Web Hosting
webgo Webhosting
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by webgo GmbH · webgo.de
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
webgo Webhosting at a glance
- Vendor
- webgo GmbH
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates webgo Webhosting 3/5, the mean of 6 judges. webgo GmbH (HRB 132905, Hamburg) sells shared web hosting from its own data-centre space in Hamburg. how scores are made
- As of
- Vendor pages captured 1 Nov 2026; evaluated by the panel 2 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
webgo GmbH (HRB 132905, Hamburg) sells shared web hosting from its own data-centre space in Hamburg. Performance and reliability sits at a flat 6: guaranteed RAM up to 8 GB, NVMe packages up to 300 GB storage, and a data centre with 15 minutes of UPS buffer, at least 24 hours of emergency power and carriers at DE-CIX. The operational picture is weaker: portal backups must be started manually, restores from daily server-side backups are an individual service on request, and the terms put backup copies on the customer; the captured pages give different figures for uptime, 99.5 % guaranteed versus at least 99 % annual average. Sovereignty drew the highest and the widest scores, 6 to 8: a German chain — own data-centre space in Hamburg, "100 % Hosting in Deutschland" — with judges differing over the US subprocessors in the vendor's own website tooling. Pricing transparency scored 5 to 6: entry prices are public, but the renewal price after the one-time 10 % first-term discount is not.
Speaks for it
- Performance and reliability sits at a flat 6 on concrete resources — guaranteed RAM up to 8 GB and NVMe packages up to 300 GB storage
- The Hamburg data centre is documented down to redundant disks, power supplies and switches, 15 minutes of UPS buffer and at least 24 hours of emergency power, with carriers at DE-CIX
- Support runs by phone, live chat and e-mail 365 days a year, with stated hours of weekdays 9–20 and weekends and holidays 11–18, plus a callback service and dedicated agency contacts
- Sovereignty scored 6 to 8 on a German chain: webgo GmbH in Hamburg (HRB 132905), its own data-centre space in Hamburg, a named data protection officer and ISO 27001 stated for the data centre
- Entry prices are public per storage class — HDD from 6,95 €, SSD from 7,95 €, NVMe from 12,95 €, CMS hosting from 17,95 € per month — all including 19 % German VAT, with a one-time setup fee of 14,95 €
Held against it
- Backups created in the customer portal are not automatic, cannot be automated, and consume the tariff's own webspace, while the terms put backup copies on the customer
- A restore from the daily server-side backups is offered as an individual service on request, with no published price
- The captured pages give different figures for uptime — 99.5 % guaranteed on one page, at least 99 % annual average in the terms — and we found no public information on a service credit behind either figure or a public status page
- The renewal price after the one-time 10 % first-term discount is not published, and the migration service and PHP Extended Support also come without a price
- We found no public information on Git deployment, Composer, a public API or command-line tool, or team members with roles
Best for
- You run a German-market website and want a documented Hamburg data centre with German-language support reachable 365 days a year
- You are an agency or reseller — dedicated contacts, a premiumpartner programme with commissions, and third-party use under a separate reseller contract are documented
- You are moving an existing site — the vendor-run migration service covers website, domain and e-mail mailboxes with minimal downtime and no technical effort on your side
- You want concrete resource numbers and published entry prices before committing — NVMe hosting from 12,95 € per month with guaranteed RAM up to 8 GB
Avoid if
- You need automated, hands-off backups — portal backups must be triggered manually, cannot be automated, and the terms require your own copies on media not physically at webgo
- You must budget a multi-year total — ask the vendor: the public pages we read do not show it
- You build with Git, Composer or an API-driven workflow — the documented tooling covers SSH with listed shell commands, up to 100 cron jobs and phpMyAdmin, and we found no public information on those tools
- You need around-the-clock coverage or guaranteed response times — the stated support hours are weekdays 9–20 and weekends and holidays 11–18
The scores
| Criterion | Panel median |
|---|---|
| Performance, uptime & infrastructure | 3 of 5 |
| Control panel, WordPress & developer tooling | 2.5 of 5 |
| Security, backups & recovery | 3 of 5 |
| Scaling, migration & exit | 3 of 5 |
| Support, domains & email | 3 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 2.5 of 5 |
Performance, uptime & infrastructure
Show reasoningHide reasoning
How this is scored
What runs the sites and how reliably: CPU, RAM and storage per tariff stated, SSD or NVMe storage, current PHP versions and how long old ones are kept, HTTP/2 or HTTP/3, server-side caching (OPcache, Redis, a page cache), a CDN, databases and their limits, resources that are guaranteed rather than shared without a stated limit, an uptime SLA with a service credit, a public status page with incident history, and redundancy of the platform. Where the data centre is located is scored under sovereignty.
0 — Not a hosting product; websites or web apps cannot be run on it.
