# WP Engine — Web Hosting

WP Engine by WPEngine, Inc. holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-11-02. Provenance: Rest of world; sovereignty: not determined.

- Vendor: WPEngine, Inc. (https://wpengine.com/de/managed-wordpress-hosting/)
- Category: [Web Hosting](https://whats-best.ai/software/web-hosting.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/web-hosting/wp-engine
- Alternatives: https://whats-best.ai/software/web-hosting/wp-engine/alternatives ([markdown](https://whats-best.ai/software/web-hosting/wp-engine/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-02 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: WPEngine, Inc.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026

## The panel's verdict

WP Engine is managed WordPress hosting from WPEngine, Inc., and the bench scores it highest on management and developer tools at 6 to 7: staging environments, Git/CI/CD workflows, SSH access, tested automatic updates and a REST API with a live playground are documented. Support and service follows at 5 to 7 on 24/7 chat everywhere, phone from Business upward and a dedicated account team on Enterprise, with performance and reliability and security and backups at 4 to 6. Pricing transparency is weakest at 2 to 3: the introductory offer covers new Essential customers only, product renewal pricing is subject to change, and Enterprise is quoted individually. Sovereignty sits at 3 to 4 — the contracting party is a US company under the EU-U.S. Data Privacy Framework with Federal Trade Commission oversight, and judges found no public information confirming data-centre locations or subprocessors. Scaling and portability is flat at 4: migration in is documented, the way out is not. The captured pages give different uptime figures, 99.99% and 99.95%, and no judge disagreement cleared the reporting bar.

**Speaks for it:**
- Staging environments, Git/CI/CD workflows, SSH access and automatic, tested updates of core, themes and plugins are documented.
- A REST API covering accounts, sites and environments is public and comes with a live playground.
- Support is 24/7 chat on every plan, with phone added on Business and priority support plus a dedicated account team on Enterprise.
- Daily automated backups with restore points, free SSL, firewalls, malware scans and automatic patches are on the record.
- The SLA pays a credit of 5% of monthly fees per full hour of downtime beyond the target, capped at 100%, claimable within 30 days.

**Held against it:**
- The captured pages give different figures for the uptime commitment — 99.99% on the Business plan page, 99.95% in the SLA — and the vendor may update the SLA in its sole discretion.
- We found no public figures for renewal prices, minimum terms, setup fees or add-on prices, and Enterprise is quoted only as a custom solution.
- We found no public information on backup retention, off-site backup copies, point-in-time restore or two-factor login to the panel.
- The contracting party is WPEngine, Inc. of Austin, Texas, under the EU-U.S. Data Privacy Framework with Federal Trade Commission oversight and disputes routed to TRUSTe in the United States, and we found no public information confirming data-centre locations or individual subprocessors.
- We found no public information on full export, domain transfer out, cancellation terms or data deletion after the contract ends.

**Best for:**
- You run WordPress sites and want the platform to handle updates, staging and deployment — management and developer tools scored 6 to 7, the bench's strongest cluster.
- You want around-the-clock support — 24/7 chat on every plan, phone from Business upward, and a dedicated account team with priority support on Enterprise.
- You are an agency — an agency partner programme with built-in client management tools is documented, and support scores reach 7.

**Avoid if:**
- You need a predictable price over the contract — product renewal pricing is subject to change, the introductory offer is not valid for upgrades or renewals, and Enterprise is quoted only as a custom solution.
- Your procurement requires a European contracting entity or confirmed data residency — the contracting party is a US company under the EU-U.S. Data Privacy Framework, and we found no public information confirming data-centre locations.
- You need one authoritative uptime number — the captured pages give different figures, 99.99% and 99.95%, and the vendor may update the SLA in its sole discretion.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Agency Lead | The Small-Business Owner | The Shop Operator | The Freelance App Developer | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Performance, uptime & infrastructure | 3/5 | 2/5 | 2.5/5 | 2/5 | 2.5/5 | 2/5 |
| Control panel, WordPress & developer tooling | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3.5/5 |
| Security, backups & recovery | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 3/5 | 2/5 |
| Scaling, migration & exit | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Support, domains & email | 3/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 2.5/5 |
| European sovereignty | 1.5/5 | 1.5/5 | 1.5/5 | 2/5 | 1.5/5 | 1.5/5 |
| Pricing transparency | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1/5 |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2.5/5** | **2/5** |

