All posts
September 2023·6 min read

What to look for in Australian WordPress hosting: a plain-English checklist

Hosting providers all claim to be fast, reliable, and secure. Here's a practical checklist of things that actually matter for a WordPress site serving Australian customers — and questions you can ask to verify the claims.

Server location

What to look for: Servers in Australia, specifically in the city or state closest to most of your customers. "Australian hosting" can mean a provider registered in Australia with servers in Singapore or the US — that's not the same thing.

Why it matters: Network latency is physical. A server in Sydney is 20ms round trip from a Melbourne visitor. A server in Singapore is 100–150ms. A server in the US is 200ms+. These numbers translate directly into page load times for uncached requests. For Australian customers visiting an Australian business's website, Australian servers are the right answer.

How to verify: Ask for the data centre location, not just the company location. Ours are listed per city - Melbourne, Brisbane, Perth and Adelaide. Run a ping or traceroute from an Australian location to your site after signing up.

PHP version

What to look for: PHP 8.1 or 8.2 (both in active support in 2023). PHP 8.0 is security-only. PHP 7.x is end-of-life.

Why it matters: End-of-life PHP versions receive no security patches. PHP 8.x is also meaningfully faster than PHP 7.x for typical WordPress workloads.

How to verify: Ask directly, or check via the WordPress Site Health tool after installing WordPress.

Account isolation

What to look for: Each site running in its own isolated environment, with its own filesystem boundaries and process space. Not just "accounts are separated" but genuine OS-level isolation.

Why it matters: On traditional shared hosting, a compromise in one account can potentially affect neighbouring accounts. Proper isolation means a compromised site is contained — it can't reach your files, your database, or your configuration.

How to verify: Ask how accounts are isolated from each other and what prevents one customer's compromised site from affecting another's.

SSL included

What to look for: SSL automatically provisioned for your domain at no extra cost, with automatic renewal.

Why it matters: HTTPS is a baseline requirement. Paying extra for an SSL certificate in 2023 is unnecessary — free automated certificates have been standard since Let's Encrypt launched in 2015.

How to verify: Check the pricing page for SSL add-ons. If there are any, it's a bad sign.

Login protection

What to look for: Rate limiting on wp-login.php applied at the web server level, before PHP executes.

Why it matters: WordPress login pages are attacked continuously. Server-level rate limiting stops that traffic before it consumes resources. "Install Wordfence" is not the same as server-level protection — a plugin only runs after WordPress has already loaded.

How to verify: Ask directly whether Nginx or Apache rate limiting is applied to wp-login.php and at what threshold.

Support quality

What to look for: Support from people with genuine WordPress knowledge, in Australian time zones, with response times that work for your business.

Why it matters: When something goes wrong — and occasionally something will — the quality of support you can access is the difference between a resolved issue and a protracted problem. Offshore support with a 24-hour response window isn't useful when your WooCommerce store is down on a Tuesday morning.

How to verify: Ask a technically specific WordPress question through the pre-sales support channel before signing up. The quality of the answer tells you a lot.

Pricing transparency

What to look for: A clear price that's what you actually pay. No introductory rate that triples at renewal. No hidden add-ons for features that should be standard.

How to verify: Check the renewal price, not the sign-up price. Ask what's included at the stated price and what costs extra.


DownUnder WP checks every box on this list: Australian NVMe servers, current PHP, isolated environments, automatic SSL, Nginx login rate limiting, and Australian support from people who actually know WordPress. From $5/month with transparent pricing.

Australian WordPress hosting from $5/month

Your own containerised environment on Australian NVMe servers. Simple, fast, and genuinely cheap.