Web Hosting
Kinsta
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Kinsta Inc. · kinsta.com
Compare with Raidboxes → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Kinsta at a glance
- Vendor
- Kinsta Inc.
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates Kinsta 3.5/5, the mean of 6 judges. Kinsta sells managed WordPress hosting on Google Cloud with customer-chosen data centre regions. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Kinsta sells managed WordPress hosting on Google Cloud with customer-chosen data centre regions. Its strongest criterion is management and developer tools, scored 7 to 8: one-click staging with selective push, cloning, automatic plugin and theme updates with visual regression checks and rollback, SSH, Git, WP-CLI, Composer and a REST API in public beta. Performance and reliability, also 7 to 8, rests on a 99.9% uptime guarantee with tiered credits and a 90-day public status page; we found no CPU or RAM figures per tariff, and Redis is a $100-per-site-per-month add-on. Sovereignty is weakest at 4 to 6: the contracting entity is Kinsta Inc. of West Hollywood under Delaware law, and while a subprocessor list, a data processing agreement and SCCs with the UK Addendum and Swiss Amendments are published, DNS, support tools, log storage and the analytics cluster processing IP addresses sit in the United States. Scores spread on support and service, 6 to 8, where chat is the only channel, and on pricing transparency, 6 to 8, over renewal prices above the $30-a-month Single plan and overage unit rates.
Speaks for it
- Free, unlimited managed WordPress migrations with stated scope and a malware scan on every move
- One-click staging with selective push of files, database or both, plus SSH, Git, WP-CLI and Composer
- Published add-on prices, from Redis at $100 per site per month to expedited migration at $49 per site
- Around-the-clock chat staffed by WordPress developers and Linux engineers, with an average response under two minutes published
- Daily automatic backups kept 14 to 20 days with one-click restore, free hack cleanup and SOC 2 Type II and ISO 27001 published
Held against it
- Backups are stored on the same host machine as the site, with a second location only through paid add-ons
- We found no public CPU or RAM figures per tariff, and no per-unit overage rate is published
- Support runs exclusively through chat in MyKinsta, with no phone line and email setup excluded from migrations
- The contracting entity is Kinsta Inc. under Delaware law, and DNS, support tools, log storage and the analytics cluster sit in the United States
- We found no public information on renewal prices above the Single plan, an EU contracting entity or an EU representative
Best for
- You run an agency with many WordPress client sites and want one dashboard, unlimited role-based users and white-label options
- You are moving existing WordPress sites and want free, unlimited managed migrations with scope and exclusions stated openly
- Your developers rely on SSH, Git, WP-CLI and staging with selective push for daily client work
- You plan add-on spend in advance and can work from a published add-on price list
Avoid if
- Your procurement requires an EU contracting entity or an EU representative; the captured pages name Kinsta Inc. and a UK contact
- You need telephone support when something breaks; support runs exclusively through chat in MyKinsta
- You expect mailboxes or domain registration in the hosting account; we found no public information on either, and email setup sits outside the migration service
- Your site is not WordPress; migrations to the managed WordPress plans require a WordPress site
The scores
| Criterion | Panel median |
|---|---|
| Performance, uptime & infrastructure | 3.5 of 5 |
| Control panel, WordPress & developer tooling | 4 of 5 |
| Security, backups & recovery | 3.5 of 5 |
| Scaling, migration & exit | 3.5 of 5 |
| Support, domains & email | 3.5 of 5 |
| European sovereignty | 2.5 of 5 |
| Pricing transparency | 4 of 5 |
Performance, uptime & infrastructure
Show reasoningHide reasoning
How this is scored
What runs the sites and how reliably: CPU, RAM and storage per tariff stated, SSD or NVMe storage, current PHP versions and how long old ones are kept, HTTP/2 or HTTP/3, server-side caching (OPcache, Redis, a page cache), a CDN, databases and their limits, resources that are guaranteed rather than shared without a stated limit, an uptime SLA with a service credit, a public status page with incident history, and redundancy of the platform. Where the data centre is located is scored under sovereignty.
0 — Not a hosting product; websites or web apps cannot be run on it.
3 — Storage and a number of sites per tariff are stated and the product is described as fast; resources, PHP versions, caching and uptime are basic or not described.
5 — Resources per tariff stated (CPU or a performance class, RAM, SSD or NVMe storage), several current PHP versions selectable, HTTP/2, server-side caching or a cache plugin documented, free SSL, a stated uptime target, and a public status page.
8 — Dedicated or guaranteed resources stated per tariff, HTTP/3 and a CDN included, Redis or an object cache, PHP versions kept current with an end-of-life policy published, an uptime SLA with a service credit, a status page with incident history, and a redundant platform (replicated storage, failover) described.
10 — Infrastructure documented to the level an operator could audit: hardware generations and storage architecture named, performance measured and published with method, an SLA with credits and exclusions at 99.95 % or above, every incident on the status page with a post-mortem, and scaling without downtime documented.
