What "unmanaged" hosting actually means
Managed hosting means the provider takes responsibility for the day-to-day operation of the server environment: software updates, security patches, performance monitoring and incident response. Unmanaged or budget hosting hands that responsibility to you. The provider maintains the physical hardware and network connectivity but everything above that level - the operating system, the web server software and the security configuration - is your problem to deal with.
For a developer or dedicated IT team, that arrangement can make sense. For most business owners and marketing managers, it does not. The knowledge required to keep a web server secure and compliant is considerable and it has to be applied continuously as vulnerabilities are discovered and software evolves.
The security exposure is substantial
The most serious risk is security. The Government's Cyber Security Breaches Survey 2024 found that half of all UK businesses experienced a cyber attack or breach in the preceding twelve months. Server-level compromises - malware infections, unauthorised access and exploitation of unpatched software - represent a persistent threat alongside the more widely discussed phishing risks.
When a server is unmanaged, patches do not apply themselves. A CMS such as WordPress or a popular eCommerce plugin left without updates for even a few weeks can develop vulnerabilities. Attackers use automated tools to identify outdated software, which means that no business website is too small to be targeted. According to Veeam's 2023 Data Protection Trends Report, 85% of ransomware attacks targeted small businesses. The Government's survey estimated that the average cost of the most disruptive breach was approximately £1,205 across all business sizes, rising to around £10,830 for medium and large businesses - and those figures cover only the direct recovery costs, not the reputational damage that follows.
Downtime is more expensive than it looks
Budget hosting plans are frequently oversold: many customers share the same server resources and performance degrades under load. When something goes wrong, support is often slow or inadequate for a fault that requires genuine technical diagnosis.
Research from Beaming, based on a Censuswide survey of 504 UK businesses, found that businesses lost over 50 million hours and £3.7 billion to internet and connectivity failures in 2023 - a cost that increased by 400% between 2018 and 2023 as businesses became more reliant on digital operations. For any business whose website is a primary sales or enquiry channel, even a few hours of downtime has an immediate revenue impact.
Backups: the gap nobody notices until they need it
Reliable, tested backups are a common omission in cheap hosting packages. Some providers store backups on the same physical server as the live site, meaning a catastrophic failure takes both with it. Research cited by the IT support firm Red Eagle found that 92% of UK businesses take 24 hours or longer to recover from a significant outage. For a business that has lost its website data entirely, recovery may not be possible at all.
Performance and search visibility
Google's core web vitals framework uses page loading performance as a ranking signal, meaning a slow website on an overloaded shared server will, over time, lose ground in organic search results. Budget hosting environments are rarely configured for performance - resources are shared, caching is generic and there is no proactive monitoring to flag degradation before it affects rankings and user experience.
GDPR and legal obligations
If your website processes personal data through contact forms, newsletter sign-ups, or eCommerce checkouts, you have obligations under UK GDPR to take appropriate technical measures to protect it. Hosting on an insecure server with no managed security or incident response capability is difficult to square with the accountability principle at the centre of UK data protection law. The Information Commissioner's Office (ICO) has the power to impose fines for such failures and for most small businesses, the investigation process and the mandatory notification to affected individuals can be as damaging as any financial penalty.
What to look for in a hosting provider
The alternative to unmanaged hosting is not necessarily expensive - for most small business websites, a well-supported managed environment costs considerably less per month than a single hour of developer time spent diagnosing a server fault. When evaluating providers, consider the following factors:
- Managed security: does the provider apply server-level patches and updates or is that left to you?
- Proactive monitoring: is the server monitored continuously, with incident response that does not depend on you raising a ticket first?
- Backup policy: where are backups stored, how frequently are they taken and has the restoration process actually been tested?
- Support response times: is telephone or live support available for critical incidents or only a ticketing system?
- SSL certificate management: are certificates automatically renewed or could your site go insecure without warning?
The false economy of the lowest price
A hosting plan costing £10 a month looks like a sensible economy. Set against the cost of a single security incident, a day's lost trading or an emergency call to a developer to recover a compromised site, the monthly saving against a managed alternative is negligible. The price difference reflects a genuine difference in what the provider is doing on your behalf. Website hosting is not a commodity purchase - the environment your site runs on has a direct bearing on its security, its performance, its reliability and your legal exposure. For many businesses, treating it as the cheapest line item in a digital budget proves, eventually, to be an expensive lesson.
Back to all articles