Insights · Websites

WordPress or serverless

We moved from WordPress to serverless. Here is the honest comparison: where serverless wins, the trade-offs it brings, and when WordPress is still the right call.

We rebuilt this site, and several of our clients', from WordPress to a serverless setup. This is the honest version of why, including the parts that are genuinely better on WordPress, because "it depends" is the truthful answer and we would rather you make the right call than the flattering one.

First, what "serverless" actually means here, because the word does more marketing than explaining. Instead of a server running WordPress and querying a database on every page load, the site is built once into plain, fast files that sit on a global content network, and the few things that genuinely need to run, like a contact form, the chatbot or a login, run as small functions that spin up only when called. There is no always-on server to keep patched, no database to harden, and no WordPress admin login to brute-force.

Where serverless wins

  • Speed. Nothing is thinking on each request. The page is already built and served from the edge, close to the visitor. It is fast by default, not fast after three caching plugins. Speed is a feature, and here you get it for free.
  • A much smaller attack surface. A typical WordPress site is a core application, a theme and ten to thirty plugins, each one a door somebody else has to keep locked. A serverless site has almost none of that machinery exposed. There is far less to attack because there is far less running.
  • Cost and reliability. No server sitting idle and billing you around the clock. Static files are cheap to host and very hard to knock over. A traffic spike that would fell a shared-hosting WordPress site is a non-event on a content network.
  • No plugin sprawl. Every feature is built to fit rather than bolted on. Nothing slows the site down that you did not choose to add.

The honest trade-offs

Serverless is not free of downsides, and we would be a poor studio to pretend otherwise.

  • It takes more custom development. WordPress lets you install a plugin in five minutes. Serverless means someone actually builds the feature. Historically that made bespoke work slow and expensive, which is the single biggest reason WordPress won the web. That maths has changed. With AI-assisted development the turnaround on custom work is now a fraction of what it was, and that is what makes serverless practical for far more projects than it used to be.
  • Security becomes your job, not a plugin's. This is the important one, and it cuts both ways. Because WordPress runs such a large share of the web, holes are found and patched constantly, as long as you actually apply the updates. On serverless there is far less to exploit, but no plugin developer is going to push you a fix, because there are no plugins. So the vigilance moves to you: keeping the few dependencies current and running your own regular security checks and penetration testing, rather than trusting a plugin ecosystem to do it for you. A smaller surface is only safer if someone is still watching it, which is exactly what a support and care plan is for.
  • It needs a developer. There is no giant marketplace of drag-and-drop themes and one-click extensions. That is freeing if you have someone who builds, and limiting if you were relying on doing it all yourself with plugins.

Where WordPress still makes sense

Plenty of the web should stay on WordPress, and we will tell you if yours is one of them. If a non-technical team publishes content every day and needs a familiar editor, if you lean heavily on a particular plugin ecosystem, or if you have no development support at all, WordPress's ubiquity is a genuine strength. The whole world building on one platform means endless documentation, a plugin for almost everything, and constant security patching. That is a real safety net, provided the updates actually get applied.

How we decide

We do not start from the platform. We start from what the site has to do and who has to run it, then choose the tooling that fits. For a brochure or lead-generation site where speed, security and low running costs matter and the content changes now and then, serverless is usually the better home. That is the call we made for KC Landscapes, whose website and back-office we rebuilt this way. For a busy content operation with daily non-technical publishing and a heavy plugin habit, WordPress can still be the right answer.

For us the benefits of moving were obvious and the drawbacks few, but "few" is not "none", and the biggest one, owning your own security, is a responsibility rather than a footnote.

Wondering which side of that line your site sits on? Book a discovery call and we will give you the honest answer, not the one that sells you the bigger project.

Common questions

Is a serverless website more secure than WordPress?

It has a much smaller attack surface, with no always-on server, database or plugin stack to exploit, so there is far less that can go wrong. But smaller is not zero. WordPress benefits from constant, community-wide patching; serverless benefits from having very little to patch, but the responsibility for checking it sits with you rather than a plugin developer. Both can be secure. They get there differently.

Does going serverless mean I can no longer edit my own content?

No. You can still edit content, it is just handled differently, often through a lightweight editor or a structured content source rather than the WordPress dashboard. If daily self-service publishing by a non-technical team is central to your site, we factor that in when choosing the approach.

Isn't custom development slower and more expensive than installing plugins?

It used to be, and that is why WordPress became the default. AI-assisted development has cut the turnaround on bespoke work dramatically, which is what makes a serverless, built-to-fit site practical for many more businesses than it was a few years ago.

Do I still need ongoing maintenance if there is no server?

Yes, just a lighter and different kind. There is no server or plugin stack to patch every week, but dependencies still need keeping current and the site still benefits from regular security checks and penetration testing. That ongoing vigilance is what a support and care plan covers.

If you are weighing up a rebuild, book a discovery call and we will tell you honestly whether serverless is the right move for your site.

NM
Nathan McDonald · Founder

Nathan McDonald is the founder of Smarter Sites, a digital studio in Northwich, Cheshire. He has spent 15 years in web development and digital marketing, and now builds the websites, portals and automation that growing businesses run on. More about the studio →

Want to talk it through?

Book a 30 minute discovery call and ask us directly.