The Agency Lead
The infrastructure is documented in real detail: managed WordPress on Google Cloud with regions the customer chooses, thirty data centers, a CDN with 300+ edge locations, HTTP/3, full-page caching, Nginx and MariaDB, PHP 7.4 through 8.5 selectable and patched at platform level, and container isolation with dedicated resources per site. The service level agreement guarantees 99.9 % uptime with credit tiers (options up to 99.99 % are advertised), the public status page shows ninety-day uptime history with incidents, and redundancy with automated failover is described. We found no public information on published performance measurements with a method or a PHP end-of-life policy, which is what keeps this from the very top of the criterion. 13 8 17 14 15 16
The Small-Business Owner
Thirty selectable data centres on Google Cloud, a CDN with more than 300 edge locations, HTTP/3, PHP versions from 7.4 up to 8.5, and checks every three minutes — that is a fast, well-documented setup. The uptime guarantee of 99.9 %, up to 99.99 %, comes with real service credits and a public status page showing ninety days of history, including an openly posted Google Cloud outage in the London zone. We found no public information on CPU or RAM figures per tariff, and the Redis object cache is a paid add-on. 1 2 8 13 14 17
The Shop Operator
An SLA of 99.9% standard, up to 99.99%, with credit tiers tied to downtime minutes and a maintenance exclusion, plus a status page with 90-day history (the control panel itself shows 99.97% over that window) is exactly the reliability paperwork I want for a Black Friday weekend. HTTP/3, a CDN with 300+ edge locations, PHP 7.4 through 8.5 with platform-level patching, per-site isolated containers and automated failover round it out. But the tariff pages sell visits, disk and bandwidth — we found no CPU or RAM figures per tariff — Redis only comes as a paid add-on at 100 $ per website per month, and we found no published PHP end-of-life policy. 2 8 13 14 15 17
The Freelance App Developer
PHP runs from 7.4 through 8.5, HTTP/3 with a CDN of 300+ edge locations, full-page caching on Nginx and MariaDB, per-site containers, a 99.9% uptime guarantee with tiered service credits, and a public status page with 90-day history and incident reports — a platform I could run client sites on. What holds it back: we found no public information on CPU or RAM figures per tariff, Redis object caching comes only as a paid add-on, and we found no public information on a PHP end-of-life policy or published performance measurements with a method. Platform-level redundancy and automated failover are described, with a replicated standby data centre behind the paid disaster-recovery add-on. 2 8 13 14 15 17 18
The Data Protection Officer
The platform runs on customer-selected Google Cloud regions among 30 data centres with a CDN of more than 300 edge locations, HTTP/3, full-page caching, PHP 7.4 through 8.5 patched automatically at platform level, monitoring every three minutes, and an uptime guarantee of 99.9% (up to 99.99%) backed by tiered service credits in a published SLA, with a status page showing ninety days of component-level uptime. Disk, CDN and server bandwidth are stated per tariff, but no CPU or RAM figures are given, no end-of-life policy for PHP versions is published, and replication to a second data centre exists only as a disaster-recovery add-on restricted to dedicated servers. 2 8 13 14 15 17 18
The Skeptic
The SLA pays, but narrowly: the base guarantee is 99.9 %, nothing is owed until downtime passes 43 minutes, credits are capped at one month's subscription value, carry no cash value, expire on termination, and must be claimed through chat within 30 days. Around it the platform is well documented — PHP 7.4 through 8.5, HTTP/3, a CDN with 300+ edge locations, container isolation, automated failover, and a status page with 90-day history showing MyKinsta at 99.97 %. We found no public CPU or RAM figures per tariff, and the Redis object cache is a 100 $ per site per month add-on rather than included. 13 8 14 15 17 2
Control panel, WordPress & developer tooling
Show reasoningHide reasoning
How this is scored
How sites are set up and run day to day: the control panel or console, one-click installers for named CMS and shop systems, managed WordPress features (automatic core and plugin updates, staging, cloning, a search-and-replace), SSH, SFTP, Git deployment, Composer, cron jobs, a PHP version and settings per site, databases and phpMyAdmin or an equivalent, log access, a public API and command-line tool, infrastructure-as-code support, team members and roles, and client or project management for agencies. On a cloud server: images, snapshots, firewalls, private networks and the API that manages them.
0 — No documented way to deploy or manage a website on the product.
3 — A control panel with FTP access and a one-click installer for WordPress; SSH, staging, Git, an API and roles are basic or not described.
5 — A control panel with installers for several named CMS, SSH and SFTP, cron jobs, PHP version per site, databases with a web admin, a staging copy or snapshots, team members with access rights, and log files available — or, for a cloud server, a console with images, snapshots, a firewall and a documented API.
8 — Managed WordPress or app tooling (automatic updates with rollback, one-click staging and push to live, cloning), Git deployment and Composer documented, a public REST API and CLI covering sites, databases, domains and backups, granular roles per project, and an agency view with client projects, transfer of ownership and white-label or reseller options.
10 — A platform that scales across an agency or a development team: everything in the panel available through a versioned API, CLI and an infrastructure-as-code provider, preview environments per branch, audit logs of every change, SSO for the team, and projects that can be handed to the client with billing transferred.
