Highlights
- A WordPress site that "costs nothing" runs on a stack of paid parts: managed hosting from $336 a year, a page builder from $60, an SEO plugin at $118.80, a forms plugin that renews at $399, and a contractor when something breaks.
- WordPress launched in 2003 and still works the 2003 way: core, theme, and plugins, each a separate codebase you owe updates to. Patchstack counted 11,334 new WordPress vulnerabilities in 2025, 91% of them in plugins.
- A site built on Bolt.new is the front end and back end you described, hosted, with no plugin stack. You change it by asking. 93% of the small business owners building on Bolt aren't professional developers.
- What you give up: pixel-identical design, plugin parity, and a few site types that still belong on WordPress.
- How a move works today, in five steps, including the one that protects your Google rankings.
Elementor Pro, $60 a year. Yoast SEO Premium, $118.80. WPForms Pro, $399 when it renews. WP Engine's smallest hosting plan, $336. None of that buys a website. It buys the right to keep one standing.
The money is the smaller cost. The larger one is attention: the update prompts you ignore, the plugin that stopped working after the last one you didn't ignore, the afternoon you lost finding out why. That cost is the one that makes owners stop logging in, which is how a site ends up three years out of date with a contact form that broke in March and told no one.
What does a WordPress site cost to keep running?
WordPress is free. The stack that makes a WordPress site work for a business is not, and the labor to run that stack is the biggest line. From the vendors' own pricing pages in October 2026: WP Engine's entry plan is $28 a month billed annually, or $336 a year (WP Engine, 2026). Elementor Pro, the page builder on more than ten million sites, starts at $60 a year (Elementor, 2026). Yoast SEO Premium is $118.80 a year per site (Yoast, 2026). WPForms Pro is $199.50 the first year and $399 at renewal (WPForms, 2026).
Then the people. GoodFirms surveyed more than 300 web development companies in 31 countries for its 2026 cost report and found that 58% charge monthly retainers between $500 and $3,000, with US, UK, and Canadian hourly rates between $50 and $100 (GoodFirms, 2026). A $500 retainer is $6,000 a year to keep a site that isn't changing.
The other end of the range is real, too. A lean site on shared hosting with free plugins and no contractor can run under $100 a year. That owner isn't paying in money. They're paying in the Tuesday nights spent reading plugin changelogs, and in the updates they skip because the last one broke the slider.
Why does WordPress need so much maintenance?
Because of how it's built. WordPress shipped on May 27, 2003, and the model hasn't changed since (WordPress.org, 2026). A site is a core, a theme, and a stack of plugins. Each is a separate codebase from a separate author. Each updates on its own schedule. Each is an attack surface whether you use it or not, and a typical business site carries a stack of them.
The numbers follow from the architecture. Patchstack, a WordPress security company, counted 11,334 new vulnerabilities across the WordPress ecosystem in 2025, up 42% from 2024 (Patchstack, 2026). Of those, 91% were in plugins and 9% in themes. WordPress core itself accounted for six. Of those, 46% had no patch available when they were made public, and for the most targeted bugs the median time from disclosure to first exploit was five hours.
So the owner's rational response, which is to stop touching the site, is the one that leaves it exposed. The week a PHP bug took WordPress sites offline showed the other half of the problem: when the bug is below WordPress, in PHP itself, the owner can't fix it at all. Only the host can. On a stack you assembled from parts, you're responsible for parts you can't reach.
What is the alternative to WordPress for a small business?
Bolt.new, an AI app builder, is a WordPress alternative for small business websites as of 2026. You describe the site in plain language. The agent builds the front end and a Node.js back end with a database already attached, Bolt hosts the result, and you change it by asking. There is no theme to buy, no plugin directory to shop, and no separate hosting account to manage. Bolt's documentation puts it in one line: hosting, domains, and databases in one place, so you don't need to create extra accounts or connect outside services (Bolt.new, 2026).
The site is what you asked for and nothing more. A booking form is a booking form the agent wrote for your site, not a plugin with 40 settings you'll touch three of. That shape is the whole difference. WordPress was designed in 2003 for a person to assemble parts. Bolt was designed for a person to describe an outcome.
It also means the person who maintains the site is you, without the job title. You don't hire someone to change the hours on the homepage or add a page for the new service. You ask. 93% of the small business owners building on Bolt.new aren't professional developers (Bolt.new, 2026), which is the point of the thing.
The price: Bolt's Free plan is $0 and includes hosting on a bolt.host address; Pro is $18 a month, or $216 billed annually, and adds your own domain (Bolt.new, 2026). Hold that next to the stack above.
What do you give up when you leave WordPress?
Four things, and they're real.
- Pixel-identical design. A rebuild on Bolt matches your content and your intent, not your theme. If you love your current design down to the pixel, you'll be describing it, not importing it.
- Plugin parity. There's no plugin directory. The agent builds the feature instead, which is faster for a contact form or a gallery and slower for something like a paid membership paywall.
- A few site types. Stores that need WooCommerce's checkout, order history, and payment plugins, membership and gated-content sites, and multilingual sites still belong on WordPress in 2026.
- The contractor ecosystem. Thousands of people fix WordPress for a living. A Bolt site's maintainer is you, by asking. For most owners that's the relief; for some it's the adjustment.
One more that's yours to protect either way: your search rankings follow your URLs. Move without redirects and Google loses the thread. Step four below handles it.
How do you move a website from WordPress to Bolt.new?
Five steps, and for a brochure or service site the whole thing is an afternoon.
- Inventory the site. List every page people visit, every form, and every integration (booking, payments, newsletter). Google Search Console's Pages report shows which URLs earn traffic and need to survive.
- Export the content. In WordPress, Tools, then Export, gives you every page and post in one file. Download the media library from your host's file manager or a backup.
- Describe the site to Bolt. The business, the pages, the forms, the look. Paste the content in, upload the images, and ask for changes until it's right.
- Connect your domain and set redirects. On the Pro plan you connect a domain you already own (Bolt.new, 2026). Point every old WordPress URL at its new page. This is the step that protects your rankings.
- Run both for 30 days, then close the WordPress hosting. Google recrawls, the redirects prove themselves, and the maintenance bill stops.
Who should stay on WordPress?
Move if you have a brochure or service site, a portfolio, or a local business with hours and a contact form. Move if you're paying for maintenance you don't understand on pages that haven't changed since the site launched.
Pay a contractor $500 a month for 18 months and you've spent $9,000 to keep a website standing still. For $216 a year, you could have the one you'd describe if someone asked.
