulnerable plugin? You hear it from us before an attacker finds it — with what to update.
On from day one
Secure settings nobody forgets.
Every site runs from one image that we maintain. No site is an exception.
- XML-RPC off
- no PHP in uploaded files
- WordPress version hidden
- admin file editor off
- install only with the owner's key
- plugins update themselves
- site doesn't run as root
- each site on its own network
A clear line.
Ours
Server, PHP, WordPress core, database, backups, security and keeping the site up.
Yours
Content, plugins and design. If a plugin breaks the site, we restore a backup and tell you which one it was.
Run websites for towns or companies?
One account for dozens of sites, a combined overview and a report for each client under your name. The client relationship stays yours; we run operations and security.
What people ask.
How does my site move to you?
Send us access to your current hosting or a backup. We move the site, test it on our address and only then switch the domain.
What if a plugin breaks the site?
We restore the latest backup (at most 6 hours old) and tell you which plugin it was.
Does WordPress send emails?
Through an SMTP plugin and your email service. We'll help you set it up.
Where is the data?
On servers in Nuremberg (EU), backups on a second server there too. Nothing leaves the EU.