Hosted & secured is $200 a month. It covers Netlify Pro hosting, managed TLS certificates, security headers, spam-filtered forms, uptime monitoring, dependency updates and up to one hour of content changes a month. There are no plugins to patch and no database to back up, because the live site doesn't have either.
Included every month
- Hosting on Netlify's global network, with layer 3, 4 and 7 DDoS mitigation
- Managed certificates, renewed on their own, HTTPS enforced, TLS 1.2 minimum
- Security headers: HSTS, Content-Security-Policy, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy
- Forms with spam filtering, emailed to you and kept in the dashboard
- Uptime monitoring
- Dependency updates, reviewed in Git before they deploy
- Every deploy kept as its own version, restorable in one click
- Up to one hour of content changes a month
Why there's so little to maintain
A WordPress site runs code on the server and keeps a database and a login page open to the internet, and every plugin is one more thing that can fall behind. In 2025, Patchstack counted 11,334 new vulnerabilities in the WordPress ecosystem, 91% of them in plugins, and 46% weren't fixed in time for public disclosure.
A static site has none of those parts on the live server. The work that's left is keeping the build tools current, which happens in Git where every change is reviewed before it goes out. The full comparison.
Terms
- 90-day initial term, then month to month with 30 days' notice
- Rate locked for 12 months after the initial term
- Billing starts the month after the site goes live
- You own the domain, code, content and lead data from day one
Need more than the standard plan?
The $200 plan runs on Netlify Pro, which has no uptime SLA and no web application firewall. If your IT or compliance team requires those, the advanced security tier covers them.
Need SOC 2 compliance, an SLA, a WAF and advanced security?
Get a custom quote, starting at $5,500. Scoped to what your IT and compliance team requires.
Source for the vulnerability figures: Patchstack, State of WordPress Security in 2026.