Hosting for people who build sites and don't want to do ops.

Management

The control panel in Germany manages the sites in Sofia and the email in Helsinki. If the panel goes down, sites and email keep working.

Backups

Every night, sites and databases are copied, encrypted, from Sofia to the backup servers in Germany, in a different data centre and a different country from the web servers.

Email

The email server in Helsinki serves the domains hosted in Sofia. A problem with the sites doesn't touch your email, and the other way round.

Separate data centres

Web, email and backups in different locations across three countries.

Daily encrypted off-site backups

Sites and databases are copied every night, encrypted, to independent storage, with copies kept for up to 6 months.

Database restore to a point in time

Database changes are copied off-site every 5 minutes, so we can restore a database to any moment in the last 14 days.

Security first

Web application firewall, malware scanning, DDoS protection and encrypted connections everywhere.

Continuous monitoring

Every server and service is checked automatically, so problems are spotted quickly.

In the European Union

All infrastructure is in the EU and the EEA.

02 · Support

We don't wait for you to tell us.

With most hosts, support starts when you open a ticket. Here it starts when the monitoring fires. We take active responsibility for keeping your site running smoothly: if there's an error, or even a slowdown in performance, we act straight away, before you even need to get in touch.

This isn't a call centre. It's the same person who runs the servers, seeing the alert and opening the logs.

5 minutes

average response time to an incident, from the monitoring alert

99,99%

uptime, based on monitoring

24/7

automatic monitoring of every site and server

public status page, status.hostbox.gr

Platform

Enhance cluster

• A cluster of many servers: application, database, backup, email and DNS in separate roles
• Every site in its own Linux container, with hard limits on CPU, memory, I/O, IOPS and inodes
• LiteSpeed Enterprise, not OpenLiteSpeed: the paid edition, with LSCache full-page cache and ESI for WordPress and WooCommerce, HTTP/3, Brotli. Most hosts run the free edition or NGINX
• MariaDB on every plan. MySQL or PostgreSQL available on a dedicated server
• Move a site to another server with no config or IP change, upgrade to dedicated with no downtime
• A dedicated server per customer inside the same cluster, in Greece or anywhere, with the same panel, backups and security
• Redis object caching for less load on the database
• Let's Encrypt SSL, issued and renewed automatically
• A platform written in Rust
• DataPacket network: 10 Gbps unshared uplink, 15 Tier-1 transits, 300+ peers, DDoS Shield with mitigation in under 10 seconds, 99.99% SLA
• Cloudflare in front of every site: CDN with edge caching close to the visitor, HTTP/3, Brotli, SSL at the edge, anycast DNS

Developer

Access and deploy

• SSH, SFTP, FTP and SSH keys
• GitHub deploy: public or private repos, production or staging, automatically on every push
• PHP per site, from legacy to the latest version, with your own PHP settings
• Node.js apps with automatic start and monitoring, worker processes for Laravel queues, websocket proxy
• Cron jobs, file manager, phpMyAdmin, redirects, domain aliases, DNS editor
• Every panel feature also available through the API

WordPress

Toolkit

• One-click install, staging and cloning
• Scheduled automatic updates, theme and plugin management, debug mode
• Single sign-on to wp-admin from the panel, WP-CLI over SSH
• WP AutoShield: wp-config and permissions hardening, no PHP in uploads, login limits, XML-RPC control
• Vulnerability Manager: CVEs for plugins and themes, weekly scans, bulk updates, reports

Security

Enhance + CPFence

• Cloudflare at the edge: DDoS mitigation before traffic reaches the server, managed WAF rules, bot protection, server IP hidden
• ModSecurity WAF with OWASP rules on every web server, plus a Layer 7 WAF that sees the real IP behind Cloudflare
• Real-time malware protection: every new or changed file scanned, automatic quarantine, 0-day signatures every hour
• IP reputation with a shared threat database, DDoS mitigation, brute-force detection, connection limits
• Block IPs, countries and bots
• Daily WordPress database scan and file integrity checks
• Owl monitoring: rootkits, abusive processes, MySQL resource limits, 30 days of history
• 2FA (TOTP) and brute-force protection on the panel

Backups

No extra cost

• Panel backups: automatic and on-demand, differential. Restore it yourself: the whole site, files, database or a mailbox
• A separate backup server, outside the web server
• Point-in-time database restore: changes copied off-site every 5 minutes, restore to any moment in the last 14 days, by ticket
• Daily encrypted off-site backup of files and databases in another data centre, kept for up to 6 months
• Disaster recovery: restore a site to another server in the cluster in a few clicks

Email

Our own mail server

• Mailboxes for every domain, webmail, DKIM and SPF
• Outgoing mail through a specialised SMTP relay: IPs continuously checked against blacklists and feedback loops, outbound filtering for spam and viruses, proper bounce handling. Your email lands in the inbox, not in spam
• Spam AutoShield: incoming mail scanned for phishing, malicious links and malware
• Outbound spam lockdown: a compromised account can't send spam from your IP
• Mailbox backup and restore from the panel

Service

Security and infrastructure

Billing

About us