FWForgeWeb

Everything included. Everywhere else, an upsell.

The list below isn't a tier ladder. It's what runs on every Forge server, on every plan, from the first hour.
◆

Dedicated server

Fixed CPU, RAM and NVMe per account, on Vultr.

↯

OpenLiteSpeed + LSCache

Server-level full-page caching.

◷

Redis + PHP 8.5

Object cache and OPcache on current PHP.

▣

BitNinja

AI malware scanner and IP reputation.

◈

PhantomGuard WAF + CDN

Threats blocked at the edge.

↻

Daily backups

30-day window, one-click restore, own off-site copies.

▤

Staging

Per site, push when ready.

✓

Free SSL

Issued and auto-renewed.

◎

Global locations

Vultr regions worldwide.

⌘

WP-CLI + SFTP

Real access when you need it.

▦

WP Toolkit + Blueprints

Manage sites and launch presets from the dashboard.

◷

Uptime monitoring

99.5% SLA, we get paged, not you.

→

Free migration

Live in 24-72 hours, typically.

✉

ForgeMail included

Transactional sending, 200 credits/mo.

68ms to first byte, measured not promised.

Identical hardware, identical WooCommerce install, four stacks. Server-level caching does most of the work; Redis, PHP 8.5, NVMe and the CDN do the rest.

68msTTFB
6×FASTER THAN APACHE

OpenLiteSpeed + LSCache, full-page cache at the server

Redis object cache on by default, fewer database round trips

PHP 8.5 with OPcache and per-site pools

Global CDN in front of every site, included

NVMe storage on Vultr compute, in the region closest to your visitors

Apache 2.4
410ms
NGINX + PHP-FPM
240ms
LiteSpeed
120ms
OpenLiteSpeed · Forge
68ms

Manage every site without opening wp-admin.

Each site gets a toolkit in your dashboard: core, plugin and theme updates, cron control, debug logs, cache flushing, Redis object cache, database search-and-replace with a dry run, and one-click login to wp-admin when you do want it.

Updates for core, plugins, themes and database in one view

WP Cron or server-side cron, with events you can run on demand

Security switches: XML-RPC off, PHP blocked in uploads, core checksum verification

Search and replace across the database, dry run first

Site settings: language, timezone, permalinks, search visibility

Maintenance mode and one-click wp-admin login

Blueprints save your standard build (themes, plugins and settings) as a reusable preset. New sites launch already configured the way you work, so site number twenty looks exactly like site number one.

wp-toolkit · blueprint apply
✓ blueprint agency-standard v4
✓ theme installed · activated
✓ plugins 9 installed · 9 active
✓ settings permalinks · timezone · language
✓ cache redis object cache on
✓ hardening xml-rpc off · uploads locked

site ready in 1m 48s

Ours nightly. Yours wherever you want.

We keep daily server-side backups with a 30-day restore window, and restoring is one click: files, database or the whole site, back to any point in that window.

You can also run your own schedule to storage you control, so a copy of the site exists somewhere we don't touch:

Google Drive

Dropbox

Amazon S3

Any S3-compatible storage (Backblaze B2, Wasabi, Vultr Object Storage)

~/backups/acme.com
✓ today 04:00 server · full · 2.4 GB
✓ today 04:12 copied → s3 · eu-central
✓ sun 04:00 copied → google drive
› retention 30 days on server, yours, your rules
Restore this pointDownload

One click restores files, database or both, to live or to staging first.

Blocked before WordPress ever loads.

BitNinja defends the server; PhantomGuard filters the application and serves it from the edge. One layer catches what the other cannot see.
Server-level defenceWAF + global CDNDaily restore points

One layer catches what the other can't see.

▣

Server-level: BitNinja

An AI-powered Linux malware scanner, WAF and real-time IP reputation running under every account. Its defence network shares attack data across every protected server, so an IP that misbehaves anywhere is greylisted here before it ever reaches WordPress, which also strips a lot of junk traffic off your CPU.

AI malware scanning, quick and deep

Real-time IP reputation, 100M+ address network

Outbound spam detection so the server never gets blocklisted

Automatic file patching for known vulnerabilities

◈

Edge-level: PhantomGuard

Enterprise WordPress security that lives in front of the site, not inside it: a cloud WAF, CDN-level request filtering and malware scanning that block threats at the edge, so bad requests never touch your PHP, and protection survives a compromised plugin.

Cloud WAF tuned for WordPress and WooCommerce exploits

CDN filtering, with global caching as the side effect

Malware scanning above the application layer

Login and bot abuse stopped before it reaches wp-admin

See it on your own site.

Free migration, then judge the numbers yourself.