The SiteGround DR Stack: What to Buy, What to Skip, and What Order to Build It

SiteGround's hosting plans already include the most critical data protection layer — daily automated backups with 30-day retention and geo-distributed off-server storage — on every plan, with no add-on required. The real decision is what to build beyond that foundation.

For most small businesses, the essential stack beyond what's already included is two things: an email platform that runs independently of the hosting, and a documented restore procedure. Everything else is situational.

If you're running a static brochure site, generate leads by phone, and can tolerate 24 hours of downtime without losing revenue — the backup and CDN already in your hosting plan cover your actual risk. Everything below is for businesses where the site is part of the operation.

Check current SiteGround WordPress hosting pricing →

What Every SiteGround Plan Already Includes

Before evaluating any add-on, know what you already have on every plan — StartUp, GrowBig, and GoGeek — at no extra cost:

Daily automated backups: 30-day retention, covering files, databases, and email, stored geo-distributed on infrastructure separate from your live site. Included on all plans, no upgrade required.

CDN: Runs on Cloudflare's global network. Enable it with one toggle in Site Tools. Handles traffic spikes and basic DDoS mitigation without a separate subscription.

SSL: Included and auto-renewed on all accounts.

Free email: Domain-matched email addresses at no extra cost.

One distinction worth noting: GrowBig and GoGeek include unlimited on-demand backup snapshots — useful for backing up immediately before a plugin update. StartUp users can generate on-demand snapshots but pay a small one-time fee per snapshot when needed.

Having automated backup does not mean having a DR plan. Backup is the data protection layer. The recovery plan is what most businesses are missing. The rest of this article addresses that gap.

The Foundation You Add — Independent Email

If your business email runs on the same hosting account as your website, a single hosting incident takes down both simultaneously. You lose the site and your primary way of communicating with clients at the same time — precisely when you need to reach them.

The fix is to run business email on a platform that operates independently of your hosting status. Google Workspace and Microsoft 365 both serve this purpose — they continue running regardless of what happens to your web host.

SiteGround offers Google Workspace through their Marketplace, which lets you set up business email under your domain while keeping billing and DNS configuration in one place. Site Scanner and Expert Care are also available as Marketplace add-ons after signing up for a hosting plan.

Check current SiteGround WordPress hosting pricing →

For a detailed comparison of Google Workspace and Microsoft 365 across specific failure scenarios, see Google Workspace vs Microsoft 365: which keeps a small business running through an outage →

Situational — Site Scanner

Site Scanner is a paid, per-site add-on powered by Sucuri. It monitors your files and domain for unauthorized changes and sends email alerts when it detects a compromise. The Site Protect feature lets you temporarily disable FTP, SSH, and PHP uploads if you suspect an active attack.

Two tiers:

Basic (~$2.49/month): Daily URL scans, domain blacklist monitoring, weekly automated file scans.

Premium (~$4.99/month at renewal): Everything in Basic, plus daily automated file scans, quarantine for newly uploaded files, and one-click malware cleanup.

Buy it if: You run a WordPress site with third-party plugins, collect client contact data through forms, have no other malware monitoring in place, or have been hacked on a previous host.

Skip it if: Your site is a static, locked-down brochure page that collects no user data, or you already run Wordfence, which handles file integrity monitoring at no cost for WordPress sites.

What it does not do: Site Scanner detects and alerts — it does not block attacks in real time. It has no Web Application Firewall function. Strong passwords and two-factor authentication are required regardless of whether you run Site Scanner.

Site Scanner is available as a Marketplace add-on after signing up for hosting. See the full analysis: Is SiteGround Site Scanner adequate security for a business handling client data? →

Situational — Expert Care

Expert Care is commonly mistaken for a priority support subscription. It is not. It is a credit-based professional services system. You purchase credits — monthly via subscription, or individually on-demand — and each credit covers up to 30 minutes of professional hands-on work on a specific task: malware cleanup, plugin conflicts, database troubleshooting, performance investigation, custom configuration.

Three subscription tiers (Basic, Plus, Pro) are available in the SiteGround Marketplace, with higher tiers providing more monthly credits at a lower per-credit cost. Plus and Pro tiers include monthly site audits covering performance or security.

Use it if: You have no developer on retainer, your site gets compromised or breaks in a way you cannot diagnose, or you need a specific technical task handled by someone who knows what they're doing. Purchasing a credit gives you professional help without searching for an available freelancer mid-incident.

Skip the subscription if: You have a developer who handles the site, you are comfortable in WordPress admin and server logs, or your site has not required outside technical help in the past year. The on-demand credit option is available when a genuine need arises — no subscription required.

Expert Care is not a managed hosting service. It is professional task support you draw on when something needs expert attention. Available as a Marketplace add-on after signing up for hosting. See the full breakdown: When SiteGround Expert Care actually matters vs handling it yourself →

What You Don't Need to Buy Separately

Several common upsells at other hosts are redundant on SiteGround:

Third-party CDN subscription: The CDN included in all plans runs on Cloudflare's network. For most SMB sites, this is sufficient without a separate Cloudflare account or paid CDN service.

Extra backup storage: 30-day off-server retention is included on every plan. You do not need to pay extra to unlock remote backups.

Standalone SSL: Included and auto-renewed on all accounts.

The gap most businesses actually have is not a missing tool. It is the operational procedures — the tested restore process, the written runbook, the communication plan — that no hosting product can provide for you.

The Build Order

Build the stack in this sequence. Each step addresses a real gap in priority order.

Run the backup audit (free, 1 hour): Log into Site Tools, verify backup is running and covers files, databases, and email. Run a test restore to staging. Document the restore time. If you skip this step, nothing else on this list matters.
Set up independent email (Marketplace, before you need it): Deploy Google Workspace or Microsoft 365 so business communication runs independently of hosting status. Update MX records. Confirm email works before the next step.
Write the restore runbook (free, 30 minutes): Document your recovery steps in a file stored somewhere other than the server that might go down. Include dashboard URL, credential locations, restore steps, verified restore time, and who notifies clients during downtime.
Evaluate Site Scanner (if you handle client data): If you collect client contact data, run WooCommerce, or have been hacked before — the Basic plan at ~$2.49/month is a reasonable early warning layer.
Keep Expert Care in reserve: Don't commit to a monthly subscription before you know your actual usage pattern. If a technical task arises that needs professional help, purchase credits on-demand. Evaluate the subscription after you have a baseline for how often you actually need it.

Check current SiteGround WordPress hosting pricing →

Related:

FAQ

What SiteGround add-ons are worth it for a small business? For most small businesses, the highest-value add-on is an independent email platform — Google Workspace or Microsoft 365 — so that a hosting incident doesn't take down communications along with the site. If you run a dynamic WordPress site with third-party plugins and collect client data, Site Scanner Basic (~$2.49/month) adds a practical early warning layer. Expert Care credits are worth having available on-demand; the monthly subscription makes sense only if you have a track record of needing professional technical help.

Does SiteGround include backup with all hosting plans? Yes. Daily automated backups with 30-day retention, stored off-server on geo-distributed infrastructure, are included on all plans — StartUp, GrowBig, and GoGeek — at no extra cost. On-demand backup snapshots are included free on GrowBig and GoGeek; StartUp users can generate them for a small one-time fee per snapshot.

Is SiteGround good for small business websites? SiteGround is a solid choice for small businesses running WordPress sites without dedicated IT staff. The standard plans include backup, CDN, and SSL that budget hosts often charge extra for or skip entirely. The Marketplace add-ons let you build a DR stack incrementally rather than paying for services upfront before knowing whether you need them.