No PHP, no database
Nothing on the server runs code for your visitors, so there are no core, plugin or PHP updates to chase.
International Australia Deutsch Bahasa Indonesia
New service for Australia
Move your WordPress site to GitHub / GitLab Pages
No PHP on the server means no PHP security holes, and hosting on GitHub Pages or GitLab Pages costs you nothing.
We turn your WordPress site into a fast static website with the same content, the same look and the same addresses, and we keep it up to date for you at a low cost with the help of AI coding agents.
Why now
PHP2Shell: critical holes in PHP itself
On 21 October 2026 the PHP project fixed two critical remote code execution vulnerabilities, known together as “PHP2Shell”. They are not in a plugin or a theme; they are in PHP, the language WordPress runs on. Every WordPress site on an unpatched PHP version is exposed.
What is known
- CVE-2026-109618 and CVE-2026-109619, both rated Critical (CVSS v4.0 9.2) by the PHP security team.
- A single request, without logging in, can trigger the attack before any WordPress code runs.
- Researchers showed the attack against the latest WordPress container images, and showed that server memory — with passwords and keys — can be read.
- Attack attempts were seen before the public disclosure, and hosting providers have reported attacks since.
- Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. PHP 8.1 and older no longer receive official releases.
Sources: Qualys, Help Net Security, Patchstack, Tenable.
Running WordPress today? Patch first.
Update PHP on your server, or ask your hosting provider to do it, today. That is the immediate fix.
It will not be the last PHP or plugin vulnerability, though. A static site removes PHP from your web server altogether, so the next one does not concern your website.
Why a static site
Less to attack, less to maintain
Most company sites, blogs and portfolios do not need a program running on the server for every visitor. A static site is a set of ready-made pages, served as they are.
Free hosting
GitHub Pages and GitLab Pages host your site free of charge, with HTTPS and your own domain name.
Fast pages
Ready-made files load quickly and are delivered through a content delivery network close to your visitors.
Every change recorded
Your site lives in a Git repository. Every change is versioned and can be undone.
What the migration includes
- Your pages, posts, images and files, exported from WordPress
- Your design rebuilt as static HTML or with a static site generator
- Your addresses kept, with redirects where a URL has to change
- Page titles, descriptions and a sitemap for search engines
- Your own domain name with HTTPS
- Automatic publishing on every change, on GitHub Pages or GitLab Pages
- Contact forms and comments replaced with options that work on a static site
How it works
- Assess. We look at your WordPress site, its plugins and its features, and tell you what the migration involves and costs.
- Export. Content and media are taken out of WordPress.
- Rebuild. The site is rebuilt as a static site in a Git repository.
- Review. You check the new site on a preview address before anything changes for your visitors.
- Go live. Your domain points to GitHub Pages or GitLab Pages, and the old WordPress server can be switched off.
Costs
Paid migration, free hosting, affordable updates
One-time
Migration
$200 AUD 50% off
$100 AUD / website
Promo until 31 December 2026
A one-time price per website for moving your site. We assess your site first, with no obligation.
Free of charge
Hosting
$0
On GitHub Pages or GitLab Pages
GitHub Pages and GitLab Pages host static sites at no cost, so the monthly hosting bill for your website goes away.
Low-cost
Updates
$100 AUD 50% off
$50 AUD / update
Promo until 31 December 2026
New pages, text changes and other adjustments on request, at a low price: our AI coding agents do the work and our engineers review it. See how we work with AI.
Is it right for your site?
A good fit
- Company and organisation websites
- Blogs and news pages
- Portfolios and landing pages
- Documentation and event sites
Talk to us first
- Online shops (for example WooCommerce)
- Member areas and user logins
- Sites that depend on heavy custom plugins
These need a program on a server. We will tell you honestly which parts can become static and what else is needed.
FAQ
Frequently asked questions
Will my Google ranking drop?
No. We keep your page addresses as they are, so links and search results keep working. Where an address has to change, we set up a redirect: a real 301 redirect on GitLab Pages or through Cloudflare (free), or a redirect page that search engines follow on GitHub Pages.
What happens to comments and search?
They are replaced with free tools that work on a static site, for example giscus for comments and Pagefind for search. Existing WordPress comments can be kept and shown on their posts.
And contact forms and newsletters?
Forms are sent through a form service such as Formspree, or replaced with email and WhatsApp buttons. Newsletter sign-ups use the embedded form of your mailing service.
Which sites are not suitable?
Sites with member logins, booking systems or online shops with many products need a server. We tell you during the free assessment, before you pay anything.