WordPress or custom-built?
What each costs to build and to keep running, which one is faster for real visitors, whether your team can still edit a custom site, and how to switch without losing rankings.
The short answer
WordPress is the right default when your team edits content every day, the plugins you need already exist, and you want any developer to be able to take it over. A custom build is worth it when speed, security and a few things that must work perfectly matter more than plugins: there is no plugin layer to patch, a lean build can be much faster, and your team edits content in a headless CMS. The platform matters less than how it is built, and switching costs no rankings if every old URL gets a permanent redirect.
By Yannis Spanenburg, founder of Proof of Pixel. Facts checked on .
Side by side
| WordPress | Custom-built | |
|---|---|---|
| Typical build cost | On Clutch, WordPress developers mostly charge $25 to $49 an hour, and most projects cost under $10,000 | On Clutch, web design projects average $38,105 and web development $66,499, though most cost under $10,000 |
| Software | Free, GPL licence | Open-source frameworks, such as Astro under the MIT licence |
| Hosting | A PHP 8.3 host with MySQL 8.0 or MariaDB. WordPress.com from $4 a month billed yearly | A static or edge host. Cloudflare Pages serves static files free and without a request limit |
| Updates | Nine core releases between 20 May and 22 September 2026, plus every plugin and theme | No core or plugin layer; code dependencies are updated by your developer |
| Security exposure | 11,334 new vulnerabilities in 2025, 91% in plugins, 46% unpatched when disclosed (Patchstack) | No public dataset. The exposure is whatever the build includes |
| Speed, real visitors | 48.7% of WordPress sites pass Core Web Vitals on mobile (HTTP Archive, August 2026) | Depends on the build: 71.0% of Astro sites pass, 35.1% of Next.js sites |
| Editing content | The block editor, built in | A headless CMS such as Sanity (free for 20 users), Contentful (free for 10) or Decap (free, open source) |
| Features | 70,066 plugins in the official directory | Built to spec; nothing ships that the site does not need |
| What AI crawlers read | Server-rendered HTML from PHP | Full HTML if rendered on the server or built static; almost nothing if it is a client-side app |
Checked on 1 October 2026. Clutch's averages come from its verified reviews (updated September 2026) and mix all project sizes, apps included; they are not our prices. Speed is the share of sites passing all three Core Web Vitals for real Chrome users, from the HTTP Archive technology report.
Who should pick which
Pick WordPress if
- Your team publishes and edits pages every week
- You rely on plugins for bookings, memberships or several languages
- You want the widest choice of hosts and developers
- Someone updates WordPress and every plugin, every month
Pick custom-built if
- Speed and search matter more to you than plugins
- You would rather not patch a plugin stack for the life of the site
- A few things must work perfectly: forms into the CRM, tracking, bookings
- Your team edits content, and a developer or agency changes the structure
What each costs, to build and to keep
Clutch's figures show how wide the range is: most web projects on its platform cost under $10,000, while the averages, pulled up by large builds, sit at $38,105 for web design and $66,499 for web development. Clutch does not split WordPress from custom work, so treat these as the market's spread, not a price for either.
The running costs differ more than the build. WordPress needs a PHP host and someone to apply updates: WordPress shipped nine core releases between 20 May and 22 September 2026, before counting plugins and themes. A static custom site can be hosted for little or nothing, and there is no plugin layer to update, but every structural change needs a developer.
Speed
The HTTP Archive measures real Chrome visitors on millions of sites. In August 2026, 48.7% of WordPress sites passed all three Core Web Vitals on mobile, below the 53.0% average for all sites; the 2025 Web Almanac put WordPress among the lowest-ranked systems it measured.
A custom build is not automatically faster. The framework and the discipline decide: 71.0% of sites built with Astro passed, but only 35.1% of Next.js sites. Our own site is custom-built and scored 100 on Google PageSpeed for mobile in September 2026, because the rules that keep it there are written down and checked after every change.
Security and upkeep
WordPress core is well maintained. The risk sits in the plugin layer: Patchstack counted 11,334 new vulnerabilities across the WordPress ecosystem in 2025, 91% in plugins, 46% without a fix at disclosure, and the most targeted were exploited within hours. Sucuri's last published report found that 39.1% of the sites it cleaned ran an outdated version at the time of infection. We have cleaned up a hacked WordPress site for a client; it is rarely the core that lets them in.