### The judges

- **The Agency Lead** (v1.0): Runs a fifteen-person web agency that hosts sixty client sites, most on WordPress, some on TYPO3 and two WooCommerce shops. Every site is one more login, one more update window and one more call when it breaks. Wants one panel with client projects, staging and push to live, backups they can restore without opening a ticket, roles for freelancers, a way to hand a project and its invoice to the client, and a price per site that does not double after the first year.
- **The Small-Business Owner** (v1.0): Owns a heating and plumbing firm with twelve staff, a WordPress site a nephew built and twelve mailboxes on the same contract. Does not know what PHP is and does not want to learn it. When the site shows a warning or the mail stops, they need someone on the phone in German the same day, backups that the support can restore, and an invoice that matches the price on the website, year after year.
- **The Shop Operator** (v1.0): Runs a Shopware shop for coffee equipment with 4,000 orders a month and a Black Friday that brings ten times the usual traffic in one weekend. Every minute offline is lost revenue and a lost ad budget. Reads the resources per tariff, the caching and the SLA before the price, wants to scale for one weekend without moving the shop, and wants yesterday's database back within the hour if an update goes wrong.
- **The Freelance App Developer** (v1.0): Freelance developer who builds Laravel and Node apps for small clients and runs them for years afterwards. Deploys from Git, needs SSH, Composer, cron, queues and a current PHP version, and sets servers up from scripts rather than by clicking. Wants an API and a CLI that cover servers, snapshots, firewalls and DNS, resource limits stated in numbers, and a stack that runs anywhere else if the client ever moves.
- **The Data Protection Officer** (v1.0): External data protection officer for a group of medical practices and two law firms whose sites take appointment requests and contact forms. Reads the DPA, the subprocessor list and the certifications before anything else: where the servers and the backups are, which group company outside the EU can reach them, how customers are isolated from each other, and when data is deleted after the contract ends.
- **The Skeptic** (v1.0): Has seen "unlimited" storage end at an inode limit in the small print, "99.9 % uptime" with no credit when it was missed, "free daily backups" that only the support could restore for a fee, and a tariff from 1 € that cost eight times as much in the second year. Asks what the limits are in numbers, what the SLA pays, who can reach the data, and what it costs to take everything and leave.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Access request limit: 2 [S8]
- California privacy laws: CCPA 2018 · CPRA 2023 [S8]
- Call recording: yes [S8]
- DPA available: https://wpengine.com/legal/dpa/ · yes [S8]
- Dpf certification: yes · yes · yes [S8]
- Dpf dispute resolution: TRUSTe · yes [S8]
- Dpf oversight: U.S. Federal Trade Commission [S8]
- Financial incentives: yes · yes [S8]
- Financial info via processors: yes [S8]
- Geolocation collected: yes [S8]
- Global privacy control: Global Privacy Control · yes [S8]
- Legal bases: contract · legitimate interests · legal obligation · consent [S8]
- Nondiscrimination: yes [S8]
- Sale of personal info: no [S8]
- Shine the light: yes [S8]
- Targeted ads opt out: Cookie Settings link · Do Not Sell or Share My Personal Information link · yes [S8]

**Data**
- Retention: retained as long as needed for stated purposes, legal obligations, disputes, agreements [S8]

**Integrations**
- Docs: yes [S6]

**Legal**
- Copyright holder: WPEngine, Inc. [S1]
- Entity name: WPEngine, Inc. [S8]
- Job applicant notice: yes [S8]
- Privacy policy updated: August 31, 2026 [S8]
- Trademarks: 2013–2026 · WPEngine, Inc. [S3]
- Wordpress disclaimer: no · no [S3]

**Pricing**
- Essential enterprise custom: custom · no [S2]
- First year offer restriction: yes · yes · yes · yes [S2]

**Product**
- Agency partner program: yes [S1]
- Agency tools: built-in client management tools [S1]
- API playground: yes [S6]
- API type: REST · account · sites · environments [S6]
- Automatic updates: Core software, themes, and plugins are automatically updated and tested [S1]
- Backup restore: yes [S5]
- Business features: isolated resources, 24/7 chat & phone support, managed site migrations, 99.99% uptime SLA [S2]
- Controller processor roles: End-User Personal Data · WP Engine · customer [S8]
- Cookie policy URL: https://wpengine.com/legal/cookies/ [S8]
- Daily backups: Daily automated backups [S1]
- Developer features: Staging environments, Git/CI/CD workflows, and automated performance optimizations [S1]
- Developer tools: Git integration, SSH access, local push-to-production, Customer API [S1]
- Ecosystem tools: Smart Search AI · NitroPack · Advanced Custom Fields · WP Migrate · WP Offload Media · WP Offload SES [S2]
- Enterprise features: Security, compliance features, scalability and SLA-driven uptime [S1]
- Enterprise features: peak traffic options, dedicated account team, pre-launch technical review, priority 24/7 support, hands-on migration & onboarding, quarterly business reviews, managed WAF & DDoS, custom contract terms [S2]
- Essential features: daily automated backups, 24/7 chat support, WP/PHP/MySQL managed, free SSL and SSH [S2]
- Git support: yes [S5]
- Global edge security: yes [S5]
- Hosting API: yes [S5]
- Migration included: site migrations [S1]
- Migration plugin: yes [S5]
- Migrations: yes [S2]
- No sensitive data collection: no [S8]
- Performance features: Server-level caching, CDNs, and active monitoring [S1]
- Performance insights: yes [S5]
- Products offered: Managed Hosting Platform · Headless Platform · eCommerce Solution · Newsroom Platform [S1]
- Publishing ecommerce solutions: Publishing Solutions · eCommerce Solutions [S2]
- Security features: firewalls, malware scans, and automatic patches [S1]
- Smart plugin manager: Smart Plugin Manager [S1]
- Ssh gateway: yes [S5]
- Support 24 7: yes [S1]
- Switch threshold: traffic above 50k monthly visits [S1]

