{ "title": "Scaleway and Online.net (Dedibox) WordPress hosting: plans and security", "seo_title": "Scaleway, Online.net and Dedibox WordPress Hosting", "h1": "Scaleway and Online.net (Dedibox) WordPress hosting: plans and security", "description": "WordPress hosting at Scaleway, formerly Online.net: what became of Dedibox and web hosting, plans, prices excl. VAT, technical setup and security.", "lead": "Online.net became Scaleway, Dedibox remained the name of the dedicated servers: WordPress options, prices, technical setup, security and first settings at Iliad’s cloud subsidiary.", "language": "en", "locale": "en-US", "type": "article", "url": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/", "canonical": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/", "markdown": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/index.md", "json": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/index.json", "published": "2026-07-01T08:30:00+00:00", "modified": "2026-10-28T23:01:58+00:00", "site": { "name": "WP Masquerade", "url": "https://www.wp-masquerade.com/" }, "translations": [ { "language": "en", "hreflang": "en-US", "title": "Scaleway and Online.net (Dedibox) WordPress hosting: plans and security", "url": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/", "markdown": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/index.md", "json": "https://www.wp-masquerade.com/scaleway-online-net-wordpress-hosting-review/index.json" }, { "language": "fr", "hreflang": "fr-FR", "title": "Scaleway et Online.net (Dedibox) pour WordPress : offres, prix et sécurité", "url": "https://www.wp-masquerade.com/fr/hebergement-wordpress-scaleway-online-net/", "markdown": "https://www.wp-masquerade.com/fr/hebergement-wordpress-scaleway-online-net/index.md", "json": "https://www.wp-masquerade.com/fr/hebergement-wordpress-scaleway-online-net/index.json" }, { "language": "es", "hreflang": "es-ES", "title": "Hosting WordPress en Scaleway y Online.net (Dedibox): precios y seguridad", "url": "https://www.wp-masquerade.com/es/hosting-wordpress-scaleway-online-net-opiniones/", "markdown": "https://www.wp-masquerade.com/es/hosting-wordpress-scaleway-online-net-opiniones/index.md", "json": "https://www.wp-masquerade.com/es/hosting-wordpress-scaleway-online-net-opiniones/index.json" }, { "language": "de", "hreflang": "de-DE", "title": "WordPress-Hosting bei Scaleway und Online.net (Dedibox) im Überblick", "url": "https://www.wp-masquerade.com/de/scaleway-online-net-wordpress-hosting-erfahrungen/", "markdown": "https://www.wp-masquerade.com/de/scaleway-online-net-wordpress-hosting-erfahrungen/index.md", "json": "https://www.wp-masquerade.com/de/scaleway-online-net-wordpress-hosting-erfahrungen/index.json" }, { "language": "it", "hreflang": "it-IT", "title": "Scaleway e Online.net (Dedibox) per WordPress: offerte, prezzi e sicurezza", "url": "https://www.wp-masquerade.com/it/hosting-wordpress-scaleway-online-net-recensione/", "markdown": "https://www.wp-masquerade.com/it/hosting-wordpress-scaleway-online-net-recensione/index.md", "json": "https://www.wp-masquerade.com/it/hosting-wordpress-scaleway-online-net-recensione/index.json" }, { "language": "pt", "hreflang": "pt-BR", "title": "Hospedagem WordPress na Scaleway e Online.net (Dedibox): planos e segurança", "url": "https://www.wp-masquerade.com/pt/hospedagem-wordpress-scaleway-online-net-avaliacao/", "markdown": "https://www.wp-masquerade.com/pt/hospedagem-wordpress-scaleway-online-net-avaliacao/index.md", "json": "https://www.wp-masquerade.com/pt/hospedagem-wordpress-scaleway-online-net-avaliacao/index.json" }, { "language": "nl", "hreflang": "nl-NL", "title": "Scaleway en Online.net (Dedibox) voor WordPress: ervaringen en prijzen", "url": "https://www.wp-masquerade.com/nl/scaleway-online-net-wordpress-hosting-ervaringen/", "markdown": "https://www.wp-masquerade.com/nl/scaleway-online-net-wordpress-hosting-ervaringen/index.md", "json": "https://www.wp-masquerade.com/nl/scaleway-online-net-wordpress-hosting-ervaringen/index.json" } ], "headings": [ { "level": 1, "text": "Scaleway and Online.net (Dedibox) WordPress hosting: plans and security" }, { "level": 2, "text": "Scaleway, Online.net and Dedibox: who is who?" }, { "level": 2, "text": "Scaleway’s WordPress options and their prices" }, { "level": 