3 — Storage and a number of sites per tariff are stated and the product is described as fast; resources, PHP versions, caching and uptime are basic or not described.
5 — Resources per tariff stated (CPU or a performance class, RAM, SSD or NVMe storage), several current PHP versions selectable, HTTP/2, server-side caching or a cache plugin documented, free SSL, a stated uptime target, and a public status page.
8 — Dedicated or guaranteed resources stated per tariff, HTTP/3 and a CDN included, Redis or an object cache, PHP versions kept current with an end-of-life policy published, an uptime SLA with a service credit, a status page with incident history, and a redundant platform (replicated storage, failover) described.
10 — Infrastructure documented to the level an operator could audit: hardware generations and storage architecture named, performance measured and published with method, an SLA with credits and exclusions at 99.95 % or above, every incident on the status page with a post-mortem, and scaling without downtime documented.
The Agency Lead
Guaranteed RAM up to 8 GB, NVMe storage and an unusually well-documented redundant data centre in Hamburg (UPS buffer, 24-hour emergency power, redundant disks, power supplies and switches, three carriers at DE-CIX, on-site 24/7 monitoring) carry this. We found no public information on a status page, SLA service credits, HTTP/2 or HTTP/3, or a Redis or object cache, and the captured pages give different figures for availability — 99.5 % guaranteed versus 99 % annual average in the terms. 1 2 6 10 11
The Small-Business Owner
There is a lot here I can trust as a layman: guaranteed RAM up to 8 GB and NVMe storage per package, nginx and Apache with PHP-FPM, and a data centre in Hamburg with redundant power, on-site technicians around the clock and monitoring. The captured pages give different figures for guaranteed availability (99.5 percent on one page, 99 percent annual average in the terms), and I found no public information on a status page with incident history, HTTP/3, Redis or a service credit if the site is down. 1 2 4 6 10 11
The Shop Operator
Guaranteed RAM up to 8 GB, NVMe storage up to 300 GB per package, a PHP version per domain with PHP-FPM and free SSL give me a clear resource picture, and the Hamburg data centre is documented down to redundant disks, power supplies and switches, 15 minutes of UPS buffering, emergency power for at least 24 hours and 24/7 on-site monitoring. For a Black Friday weekend I still miss the operational proof: the captured pages give different figures for the guaranteed uptime — at least 99.5 % on the agency page and at least 99 % in the annual average in the terms — and we found no public information on a service credit, a status page with incident history, Redis, or HTTP/2 and HTTP/3. 1 4 6 10 11
The Freelance App Developer
The numbers I want to see are there: guaranteed RAM up to 8 GB per package, NVMe storage with the vendor citing up to 10x faster reads and up to 50 % lower time-to-first-byte than SSD, PHP-FPM on an nginx-Apache stack, and a Hamburg data centre with named carriers, redundant disks, power supplies and switches and around-the-clock on-site monitoring. The captured pages give different figures for availability — a guaranteed uptime of at least 99,5 % on the agency page and at least 99 % in the annual average in the terms — and I found no public information on a status page, HTTP/2 or HTTP/3, a Redis or object cache, or a service credit. 1 2 4 6 10 11
The Data Protection Officer
Storage tiers are concrete — NVMe, SSD and HDD with guaranteed RAM up to 8 GB and NVMe gains of up to 50 % lower time-to-first-byte — and the platform's redundancy is documented down to redundant disks, power supplies and switches, UPS buffering of 15 minutes, at least 24 hours of emergency power and on-site 24/7 monitoring. The captured pages give different figures for availability (a guaranteed 99.5 % on one page, at least 99 % in the annual average in the terms) and neither carries a service credit. We found no public information on a status page with incident history, HTTP/3, or an object cache such as Redis. 1 2 4 6 10 11
The Skeptic
Resources are stated in numbers — NVMe packages up to 300 GB storage with RAM guaranteed up to 8 GB — and the data-centre page names carriers, redundant disks, power supplies and switches, 15 minutes of UPS buffer and at least 24 hours of emergency power. The captured pages give different figures for uptime, with 99.5 percent guaranteed on one page and at least 99 percent annual average in the terms; we found no public information on a service credit behind that guarantee, a public status page with incident history, HTTP/2 or HTTP/3, or a Redis or object cache. 1 2 4 6 10 11
Control panel, WordPress & developer tooling
Show reasoningHide reasoning
How this is scored
How sites are set up and run day to day: the control panel or console, one-click installers for named CMS and shop systems, managed WordPress features (automatic core and plugin updates, staging, cloning, a search-and-replace), SSH, SFTP, Git deployment, Composer, cron jobs, a PHP version and settings per site, databases and phpMyAdmin or an equivalent, log access, a public API and command-line tool, infrastructure-as-code support, team members and roles, and client or project management for agencies. On a cloud server: images, snapshots, firewalls, private networks and the API that manages them.
