Web Hosting in Malaysia: Shared vs VPS vs Dedicated, and Managed vs Unmanaged

Every few months one of our clients asks us the same question, usually over WhatsApp, sometimes with a hosting advert attached: “Why does your hosting cost more when the big hosting companies sell it for RM3.99 a month?” It is a fair question, and the answer is not “because we are better”. The two prices buy different things. One rents you a space on a server. The other also pays someone to look after that space, decide who lives next to you, and put things back when they break.

This guide explains the words you will meet when you shop for hosting in Malaysia: shared, VPS and dedicated, managed and unmanaged. It shows what the cheap plans really cost when they renew, using prices we checked on 12 October 2026, and it says plainly who should buy the cheap plan. For a lot of technical people, it is the right choice.

One thing first, so nobody is disappointed: our own hosting is not on sale to the public. We host sites by request only, for clients whose websites we build or look after, and we turn a site away if we can’t vouch for it. The reasons are below.

The short answer

• Shared, VPS and dedicated describe how much of a server you get: a slice of a shared machine, a walled-off virtual server, or a whole physical machine.
• Managed and unmanaged describe who does the work: keeping the server patched, scanning for infections, taking and testing backups, and restoring the site when something goes wrong.
• Budget hosting is usually unmanaged at the website level. The host keeps its hardware running. Your site, your backups and your security are your job, and the host’s own terms say so.
• Unmanaged suits people who are comfortable doing that work. If that isn’t you, the cheap plan is only cheap until the first bad week.
• Our managed hosting is by request only. It isn’t open to everyone, because the point of it is that we know every site on the server.

What web hosting actually is

Your website is a set of files and a database. Hosting is the computer that stores them and hands them to every visitor, all day, every day. That computer is called a server, and it sits in a data centre. When people compare hosting plans, they are comparing two things: how much of a server they get, and how much looking after comes with it.

For a WordPress site the server needs very little to start. WordPress.org says that to run WordPress “it’s recommended your host supports” PHP 8.3 or greater, MariaDB 10.11 or greater or MySQL 8.0 or greater, and HTTPS.^[4] Almost every host in Malaysia meets that. So the real differences are elsewhere.

Shared vs VPS vs dedicated hosting

Think of a server as a shop building in a busy row.

Shared hosting: a stall in a food court

Many websites share one server and its processor, memory and storage. It is the cheapest option because the cost is split many ways. The catch is the neighbours. If one site on the server gets busy, or gets infected, the others can feel it. On most budget plans you can’t see who your neighbours are or how many of them there are.

VPS: your own unit in a shoplot block

A VPS (virtual private server) is one physical server divided into walled-off virtual servers, each with its own reserved share of processor and memory. Busy neighbours affect you much less. You usually get “root access”, which means full control of the server’s operating system. Full control also means full responsibility. The provider we looked at says it plainly: “Our VPS hosting is self-managed”, and “While you’ll be responsible for your virtual private servers, we’ll take care of the speed, uptime, and stability of our physical servers.”^[2]

Dedicated server: the whole building

One physical server, all yours. It is the most powerful and the most expensive of the three, and it only makes sense for large shops, busy web apps or companies with their own technical team. A typical Malaysian SME brochure site or small shop does not need one.

	Shared	VPS	Dedicated
Who shares the server	Many websites	Other virtual servers, walled off	Nobody
Resources	Split, with limits per account	A reserved slice	The whole machine
Usually managed by	Host runs the server; you run the site	You (unless you pay for management)	You (unless you pay for management)
Suits	Brochure sites, small shops	Growing shops, custom apps, technical owners	Large stores, heavy apps, in-house IT

Managed vs unmanaged: the question that decides the price

Shared, VPS or dedicated tells you how big your space is. Managed or unmanaged tells you who looks after it. This is the part most hosting adverts skip, and it is where the real cost sits.