2, "text": "Technical setup of Web Hosting and Scaleway servers" }, { "level": 2, "text": "Security at Scaleway: who does what" }, { "level": 3, "text": "Documented incident: the May 2026 power outage" }, { "level": 2, "text": "Scaleway’s strengths and weaknesses for WordPress" }, { "level": 2, "text": "Who is it for?" }, { "level": 2, "text": "Getting started: WordPress on Scaleway Web Hosting" }, { "level": 2, "text": "WP Masquerade on Scaleway and Dedibox" }, { "level": 2, "text": "In short: Scaleway for WordPress" }, { "level": 3, "text": "Key takeaways" }, { "level": 2, "text": "Sources" }, { "level": 2, "text": "WordPress security, without the noise", "id": "wpm-nl-box-title" } ], "body": "**Scaleway**: formerly Online.net, the Iliad group’s cloud subsidiary and home of Dedibox\n\nOnline.net, Dedibox, Scaleway: three names for the same French company, a subsidiary of the Iliad group. You may be looking at them to host WordPress, on managed web hosting, a virtual machine or a [dedicated server](https://www.wp-masquerade.com/glossary/dedicated-server/). This article explains what became of each brand, what Scaleway offers today for a WordPress site, at what price, and what remains your job in terms of security.\n\nIt complements our [ranking of WordPress hosts](https://www.wp-masquerade.com/best-wordpress-hosting/). We have no account with Scaleway and measured nothing: the information comes from Scaleway’s website and official documentation, its status page and the press. No affiliate links.\n\n## Scaleway, Online.net and Dedibox: who is who?\n\nAccording to TechCrunch, Scaleway “started as Online.net”, the hosting and data center arm of Iliad (the parent company of the French ISP Free). Its first dedicated servers were an immediate success in 2005. Online.net then launched a cloud offer under the Scaleway brand, which became the company’s main brand; in February 2020, TechCrunch noted that the dedicated server range was now called “Scaleway Dedibox”.\n\n- **The company**: Scaleway SAS, founded on August 30, 2000, headquartered in Paris. The French business directory still associates it with the trade names BookMyName, Dedibox, Scaleway and Online. Reuters still described it in April 2026 as a subsidiary of Iliad.\n- **Dedibox**: the brand still exists, for dedicated servers (Start, Pro, Core, Store, GPU ranges) and for Dedibox [VPS](https://www.wp-masquerade.com/glossary/vps/). They can be ordered from the Scaleway console or from the old Dedibox console, still hosted on online.net.\n- **Online.net web hosting**: the old offers (Web Hosting Classic, Web Hosting Cloud under [cPanel](https://www.wp-masquerade.com/glossary/cpanel/)) are still documented for existing customers, but Scaleway invites them to migrate to its own Web Hosting offer. A migration tool has existed since April 2024; the migration is permanent and old backups are not transferred.\n- **Scaleway**: the cloud (Instances, Elastic Metal, managed databases, and more) and the new web hosting, in the Paris, Amsterdam and Warsaw regions.\n\nOn the infrastructure side, Scaleway reports more than 100,000 servers in its data centers in France and the Netherlands, its own network (AS12876) and ISO 27001 and ISO 50001 certifications.\n\n## Scaleway’s WordPress options and their prices\n\nFor a WordPress site, there are three paths. **Web Hosting** is managed hosting, under cPanel or with a WordPress-only interface; it is the only offer where Scaleway takes care of the server. **Dedibox VPS and Instances** are virtual machines that you administer. **Dedibox and Elastic Metal** are whole physical servers, which you also administer yourself. Scaleway’s website displays its prices excl. VAT.