0 — No documented way to deploy or manage a website on the product.
3 — A control panel with FTP access and a one-click installer for WordPress; SSH, staging, Git, an API and roles are basic or not described.
5 — A control panel with installers for several named CMS, SSH and SFTP, cron jobs, PHP version per site, databases with a web admin, a staging copy or snapshots, team members with access rights, and log files available — or, for a cloud server, a console with images, snapshots, a firewall and a documented API.
8 — Managed WordPress or app tooling (automatic updates with rollback, one-click staging and push to live, cloning), Git deployment and Composer documented, a public REST API and CLI covering sites, databases, domains and backups, granular roles per project, and an agency view with client projects, transfer of ownership and white-label or reseller options.
10 — A platform that scales across an agency or a development team: everything in the panel available through a versioned API, CLI and an infrastructure-as-code provider, preview environments per branch, audit logs of every change, SSO for the team, and projects that can be handed to the client with billing transferred.
The Agency Lead
One-click installers for nine named apps including WordPress, SSH with a documented command set, up to 100 cronjobs, PHP version per domain, editable php.ini and httpd.conf, phpMyAdmin and a documented WordPress staging route via subdomain cover my daily basics. We found no public information on team roles for freelancers, Git deployment, an API or CLI, one-click push to live, or handing a client project with its billing to the customer — the agency offering is a partner programme with dedicated contacts, not project management. 2 3 13 14 18 4
The Small-Business Owner
The customer portal gives me one-click installs for WordPress and other systems, a PHP version per domain, an editable php.ini, up to 100 cron jobs, SSH access and phpMyAdmin, and I can build a WordPress staging page on a subdomain with a free Let's Encrypt certificate. But staging is something I would have to assemble myself, and I found no public information on one-click push to live, automatic updates with rollback, Git, an API or team members with roles. 2 3 13 14 18
The Shop Operator
The customer portal covers my daily shop operations: one-click installers for WordPress, Drupal, Joomla and more, SSH on port 22, up to 100 cron jobs, freely configurable php.ini and httpd.conf, phpMyAdmin, a documented WordPress staging guide and a PHP version selectable per domain. We found no public information on Git deployment, Composer, a public API or command-line tool, team roles or log access, though an agency programme with dedicated contacts and a reseller option is documented. 2 3 4 13 14 18
The Freelance App Developer
Day-to-day this covers my basics: SSH on port 22 with a listed set of shell commands, MySQL import and export over SSH where mysqldump also works for MariaDB, phpMyAdmin, up to 100 cronjobs, a PHP version per domain and a freely editable php.ini and httpd.conf, plus one-click installers for nine named applications including WordPress and a staging guide on a subdomain with Let's Encrypt. What I run client projects on needs more, though: I found no public information on Git deployment, Composer, a public API or CLI covering sites and backups, or team members with roles. 2 3 13 14 15 18
The Data Protection Officer
Day-to-day operation is well covered: a one-click installer for nine named applications including WordPress, a PHP version selectable per domain with an editable php.ini and httpd.conf, up to 100 cron jobs, documented SSH on port 22 with usable commands, phpMyAdmin with SSH-based MySQL/MariaDB import and export, subdomain management and a WordPress staging guide. Agency customers get a Premiumpartner programme, and passing hosting on to third parties is possible under a separate reseller contract. We found no public information on Git or Composer deployment, a public API or command-line tool for site management, or team members with granular roles. 2 3 10 13 14 18 20
The Skeptic
Documented day-to-day tooling covers a customer portal, one-click installers for nine named applications including WordPress, SSH on port 22 with a list of usable shell commands, up to 100 cron jobs, a PHP version per domain, an editable php.ini and httpd.conf, phpMyAdmin, and a WordPress staging guide via subdomain. We found no public information on Git deployment, Composer, a public API or command-line tool for the panel, team members with roles, or access to log files, which is what separates this from agency-grade tooling. 2 3 13 14 18
Security, backups & recovery
Show reasoningHide reasoning
How this is scored
How the sites are protected and how fast they come back: isolation between customers (containers, separate PHP processes, chroot), free SSL with automatic renewal, a web application firewall, malware scanning and cleanup, DDoS protection, two-factor login to the panel, brute-force protection, backup frequency and retention, off-site or geo-redundant backup copies, self-service restore of files and databases from a point in time, restore of single sites or tables, security updates handled by the vendor on managed tariffs, and security certifications (ISO 27001, BSI C5, SOC 2) with their scope.
0 — No backups and no security measures described, and the customer is told to secure the site entirely on their own.
3 — Free SSL and some backup exist; frequency, retention, restore and the security measures are basic or not described.