The Agency Lead
This is nearly my whole wish list for running sixty client sites: one dashboard for everything, one-click staging with push to live (files only, database only, or both), one-click cloning, automatic plugin and theme updates with visual regression checks and rollback, SSH, Git, WP-CLI and Composer, per-site PHP settings, real server cron jobs in each site's own container, unlimited users with company- and site-level roles, and SAML single sign-on. A REST API in public beta with a downloadable OpenAPI specification covers sites, staging, backups, domains, DNS and log files. We found no public information on a command-line tool for that API, on infrastructure-as-code support, or on handing a project to the client with its billing transferred. 15 7 3 4 16 14
The Small-Business Owner
The MyKinsta panel is what a non-technician like me needs: one-click staging and cloning, automatic plugin and theme updates with visual checks and a rollback, plus SSH, Git, WP-CLI and Composer for whoever comes after my nephew. There is a public REST API in open beta with a downloadable specification covering sites, staging, backups, domains and DNS, real server cron jobs per site container, unlimited users with role-based permissions and single sign-on. We found no public information on a management command-line tool or on handing a site to a client with the billing transferred. 3 4 7 15 16
The Shop Operator
Day-to-day operation is well covered: free one-click staging with selective push (files, database or both), automatic plugin and theme updates with visual regression checks and rollback, one-click cloning, SSH, Git, WP-CLI, Composer, real cron jobs per site container, per-site PHP version, memory limit and thread count, role-based users with SAML SSO, and an agency programme with a white-label plugin. The REST API with a downloadable OpenAPI specification covers sites, staging, backups, DNS and plugin updates, but it is in public beta. We found no documented command-line tool, infrastructure-as-code support or per-branch preview environments. 3 4 7 15 16
The Freelance App Developer
This is close to my ideal workflow: SSH, Git, Composer, WP-CLI and per-site containers whose crontabs I edit over SSH, one-click staging with selective push of files, database or both, cloning, PHP version per site, unlimited role-based users with SAML SSO, and an agency programme with white-label options. The REST API is documented with a downloadable OpenAPI specification covering sites, staging, backups, domains, DNS records, PHP memory and thread settings, log files and analytics — though it is in public beta. We found no public information on a command-line tool or infrastructure-as-code support. 3 4 7 15 16
The Data Protection Officer
MyKinsta covers the daily workflow end to end: one-click staging with selective push of files, database or both, site cloning, automatic plugin and theme updates with visual regression checks and rollback, SSH, Git, WP-CLI and Composer, real server cron jobs per site container, and role-based company and site-level access with SAML SSO and unlimited users. A public REST API in open beta with a downloadable OpenAPI specification manages sites, backups, domains, DNS, SFTP accounts and PHP settings, and the agency offer adds white-labelling, hosting credits and a partner programme. I found no public information on a command-line client or infrastructure-as-code support. 3 4 7 14 15 16
The Skeptic
The MyKinsta panel plus a documented REST API cover site creation, cloning, staging with push-to-live, backups, DNS, domains, plugin and theme updates, SFTP accounts and log files, and the team side is real: unlimited role-based users, SAML SSO, an activity log and white-label options for agencies. Automatic plugin and theme updates with visual regression checks and rollback are documented, as are SSH, Git, WP-CLI and Composer. The API is explicitly in public beta with fixed rate limits that cannot be increased, and we found no public information on a command-line tool or infrastructure-as-code support. 7 15 3 4 14
Security, backups & recovery
Show reasoningHide reasoning
How this is scored
How the sites are protected and how fast they come back: isolation between customers (containers, separate PHP processes, chroot), free SSL with automatic renewal, a web application firewall, malware scanning and cleanup, DDoS protection, two-factor login to the panel, brute-force protection, backup frequency and retention, off-site or geo-redundant backup copies, self-service restore of files and databases from a point in time, restore of single sites or tables, security updates handled by the vendor on managed tariffs, and security certifications (ISO 27001, BSI C5, SOC 2) with their scope.
0 — No backups and no security measures described, and the customer is told to secure the site entirely on their own.
3 — Free SSL and some backup exist; frequency, retention, restore and the security measures are basic or not described.
5 — Free SSL with automatic renewal, daily backups with a stated retention, restore by the customer in the panel, account isolation described, DDoS protection, two-factor login to the panel, and malware scanning or a firewall offered.
8 — Backups several times a day or on demand with retention of 14 days or more, stored in a second location, point-in-time restore of single files, databases or sites, a web application firewall and malware cleanup included, isolation per site stated, and an ISO 27001 or equivalent certification of the hosting operation published.
10 — Recovery that can be evidenced: backup and restore times stated and tested, immutable or off-provider backups, recovery objectives (RPO and RTO) published, a security incident process and disclosure policy, certifications with their scope and audit reports available, and penetration test results or a bug bounty programme.