\n\n| Plan | Type | Starting price | Sites | Storage | Key limits |\n| --- | --- | --- | --- | --- | --- |\n| Web Hosting Mini | Managed hosting (WordPress) | €3.99/month excl. VAT | 1 | 1 GB SSD | WordPress-only interface, 1 vCPU, 1 GB of RAM, a single database |\n| Web Hosting Essential | Managed hosting (WordPress or cPanel) | €9.99/month excl. VAT | Up to 10 | 500 GB SSD | 3 mailboxes, unlimited databases, backup as an option at €2.99/month excl. VAT |\n| Web Hosting Advanced | Managed hosting (WordPress or cPanel) | €24.99/month excl. VAT | Up to 50 | 1,000 GB SSD | 5 mailboxes, backups included, dedicated IP |\n| Dedibox VPS | VPS | €4.99/month excl. VAT | Up to you | Depends on the model | Unmanaged, 60 cities worldwide |\n| Instances (DEV1-S) | Cloud | €6.55/month excl. VAT | Up to you | Extra | Hourly billing, 2 vCPU, 2 GB of RAM, IPv4 extra |\n| Dedibox Start | Dedicated server | €4.99/month excl. VAT | Up to you | Depends on the model | Unmanaged; €4.74 excl. VAT with a 12-month commitment |\n\n*Public prices on scaleway.com/fr, excluding promotions, excl. VAT (the site displays prices excl. VAT), monthly with no commitment shown unless stated. DEV1-S Instance price taken from Scaleway’s public pricing API. Elastic Metal: price not recorded.*\n\nThe resources of the Essential and Advanced plans (12 and 16 cores, 48 and 64 GB of RAM) are those displayed by Scaleway for a shared platform; they are not reserved for your site alone. Important point: if you choose the WordPress interface rather than cPanel, each plan carries **only one site** and one database.\n\n![Ladder of Scaleway offers you can use for WordPress, from most to least managed: Web Hosting Mini, Essential and Advanced from €3.99 per month excl. VAT, Dedibox VPS from €4.99 excl. VAT, DEV1-S Instances at around €6.55 excl. VAT, Dedibox Start dedicated servers from €4.99 excl. VAT and Elastic Metal billed by the hour or month.](https://www.wp-masquerade.com/media/2026/10/offres-wordpress-scaleway-en.webp)\n\n*Scaleway offers you can use for WordPress and their prices excl. VAT.*\n\n## Technical setup of Web Hosting and Scaleway servers\n\n| Item | Web Hosting (Scaleway) |\n| --- | --- |\n| Control panel | cPanel or WordPress-only interface; Plesk withdrawn from new orders in May 2025 |\n| Web server | Apache (.htaccess is described as Apache’s configuration file) |\n| PHP | 7.4 to 8.3 on Scaleway’s cPanel platform, according to its documentation |\n| WordPress installation | 1-click WordPress since July 2025; WP Toolkit and Softaculous under cPanel |\n| Object cache | Redis removed from cPanel platforms in July 2025; Scaleway points to its managed Redis |\n| Backups | JetBackup option: daily, 3 days, plus a full weekly backup kept for two months |\n| Regions | Paris, Amsterdam, Warsaw |\n| Support | 24/7, by ticket and phone, in French and English |\n\n*Based on Scaleway’s documentation and website; PHP versions as documented by Scaleway.*\n\nThe documentation does not specify whether SSH, WP-CLI or a staging tool are available on Web Hosting, nor whether HTTP/3 or a CDN are present. On the WordPress offer, access to backups goes through a support ticket. On VPS, Instances and dedicated servers, everything depends on what you install: system, web server, PHP, cache and backups are your job.\n\n## Security at Scaleway: who does what\n\n- **Isolation**: Scaleway says it has “strong protections” to isolate customers on its shared servers, without detailing the technique used.\n- **What Scaleway asks of you**: strong, unique passwords, cPanel two-factor authentication, plugin updates, file permissions of 644 for files, 755 for folders and 600 for `wp-config.php` (see also our guide to [WordPress file permissions](https://www.wp-masquerade.com/wordpress-file-permissions/)).\n- **Anti-DDoS**: included at no extra cost on Dedibox servers (Arbor and Sevi equipment), with two paid tiers. For Web Hosting, the documentation does not say.\n- **Web application firewall**: nothing is documented for Web Hosting. For your own servers, the paid Edge Services offering provides a WAF based on the OWASP Core Rule Set, placed in front of your server.\n- **Malware**: antivirus and antispam advertised for email; no scanning of site files is documented.\n- **HTTPS and account**: SSL certificate included in Web Hosting plans; two-factor authentication for the Scaleway console by app (TOTP) or passkey.\n\n### Documented incident: the May 2026 power outage\n\nOn May 22, 2026 at 11:21 a.m., Scaleway’s status page reported network problems in all zones of the Paris region and at the Dedibox DC5 data center. The stated cause: a complete power outage in the carrier rooms during data center maintenance. Most services came back within the hour, others in the afternoon; the batteries were replaced the next day and the incident was closed on May 23 at 2:40 p.m. The same page publishes more limited incidents on the Web Hosting platforms. An outage of this kind does not destroy data, but it is a reminder of the value of a [WordPress backup outside the host](https://www.wp-masquerade.com/wordpress-backups-3-2-1-strategy/).