5 — Free SSL with automatic renewal, daily backups with a stated retention, restore by the customer in the panel, account isolation described, DDoS protection, two-factor login to the panel, and malware scanning or a firewall offered.
8 — Backups several times a day or on demand with retention of 14 days or more, stored in a second location, point-in-time restore of single files, databases or sites, a web application firewall and malware cleanup included, isolation per site stated, and an ISO 27001 or equivalent certification of the hosting operation published.
10 — Recovery that can be evidenced: backup and restore times stated and tested, immutable or off-provider backups, recovery objectives (RPO and RTO) published, a security incident process and disclosure policy, certifications with their scope and audit reports available, and penetration test results or a bug bounty programme.
The Agency Lead
Chroot isolation with a dedicated Apache in separate containers, free Let's Encrypt SSL, Arbor DDoS protection, malware scans, a documented two-factor setup and an ISO 27001 certified data centre are solid. The backup picture is uneven: the captured pages describe both daily automatic server backups usable up to seven days back with restoration as an individual service, and portal backups that are manual only, cannot be scheduled, and consume the tariff's webspace — no second storage location or point-in-time restore is documented. 1 3 4 6 15 16
The Small-Business Owner
Free Let's Encrypt certificates, chroot isolation with a dedicated Apache per account, DDoS protection on Arbor Networks hardware, malware scans, a two-factor setup guide and daily server backups usable up to 7 days back give me the basics. What worries me: the backup function in the portal must be started manually, a restore by the vendor is described as an individual service on request, and the terms make me responsible for keeping my own copies off-site; I also found no public information on a second backup location, a web application firewall or stated recovery times, and the ISO 27001 note refers to the data centre. 1 3 4 6 10 15 16
The Shop Operator
Isolation is documented properly — a chroot environment with dedicated Apache, separate containers, DDoS protection on Arbor Networks hardware, malware scans, firewall management, a two-factor setup guide and an ISO 27001 certified data centre. For my 'yesterday's database back within the hour' the picture is thinner: daily server backups reach back up to 7 days with the restore offered as an individual service on request, while the portal backup of e-mails, FTP files and databases must be triggered manually, cannot be automated and eats my tariff webspace, and the terms put backup copies on me to store outside webgo's storage. We found no public information on a second backup location, point-in-time restore or included malware cleanup. 1 3 4 6 10 15 16
The Freelance App Developer
Free Let's Encrypt per subdomain, per-customer chroot isolation with a dedicated Apache, Arbor-based DDoS protection, malware scans, spam and malware filtering on mail, an ISO 27001 certificate stated for the data centre and a help-centre page on two-factor authentication give a solid baseline, with daily automatic backups reaching back up to 7 days. The restore story is thin for client work: the vendor states a restore from the daily backups is an individual service on request, portal backups are manual with automation stated to be impossible and they consume the tariff's own webspace, the terms put the backup duty on the customer with copies stored away from webgo, and I found no public information on off-site backup copies, point-in-time restore or a web application firewall. 1 3 4 6 10 13 15 16
The Data Protection Officer
Isolation is genuinely described — each account runs in its own chroot environment with a dedicated Apache, in separate containers — and free Let's Encrypt SSL, DDoS protection on Arbor Networks hardware, firewall management, malware scans, automatic 30-minute IP locks, biometric data-centre access and an ISO 27001 certificate for the data centre are stated, with a help-centre article on setting up two-factor authentication. The backup picture is thinner: daily server-side copies are held for up to 7 days with restore as an individual service on request, while portal backups of e-mail, home directory and databases must be triggered manually, cannot be automated and consume tariff webspace — and the terms place backup responsibility on the customer. We found no public information on a second backup location, a web application firewall, or malware cleanup. 1 3 4 6 10 15 16 17
The Skeptic
The captured pages give different pictures for backups: the product pages describe daily automatic server-side backups held up to seven days with restoration offered as an "individuelle Serviceleistung" on request, while the help pages state that backups created in the customer portal are not automatic, cannot be automated, and consume the tariff's own webspace — and the terms oblige the customer to keep copies on media not physically at webgo. Around that sit free Let's Encrypt SSL per subdomain, chroot isolation with dedicated Apache, Arbor Networks DDoS protection, a two-factor setup guide, malware scans and ISO 27001 stated for the data centre; we found no public information on that certificate's scope, a second backup location, point-in-time restore, or malware cleanup included. 1 3 4 6 10 15 16
Scaling, migration & exit
Show reasoningHide reasoning
How this is scored
What it takes to grow and what it takes to leave: tariff changes up and down without a migration, resource limits stated rather than "unlimited" with a fair-use clause, add-on resources, the path from shared hosting to a server or cluster within the same vendor, a free or paid migration service from another host, standard tooling that runs elsewhere (no proprietary stack lock-in), full export of files, databases and mailboxes, domain transfer out without a fee, cancellation periods and minimum terms, and the deletion of data after the contract ends.
