Agency Brief
Drupal hosting plans — Drupal clients come with procurement attached
The site is the easy part — the harder part is that somebody in finance or IT will ask who your supplier is, and you need an answer that survives being written down.
Straight answer first
Business-tier hosting with the whole toolchain suits most client Drupal sites, and a VPS suits the heavyweight builds — Composer-native on either path, and both able to answer the questions a client's IT department will ask about them.
Drupal work rarely arrives from a sole trader. It comes from a university department, a charity with a board, a council supplier framework — and those clients ask questions about your supply chain that a WordPress client never does. Choose hosting that gives you good answers to give, because the account is often won or lost on the paperwork rather than the build.
Written by the Hosting Seller staff · Checked 24 August 2026
NVMe
Storage under every client account
Free
Domain, year one on annual orders
99.9%
Uptime target we hold to
Flat
Price at renewal, per account
For agencies and resellers building Drupal for organisations rather than individuals. You are not only choosing a platform; you are choosing something you will have to describe in a tender response, an information-security questionnaire, or a phone call with somebody's head of IT.
The primary tools for running a modern Drupal site are Composer and Drush. Hosting with no terminal access does not merely make the work awkward; it removes the means of doing it at all. That fact is worth restating in every proposal you write, because it is the clearest reason your client cannot simply move the site to the cheapest thing they found.
What the client's IT department will ask
Who owns the company, where is it registered, what happens to the data if the arrangement ends, how often are backups taken, and who can access them. None of that is unreasonable and all of it is answerable — ours is IGI Security Services Ltd, registered in England and Wales, with terms published under English law and a record anybody can look up.
Have those answers ready before the question arrives. An agency that hesitates on supplier questions looks like an agency that has not thought about them, and in institutional procurement that impression is very hard to recover from.
Composer, Drush and a deploy process you can describe
SSH with Composer and Drush to hand is how modern Drupal is actually operated. That means your release process is a documented sequence rather than a file upload, and a documented sequence is something you can put in a proposal, hand to a colleague, and repeat under pressure.
Staging copies belong in the same paragraph. Clone the live site, run the update on the copy, show the client's stakeholder the working result, then push it across. Institutional clients rarely object to a change; they object to being surprised by one.
The heartbeat, and what it costs when it stops
Drupal gathers its internal housekeeping behind a single cron URL or Drush call that needs to fire reliably. A system cron hitting it every few minutes keeps indexing, cleanup and queues in good order. The visitor-triggered variety will not do.
When it stops, nothing goes down — which is precisely why it is dangerous. Search results go stale, queues back up, and the first person to notice is a client's editor three weeks later, by which point you are explaining a silent failure rather than fixing a loud one. Monitor it, and put the monitoring in the retainer.
Sizing the account, and when it becomes a server
Drupal spends memory and execution time freely, and entities and views generate a query load that a modest database will feel. Business Standard allocations were set with frameworks of this shape in mind, and its hundred addon domains give you room to keep related client sites together.
The heavyweight builds — deep content models, heavy authenticated traffic, an unusual service dependency — want a VPS with root. Both live under one roof here, so moving up is an upgrade with a free migration rather than a change of supplier you have to explain to a procurement officer.
We sell the hosting. That is the whole disclosure.
No affiliate table, no ranking fee, no borrowed neutrality. We are the supplier, we would like the account, and being direct about it is the same courtesy your own clients want from you.
Order an annual plan and the first year of the domain registration is on the house, which is a small but real line in a first-year proposal.
- Tests you can run before you commit a client
- One trade price, held at renewal
- Free migration for the sites you already host
- A refund policy with no small print
Why Hosting Seller
On every plan, as standard
Composer and Drush as fittings
Shell access, Composer and Drush on the developer plans, which is the difference between operating a Drupal site and merely hosting one.
Memory and execution headroom
Business tier allocations were set with frameworks of this shape in mind, so long admin operations are not a per-site negotiation.
Matched to this verdict
The Business Standard plan is this page's recommendation made concrete — one flat price, essentials included, upgradeable in place.
Answers for a procurement questionnaire
A registered company, published terms under English law, daily backups and restores you run yourself — the ordinary things institutions ask about.
Staging your stakeholders can see
Prove an update on a clone and show it working before it goes anywhere near the live site or a committee meeting.