Here are the jobs every website needs someone to do, and who normally does them:

The job	Unmanaged (budget shared or VPS)	Managed hosting
Keep the hardware and network running	Host	Host
Decide which other sites share the server	Host, by price alone	The managing team, by who they will look after
Patch the server software and PHP (for example the Ghostscript PDF flaw, which no plugin update fixes)	Host on shared plans; you on a self-managed VPS	Managing team
Scan for malware	Often a scanner is included; you act on what it finds	Managing team scans and acts
Take backups	Included on some plans; the terms make keeping your own copies your job	Managing team, stored away from the server
Test that backups actually restore	You	Managing team
Restore the site when it breaks	You (or you pay someone)	Managing team

What the small print says

Budget hosts are not hiding this. It is written in their terms, in plain words. One large provider’s hosting agreement, which we read on 12 October 2026, says: “You shall be solely responsible for undertaking measures to: (1) prevent any loss or damage to your website or server content; (2) maintain independent archival and backup copies of your website or server content; and (3) ensure the security, confidentiality and integrity of all your website or server content transmitted through or stored on our servers.”^[3]

It adds: “Our servers are not an archive and we shall have no liability to you or any other person for loss, damage or destruction of any of your content.”^[3]

To be fair, the same provider’s Malaysian plans include useful tools: a malware scanner that “Detects and removes harmful files before they cause damage”, free SSL, and weekly or daily backups depending on the plan.^[1] The tools are there. The responsibility stays with you. That is a reasonable deal for someone who knows what to do with those tools. It is a poor deal for a clinic owner or a trading company whose only “IT person” is the nephew.

The neighbours problem: who else lives on your server

On shared hosting, your site’s safety depends partly on sites you have never heard of. An abandoned blog with a ten-year-old plugin can be the way an attacker gets onto a server. A site that sends spam can get the whole server’s address blocked by email providers. Good hosts isolate accounts so one infected site can’t reach the next, and modern isolation is much better than it used to be. But on a plan sold to anyone with a credit card, nobody is choosing your neighbours.

This is the part of our job clients don’t see. On 12 October 2026, the shared server we run for small business sites held 22 websites. Every one of them is a site we built, a site we took over and cleaned up, or one of our own. Each runs in its own container with its own cap on processor and memory, so a busy neighbour can’t take over the machine. Backups run daily, are kept for 30 days, and are stored on a separate backup server, not on the same machine as the site. We don’t sell space on it to strangers, and we would rather turn a site away than let an unknown one in.

That is what we mean by managed: someone decides who dwells on the host, watches for infections, and puts a site back when it breaks. Our WordPress hosting page lists what the servers run on.

What RM3.99 a month really costs

The advertised price is real, but it is only part of the story. Here are one well-known provider’s Malaysian prices as listed on 12 October 2026:^[1]

Plan	Advertised	Paid up front	Renews at	Per year after renewal	Backups
Single (1 website)	RM3.99/mo	RM191.52 for 48 months	RM14.99/mo	RM179.88	Weekly
Premium (3 websites)	RM7.99/mo	RM383.52 for 48 months	RM22.99/mo	RM275.88	Weekly
Unlimited	RM10.99/mo	RM527.52 for 48 months	RM27.99/mo	RM335.88	Daily

Three things stand out:

• The advertised price is a four-year prepayment. RM3.99 a month means RM191.52 paid on day one.
• Renewal prices are about two and a half to four times the advert. After renewal, the plan with daily backups costs RM335.88 a year, before tax: RM28 a month, not RM3.99.
• The budget price buys the space, not the work. Somebody still has to watch for infections, apply updates, check the backups and restore the site. On a budget plan, that somebody is you, or a freelancer you call in a hurry.

And the hurry is the expensive part. In Malaysia, ad-hoc fixes average around RM130 each and cleaning up a hacked site usually costs RM500 to RM2,000, before counting the enquiries lost while visitors see a warning. Our website maintenance cost guide explains where those numbers come from. One clean-up can cost more than several years of hosting.

So when someone compares managed hosting with RM3.99, the fair comparison is the renewal price plus the hours, and the risk, of doing the work yourself.

Who should choose unmanaged hosting

We say this to people who ask us, and we mean it. A budget host or a self-managed VPS is a sensible choice if:

• you are comfortable logging into a server, reading error logs and restoring a backup yourself;
• you keep your own copies of the site somewhere other than the host;
• you update WordPress, themes and plugins yourself, and check the site afterwards;
• the site is a hobby or side project, where a day offline costs you nothing.

If most of those describe you, you don’t need to pay anyone to manage your hosting. Spend the difference on content.

If they don’t, and the website brings in enquiries, patients or orders, managed hosting is the cheaper option over a year or two, even though the monthly number is higher.

