Domain registrar GoDaddy claims managed WordPress can handle daily attack protection
Domain registrar GoDaddy stated that WordPress sites face daily bot login attempts, vulnerability scans, malware, and malicious traffic, with the challenge not being awareness of attacks but keeping up with them. It listed that a complete configuration should include a web application firewall, malware scanning, daily backups, plugin vulnerability checks, and distributed denial-of-service protection, claiming that managed WordPress handles these matters in the background, with the basic package available at up to 20% off in the first year, subject to site-specific exceptions.
Their hosting products include automatic installation and core updates, daily backups for the past 30 days, lifetime integrated SSL, restricted file access, web application firewall, automatic malware scanning and removal, as well as SFTP and database management access. As of June 2026, Patchstack vulnerability detection has been integrated: after new vulnerabilities are disclosed for plugins or themes, protection is matched according to site software components without requiring site owners to modify code. Reviews indicate that some packages come pre-installed with the Sucuri firewall, while distributed denial-of-service protection may only be available from higher-tier packages.
WordPress still powers about 40% of websites globally. Security vendors report that on just the Wordfence side, approximately 65 million brute force attempts can be recorded daily, with about 97% being fully automated; among sampled scans, 52.8% of sites run at least one known unpatched plugin. Days after the disclosure of the core remote code execution chain in June 2026, Patchstack intercepted over 65,000 exploitation attempts from more than 1,500 addresses. Exposed login pages, user enumeration, and missing security headers remain common in random checks.
The buyers are small to medium site owners looking to shift security from assembling plugins to a monthly fee, while the sellers are platforms bundling domain and hosting sales. Funds are shifting from one-time plugin licenses to hosting renewals; the first-year discount reduces customer acquisition costs to subsequent full prices. The beneficiaries are hosting providers that can make firewalls and backups default items, while the pressured parties are shared hosting users maintaining their own plugin lists and automated attackers profiting from site owners forgetting to update.
The hosting plan restricts multi-site networks and prohibits certain plugins that have been removed due to vulnerabilities, duplicate functions, or performance issues. Promotions do not include a permanent 20% discount.
Source: Public information
ABAB AI Insight
GoDaddy uses domain entry to lead site owners into hosting bills, with security as an attachment to increase renewal rates. After reaching a consent order with the Federal Trade Commission regarding its security practices, the company made Sucuri firewall, multi-factor authentication for customer service, and third-party audits standard, then used Patchstack to shift the responsibility for "known unpatched vulnerabilities" from site owners to the platform. The 20% off basic package serves as a customer acquisition funnel, not a security pricing strategy; the real profit lies in the second year at full price and upgrades to tiers that include denial-of-service protection.
The capital path is to consolidate scattered Wordfence, backup plugins, and SSL certificates into a single hosting subscription. With WordPress holding a 40% share, scanning costs approach zero, and attackers use leaked passwords and cloud hosts to conduct millions of scans, with a single site averaging dozens of login attempts per day to cover costs. Hosting providers intercept the same batch of bots using edge firewalls, with marginal costs lower than each site owner installing their own plugins. Patchstack sells to Hostinger, DigitalOcean, and Cloudways simultaneously, indicating that vulnerability intelligence has become a wholesale commodity in the hosting industry.
Similar to how Cloudflare offers DDoS protection as a free tier and then sells zero trust, and how WP Engine and Kinsta use higher-priced hosting for developer tools, GoDaddy is in the "controlling the default stack for small to medium site owners" phase, not in a performance hosting expansion period. A failed comparison is cheap shared hosting that defaults to allowing any plugins, which can be breached by a single core vulnerability within hours.
Structural changes belong to technological substitution. Site security has shifted from site owners assembling plugins to hosting providers automatically sealing vulnerabilities at the edge based on software components. The mechanism is: after attacks become fully automated, manual updates are always a step behind; whoever first identifies the intersection of vulnerability numbers and site plugin lists can sell protection before patches are released. The larger the share of open source, the more cost-effective this wholesale protection becomes, and the less valuable the security labor of individual site owners.
ABAB News · Cognitive Laws
After attack automation, security can only be sold as a subscription
40% of websites use the same login page, making scanning costs nearly zero
The first-year discount buys renewal rights, not permanent protection