What "managed hosting" should actually include — a checklist for comparing providers

"Managed" is the most stretched word in hosting. I've taken over servers where it meant a real engineer watching the machine, and servers where it meant an invoice that auto-renewed. Same word on both brochures. Very different months when something broke.

The problem is that you can't see the difference from the pricing page. You can only see it by asking specific questions and listening for hedged answers. So here's the checklist I'd use if I were shopping — eight things "managed" should mean, and for each one, the question that separates the real thing from the label.

1. Backups that have actually been restored

Everyone says they do backups. The question that matters is different: "When did you last restore one, and how long did it take?"

A backup that's never been restored is a hope, not a backup. I once inherited a server whose "backup system" copied files into a folder on the same disk — dutifully, every night, for years. If that disk had died, the backups died with it. You want backups stored somewhere else, taken automatically, and test-restored on a schedule someone can name.

2. Monitoring that tells them before it tells you

Ask: "If my site goes down at 2 a.m., who finds out first — you or me?"

Real managed hosting means the provider's alerting fires and a human responds before you've noticed. If the honest answer is "you'd open a ticket and we'd look at it," you're not buying management — you're buying a landlord.

3. Patching, on a schedule, with a name attached

Servers rot quietly. Operating system updates, security patches, runtime upgrades — someone has to apply them, and "the customer" is the wrong answer for a managed product. Ask how often the OS is patched and who does it. A good provider answers with a cadence. A bad one answers with a shrug or a link to documentation about how you can do it yourself.

4. Security that was set up on purpose

Firewall rules, TLS certificates that renew themselves, SSH locked down, no default credentials lingering from the day the server was born. You can't audit this from outside, but you can ask: "What hardening do you do on a new server before it goes live?" Listen for specifics. "Industry-standard security" is not a specific.

5. Somewhere to test that isn't production

Ask whether you get a staging environment — a copy of the site where updates and changes get tried before real visitors see them. Providers who update plugins or deploy code straight to production are gambling with your traffic, and you're the stake.

6. Resources you aren't sharing with a thousand strangers

Overselling is how cheap hosting stays cheap: pile hundreds of sites on one machine and hope they don't all get busy at once. Ask what's actually allocated to you — CPU, memory, storage — and what happens when a neighbour's site gets hammered. If the answer is vague, your performance will be too.

7. A human who answers

Not a chatbot, not a ticket queue with a 48-hour SLA, and ideally not a different stranger every time. When something is genuinely wrong, the difference between a named person who knows your setup and a rotating cast reading your account notes for the first time is measured in hours of downtime. Ask who you'd actually be talking to.

8. A clean way to leave

This one gets skipped because nobody plans the divorce at the wedding. Make sure you own the domain registration and DNS, that you can get a full copy of your site and data on request, and that nothing is locked into a proprietary panel you can't export from. A provider who makes leaving easy is confident you won't want to. A provider who makes it hard already knows why you would.

The pattern in the answers

Notice that none of these questions ask about specs. Gigabytes and bandwidth are the easy part — every provider has plenty. What you're really buying with "managed" is someone paying attention, and every question above is a different way of testing whether anyone actually is.

For what it's worth, this checklist is also a fair way to grade me. Here's what my managed hosting includes — and if you ask me when I last restored a backup, I'll have a date. Or send me what your current provider says and I'll give you an honest read on it.