A supplier with a company number
IGI Security Services Ltd, registered in England and Wales — a public record, which is exactly what your client will check.
Price Tags Compared
How we compare with the household names
Typical sign-up and renewal prices across the market, set next to ours — the second number most comparison charts leave off.
| Line item | Hosting SellerBest seller | Typical big-brand host | Typical budget host | Typical loss-leader |
|---|---|---|---|---|
| Entry price / mo* | $2.42/mo | $4–$6 | $2–$4 | $1–$3 |
| Price at renewal / mo | $2.42/mo | $10–$15 | $8–$12 | $4–$6 |
| Renewal price on the entry plan is unchanged | ||||
| SSL on every plan | ||||
| Site migration included | ||||
| The entry plan uses NVMe storage | ||||
| Entry plan gets a backup daily | ||||
| Live human support, 24/7 |
*The number in our column is the cheapest plan on our shelf, priced on an annual term and pulled live from the very catalogue that feeds the pricing page, so it cannot drift out of date. Other columns show the ranges shared hosting tends to advertise inside each bracket: introductory rates that normally ask for a one-to-four-year commitment, then climb once that term expires. Naming individual competitors and printing their prices is something we have stopped doing. A figure we cannot re-check on the day you read it has no business sitting in front of you. So compare us with whoever you are genuinely weighing up, and read the renewal line first. That line tells you more than the headline ever will.
First Steps
From choosing to live
- 1
Prepare the supplier answers first
Company registration, data handling, backup frequency, access control. Write them once, keep them to hand, and reuse them in every proposal.
- 2
Document the release sequence
Composer, Drush, staging, push. A process on paper is repeatable by a colleague and reassuring to a client, and it survives you being on holiday.
- 3
Monitor the cron, then bill for monitoring it
A silent failure found by the client three weeks late costs more credibility than any outage. Watch the heartbeat and put it in the retainer.
In the Box
Packed with every plan
- SSH with Composer and Drush on the plans built for developers
- Real system cron, so the Drupal heartbeat fires reliably
- PHP memory and execution headroom on Business allocations
- Staging copies so an update is proved before a stakeholder sees it
- A backup taken daily, with restores you run yourself
- Imunify360 on guard on every site in the account
- cPanel, the panel a client's own IT team will recognise
- DDoS filtering handled at the network edge
- A domain free for year one when you order annually
- The renewal price on the tag matches the order price
Across the Counter
Things people ask us all the time
What does a client's IT department usually ask about my host?
Ownership and registration, where the data sits, how often backups run and who can restore them, and what happens on termination. Ours is IGI Security Services Ltd, registered in England and Wales, with published terms under English law, daily backups and restores you run yourself from the panel — write those answers down once and reuse them.
Can a client's own developers work on the site without my account?
Yes. Give them a cPanel account of their own under your WHM, scoped to that site, rather than sharing your login. It keeps your other clients invisible to them, it makes revoking access trivial, and it is far easier to describe in a contract.
How do I prove the site is being maintained?
Show the process rather than the promise: a documented release sequence, staging screenshots before each change, backup dates, and cron monitoring. Institutional clients renew on evidence, and evidence is cheap to produce if you build the habit early.
What happens to the site and the data if we part company?
It stays the client's. A full backup pulls from the panel at any time, before or during cancellation, and domains remain registered in whoever's name they were registered in for the term paid, moving to another registrar once the registry's standard 60-day window has passed.
Read next
Let's Encrypt vs Paid SSL
What a paid certificate buys that a free one does not, when the client's procurement asks the question.
Ecommerce Hosting for First Stores
Setting up a first shop for a client, and the parts of it that become your responsibility.
Drupal Hosting
Drupal hosting with Composer, Drush and the PHP version set per site.
AI Website Builder
Describe the site and the AI builder drafts it on real hosting.
Moving your site to another host? Start with this checklist.
A step-by-step order of work for a move your visitors never spot: which files to copy first, how to carry email across without losing one message, the right moment to repoint DNS, and the two mistakes behind nearly every hour of downtime people ring us about.
Answer the procurement questions before they are asked.
A registered supplier, published terms, daily backups, staging and a deploy toolchain switched on from the start.
See Drupal Hosting plans