Why our managed hosting is by request only

We don’t advertise hosting on its own, and you can’t buy it from a checkout page. Two reasons.

First, the neighbours. The value of the server is that we know every site on it. If we sold space to anyone, we would be running the same kind of server we tell clients to be careful of. So we take on sites we can look after: usually ones we built, or ones we have checked and cleaned first.

Second, we only take on what we can look after properly. A well-run server still can’t protect a WordPress site whose plugins nobody updates, so when we host a site, the looking-after comes with it: daily backups, restores when something breaks, WordPress and plugin updates, and a clean-up at no extra charge if a site we host is ever hacked. Clients who also want uptime monitoring, small fixes and a monthly report take a care plan, from RM180 a month, which includes the hosting. Ask us, and we will tell you honestly which one fits, and what it costs.

What not to do

• Don’t compare the advertised price with a yearly price. Compare the renewal price, per year, with tax.
• Don’t treat the host’s backups as your only backups. Their own terms usually tell you not to.
• Don’t buy a VPS because it sounds faster. A self-managed VPS you don’t patch is less safe than shared hosting someone else patches.
• Don’t keep old, unused sites on the same hosting account as your business site. The forgotten one is usually the way in.
• Don’t wait for a hack to find out whether your backup restores.

Check it yourself: five questions for your current host

1. What does it cost when it renews? Look at your last invoice or the “renews at” line on the plan page, not the advert.
2. Who is responsible for backups and security? Open your host’s terms of service and search the page for “responsible” and “backup”.
3. How often are backups taken, and where are they kept? Weekly backups mean you can lose up to a week of orders or edits.
4. Can you restore one? Try restoring last week’s backup to a staging copy. If you don’t know how, that is your answer.
5. Is Google warning anyone about your site? Google’s advice is to register your site in Search Console and “Go to the Security Issues sections of Search Console and look for example URLs where Google detected that your site has been hacked.”^[5] Our free website speed test and health check also flags outdated software.

Frequently asked questions

What is the difference between managed and unmanaged hosting?

With unmanaged hosting, the provider keeps its hardware and network running, and you look after everything on your account: updates, security, backups and restores. With managed hosting, a team does that work for you, including choosing who shares the server, scanning for infections and restoring the site when something breaks.

Is shared hosting safe for a business website?

It can be. Modern shared hosting isolates accounts much better than it used to. The risk depends on how the server is run and who else is on it. A shared server where every site is known and watched is safer than a crowded one sold to anyone, and safer than a VPS nobody patches.

Do I need a VPS or a dedicated server?

Most Malaysian SME websites don’t. A brochure site or a small shop runs well on good shared hosting. A VPS makes sense for busy stores, custom applications, or owners who want full control and can manage a server. A dedicated server is for large sites with their own technical team.

Is cheap hosting really cheaper?

At first. As listed on 12 October 2026, a well-known budget plan advertised at RM3.99 a month needs 48 months paid up front, and the plan with daily backups renews at RM27.99 a month, or RM335.88 a year before tax. That buys the space, not the work: updates, backups, restores and clean-ups are still yours to do or pay for, and one hacked-site clean-up usually costs RM500 to RM2,000.

Not sure what you are paying for?

Send us your website and tell us who hosts it. We will check its renewal price, backups and software versions, and reply in writing with whether your current hosting is fine, whether a cheaper plan would do, or whether it needs looking after. Our own hosting is by request only: if you would like us to host your site, say so in your message and we will tell you honestly whether it is a fit. Request a free written review, see what our website maintenance covers, or read how hosting fits into our SEO services.

References

1. Hostinger Malaysia, “Web Hosting” (plan prices, renewal prices, backups, malware scanning). Accessed 12 October 2026.
2. Hostinger Malaysia, “VPS Hosting” (frequently asked questions). Accessed 12 October 2026.
3. Hostinger, “Hosting agreement”, “Storage and security”. Accessed 12 October 2026.
4. WordPress.org, “Requirements”. Accessed 12 October 2026.
5. web.dev (Google), “How do I know if my site was hacked?”. Accessed 12 October 2026.
6. Total Web Solutions records: our hosting control panel on 12 October 2026 (websites on our shared server, per-site resource caps, daily backups kept 30 days on a separate backup server). Hacked-site and ad-hoc fix price ranges as published in our website maintenance cost guide.