HOSTING on WordPress.com
I have been running this site on WordPress.com for a while now, and it keeps getting better. Between the managed hosting infrastructure, the rock-solid security, the speed optimizations baked right in, and the exciting direction WordPress itself is heading, I wanted to take a moment to share what I am running and why I think it is a great setup for anyone serious about their site.
I recently updated my blog to run WordPress 7.0 RC4 and upgraded to PHP 8.4, and I have been genuinely impressed with both. Let me walk through what WordPress.com offers as a host, what is new in WordPress 7.0, and what PHP 8.4 brings to the table.
Hosting My Site on WordPress.com
One of the biggest decisions any site owner makes is where to host. I chose WordPress.com because it is a fully managed hosting platform built by the same people who are deeply embedded in WordPress core development. That means the infrastructure is tuned specifically for WordPress, not bolted on as an afterthought.
Here is what comes with the hosting out of the box, with no extra plugins or configuration needed:
- Automatic WordPress and PHP updates so the site is always running a current, secure stack
- Built-in caching to reduce server load and serve pages quickly
- A global Content Delivery Network (CDN) that distributes content across servers worldwide, reducing load times for visitors regardless of where they are located
- Automated burst scaling so the site never slows down or crashes during traffic spikes
- Automatic backups to multiple data centers for redundancy
- 99.999% uptime, with real-time failover to a second geographic region if anything goes wrong
- Developer tools including SFTP, SSH, WP-CLI, Git commands, and GitHub Deployments
- Control over your PHP and WordPress versions through the server settings panel
The server settings panel is particularly useful. You can switch between supported PHP versions and WordPress versions directly from your dashboard, which is how I was able to move to PHP 8.4 and test WordPress 7.0 RC4 without any friction.
Speed and Performance
Site speed matters for user experience and for search rankings, and WordPress.com handles the heavy lifting on the infrastructure side. They handle it all at the host level so you don’t have to:
- Optimized host servers tuned specifically for WordPress workloads
- A built-in CDN that also serves images in WebP format, reducing image file sizes by up to 34% without any loss of quality
- Caching mechanisms that serve static content and reduce the number of database queries needed per page load
- Automated burst scaling that keeps the site running smoothly even during unexpected traffic surges
- Fast, speed-optimized themes built and maintained by the WordPress.com team
Because caching, CDN, and speed optimization are all baked into the platform, I do not need to install separate plugins for those functions. That keeps the plugin count lean, which itself is a performance win.
Security
Security is the other area where managed hosting really shines, and WordPress.com takes a comprehensive approach to it. You can read about their full security stack on the WordPress.com security hosting page, but here is a summary of what is included on every site:
- Web Application Firewall (WAF) that blocks millions of malicious requests daily, including DDoS attacks, and filters suspicious IPs and malicious bots before they reach your site
- Free SSL certificate and HTTPS enabled automatically on every site, improving trust for visitors and providing an SEO benefit
- Daily malware scanning that checks for dangerous plugins, themes, and other vulnerabilities and fixes issues automatically when found
- Activity log that records every change to the site so you can always see who did what and when
- Automatic backups to multiple data centers for disaster recovery
- Brute force attack protection through continuous monitoring of suspicious login activity
- Two-factor authentication support, including WebAuthn physical and virtual security keys
- Automatic WordPress software updates so the site is always protected against known exploits and security vulnerabilities
Importantly, none of this requires any security plugin. WordPress.com handles it at the infrastructure level, and in fact some security plugins can interfere with their built-in processes. Less plugin bloat, more protection. That is the kind of trade-off I am happy to make.
For more detail on keeping your site safe, the WordPress.com security support documentation is a solid reference.
Running WordPress 7.0 RC4
This week I updated my blog to WordPress 7.0 Release Candidate 4, the last pre-release milestone before the final 7.0 launch scheduled for May 20, 2026. This is a major release, and it merges features from Gutenberg plugin versions 22.0 through 22.6 into WordPress core. It is one of the most feature-rich releases in recent memory.