\n\n![Security matrix for WordPress on Scaleway Web Hosting. Scaleway provides two-factor authentication for the console and cPanel and backups as an option or included. Anti-DDoS, web application firewall and file scanning are not documented for Web Hosting. You manage updates, permissions, cPanel two-factor authentication and an external copy. WP Masquerade moves the login, hides WordPress and adds two-factor authentication and login limiting with Pro.](https://www.wp-masquerade.com/media/2026/10/securite-scaleway-en.webp)\n\n*Who does what for a WordPress site on Scaleway Web Hosting, based on the host’s documentation.*\n\nTo go further: our comparison of web application firewalls for WordPress and our guide to hardening PHP on a hosting account.\n\n## Scaleway’s strengths and weaknesses for WordPress\n\n| Strengths | Weaknesses |\n| --- | --- |\n| French company, data centers in France, the Netherlands and Poland | Web hosting is secondary in a catalog focused on cloud and AI |\n| Prices displayed without a first-year discount | WordPress interface limited to one site and one database per plan |\n| 24/7 support in French, by phone and ticket | Backups optional on Mini and Essential, short retention |\n| Inexpensive Dedibox dedicated servers, anti-DDoS included | Web application firewall, isolation and malware scanning not documented on Web Hosting |\n| Full choice: managed, VPS, cloud, dedicated | No more Redis on cPanel; SSH and staging not documented |\n| Recent PHP versions, up to 8.3 documented | Two consoles (Scaleway and online.net) for long-time customers |\n\n*Summary based on Scaleway’s website and documentation, without testing on our part.*\n\nScaleway is first and foremost a cloud and server provider. Its Web Hosting is decent and easy to understand, but offers fewer WordPress tools than specialized hosts. If you want more complete shared hosting from a French provider, compare with [WordPress hosting at OVHcloud](https://www.wp-masquerade.com/ovhcloud-wordpress-hosting-review/); on the European side, [IONOS’s WordPress plans](https://www.wp-masquerade.com/ionos-wordpress-hosting-review/) and [WordPress hosting at Infomaniak](https://www.wp-masquerade.com/infomaniak-wordpress-hosting-review/) rely more on built-in tools.\n\n## Who is it for?\n\n- **Blog or small site**: Web Hosting Mini works if a single site is enough for you; add a backup.\n- **Small business or nonprofit**: Essential under cPanel, with the backup option.\n- **Agency**: Advanced (up to 50 sites, backups included), or Instances if you manage your own servers.\n- **Developer or system administrator**: Dedibox, Instances or Elastic Metal, with the stack of your choice.\n- **Avoid it if** you are looking for managed WordPress with staging, built-in caching and managed updates: that is not what Scaleway offers.\n\n## Getting started: WordPress on Scaleway Web Hosting\n\n1. **Order**: Scaleway console, “Domains & Web Hosting” then “Web Hosting” and “Order Web Hosting”. Choose the region, then the interface: cPanel if you want several sites and file access, WordPress for a single site. Check the daily backup option if it is not included.\n2. **Install WordPress**: it is installed by default with the WordPress interface (link sent by email); under cPanel, use the 1-click installation or Softaculous, then WP Toolkit to manage the site.\n3. **Choose PHP**: under cPanel, pick the most recent version offered (8.3 in the documentation).\n4. **HTTPS**: check that the included SSL certificate covers your domain once the DNS points to Scaleway, then force HTTPS.\n5. **Protect the accounts**: two-factor authentication for the Scaleway console and cPanel, then for WordPress ([WordPress two-factor authentication](https://www.wp-masquerade.com/wordpress-two-factor-authentication/)). Also enable deletion protection for the hosting.\n6. **Close what you do not use**: disable [XML-RPC](https://www.wp-masquerade.com/wordpress-xml-rpc-risks/) if you use neither Jetpack nor the mobile app, and set the permissions recommended by Scaleway.