Corporate site migration
The corporate site moved off an unhardened VPS onto Google Cloud, with a plugin audit and a review of the traffic inflating the bill.
- Year
- 2026
- Client
- Confidential
- Sector
- Retail
- Type
- Web platform
- Role
- Systems architect
- Stack
- WordPress · Google Cloud
The corporate site lived on a VPS that had barely been hardened. It worked, but it was the piece of infrastructure nobody thought about until it broke.
Three problems that looked like one
What arrived as “we need to move the site” was really three separate things: a large attack surface, mediocre performance, and a bill that did not match the real size of the audience.
The migration
- Moved to Google Cloud, onto managed services rather than a machine somebody has to remember to patch.
- Updated the plugins, which was where most of the attack surface came from.
- Reviewed the traffic: a good share of what was being paid for was not real visits.
- Used the platform’s own services to serve the site faster, instead of scaling the machine up.
Result
The site now sits on managed infrastructure, with less exposed surface and a bill that reflects real traffic. In the period following the migration, visits ending in a purchase in the store went up.