A static custom site has no admin login or database on the public server, which removes most of that exposure. It does not remove the need for care: forms, scripts and the content system still have to be secured.
Can your team still edit it?
Yes, if the build includes a content system. A headless CMS keeps the content separate from the code: your team edits pages, posts, team members and products in a clean editor, and the site rebuilds itself. Sanity is free for up to 20 users and 10,000 documents, Contentful for up to 10 users, and Decap is free and open source, storing content in your own Git repository.
What your team cannot do on a custom site is install a plugin to add a feature. That is the trade: fewer moving parts, and a developer for structural changes.
Switching without losing rankings
Google's guidance for a site move with URL changes is clear: map every old URL to its new one, use permanent server-side redirects, keep them for at least a year, and update internal links and the sitemap. For a medium-sized site, Google says it can take a few weeks before the new URLs replace the old ones in results.
When we rebuilt the site for Life Experts, a Belgian insurance broker, all 147 addresses of the old site kept ending on a live page. That is the standard to hold any rebuild to, whichever platform it moves to.
Questions about WordPress vs custom
Is WordPress or a custom website better for SEO?
Neither wins by platform. Google ranks pages on what they say and how well they work for visitors. WordPress makes publishing easy; a lean custom build can be much faster. What hurts SEO is a slow site, thin pages, or a move without redirects, on either.
How much does a custom website cost compared with WordPress?
Ranges overlap. On Clutch, most web projects cost under $10,000, while the averages sit at $38,105 for web design and $66,499 for web development. WordPress developers there mostly charge $25 to $49 an hour. The bigger difference is running cost: WordPress needs hosting and steady updates, a static custom site needs less of both.
Can my team edit a custom website?
Yes, through a headless CMS such as Sanity, Contentful or Decap: pages, posts and products are edited in an editor and the site updates itself. Your team cannot add features with a plugin; those changes go to a developer.
Is a custom website faster than WordPress?
It can be, not automatically. In August 2026, 48.7% of WordPress sites passed Google's Core Web Vitals on mobile, 71.0% of Astro sites and 35.1% of Next.js sites. The framework, the images, the scripts and the hosting decide.
Next.js or WordPress for SEO?
Next.js can render pages on the server, which search engines need, but on average Next.js sites pass Core Web Vitals less often than WordPress sites (35.1% against 48.7% on mobile in August 2026). It is a capable framework; speed comes from how it is used.
Is WordPress secure enough for a business site?
Yes, if it is kept updated with few, well-maintained plugins. Patchstack counted 11,334 new WordPress-ecosystem vulnerabilities in 2025, 91% in plugins. Sucuri found that 39.1% of the hacked sites it cleaned were running an outdated version of their CMS.
Will I lose rankings if I move off WordPress?
Not if every old URL redirects permanently to its new address, the redirects stay for at least a year, and internal links and the sitemap are updated. Expect a few weeks before Google shows the new URLs. Check Search Console after launch for pages that lost their way.
What is a headless CMS?
A content system without its own website. Your team writes and edits in it, and the site, built separately, pulls the content in. It keeps editing easy while the site itself stays fast and has no admin login on the public server.
When is a custom build overkill?
When a standard WordPress theme and a handful of maintained plugins already do what you need, your team edits daily, and nobody will pay for a developer to make changes. A custom build pays off when speed, reliability and a few exact integrations are worth more than plugins.
What does WordPress maintenance involve?
Updating WordPress core, the theme and every plugin, testing that nothing broke, keeping backups, and watching for security notices. Automatic updates help, but they are opt-in for plugins and themes, and someone still has to check the site afterwards.
Sources, checked on 1 October 2026
- Clutch: web development pricing
- Clutch: web design pricing
- Clutch: WordPress development pricing
- WordPress.org: releases
- WordPress.org: plugin and theme auto-updates
- WordPress.com pricing
- Patchstack: State of WordPress Security in 2026
- Sucuri: Hacked website report (2023 data)
- HTTP Archive Core Web Vitals technology report
- Web Almanac 2025: CMS chapter
- Astro: why Astro
- Cloudflare Pages: pricing
- Sanity pricing
- Contentful pricing
- Decap CMS
- Google Search Central: site moves with URL changes
Read next
- Ecommerce & Websites: what we build
- Life Experts: a rebuild that kept all 147 URLs
- Your store is not slow to you
- Lovable vs WordPress
- Free field guide: Your site looks good. Does it sell?