\n7. **Update**: nothing is automatic on the host side; turn on automatic updates for plugins you trust and keep a backup copy elsewhere.\n\nOn a VPS, an Instance or a Dedibox, the same steps come on top of server administration: network firewall, system updates, and rules protecting the admin area at server level (see protecting wp-admin on the server side).\n\n## WP Masquerade on Scaleway and Dedibox\n\n- **Web Hosting under cPanel**: according to Scaleway’s documentation, the server reads Apache .htaccess files. Based on how WP Masquerade works, the plugin folder therefore returns 404 there without any setting, and Pro’s address aliases are pasted at the top of .htaccess, before “# BEGIN WordPress”, before running “Check and activate”.\n- **WordPress-only interface**: the documentation does not say whether you can edit .htaccess. The masking works without any server rule; for Pro’s aliases, ask support first.\n- **VPS, Instances, Dedibox, Elastic Metal**: you choose the web server. Under Nginx, add the line that hides the plugin folder in the `server` block, then the alias rules generated by Pro, and reload Nginx after `nginx -t`.\n- **Load Balancer or Edge Services in front of the server**: WordPress would see the proxy’s address. Pro only trusts Cloudflare and Sucuri; restore the real address at server level (`set_real_ip_from` and `real_ip_header` under Nginx, `mod_remoteip` under Apache), then set Pro’s real address mode to “Disabled”. If the Edge Services cache is active, purge it after enabling and exclude the login address.\n- **Overlaps**: the Edge Services WAF and WP Masquerade do not do the same job and can coexist; cPanel two-factor authentication protects the hosting, Pro’s protects WordPress.\n\nDetails per server are on the [WP Masquerade compatibility with hosts and caches](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/) page; for file addresses, see [Pro’s address aliases](https://www.wp-masquerade.com/features/file-url-aliases/). WP Masquerade reduces the visible surface: WordPress presented as another CMS, `wp-login.php` and `xmlrpc.php` closed, and with Pro, two-factor authentication, login limiting and vulnerability alerts. Since Web Hosting documents neither a web application firewall nor file scanning, remember that WP Masquerade is not a firewall, an antivirus or a backup.\n\n## In short: Scaleway for WordPress\n\nOnline.net became Scaleway, Dedibox remained the name of the dedicated servers, and Online.net’s old web hosting is giving way to Web Hosting. For WordPress, Scaleway mostly suits those who know how to administer a server, or a small site on Web Hosting with simple prices and support in French. For turnkey WordPress, look elsewhere in our [comparison of web hosts for WordPress](https://www.wp-masquerade.com/best-wordpress-hosting/), and complete the protection with [the best WordPress security plugins](https://www.wp-masquerade.com/best-wordpress-security-plugins/).\n\n### Key takeaways\n\n- Online.net is the former name of Scaleway, an Iliad subsidiary; Dedibox remains its dedicated server range.\n- Web Hosting: from €3.99 to €24.99 per month excl. VAT, cPanel or WordPress interface (a single site), in Paris, Amsterdam or Warsaw.\n- Backups are optional on Mini and Essential: take the option and keep an external copy.\n- Web application firewall and malware scanning are not documented for Web Hosting.\n- Under cPanel (Apache), WP Masquerade hides its folder without any setting; on your own Nginx servers, add the rule yourself.\n\n## Sources\n\n- Scaleway Docs: security measures on shared hosting (https://www.scaleway.com/en/docs/webhosting/reference-content/shared-hosting-best-practices/)\n- Scaleway Docs: Dedibox anti-DDoS protection (https://www.scaleway.com/en/docs/dedibox-network/reference-content/anti-ddos/)\n- Scaleway Docs: Edge Services WAF (https://www.scaleway.com/en/docs/edge-services/reference-content/understanding-waf/)\n\nOther sources consulted: official pages of the hosting provider and software vendors, official documentation, trade press articles.\n\n## WordPress security, without the noise\n\nOne e-mail when something matters: new attacks seen in the wild, plugin updates and practical guides. No spam, unsubscribe in one click.", "categories": [ "Hosting and server" ], "format": "application/json" }