The best web hosting for a small business is not the one at the top of a ranking or the cheapest deal of the week. It is the one that runs current WordPress without workarounds, answers quickly for your customers, keeps copies of your site off the server, and has someone on the other end when something breaks. This guide covers what to check before you sign up, with questions you can send to any hosting company, including us.
Why a “best hosting” list doesn’t settle it
Search for the best web hosting and you will mostly find lists of five or ten companies, each with a purchase link. They help you learn names, but they compare entry prices and headline features. They say nothing about what your site actually needs.
A brochure site with a contact form has little in common with a WooCommerce store taking orders at night, and even less with a site that publishes every day. The useful question is not “which one is best?” but “which one fits my case, and what happens when I need help?”
1. Current WordPress requirements
WordPress.org publishes what it recommends your host supports: PHP 8.3 or greater, MariaDB 10.11 or greater (or MySQL 8.0 or greater), and HTTPS. The same page notes that WordPress still runs on PHP 7.4 and MySQL 5.5.5, but those versions have reached end of life and may expose your site to security vulnerabilities.
Check the PHP calendar too. According to php.net, each PHP branch gets two years of active support and two more years of critical security fixes only. PHP 8.2 stops receiving security fixes on 31 December 2026. A host that still defaults to 8.1 or 8.2 will push you into a migration soon.
Ask before you buy:
- Which PHP versions are available, and can you switch from the control panel without opening a ticket?
- Which MySQL or MariaDB version does the server run?
- Is the SSL certificate (HTTPS) included, and does it renew automatically?
2. Server response time
Your host drives much of the time the server takes to start responding, known as TTFB (Time to First Byte). The web.dev guide, maintained by the Chrome team, suggests most sites aim for a TTFB of 0.8 seconds or less and treats anything above 1.8 seconds as poor. It also points out that TTFB is not a Core Web Vitals metric; it matters because it delays everything that comes after it.
In practice this depends on where the server is (close to your audience helps), whether there is server-side caching, and how many sites share the same machine. If your dashboard is the slow part, our guide to a slow WordPress admin shows how to find the bottleneck.
Ask:
- Where are the servers located?
- Is there page caching on the server, or will you depend on a plugin?
- Can you try it for a few days, or is there a refund window, so you can measure with your own site?
3. Backups you can actually restore
Almost every host says it backs up your site. The difference is in the details, and they only show up the day your site goes down or gets hacked. Ask how often copies are made, how many days they are kept, whether they are stored on another server or data center, and whether you can restore from the panel yourself or must ask support (and how long that takes).
Even with good host backups, keep a copy of your own somewhere else. If the account is suspended or the company has a problem, you are not left with nothing.
4. Security and isolation between sites
On shared hosting, many sites live on the same server. WordPress.org recommends, as a security practice, that PHP applications run under your account’s username rather than a shared server user, and suggests asking a prospective host what it does to protect each account. That lowers the chance of one hacked site spreading to its neighbors.
Other questions worth asking: is there a web application firewall (WAF) and malware scanning? If your site gets hacked, does the host clean it, just suspend it, or leave it to you?
5. Support that knows WordPress
For a small business owner, support often matters more than any number on the plan page. Support that only says “the server is up” does not help when a plugin breaks the site after an update.
- Which channels are there (tickets, chat, phone) and during what hours?
- Is support available in your language?
- Will the team help with WordPress issues, or only with infrastructure?
- Is migration of your current site included?
6. Renewal price, limits, and the way out
The advertised price often applies only to the first term. Before signing, check the renewal price, what happens when the site goes over its storage, traffic, or CPU limits, and whether email and domain are included or billed separately.
Also check how you leave. A good host lets you download your files and database at any time, without fees or red tape. If the contract makes leaving hard, treat it as a warning sign.
Shared, VPS, or managed: which to choose
- Shared: cheapest, fine for low-traffic brochure sites, but resources are split with other customers.
- VPS or cloud: reserved resources and more control, but someone has to run the server, patch the system, and handle security.
- Managed WordPress: the host runs the environment with WordPress in mind (versions, caching, backups, security) and support knows the platform. It costs more than shared hosting but takes the technical side off your plate.
For most small businesses without a technical person on the team, managed hosting tends to bring the fewest surprises. An online store or a site that already gets a lot of traffic calls for reserved resources.
Quick checklist before you sign
- PHP 8.3 or greater available, switchable from the panel.
- MariaDB 10.11+ or MySQL 8.0+, with HTTPS included.
- Servers close to your audience and server-side caching.
- Automatic backups stored off the server, with restores you can run yourself.
- Account isolation, a firewall, and a clear policy for hacked sites.
- Support that understands WordPress.
- Renewal price, limits, and exit terms in writing.
If you want help assessing your current host or choosing a new one, Amicatek offers WordPress hosting and can look at your case first. Request a site assessment and tell us what your site needs to do; we’ll tell you what makes sense, even if the answer is to stay where you are.