The Agency Lead
Every plan gets daily automatic backups, manual backups on demand and system-generated restore points before risky actions such as a staging push, kept at least two weeks, and my team can restore a site with one click in the dashboard without opening a ticket; free wildcard SSL renews automatically, each site runs in its own isolated container, a Cloudflare enterprise firewall with DDoS protection stands in front, malware is monitored around the clock with free cleanup if a site is hacked, and ISO 27001 and SOC 2 Type II are published. The backups are stored on the same host machine as the site, though, and a second location comes only through paid add-ons such as external backups to AWS or Google Cloud Storage, hourly backups, or disaster recovery that is limited to dedicated servers. We found no public information on restoring single files or tables, or on published recovery objectives. 17 3 6 2 18 14
The Small-Business Owner
Every website runs in its own isolated container, behind a Cloudflare enterprise firewall with DDoS protection, free wildcard SSL with automatic renewal, two-factor login, continuous malware monitoring and a hack-fix guarantee at no extra cost. Daily automatic plus manual backups are kept at least two weeks and restore with one click, and ISO 27001 and SOC 2 Type II are published — but the backups sit on the same machine as the site, and copies at AWS or Google Cloud are a paid add-on. Disaster recovery replicating to a second data centre exists only for dedicated servers, with extra cost and expected downtime. 2 3 17 18
The Shop Operator
Free wildcard SSL with automatic renewal, a Cloudflare enterprise firewall with DDoS protection, a web application firewall, 24/7 malware monitoring, bot protection, two-factor login, per-site container isolation, a free hack-fix guarantee and published SOC 2 Type II and ISO 27001 give me a solid base. For my worst case — an update gone wrong — there are daily, manual and system-generated backups kept 14 to 20 days with one-click restore and downloadable copies. But the standard backups sit on the same host machine as the site, hourly or external backups are premium add-ons, and the disaster recovery add-on with standby replication in a second data centre requires a dedicated server at 300 $ per month plus a one-time 300 $ setup fee, with downtime still expected. 2 3 4 14 17 18
The Freelance App Developer
Daily automatic and manual backups kept at least two weeks (14 to 20 days depending on plan), one-click restore, system-generated restore points before risky actions, Cloudflare Enterprise firewall and DDoS protection, continuous malware monitoring with free cleanup, two-factor login, container isolation per site, and SOC 2 Type II plus ISO 27001 published. Backups are stored on the same host machine as the site itself, with off-site copies to AWS or Google Cloud Storage and replication to a second data centre only as paid add-ons. We found no public information on point-in-time restore of single files or tables. 2 3 14 15 17 18
The Data Protection Officer
Isolation is clearly documented — each website in its own container — alongside free auto-renewing wildcard SSL, Cloudflare Enterprise firewall and DDoS protection, a web application firewall, continuous 24/7 malware scanning with free hack-fix cleanup, two-factor login, and published SOC 2 Type II and ISO 27001 badges. Daily backups with fourteen to twenty days' retention are restorable with one click in the panel, but each backup is stored on the same host machine as the site, with a second location only through paid external-backup or disaster-recovery add-ons, and no recovery objectives are published. Under the data processing agreement, customer audits require a non-disclosure agreement, at least thirty days' notice, pre-approval, run at most once every twelve months and at the customer's own cost. 2 3 4 11 14 17 18
The Skeptic
Daily automatic plus on-demand backups with 14–20 days retention, one-click restore and download, free hack cleanup, a Cloudflare Enterprise firewall and DDoS protection, 24/7 malware monitoring, two-factor login, per-site container isolation and SOC 2 Type II and ISO 27001 badges are all on the record. The catch sits in the backup documentation: each backup is stored on the same host machine as the site, a second location only arrives with a paid external-backup add-on, and restore works at environment level — we found no public information on single-file or point-in-time restore. Customer audit rights are conditioned on 30 days' notice, an NDA, a pre-approved plan, once per 12 months, at the customer's cost. 17 2 3 11 12
Scaling, migration & exit
Show reasoningHide reasoning
How this is scored
What it takes to grow and what it takes to leave: tariff changes up and down without a migration, resource limits stated rather than "unlimited" with a fair-use clause, add-on resources, the path from shared hosting to a server or cluster within the same vendor, a free or paid migration service from another host, standard tooling that runs elsewhere (no proprietary stack lock-in), full export of files, databases and mailboxes, domain transfer out without a fee, cancellation periods and minimum terms, and the deletion of data after the contract ends.
0 — Data cannot be taken out and the contract cannot be cancelled on stated terms.
3 — A tariff upgrade exists and files can be downloaded by FTP; limits, migration in, export and exit terms are basic or not described.
5 — Tariff upgrades and downgrades in the panel, the main limits per tariff stated (storage, sites, databases, mailboxes, inodes or processes), a migration service or guide from another host, files and databases exportable with standard tools, domain transfer out documented, and the cancellation period stated.
8 — Resources scalable without moving the site, a documented path from hosting to a server or cluster at the same vendor, a free migration service with its scope stated, every limit including fair use published, monthly terms available, full export including mail, and deletion of data after termination with its deadline stated.
10 — Growth and exit with no friction: scaling on demand without downtime, everything built on open standard tooling with no proprietary lock-in, a complete export in a format another host imports, migration out supported, and cancellation, data return and deletion documented with deadlines.