0 — Data cannot be taken out and the contract cannot be cancelled on stated terms.
3 — A tariff upgrade exists and files can be downloaded by FTP; limits, migration in, export and exit terms are basic or not described.
5 — Tariff upgrades and downgrades in the panel, the main limits per tariff stated (storage, sites, databases, mailboxes, inodes or processes), a migration service or guide from another host, files and databases exportable with standard tools, domain transfer out documented, and the cancellation period stated.
8 — Resources scalable without moving the site, a documented path from hosting to a server or cluster at the same vendor, a free migration service with its scope stated, every limit including fair use published, monthly terms available, full export including mail, and deletion of data after termination with its deadline stated.
10 — Growth and exit with no friction: scaling on demand without downtime, everything built on open standard tooling with no proprietary lock-in, a complete export in a format another host imports, migration out supported, and cancellation, data return and deletion documented with deadlines.
The Agency Lead
The vendor team migrates website, domain and mailboxes in with minimal downtime and no technical effort for me, upgrades to a higher package are free anytime, main limits and the fair-use principle are published, MySQL export runs via SSH with mysqldump, and there is a path to managed vServers and dedicated or root servers at the same vendor. We found no public information on downgrades, domain transfer out, or the deletion deadline for data after termination. 2 5 8 17 18 10
The Small-Business Owner
Growing looks easy: a switch to a higher package is free at any time, the migration service moves website, domain and mailboxes with minimal downtime and no technical effort on my side, external domains are integrated free, files and databases export via FTP and SSH, and I can cancel by email with my service password or in the portal. I found no public information on downgrades, the price of the migration, domain transfer out, monthly terms or how quickly my data is deleted after the contract ends, and shared resources run under a fair-use principle rather than hard numbers. 2 5 10 15 17 18
The Shop Operator
Growth paths exist inside one vendor — free package upgrades at any time, flexible adjustment of CPU, RAM and storage for load peaks on the agency pages, and managed KVM vServers up to root dedicated servers — with a migration service that moves website, domain and mailboxes with minimal downtime and no technical effort on my side. Fair use and the main limits per package are published and databases export via SSH and mysqldump; we found no public information on downgrades, the price or freeness of the migration service, domain transfer out, the cancellation notice period, or deletion of data after termination. 2 4 5 8 17 18
The Freelance App Developer
Growing is documented: a free upgrade to a higher package at any time, managed vServer up to root dedicated servers at the same vendor, a migration service with its scope stated — website, domain and mailboxes with minimal downtime and no data loss — and export of files and databases over SSH with standard tools, with the fair-use principle and per-mailbox send limits written down. For an exit plan I found no public information on monthly terms, domain transfer out or deletion of data after termination, and the price of the migration service is not stated. 2 4 5 8 10 17 18
The Data Protection Officer
Growth in is easy: an upgrade to a higher package is free at any time, the main limits are published (up to 300 GB NVMe storage, 10 domains, guaranteed RAM, e-mail quotas) with the fair-use principle for shared hosting stated, and a vendor-run migration service moves website, domain and mailboxes with minimal downtime and no data loss. Export runs on standard tools — SSH import and export of databases, locally downloadable backups — and cancellation by e-mail with service password or in the customer portal is described. We found no public information on downgrades, the price of the migration service, domain transfer out, or the deletion of customer data after the contract ends, which is the exit question I need answered for practice and law-firm clients. 2 3 5 10 15 17 18
The Skeptic
Moving in is documented with a migration service whose scope is stated — website, domain and e-mail mailboxes — plus Auth-Code transfers and free integration of external domains; upgrades to a higher package are free at any time, cancellation runs by e-mail with service password or through the portal, and files, databases and e-mail can be exported via SSH, mysqldump and portal backup download. Shared hosting runs on a fair-use principle rather than published resource numbers, and we found no public information on downgrades, on domain transfer out, or on deletion of data after termination with a deadline. 2 5 10 15 17 18
Support, domains & email
Show reasoningHide reasoning
How this is scored
Who helps and what comes with the hosting: support channels (phone, chat, ticket, email), hours and languages, response times stated or guaranteed, technical depth (WordPress or server experts, help with a hacked site), a help centre and documentation, a premium or managed support option, an agency or partner programme, and the domains, SSL certificates and mailboxes included or bookable in the same account, with their DNS management and mail features (IMAP, webmail, spam filter, mailbox size).
0 — No support offered beyond a community forum and no domain or email service.
3 — Email or ticket support and a help centre; hours, language, response times and domain and mailbox features are basic or not described.
