Welcome to the September 2025 edition of FavoHost Blog Updates. This month, we’re shipping performance boosts across our stack, simplifying everyday management in the dashboard, tightening security defaults, and sharing a transparent look at what’s coming next. Whether you manage a single WordPress site or a fleet of client projects, these improvements are designed to help you move faster and with more confidence.
Table of Contents
TL;DR — What’s New
- Performance: Expanded NVMe storage across more plans, HTTP/3 + Brotli enabled network-wide, smarter caching for dynamic sites.
- Security: 2FA prompts for all accounts, improved WAF rulesets, automated malware remediation, and per-site SSH keys.
- Backups: Daily snapshots with improved retention, point-in-time restore for databases, and clearer, self-service restores.
- Dashboard: Cleaner usage charts, quicker site actions, and guided wizards for SSL, staging, and domain/DNS setup.
- WordPress tools: One-click staging sync both ways, safe auto-updates with rollback, and plugin/theme health checks.
- Billing: Simpler invoices, usage breakdowns, and clearer renewal notices to avoid surprises.
- Roadmap: Managed WooCommerce option, status page enhancements, API/CLI access (beta), and reseller quality-of-life upgrades.
Why These Changes Now
Your feedback has been consistent: you want predictable performance, safer defaults, and less friction in day-to-day tasks. We focused on changes that deliver immediate value while laying groundwork for bigger things—like a unified customer API and deeper WordPress automation—arriving later this year.
Performance & Speed Upgrades
NVMe Everywhere (More Plans)
We’ve expanded NVMe SSD storage to additional shared and lifetime plans. NVMe’s higher IOPS and lower latency mean your database queries complete faster and page rendering stays snappy during traffic spikes.
What you’ll notice:
- Faster time-to-first-byte (TTFB), especially on dynamic pages.
- More consistent performance under bursty traffic for content and commerce sites.
- Reduced variance during backup windows due to smarter I/O scheduling.
HTTP/3 + Brotli Enabled by Default
Our edge now negotiates HTTP/3 where supported and uses Brotli compression for compatible user agents. Together, these upgrades improve performance on modern browsers and spotty mobile networks.
Tip: No action required—benefits apply automatically.
Smarter Caching for Dynamic Sites
We’ve tuned server-level cache rules to better respect sessions and cart states, reducing accidental cache hits on logged-in or checkout pages. Static assets receive longer cache durations, while content invalidation triggers more predictably after edits or deploys.
Good to know: WordPress users can still manage page cache behavior with our plugin, but the new defaults should “just work.”
Reliability & Uptime
Network Redundancy Improvements
We added additional upstream paths and refined failover thresholds to reduce the chance of localized packet loss affecting your sites. This also makes maintenance windows quieter and recovery faster when an upstream hiccups.
Health Checks & Auto-Healing
Service health checks are more granular (per-site, per-service). If a worker crashes or a PHP pool becomes saturated, orchestration automatically replaces or restarts components without waiting for manual intervention.
Security Enhancements
Two-Factor Authentication (2FA) Nudges
All account owners and admins now see persistent 2FA prompts until enabled. You can use TOTP apps or security keys. For teams, owners can require 2FA for collaborators.
Why it matters: Account takeover is one of the most common attack vectors. This change raises the baseline for everyone.
WAF Rules & Bot Filtering
We refreshed our Web Application Firewall rulesets and hardened rate-limits for abusive bot traffic. You’ll see fewer false positives and more precise blocking of credential stuffing and comment spam.
Automated Malware Remediation
Our scanner now quarantines suspicious files and notifies you with a diff of what changed. You can review and restore from quarantine or kick off a clean reinstall of core files from the dashboard.
Per-Site SSH Keys & Access
Generate unique SSH keys per site and rotate them without downtime. Access logs are clearer, with per-key attribution so you always know “who deployed what.”
Backups & Restore: Faster, Clearer, Safer
Daily Snapshots + Retention
- Files: Daily snapshots with multiple restore points.
- Databases: Point-in-time recovery for supported engines, minimizing data loss after accidental edits or plugin issues.
Self-Service Restores
Restores are now guided and granular:
- Choose a restore point.
- Select files, database, or both.
- Preview what will change.
- Restore in minutes.
Pro tip: You can restore to a staging site first to validate before promoting live.
Dashboard & Control Panel Improvements
Cleaner Overview
The main dashboard now highlights the metrics that matter:
- Resource usage (CPU, RAM, storage, bandwidth) with trend lines.
- Top sites by traffic and any outliers needing attention.
- Quick actions: clear cache, open file manager, run backup, or open staging with one click.
Guided Wizards
We added step-by-step flows for:
- Free SSL certificates with auto-renewal.
- Domain & DNS setup, including common registrar presets.
- One-click staging creation with optional database masking for privacy.
Notifications You Can Trust
Less noise, more signal. We decluttered low-value alerts and introduced context—what happened, why it matters, and what to do next—so you can act quickly without digging.