The Agency Lead
Moving in is documented better than almost anything I have read: free migrations handled by a specialist team with no downtime, weekdays only, most taking one to three hours plus review, bulk migrations available, malware scanned during the move, and a $49 per site expedited option with an eight-hour target and a refund if missed — and the scope limits are stated plainly, with DNS pointing, email setup and third-party services left to the customer. Plan limits are published (visits defined as a unique IP per 24 hours, disk, CDN and server bandwidth) with an overage policy that keeps the site online, per-site resources can be added without moving (the PHP performance add-on, + 20GB / $20 USD / month extra disk), dedicated servers from 300 $ / month are the in-house upgrade path, full site backups are downloadable, and cancellation is self-service in the panel with data deleted or returned on termination. We found no public information on domain transfer out, on a deadline for that deletion, or on monthly terms. 19 2 4 10 11 17
The Small-Business Owner
Moving in is about as painless as it gets: free, unlimited migrations done by their team with no downtime and a malware scan included, usually finished within a working day, with a $49-per-site express option and a refund if the eight-hour target is missed. Growing means more PHP workers, storage or sites without moving the site, up to a dedicated server from $300 per month, and the limits for visits, storage and bandwidth are printed openly. Leaving is documented too — cancellation self-service in the panel at the end of the period, a full backup download, and deletion or return of data on written direction — though we found no public information on a deletion deadline, overage rates or domain transfer out. 2 5 10 11 19
The Shop Operator
Growing in place is genuinely covered: PHP threads per site without a plan upgrade, add-on disk, storage and PHP performance, Redis, and a dedicated virtual server from 300 $ a month, plus an overage policy where the site stays online and warnings arrive at 80 % and 100 % of the limits — what I need for one ten-times-traffic weekend. Migration in is free and unlimited with zero downtime and a clearly documented scope, though it is WordPress-only, so my Shopware shop would not qualify. On the way out, termination is self-service at the end of the subscription period with deletion or return of data under the DPA, but we found no documented domain transfer-out terms, deletion deadline or monthly contract terms. 2 4 10 11 19 20
The Freelance App Developer
Migration in is documented as thoroughly as I have seen: free and unlimited, handled by a specialist team on weekdays with published timings, a malware scan, an expedited option at $49 per site with an 8-hour target and a refund if missed, and the limits spelled out honestly. Plan limits come as numbers (disk, CDN bandwidth, server bandwidth, visits with a defined visit), add-ons scale a site without moving it (extra disk, PHP performance resources, a dedicated server from $300 per month), overage is billed on actual usage with the site staying online, termination is self-service, a full backup is downloadable at any time, and the data processing agreement promises deletion or return of data on termination. We found no public information on domain transfer out or a stated deadline for deleting data after the contract ends. 2 10 11 17 19
The Data Protection Officer
Migration in is exemplary: free and handled by a specialist team that scans for malware, from any standard WordPress host or from Duplicator, ManageWP or cPanel backups, with expedited migration at $49 per site under an eight-hour target and the exclusions (DNS, email, third-party services) stated openly. Plan limits for disk, CDN and server bandwidth, visits with a defined visit, are published with priced add-on resources including a dedicated server from $300 per month, and termination is self-service in the panel, effective at the end of the subscription period. Deletion or return of data on termination happens only at the customer's written direction with no deadline stated, and I found no public information on domain transfer out or supported migration to another host. 2 10 11 17 19
The Skeptic
Moving in is documented better than almost anywhere: free, unlimited managed migrations with scope and exclusions stated (email, DNS and third-party services remain the customer's), weekdays-only scheduling, bulk migrations, a 49 $ per site expedited option with an 8-hour target and a refund if missed, and a malware scan on every move. Limits are numbers — disk, server and CDN bandwidth, visits with a defined visit — with a stated overage policy and self-service add-ons from 20 $ per 20 GB up to dedicated servers from 300 $ a month. Leaving is self-service termination at period end with downloadable backups, though we found no public information on domain transfer-out terms or a deadline for deleting data after termination. 19 2 10 17 11
Support, domains & email
Show reasoningHide reasoning
How this is scored
Who helps and what comes with the hosting: support channels (phone, chat, ticket, email), hours and languages, response times stated or guaranteed, technical depth (WordPress or server experts, help with a hacked site), a help centre and documentation, a premium or managed support option, an agency or partner programme, and the domains, SSL certificates and mailboxes included or bookable in the same account, with their DNS management and mail features (IMAP, webmail, spam filter, mailbox size).
0 — No support offered beyond a community forum and no domain or email service.
3 — Email or ticket support and a help centre; hours, language, response times and domain and mailbox features are basic or not described.
5 — Support by phone or chat and ticket in the customer's language with hours stated, a searchable help centre, domains and mailboxes bookable in the same account with DNS management, and webmail with a spam filter.
8 — Support around the clock by people with stated technical expertise, response times stated per channel, help with hacked or broken sites, a premium support or managed service tier, an agency or partner programme with its benefits stated, and mailboxes with stated size, aliases and server-side filtering.
10 — Support with guarantees: response times contractually bound in an SLA, a named contact or account manager for business customers, proactive incident notifications, support satisfaction or response figures published, and every included service (domains, DNS, mail, certificates) documented with its limits.