5 — Support by phone or chat and ticket in the customer's language with hours stated, a searchable help centre, domains and mailboxes bookable in the same account with DNS management, and webmail with a spam filter.
8 — Support around the clock by people with stated technical expertise, response times stated per channel, help with hacked or broken sites, a premium support or managed service tier, an agency or partner programme with its benefits stated, and mailboxes with stated size, aliases and server-side filtering.
10 — Support with guarantees: response times contractually bound in an SLA, a named contact or account manager for business customers, proactive incident notifications, support satisfaction or response figures published, and every included service (domains, DNS, mail, certificates) documented with its limits.
The Agency Lead
Phone, live chat and email support on 365 days a year with stated hours, a callback service, an extensive FAQ help centre, and a Premiumpartner programme with dedicated agency contacts and commissions answer most of an agency's service needs. We found no public information on stated response times, around-the-clock coverage, help with hacked sites, or webmail details; mailboxes come with dynamic sizes and RBL-based spam filtering that can be toggled per mailbox. 3 4 6 7 19 20
The Small-Business Owner
This is what I buy hosting for: German phone and live-chat support 365 days a year (9 to 20 on weekdays, 11 to 18 at weekends and holidays), email support independent of service times, a callback service, a help centre with whole categories for WordPress and email, and a partner programme with dedicated contacts for agencies; a free.de domain, flexible mailbox sizes and spam blocklists come in the same account. I found no public information on guaranteed response times, coverage at night, webmail or IMAP details, which keeps it short of the top level for a business like mine. 1 3 7 10 19 20
The Shop Operator
Phone, live chat and e-mail support run 365 days a year with stated hours (weekdays 9–20, weekends and holidays 11–18), plus a callback service, a broad FAQ help centre and a premiumpartner programme with dedicated agency contacts and commissions; a domain and mailboxes with flexible sizes and RBL spam filtering sit in the same account. We found no public information on response-time guarantees, a premium tier, help with hacked sites, or webmail. 1 4 7 19 20
The Freelance App Developer
Phone, live chat and email support run 365 days a year with stated hours of 9 to 20 on weekdays and 11 to 18 on weekends and holidays, email support outside those times, a callback service, a large help centre, and for agencies dedicated contacts plus a premium partner programme with commissions. Domains and mailboxes sit in the same account with dynamically sized mailboxes and RBL blocklist spam protection; I found no public information on stated response times, webmail, DNS management or help with hacked sites. 3 4 6 7 10 19 20
The Data Protection Officer
Support is reachable by telephone, live chat and e-mail on 365 days a year with stated hours (weekdays 9–20, weekends and holidays 11–18), a callback service, a service PIN for security-relevant changes and a large categorised help centre; agency customers get dedicated contacts and a partner programme with commissions. Mail comes with dynamically sized mailboxes, RBL blocklist spam protection configurable per mailbox and virus filtering of incoming e-mail. We found no public information on response times, a premium support tier, or webmail and IMAP specifics. 3 4 7 10 19 20
The Skeptic
Support runs by phone, live chat and e-mail 365 days a year with stated hours — weekdays 9–20, weekends and holidays 11–18 — a service PIN for contract-relevant changes, a help centre with counted article categories, and a premiumpartner programme with commissions and dedicated contacts for agencies. E-mail is included with dynamic mailbox sizes and default RBL blocklists per mailbox; we found no public information on stated or guaranteed response times, a premium or managed support tier, or webmail. 3 4 7 10 19 20
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the servers, backups and support sit, and who the subprocessors are (data centre operator, CDN, DNS, mail filtering, support and payment tools). Independently sourced by the sovereignty pipeline; a host stores everything the customer's sites collect, so the whole chain counts, including where backups are kept and which non-EU group company can reach the data.
0 — Non-EU vendor and contracting entity, data centre location unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but the data centre location is unstated or non-EU and the subprocessors are not listed.
5 — EU data centres available and an EU contracting entity or EU representative, but parts of the chain (parent company, CDN, mail filtering, support, payment) run through non-EU providers without a stated safeguard.
8 — EU data centres named by location, EU contracting entity and parent, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated for the data centres.
10 — Sovereign end to end and evidenced: European ownership, entity, own data centres and every subprocessor, backups in the EU, no non-EU group access, data export and deletion documented, and certifications published with their scope rather than implied.