**Support**
- Article search: yes [S5]
- Bug bounty: https://wpeng.in/bugbounty/ · non-customers · Intigriti Bug Bounty Program [S3]
- Business channels: yes · yes [S2]
- Categories: Onboarding & Migrations · Sites & Hosting · Domains & Launch · Products & Features · Performance · Security · WordPress Help · Developer & Advanced · Accounts & Billing [S5]
- Developer docs: Developer docs resource [S5]
- Enhanced SLA exclusion: 99.95 [S7]
- Essential channels: yes [S2]
- Hours 24 7: log in to WP Engine account · chat · 24/7 [S5]
- Migration options: site migration plugin · build new site · manual migration [S5]
- Rights contact email: legal@wpengine.com [S8]
- Scope article: Support articles exist describing support channels and scope of support [S5]
- Security reporting customers: customers · support ticket [S3]
- SLA credit claim window: 30 [S7]
- SLA credit rate: 5 · 100 [S7]
- SLA maintenance windows: 4p-10p CT · 10p-4a CT · 8a-2p CT [S7]
- SLA update terms: SLA may be updated in WP Engine's sole discretion [S7]
- SLA uptime: 99.95 [S7]
- Sms opt out: reply STOP · yes [S8]

## Questions

### Is WP Engine European?

No. whats-best.ai classifies WP Engine as Rest of world.

### Where does WP Engine store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does WP Engine have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to WP Engine?

As of 2 Nov 2026, the panel rates [Kinsta (3.5/5)](https://whats-best.ai/software/web-hosting/kinsta), [Raidboxes (3/5)](https://whats-best.ai/software/web-hosting/raidboxes) and [Infomaniak Web Hosting (3/5)](https://whats-best.ai/software/web-hosting/infomaniak-hosting) highest among the other 14 Web Hosting products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Raidboxes](https://whats-best.ai/software/web-hosting/raidboxes) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [WP Engine alternatives](https://whats-best.ai/software/web-hosting/wp-engine/alternatives).

## What this page leaves out

- 23 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage (managed WordPress hosting): https://wpengine.com/de/managed-wordpress-hosting/ (checked 2026-11-01)
- [S2] Pricing page: https://wpengine.com/plans/ (checked 2026-11-01)
- [S3] Security / trust page: https://wpengine.com/security/ (checked 2026-11-01)
- [S4] Features page (agency partner programme): https://wpengine.com/agency-partner-program/ (checked 2026-11-01)
- [S5] Support page: https://wpengine.com/support/ (checked 2026-11-01)
- [S6] API documentation: https://wpengineapi.com/ (checked 2026-11-01)
- [S7] Service level agreement: https://wpengine.com/legal/sla/ (checked 2026-11-01)
- [S8] Privacy policy: https://wpengine.com/legal/privacy/ (checked 2026-11-01)
- [S9] Terms of service: https://wpengine.com/legal/terms-of-service/ (checked 2026-11-01)
- [S10] Data processing agreement (dpa): https://wpengine.com/legal/dpa/ (checked 2026-11-01)
- [S11] Subprocessor list: https://wpengine.com/legal/sub-processor-list/ (checked 2026-11-01)
- [S12] Security, backups & recovery — found from sitemap: https://wpengine.com/support/wp-engines-security-environment/ (checked 2026-11-01)
- [S13] Self-hosting / on-premises installation docs — found from the homepage: https://wpengine.com/self-hosting-costs/ (checked 2026-11-01)

---

Cite as: whats-best.ai, "WP Engine — Web Hosting", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/web-hosting/wp-engine

Corrections: https://whats-best.ai/correct/1298?target=page