The Agency Lead
Support runs around the clock, 365 days a year, through chat in the dashboard in eight languages, with an average first response under two minutes, a stated 47-minute average resolution time, and a single team of WordPress developers and Linux engineers rather than level-one screeners — and the hack-fix guarantee means a compromised client site is cleaned at no extra cost. Every customer can reach an account manager by chat or email, meetings become schedulable from the WP 10 plan and above, and the agency partner programme names its benefits: lifetime commissions, lead referrals, co-marketing, hosting credits up to 10,000 dollars and free hosting for the agency's own site. Free premium DNS via Route 53 and SSL certificates are included and satisfaction figures between 96 and 98 % are published; we found no public information on mailboxes or email features, and the migration documentation leaves email setup to the customer. 21 6 4 2 15 22
The Small-Business Owner
Support runs around the clock in eight languages, staffed by WordPress developers and Linux engineers with no first-line filter, an average first reply under two minutes and a 47-minute average resolution — but it comes exclusively through the chat in MyKinsta, with no telephone line, which for me when the site is down is a genuine problem. The migration documentation states that setting up email is not included and I would handle it myself; we found no public information on mailboxes, webmail or domain registration in the same account, so my twelve mailboxes would have to live somewhere else. Account managers and schedulable meetings start only on the larger tariffs. 2 6 19 21 22
The Shop Operator
Around-the-clock chat support in eight languages from a team made up entirely of WordPress developers and Linux engineers, an average response under two minutes, published satisfaction around 97 %, a 47-minute average resolution time, a free hack-fix guarantee, documentation and an agency partner programme — that is the depth of help I want when a shop update breaks. Chat is the only channel, with email as a fallback if the panel is unreachable, and scheduled account-manager meetings come only on larger plans. We found no mailboxes in the captured pages; email setup is explicitly excluded from the migration service, so mail has to come from elsewhere. 2 4 6 19 21 22
The Freelance App Developer
Support is provided exclusively through the chat system integrated into MyKinsta, 24/7, staffed entirely by WordPress developers and Linux engineers, with published figures — average response under 2 minutes, 47-minute average resolution, 96 to 98% satisfaction — in eight languages, plus a free hack-fix guarantee and account managers with schedulable meetings on larger plans. We found no public information on phone support or a premium support tier. Free premium DNS via Route 53 is documented, but we found no public information on mailboxes or domain registration, and email setup is excluded from migrations. 4 6 15 21 22
The Data Protection Officer
Support runs around the clock every day through chat in MyKinsta with an average response under two minutes and average resolution of 47 minutes, staffed entirely by WordPress developers and Linux engineers with no tiered queues, in eight languages, with free hack-fix help, an account manager for larger plans and an agency partner programme. There is no telephone support, and the billing, malware and migration desks keep stated weekday hours in UTC. This is hosting without email: mailboxes are not offered, the migration guide tells customers to set up email themselves, and while premium DNS via Route 53 is included, I found no public information on domain registration. 4 6 15 19 21
The Skeptic
Support runs exclusively through chat in MyKinsta, around the clock every day, in eight languages, staffed — per the vendor — by WordPress developers and Linux engineers with no tier-one front line, an average response under two minutes, 47-minute average resolution and published satisfaction around 96–98 %. Every customer reaches an account manager by chat, meetings bookable from the WP 10 plan upward, and the agency programme's benefits are spelled out. The response time is an average, not a guarantee; email sits outside the service — the migration guide says customers set it up themselves — and we found no public information on phone support or domain registration. 21 6 4 22 19 2
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the servers, backups and support sit, and who the subprocessors are (data centre operator, CDN, DNS, mail filtering, support and payment tools). Independently sourced by the sovereignty pipeline; a host stores everything the customer's sites collect, so the whole chain counts, including where backups are kept and which non-EU group company can reach the data.
0 — Non-EU vendor and contracting entity, data centre location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the data centre location is unstated or non-EU and the subprocessors are not listed.
5 — EU data centres available and an EU contracting entity or EU representative, but parts of the chain (parent company, CDN, mail filtering, support, payment) run through non-EU providers without a stated safeguard.
8 — EU data centres named by location, EU contracting entity and parent, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated for the data centres.
10 — Sovereign end to end and evidenced: European ownership, entity, own data centres and every subprocessor, backups in the EU, no non-EU group access, data export and deletion documented, and certifications published with their scope rather than implied.