The WordPress 7.0 Field Guide has comprehensive technical notes, but here are the highlights that I am most excited about:
New Blocks: Breadcrumbs and Icons
Two new blocks land in core with 7.0. The Breadcrumbs block can be placed once in a theme header and automatically reflects the site’s full navigation hierarchy. Developers can use new filters to add, remove, or modify breadcrumb trails and control which taxonomies appear. The Icons block lets you add SVG icons from a curated library, backed by a new server-side SVG Icon Registration API, making it much easier to use consistent iconography across a site without relying on a separate plugin.
Redesigned Admin Interface
The WordPress admin is getting a visual refresh in 7.0. The Posts, Pages, and Media screens have been redesigned using DataViews, which brings a more modern and consistent management interface to the most-used areas of the dashboard. The admin redesign uses a new design system with components and design tokens throughout, making it feel much more cohesive.
The Connectors API and AI Client
One of the most significant architectural additions is the Connectors API, a new framework for registering and managing connections to external services. Site owners can manage API keys from a central Settings menu, and three connectors ship out of the box: OpenAI, Anthropic, and Google. Any plugin built against the AI Client can use those connections automatically, meaning you configure your API keys once and everything just works. WordPress 7.0 also ships the MCP Adapter and a JavaScript version of the Abilities API, making this a meaningful platform for AI-powered tools going forward.
Block-Level Notes, Visual Revisions, and Client-Side Media Processing
- Block-level Notes have been expanded, making it easier to leave comments and annotations directly on blocks in the editor
- A visual revisions screen gives a cleaner, more intuitive way to browse and restore previous versions of posts and pages
- Client-side media processing enables browsers to handle certain media operations locally, reducing round trips to the server
This is a test environment for me right now, so I am not running RC4 in production. But the final release is just days away, and I am looking forward to it.
Running PHP 8.4
Alongside WordPress 7.0, I switched this site to PHP 8.4, which was released in November 2024. PHP 8.4 is a substantial update that brings real language-level improvements for developers, and it runs noticeably well. On WordPress.com, switching PHP versions is straightforward through the server settings in your site dashboard.
Here are the PHP 8.4 features that stand out:
Property Hooks
Property hooks let developers define custom logic directly on a class property for get and set operations, replacing the need for separate getter and setter methods. This reduces boilerplate significantly and makes class definitions cleaner and more readable.
Asymmetric Visibility
Properties can now have different visibility scopes for reading versus writing. The most common pattern is a property that is publicly readable but can only be modified from within the class itself, without needing extra accessor methods.
Method Chaining on New Instances
You can now chain methods directly on a new expression without wrapping it in parentheses first. This is a small ergonomic improvement that makes certain patterns noticeably cleaner to write.
Enhanced DOM API with HTML5 Support
The DOM parser has been updated with comprehensive HTML5 support through a more capable parsing library. New opt-in DOM classes live in a dedicated PHP namespace and bring the PHP DOM API much closer to what modern web development expects.
New Array Functions and Other Additions
array_find()returns the first element in an array for which a callback returns true, making common search patterns much more concise- BCMath object-oriented API with operator overloading for arbitrary precision math
- Multibyte trim functions:
mb_trim(),mb_ltrim(), andmb_rtrim()for working correctly with multibyte character encodings - New rounding modes for the
round()function, providing clearer and more predictable rounding behavior - Additional HTTP verb support for
$_POSTand$_FILES, making it easier to handle non-standard request methods
Final Thoughts
If you are looking for a hosting platform that takes the operational concerns off your plate so you can focus on building and writing, WordPress.com is worth a serious look. The combination of managed infrastructure, built-in security, global CDN performance, and the ability to run cutting-edge versions of WordPress and PHP gives you a genuinely capable and modern setup without the headache of managing it all yourself.
WordPress 7.0 is shaping up to be one of the most impactful releases in years, and PHP 8.4 is a solid foundation to run it on. I am looking forward to the final WordPress 7.0 release on May 20th and what the 7.1 cycle brings next.