Home / Services / Web marketing / Static WordPress
Still running the WordPress site you built years ago?
There is a way to keep writing in the WordPress dashboard you know while removing the WordPress entry points attackers target from your public site. Visitors only ever see HTML exported from WordPress, with no WordPress code and no database where they can reach them.
What goes wrong with WordPress
Because WordPress is so widely used, it is also a common target. Vulnerabilities in plugins and themes are disclosed almost every month, and sites that fall behind on updates are the ones that get hit.
Defacement
Pages are rewritten with unfamiliar ads and malicious links, and suspicious pages start showing up in search results.
Malicious redirects
Visitors are sent automatically to scam or malware sites. Often the first sign is a message from a customer.
Admin takeover
Brute-force attacks on the login page or exploited vulnerabilities hand an attacker administrator rights over the site.
Data leaks and abuse
Form submissions and member data are stolen, or the server is used to send spam and attack others.
Most incidents trace back to outdated plugins and themes, weak passwords, and admin screens left on the public server. Going static takes all of these off the public site.
How it works
The editing WordPress lives where only your team can reach it. The public site is exported HTML, served from a content delivery network. We run 10 sites on the same static, automatically published setup (see our websites).
What changes
WordPress itself works the same. Only the way it's published changes.
Less to attack
Most attacks on WordPress go through plugin vulnerabilities or the login page on the public server. With only HTML on the public side, those entry points are gone from your public site.
Faster, and steady under load
Pages no longer have to be assembled on every visit and are served from the nearest edge location. Traffic spikes from press or ads are far less likely to take the site down.
Same editing routine
Writing, editing and publishing still happen in the dashboard. Nobody on your team needs to learn anything new.
Good to know up front
It isn't right for every site. We check whether yours is a good fit when we talk.
Dynamic features move elsewhere
Contact forms, site search, member areas and online shops, anything that differs per visitor, move to external services or a separate setup.
Updates take a moment to appear
Each update triggers an export, so changes reach the public site in tens of seconds to a few minutes.
WordPress still needs updates
The editing WordPress and its plugins still need regular updates. We can take that on as maintenance.
A good fit if you
Migration starts with a review of your current site and a quote.
Update the site in-house
Your own staff post news and articles rather than a web agency.
Worry about security
Plugin updates fall behind, or you've had tampering or login-attempt alerts.
Struggle with speed
Pages are slow, or the site goes down when traffic spikes.
We'll check whether your WordPress site is a good fit.
Send us your site's URL. We review the plugins and features you use, then propose a migration scope and quote.