The Agency Lead
The contracting entity is Kinsta Inc. of West Hollywood, California, under Delaware law with arbitration in Wilmington, Delaware; the subprocessor list is published with locations, and while hosting runs on Google Cloud with data center regions chosen by the customer, EU regions included, the DNS via AWS Route 53, the support tools HubSpot and Intercom, and a Kinsta analytics cluster that processes IP addresses and access log information all sit in the United States. A data processing agreement with standard contractual clauses and Data Privacy Framework certification exists, which is more than a bare privacy policy, but we found no public information on an EU contracting entity or an EU representative. That places it above a vendor that publishes nothing about its chain, and clearly short of a European-owned chain end to end. 9 10 12 11 8
The Small-Business Owner
The contracting party is Kinsta Inc. of West Hollywood under Delaware law, but customers choose their data centre region, European regions included, there is a published data processing agreement with the standard contractual clauses, and a full subcontractor list naming Google, Cloudflare, AWS, Hubspot and others with their locations. What I dislike as a German business owner: the analytics cluster that processes visitor IP addresses sits in the United States, the support tools are American, and disputes would go to arbitration in Wilmington, Delaware. Thorough, honest documentation — but of an American company, with the legal weight resting in the United States. 9 10 11 12
The Shop Operator
The contracting entity is Kinsta Inc. of West Hollywood, California, with a UK contact as Kinsta Ltd., and the terms run under Delaware law with arbitration in Wilmington — customers can select Google Cloud regions including European ones, but ownership is not European. Transparency is real: a published DPA with SCCs plus UK and Swiss annexes, DPF certification, and a subprocessor list with locations. The chain still runs through US providers — AWS Route 53 for DNS, Hubspot and Intercom for support communication, Clickhouse for logs — and the analytics cluster processing IP addresses and access log data is hosted in the United States. 9 10 11 12
The Freelance App Developer
The contracting entity is Kinsta Inc. of West Hollywood, California, with Delaware governing law, arbitration in Wilmington and FTC jurisdiction — a non-EU vendor — though customers select their data centre region on Google Cloud, including European zones, and Kinsta Ltd. is listed as a UK contact. Transparency is strong: a dated subprocessor list with locations, standard contractual clauses with the UK addendum and Swiss amendments, Data Privacy Framework certification, and a published data processing agreement. However, the analytics cluster that processes IP addresses and access log information is hosted in the United States, support and AI tooling run through US providers, and we found no public information on an EU contracting entity, an EU representative, or certifications covering the data centres themselves. 8 9 10 11 12
The Data Protection Officer
The contracting entity is Kinsta Inc. of West Hollywood under Delaware law, with the US Federal Trade Commission holding jurisdiction over its Data Privacy Framework commitments and only a UK contact as a second entity — no EU company or EU representative — although customer sites can be hosted in a customer-chosen Google Cloud region including Europe, with a published data processing agreement using the SCCs and a subprocessor list naming each processor with its location. The chain nonetheless runs largely through the United States: DNS via Amazon Web Services, support via Hubspot and Intercom, analytics and log storage via Clickhouse, AI tooling via OpenAI and Anthropic, transactional mail via Canada and the United States — and the vendor's own analytics cluster, which processes IP addresses and access-log information from customer sites, is hosted in the United States. Certifications are stated as SOC 2 Type II and ISO 27001, but the DPA may be changed at any time in Kinsta's sole discretion and audits are restricted as described above. 9 10 11 12 14
The Skeptic
You contract with Kinsta Inc. of West Hollywood under Delaware law, disputes go to arbitration in Wilmington with a jury-trial waiver, and the FTC oversees the Data Privacy Framework compliance; EU Google Cloud regions are selectable by the customer and standard contractual clauses with the UK Addendum and Swiss Amendments are published. The subprocessor list is public and specific: DNS on AWS in the United States, support on HubSpot and Intercom in the United States, log storage on Clickhouse in the United States, and Kinsta's own analytics cluster processing IP addresses and access logs hosted in the United States. SOC 2 Type II and ISO 27001 are published; we found no public information on an EU contracting entity or EU representative. 9 10 11 12
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over the contract from public pages alone: the price per tariff for the first term and on renewal, minimum term and how the price depends on it, setup fees, what is included (domains, mailboxes, SSL, backups, restores, migration), what costs extra (additional PHP versions or extended support, more backups, a restore, premium support, staging, CDN), traffic or resource overage, VAT treatment, and the cancellation terms.
0 — No public prices at all; every customer is a sales call.
3 — A starting price is shown, but the renewal price, minimum term or what is included is unclear.
5 — Tariffs are public with their monthly price and main inclusions, the minimum term stated, but at least one commonly needed piece (the renewal price after an introductory offer, setup fee, restores, extra backups, extended PHP support) is unpriced or hard to find.
8 — Every tariff priced with the price for the first term and on renewal side by side, the minimum term and setup fee stated, add-ons priced, overage handling stated, and VAT treatment for business customers stated.
10 — Complete price computability: the cost over three years derivable for a given tariff and set of add-ons, with every setup, restore, support and migration fee and the cancellation and data-return terms published.
