Provisioning & hardening
- Compute sized to measured traffic, not a guess
- Minimal OS image, SSH keys only, root login disabled
- Host firewall + fail2ban + kernel live-patching
- Tuned Nginx, HTTP/2 + HTTP/3, Brotli compression
AD-MENHosting
Managed hosting & infrastructure
Hosting that comes with the engineers.
You do not get a control panel and a knowledge base. You get a team that provisions, hardens, monitors, patches, backs up and scales your infrastructure, and answers when it matters.
What "managed" means here
Everything below the application is our problem.
The word "managed" is used loosely in this industry. This is the exact list of what we take responsibility for on every plan, starting with Core.
Patching & updates
- Security patches applied within 72 hours of release
- CMS core, plugin and dependency updates tested on staging first
- Change log delivered with every monthly report
- PHP / Node / database versions kept inside support windows
Backups that restore
- Encrypted, off-site, in a different provider region
- Daily on Core, hourly on Scale, point-in-time on Ecosystem
- Restore drills on a schedule, with results in your report
- One-click rollback of any deployment
Monitoring & alerting
- HTTP checks every 60 seconds from multiple regions
- TLS expiry, DNS drift and domain expiry watched
- Disk, memory, CPU and queue depth thresholds alerting us, not you
- Public status page available on request
Performance
- Global CDN with edge caching for static and full-page where safe
- Server-side object cache (Redis) on Scale and above
- Automatic image optimisation and modern formats
- Core Web Vitals budget enforced in the deployment pipeline
Support & reporting
- A named engineer who knows your stack, not a rotating queue
- Response targets written into the SLA, with credits if we miss
- Monthly report: uptime, performance, security events, changes
- Direct email and shared channel on Scale and above
Infrastructure specification
The hardware behind each plan.
Resources are dedicated to you from Scale upwards. Core runs in an isolated container on managed compute that we never oversell.
| Specification | Core | Scale | Ecosystem |
|---|---|---|---|
| Compute | 2 vCPU · 4 GB, isolated container | 4 vCPU · 8 GB, dedicated | 8+ vCPU · 32 GB, multi-node pool |
| Storage | 40 GB NVMe | 160 GB NVMe | 500 GB NVMe, expandable |
| Architecture | Single node | Single node + managed DB | Load-balanced app tier, separate DB, failover |
| Production sites | 1 | Up to 5 | Unlimited |
| Transfer | 1 TB / mo + CDN | 5 TB / mo + CDN | Unmetered fair use + CDN |
| Staging environment | On request | Included, per site | Included, plus preview per branch |
| Backups | Daily · 14-day retention | Hourly · 30-day retention | Point-in-time · 90-day retention |
| Monitoring | 60 s · 3 regions | 60 s · 6 regions + real-user | 30 s · 6 regions + real-user + synthetic journeys |
| Uptime SLA | 99.9% | 99.9% | 99.99% |
| Regions | EU (Germany, Finland, Netherlands), Middle East (UAE, Bahrain) and US on request. Data residency honoured per client. | ||
Full feature comparison, including the engineering and growth layers, is on the plans page →
Domains, DNS & email
The two things that take a business offline fastest.
An expired domain or a mail server on a blocklist does more damage than any outage. We treat both as infrastructure, with monitoring and ownership rules to match.
Domains & DNS
- Registration, renewal and transfer management, always in your registrar account
- Auto-renew enforced, expiry monitored 90 / 30 / 7 days out
- Anycast DNS with DNSSEC, versioned zone files
- CAA, registrar lock and 2FA on the registrar login
Business email
- Mailboxes on Google Workspace or Microsoft 365, or a managed self-hosted stack
- SPF, DKIM and DMARC at
p=reject, with DMARC reports monitored - Blocklist monitoring for every sending domain and IP
- Transactional email (forms, receipts, alerts) routed through a dedicated relay
You own every account
- Registrar, DNS, cloud, CDN and email accounts are opened in your company's name
- We hold delegated access, revocable by you in one click
- Credential vault handed over at onboarding and kept current
- Leaving us is a permission change, not a migration
Security model
Six layers, each assuming the one above it fails.
Small and mid-size businesses are breached through boring things: an un-patched plugin, a reused admin password, a backup that was never tested. The model below is built around those boring things.
EdgeAll plans
CDN & web application firewall
Managed rulesets against OWASP top-10 patterns, bot filtering, rate limiting on login and API routes, DDoS absorption before traffic reaches your origin.
TransportAll plans
TLS everywhere
TLS 1.2+ only, modern ciphers, HSTS, OCSP stapling, certificates issued and renewed automatically and monitored for expiry.
OriginAll plans
Hardened hosts
Origin accepts traffic only from the CDN, SSH by key via bastion, automatic security updates, intrusion detection, immutable container images.
ApplicationScale +
Patching & scanning
Dependency and CMS updates tested on staging then promoted, weekly vulnerability scans, malware scanning and file-integrity monitoring on Scale and above.
AccessScale +
Identity & least privilege
2FA enforced on every admin panel, role-based access, shared credential vault, quarterly access review, SSO on Ecosystem.
RecoveryAll plans
Backups, drills, disaster recovery
Encrypted off-site backups, scheduled restore drills, documented recovery time and recovery point objectives, tested failover on Ecosystem.
Migration
Zero-downtime moves, included in every plan.
We have moved sites off shared cPanel hosts, page builders, agency servers and abandoned cloud accounts. The process is the same every time and the cut-over happens at DNS, so nobody notices.
Step 01
Inventory
Every domain, record, mailbox, database, cron job and integration documented before anything moves.
Step 02
Replicate
The full stack is rebuilt on new infrastructure and tested against production data behind a private hostname.
Step 03
Freeze & sync
Final delta sync of files and databases, DNS TTLs lowered 48 hours in advance, email cut-over coordinated separately.
Step 04
Cut over & watch
DNS switched, old host kept warm for 14 days as a fallback, monitoring watched closely for 72 hours.
Hosting questions
Things people ask before they move.
Where are the servers?
By default in the EU, in Germany or Finland, with the CDN serving cached content from the edge closest to each visitor. Middle East regions are available for clients with data-residency requirements, and US regions on request. You choose at onboarding and we document it.
Do you host WordPress? Shopify? Custom apps?
WordPress and WooCommerce, yes, with a hardened configuration and a strict update policy. Static sites, Next.js, Laravel, Django and containerised applications, yes. Shopify and other hosted platforms are not hosted by us, but we build, integrate and operate the rest of the ecosystem around them, including DNS, email, analytics and headless storefronts.
Which cloud providers do you use?
We provision on Hetzner and DigitalOcean for most workloads, AWS where a client needs specific managed services or regions, and Cloudflare for DNS, CDN and the web application firewall. We choose per client and the account is opened in your name. Our stack page lists everything.
Is my resource allocation really dedicated?
On Scale and Ecosystem, yes: the virtual machines are yours alone. Core runs in an isolated container on compute that we size conservatively and never oversell; it is not shared cPanel hosting with hundreds of neighbours.
What happens if I leave?
Every account is already in your name, so you revoke our access. We hand over a current credential vault, an infrastructure document and a full export, and keep the old environment available for 30 days after cancellation. There is no exit fee. See the refund and cancellation policy.
Do you offer hosting without the website build or marketing?
Yes. Every plan is hosting and operations first; the build and the growth layer are included because clients almost always need them, but if you already have a site and a team you can use Core or Scale purely as managed infrastructure. Tell us on the order form.
Start with the free infrastructure audit.
We read your DNS, hosting, TLS, email configuration and site performance and send back a written report. No access needed for the first pass.