The Agency Lead
A German legal entity with a published Hamburg register number, own data centre space in Hamburg, 100 % hosting in Germany, a named data protection officer, ISO 27001 for the data centre, and a privacy policy naming subprocessors with locations and stated safeguards (Data Privacy Framework certification, standard contractual clauses) for the US-based ones. We found no public information on a published data processing agreement for hosting customers or on where backups are stored. 6 8 9 10 11
The Small-Business Owner
The contracting entity is webgo GmbH in Hamburg (commercial register HRB 132905), it runs its own data-centre space in Hamburg on 100 percent green power with an ISO 27001 certificate stated for the data centre, and hosting is advertised as 100 percent in Germany. The privacy notice does show support and website tools from US providers such as Talkdesk, hCaptcha and HubSpot, partly covered by EU-US Data Privacy Framework certification and standard contractual clauses, and I found no public information on where backups are kept, the group's parent company or a published general data processing agreement. 6 8 9 11
The Shop Operator
webgo GmbH, registered in Hamburg (HRB 132905), operates its own data-centre space in Hamburg with 100 % green power, is named as the GDPR controller, and its privacy policy lists subprocessors with locations and stated safeguards — standard contractual clauses and EU-US Data Privacy Framework certification for services such as HubSpot, Microsoft and Talkdesk. The data centre is stated to hold ISO 27001; we found no public information on where backups are stored or the scope of that certification. 6 8 9 10 11
The Freelance App Developer
The chain I can see is German: webgo GmbH, registered in Hamburg under HRB 132905, runs its own data-centre space in Hamburg with the carriers n@work, euNetworks and Core-Backbone at DE-CIX, states an ISO 27001 certificate for the data centre and 100 % hosting in Germany, and the privacy policy lists processors with addresses and safeguards such as standard contractual clauses and Data Privacy Framework certifications. Non-EU providers do appear in the vendor's own tooling — hCaptcha from Intuition Machines and the US-parented Talkdesk — and I found no public information on a published data processing agreement for hosting customers or on where backups are kept. 6 8 9 10 11
The Data Protection Officer
The chain is German at its core: the controller and contracting entity is webgo GmbH, Wendenstraße 8–12, Hamburg (HRB 132905), with its own data-centre space in Hamburg, "100 % Hosting in Deutschland", German carriers at DE-CIX Hamburg, an ISO 27001 certificate for the data centre and an external data protection officer named. The privacy policy lists subprocessors with locations and safeguards — Google Ireland, Stape in Estonia, The Reach Group in Berlin, usemax in Oberhausen, and US reach through Talkdesk Inc., Microsoft and HubSpot under the EU-US Data Privacy Framework and standard contractual clauses — plus hCaptcha from Intuition Machines, for which we found no stated safeguard. We found no public information on where the daily backups are stored, on a published data processing agreement for hosting customers, or on a parent company. 6 8 9 11
The Skeptic
The verifiable chain is German: webgo GmbH registered in Hamburg (HRB 132905), its own data-centre space in Hamburg with DE-CIX connectivity and ISO 27001, a named data protection officer, and 100 percent hosting in Germany. The subprocessors listed with locations are those of the vendor's own website — Google Ireland, Stape in Estonia, hCaptcha of Intuition Machines, USA — with standard contractual clauses and Data Privacy Framework certifications as safeguards, and one entry names Talkdesk Inc. of Covina, California as a "Muttergesellschaft"; we found no public information on a published data processing agreement for hosting customers, the operator of the data-centre facility, or where backups are kept. 6 8 9 10 11
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over the contract from public pages alone: the price per tariff for the first term and on renewal, minimum term and how the price depends on it, setup fees, what is included (domains, mailboxes, SSL, backups, restores, migration), what costs extra (additional PHP versions or extended support, more backups, a restore, premium support, staging, CDN), traffic or resource overage, VAT treatment, and the cancellation terms.
0 — No public prices at all; every customer is a sales call.
3 — A starting price is shown, but the renewal price, minimum term or what is included is unclear.
5 — Tariffs are public with their monthly price and main inclusions, the minimum term stated, but at least one commonly needed piece (the renewal price after an introductory offer, setup fee, restores, extra backups, extended PHP support) is unpriced or hard to find.
8 — Every tariff priced with the price for the first term and on renewal side by side, the minimum term and setup fee stated, add-ons priced, overage handling stated, and VAT treatment for business customers stated.
10 — Complete price computability: the cost over three years derivable for a given tariff and set of add-ons, with every setup, restore, support and migration fee and the cancellation and data-return terms published.