The Agency Lead
Add-on pricing is published to an unusual depth, which is what I need to keep sixty sites predictable: 30 $ per additional website per month, + 20GB / $20 USD / month extra disk, premium staging at 20 $ per website per month, Redis at 100 $ per website per month, external backups at 10 $ / 500 MB / month plus 1 $ / GB bandwidth, disaster recovery at $300 per month plus a one-time $300 setup fee, expedited migration at $49 per site, and the Single plan at $30 USD with a $0 first month; prices are in USD with taxes excluded. Overage handling (the site stays online, notice at 80 % and 100 %) and the list of what all plans include are published. We found no public information on the minimum term, on a renewal price shown next to the first-term price, or on the per-unit cost of an overage, so the three-year total for anything above the Single plan is not computable from these pages alone. 1 2 4 10 18 19
The Small-Business Owner
The single tariff shows the first month free and then the regular monthly price of $30, taxes excluded and in US dollars as stated, and every add-on I checked carries a public price: more storage, extra sites, hourly backups, Redis, the dedicated server, disaster recovery with its setup fee, even the express migration at $49 per site. If the site goes over its visit or storage limits it stays online and warnings come at 80 % and 100 %, but we found no public information on what an overage unit actually costs — the kind of surprise I do not want on an invoice. Cancellation is self-service, there is money back within thirty days, and a price rise can be avoided by terminating before it takes effect. 1 2 10 18 19
The Shop Operator
I can largely compute my real costs from public pages: the Single plan at 30 $ with the first month free, per-plan disk, bandwidth, visit limits and backup retention stated, an overage policy that keeps the site online and bills actual overage, prices explicitly in USD without taxes, a 30-day money-back guarantee, and a long add-on price list — an extra site 30 $ a month, extra storage 20 $ per 20 GB, Redis 100 $ per website, 6-hourly backups 20 $, disaster recovery 300 $ per month plus a 300 $ setup fee, expedited migration 49 $ per site with a refund if the 8-hour target is missed. What keeps the three-year figure from being exact: we found no per-unit overage prices and no side-by-side renewal prices for every plan and term. 1 2 4 10 18 19
The Freelance App Developer
Add-on pricing is unusually complete — 20 GB extra disk at $20 USD per month, Redis at $100 per site per month, hourly backups at $100 per website per month, a dedicated server from $300 per month, disaster recovery at $300 per month plus a one-time $300 setup fee, expedited migration at $49 per site — and the overage policy, the visit definition, VAT treatment (prices in USD, taxes excluded), auto-renewal, the 30-day money-back guarantee and the price-increase escape are all published. The Single plan is shown with the first month at $0 and $30 USD monthly. We found no public information on the remaining tariff ladder with first-term and renewal prices side by side, or an explicitly stated minimum term. 1 2 4 10 18 19
The Data Protection Officer
Add-on pricing is unusually complete: $30 per additional site per month, $20 per 20 GB, Redis at $100 per site and month, hourly backups at $100 and six-hour backups at $20 per site and month, external backups at $10 per 500 MB per month plus $1 per GB bandwidth, disaster recovery at $300 per month plus a one-time $300 setup fee, expedited migration at $49 per site — with the first month free on the Single 35k and WP 2 tariffs, a 30-day money-back guarantee, VAT treatment stated (USD, taxes excluded) and self-service cancellation at period end. The overage policy promises the site stays online with notices at 80% and 100% of usage but states no unit price for the overage charged, and beyond the Single plan at $0 first month and $30 per month I found no public renewal prices quoted for the larger tariffs on the captured pages. 1 2 4 10 18 19
The Skeptic
Add-on pricing is unusually complete — hourly backups at 100 $ per site per month, external backups at 10 $ per 500 MB plus 1 $ per GB bandwidth, disaster recovery at 300 $ a month plus a one-time 300 $ setup, expedited migration at 49 $ per site — and prices are stated in USD with taxes excluded. Of the tariff table itself, the pages we read price only the Single plan (first month 0 $, 30 $ a month list), the overage policy promises to bill based on the actual usage without a published unit rate, and we found no public information on renewal prices shown side by side with first-term prices. Hosting plans auto-renew for up to twelve months and fees are otherwise non-refundable, though a 30-day money-back guarantee and self-service termination are documented. 1 2 10 18 19 4
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Kinsta
Is Kinsta European?
No. whats-best.ai classifies Kinsta as Rest of world.
Where does Kinsta store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Kinsta have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Kinsta?
As of 2 Nov 2026, the panel rates Raidboxes (3/5), Infomaniak Web Hosting (3/5) and webgo Webhosting (3/5) highest among the other 14 Web Hosting products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Raidboxes (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Kinsta alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 19 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 13 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 11 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 7 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown. Know more? Tell us
Sources (24)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (managed WordPress hosting) kinsta.com Checked 1 Nov 2026 Details →
- 2 Pricing page kinsta.com Checked 1 Nov 2026 Details →
- 3 Features page (security) kinsta.com Checked 1 Nov 2026 Details →
- 4 Features page (agencies) kinsta.com Checked 1 Nov 2026 Details →
- 5 Features page (migration) kinsta.com Checked 1 Nov 2026 Details →
- 6 Support page kinsta.com Checked 1 Nov 2026 Details →
- 7 API documentation kinsta.com Checked 1 Nov 2026 Details →
- 8 Status page status.kinsta.com Checked 1 Nov 2026 Details →
- 9 Privacy policy kinsta.com Checked 1 Nov 2026 Details →
- 10 Terms of service kinsta.com Checked 1 Nov 2026 Details →
- 11 Data processing agreement (dpa) kinsta.com Checked 1 Nov 2026 Details →
- 12 Subprocessor list kinsta.com Checked 1 Nov 2026 Details →
- 13 Performance, uptime & infrastructure — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 14 Performance, uptime & infrastructure — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 15 Control panel, WordPress & developer tooling — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 16 Control panel, WordPress & developer tooling — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 17 Security, backups & recovery — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 18 Security, backups & recovery — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 19 Scaling, migration & exit — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 20 Scaling, migration & exit — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 21 Support, domains & email — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 22 Support, domains & email — found from sitemap kinsta.com Checked 1 Nov 2026 Details →
- 23 Imprint — found from the homepage kinsta.com Checked 1 Nov 2026 Details →
- 24 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →