WordPress powers around 43% of all websites on the internet. That sounds like the end of the debate — until you see the other number: over 90% of security flaws in the WordPress ecosystem come from plugins, not the system itself. And the average business site carries 20 to 30 of them.
The question isn't whether WordPress is good or bad. It's what pays off for a small business over three years. Let's go item by item, honestly.
What WordPress does excellently
To be fair: WordPress is the world's most widespread content system for a reason. If you publish blog posts yourself every week, you'll master it easily. The enormous choice of themes and plugins means almost anything can be assembled without a developer. And developers who know it are everywhere — you'll find a replacement easily.
For a portal with daily publishing, a magazine, or a business insisting on changing everything itself, WordPress is a perfectly reasonable choice. That's why we do it too — on request only, with mandatory maintenance.
The real price: plugins, patches, risks
Here's the math few people show. In 2025 alone, over 11,000 new flaws were reported across the WordPress ecosystem — a 42% yearly increase. More than half require no attacker login at all: an unpatched plugin on your site is enough.
That's why WordPress demands constant maintenance: core, theme and plugin updates, backups, monitoring. Professional maintenance runs from a few dozen to a few hundred euros a month. And when skipped, recovering from one serious incident routinely costs from €500 to several thousand — multiples of yearly maintenance. A site nobody touches slowly rots, then breaks exactly when you need it.
WordPress doesn't cost when you buy it. It costs every month after — through maintenance, or through risk.
What the modern approach offers
A modern site (like the ones we build with Next.js) works in reverse: pages are prepared upfront and served ready-made. No database to rot, no 25 plugins fighting each other, no monthly patches taking the site down mid-season.
The effects are measurable: around one second to load on a phone instead of 3–5, near-zero maintenance, and a three-year total that often ends up lower — even though the start costs a bit more. The only downside: frequent content changes need either us (small edits are in maintenance) or a simple CMS like Sanity, which we add when a client truly needs it.
How to decide in 5 minutes
Answer three questions. If all three are "yes" — WordPress: do you publish content multiple times a week, does someone in-house change the site daily, do you need a specific plugin that only exists for WP? In every other case — business presentation, services, price list, gallery, contact — a modern site is faster, calmer and cheaper over time.
Already have WordPress and it works for you? No need to tear it down. We maintain it — or migrate it to modern without losing texts and Google rankings. Details are on the WordPress on request page, and the full modern offer sits in the Business package.