The Agency Lead
Starting prices for the HDD, SSD, NVMe and CMS tiers, setup fees per product line, VAT treatment, the precise conditions of the 10 % first-term discount, and the included basics (SSL, domain, traffic, guaranteed RAM) are public. The renewal price after that one-time discount, the general minimum term, and prices for a restore or the PHP Extended Support are not published, so a buyer cannot compute the real multi-year cost per client site from these pages alone. 1 2 4 10 11
The Small-Business Owner
Starting prices are public and quoted with VAT of 19 percent included (HDD from 6,95 € per month, SSD from 7,95 €, NVMe from 12,95 €, CMS hosting from 17,95 € with a.de domain and 4 GB RAM), the one-time setup fee of 14,95 € is named, and domain, SSL and mailboxes are listed as included. But only from-prices are shown, the 10 percent discount applies once to the first 12-month term and ends on 30.11.2026, premium domains are explicitly not at standard prices, and restores, extra backups and the migration service are unpriced, so I cannot work out from the public pages what the second and third year will cost me. 1 2 3 10 11
The Shop Operator
Starting prices are public per line — HDD webhosting from 6,95 €, SSD from 7,95 €, NVMe from 12,95 € and CMS hosting from 17,95 € per month — with the one-time setup fee of 14,95 €, the conditions of the one-time 10 % first-term discount, VAT treatment (all prices including German VAT of 19 %) and even a 3,- € postal invoice fee stated. Still I cannot compute my real three-year cost: we found no public information on the renewal price after the discounted first term, or on prices for the restore as an individual service, the PHP Extended Support and the migration service. 1 2 5 7 10 11
The Freelance App Developer
A buyer can assemble most of the cost: entry prices from 6,95 € for HDD, 7,95 € for SSD, 12,95 € for NVMe and 17,95 € im Monat for CMS hosting, setup fees of 14,95 € for webhosting, 19,90 € for vServer and 149 € for dedicated servers, 19 % VAT included with a note for EU private customers, payment by transfer or direct debit, and the 10 % first-term discount with its end date and conditions spelled out. What stays unpriced: the renewal price after that one-time discount, the backup restore offered as an individual service, PHP extended support, the migration service, and premium domains, which the pages say are not included and do not follow standard prices. 1 2 3 4 10 11
The Data Protection Officer
Starting prices are public per storage class (HDD from 6,95 €, SSD from 7,95 €, NVMe from 12,95 €, CMS hosting from 17,95 € per month), one-time setup fees are stated (14,95 € for webhosting packages, 19,90 € for vServer, 149 € for dedicated servers), VAT is clear at 19 % German VAT included with a note for EU private customers, and inclusions (SSL, one.de domain, e-mail, traffic) plus the one-time 10 % first-term discount ending 30.11.2026 are documented. A postal invoice costs 3 € and e-mail invoices are free. We found no public information on prices for the migration service, the restore of the daily server backups, PHP Extended Support or other add-ons, so a multi-year total is not fully computable. 1 2 3 4 7 10 11
The Skeptic
Starting prices are public and quoted inclusive of 19 % German VAT — HDD from 6,95 €, SSD from 7,95 €, NVMe from 12,95 €, CMS hosting from 17,95 € per month — with a one-time 14,95 € setup fee, and the 10 % discount is honestly conditioned: only on 12-month terms, once, for the first term only, ending 30.11.2026. What I cannot compute from these pages is the real multi-year cost: no renewal price is shown for after the discounted first term, and the restore offered as an "individuelle Serviceleistung", the migration service and the PHP Extended Support all come without a price. 1 2 3 4 5 7 10
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about webgo Webhosting
Is webgo Webhosting European?
Yes. whats-best.ai classifies webgo Webhosting as EU-Made.
Where does webgo Webhosting store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does webgo Webhosting have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to webgo Webhosting?
As of 2 Nov 2026, the panel rates Kinsta (3.5/5), Raidboxes (3/5) and Infomaniak Web Hosting (3/5) highest among the other 14 Web Hosting products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Raidboxes (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: webgo Webhosting alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 1 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Hosting location. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 33 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 19 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (web hosting, with pricing) webgo.de Checked 1 Nov 2026 Details →
- 2 Features page (CMS hosting) webgo.de Checked 1 Nov 2026 Details →
- 3 Features page (NVMe hosting) webgo.de Checked 1 Nov 2026 Details →
- 4 Features page (agency hosting) webgo.de Checked 1 Nov 2026 Details →
- 5 Features page (migration service) webgo.de Checked 1 Nov 2026 Details →
- 6 Company page (data centre) webgo.de Checked 1 Nov 2026 Details →
- 7 Help centre (FAQ) webgo.de Checked 1 Nov 2026 Details →
- 8 Legal notice webgo.de Checked 1 Nov 2026 Details →
- 9 Privacy policy webgo.de Checked 1 Nov 2026 Details →
- 10 Terms of service webgo.de Checked 1 Nov 2026 Details →
- 11 Performance, uptime & infrastructure — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 12 Performance, uptime & infrastructure — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 13 Control panel, WordPress & developer tooling — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 14 Control panel, WordPress & developer tooling — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 15 Security, backups & recovery — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 16 Security, backups & recovery — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 17 Scaling, migration & exit — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 18 Scaling, migration & exit — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 19 Support, domains & email — found from sitemap webgo.de Checked 1 Nov 2026 Details →
- 20 Support, domains & email — found from sitemap webgo.de Checked 1 Nov 2026 Details →