WordPress: Safer Updates, Sandboxed Staging
Safe Auto-Updates with Rollback
Enable auto-updates for core, themes, and plugins with automatic rollback if a failure or fatal error is detected. If a rollback occurs, you’ll get a summary of what went wrong.
Staging Sync (Both Ways)
You can now push staging to production or pull production to staging, with a clear checklist:
- Database diffs and merge notes.
- Media synchronization with deduplication.
- Optional maintenance mode toggle for seamless swaps.
Plugin & Theme Health Checks
We flag abandoned plugins, known vulnerabilities, and heavy hitters that slow down render time. You’ll see suggestions such as “replace with X” or “enable lazy-load” to recover performance.
Developer Experience
Git-Powered Deploys
Connect your repo and deploy on push to main or a selected branch. Use build hooks to run Composer, npm, or custom steps. Each deploy creates a restore point you can roll back to instantly.
Modern Runtimes
Switch PHP versions per site (with 8.4 available) and use updated Node.js/Python runtimes on supported plans. Our CLI tools make it easy to clear caches, run cron jobs, and tail logs.
Environment Secrets & Config
Store environment variables securely and expose them only to the sites that need them. Rotate values without redeploying.
Billing & Account Management
Clearer Invoices & Usage
Invoices now include line-item breakdowns and a monthly usage summary. You’ll see upcoming renewals and can opt into reminders to reduce last-minute surprises.
Payment Flexibility
Add multiple payment methods, set a preferred default, and assign methods to specific services (useful for agencies with client pass-through billing).
Team Roles & Access
We refined roles so you can grant read-only, billing-only, or site-specific access. Activity logs show who changed what, and when.
Customer Support & Education
Faster Paths to Answers
- Contextual help inside the dashboard surfaces articles and quick actions relevant to the page you’re on.
- When you open a ticket, diagnostic data can auto-attach (opt-in), reducing back-and-forth and speeding resolution.
Knowledge Base Expansion
We’ve added more step-by-step tutorials for common tasks—migrations, SSL, email routing, WordPress hardening, and troubleshooting performance regressions.
Sustainability & Responsibility
While performance is crucial, so is footprint. We’re continuing to optimize energy usage with efficient hardware and partnering with data centers that support renewable energy programs. You’ll see more reporting on the efficiency side as we move into Q4.
What You Need to Do (If Anything)
Most improvements are automatic. Here are optional actions to get the most out of them:
- Enable 2FA for all team members (recommended).
- Review auto-update settings for WordPress and enable rollback-protected updates.
- Create or refresh staging for major changes before pushing live.
- Set up per-site SSH keys and retire any shared keys.
- Check backup retention and confirm your preferred restore defaults.
- Tune cache rules only if you run highly dynamic apps; otherwise, enjoy the upgraded defaults.
- Clean up unused plugins/themes after reviewing the health check suggestions.
Roadmap: What’s Next (Late 2025 – Early 2026)
Timelines can shift based on feedback and testing, but here’s what’s actively in development:
Managed WooCommerce (Preview)
Optimized object caching, isolated workers for checkout, and store diagnostics tailored for commerce workloads.
Public Status Page Enhancements
More granular component reporting, historical incident views, and proactive subscriber alerts for maintenance windows.
Customer API & CLI (Beta)
Programmatic access to common actions—clear cache, trigger backup, rotate keys, and deploy hooks—plus a lightweight CLI to script routine tasks.
Email & Deliverability Options
For customers who run transactional mail, we’re improving DNS guidance, DKIM/SPF helpers, and health checks that catch misconfiguration early.
Frequently Asked Questions
Q: Will these changes affect my current pricing?
A: No surprise changes. If a plan adjustment is required for a feature (e.g., expanded NVMe tiers), you’ll see options in your dashboard before opting in.
Q: Do I need to migrate to new servers to benefit from NVMe?
A: Many plans are already on NVMe. Where a move is beneficial, we’ll provide a guided, no-downtime migration path.
Q: Can I opt out of safe auto-updates for WordPress?
A: Yes. You can keep manual control per site or per plugin/theme and still benefit from rollback logic when you choose to update.
Q: What if 2FA isn’t feasible for a contractor?
A: You can assign read-only or site-specific roles and use per-site SSH keys with expiration to limit access windows.
Q: How do I report a bug or request a feature?
A: Use the Feedback panel in your dashboard or open a support ticket with the “Feature request” category so it routes to the right team.
How You Can Help Shape What’s Next
Your feedback drives our roadmap. If you’re interested in beta testing new features like the API/CLI or Managed WooCommerce, opt in from your dashboard’s Labs section. Share real-world scenarios—deploy workflows, staging habits, traffic patterns—so we can fine-tune the experience.
Thank You
From solo builders to agency teams, your input keeps FavoHost sharp and focused on what matters: speed, security, reliability, and low-friction workflows. We hope this month’s updates make your day-to-day easier. We’ll be back next month with more FavoHost Blog Updates and deeper dives into the API and staging improvements.
Built for today. Ready for what’s next.
