OCT 2026 UpdraftPlus vendor breached, stolen keys used to backdoor WordPress sites Rank Math PRO shipped malware for ~11 hours Bricksforge exploited in the wild
GetOffWP Check my site

WordPress → Cloudflare · 72 hours

Get off WordPress in 72 hours.

Same design. Same URLs. No plugins to patch, ever again. Your site is rebuilt as fast code you own, and you keep writing in a simple editor.

  • Live in 72 hours or your money back
  • Faster on Google PageSpeed or your money back
  • Your old site stays untouched for 30 days
6 plugin incidents · last 60 days

Check my site

Tell me where it lives. I'll reply within one business day with what moves, what changes, and a go/no-go.

Roughly how many posts?

No call needed. No newsletter. One reply from me, a real person.

The last 60 days

Your blog shouldn't need a security team.

Six serious plugin incidents in two months. Each one left site owners scrambling to patch, audit or restore.

  1. UpdraftPlus vendor breached.

    Attackers stole the keys to its remote-management service and used them to install backdoors on connected sites. The plugin runs on more than 4 million sites.

    The Hacker News ↗
  2. Rank Math PRO shipped malware.

    Paid copies downloaded or auto-updated in an 11-hour window contained a backdoor. Reinstalling doesn't remove it.

    The Hacker News ↗
  3. Bricksforge exploited in the wild.

    Unauthenticated attackers can upload files and take over the site.

    SecurityWeek ↗
  4. Ninja Forms used to plant backdoors.

    Malicious form entries hijacked admin sessions to install a fake plugin and hidden admin accounts. Ninja Forms is on 500,000+ sites.

    BleepingComputer ↗
  5. Elementor Pro under attack.

    About two-thirds of its 10 million installs were still running a vulnerable version.

    SecurityWeek ↗
  6. All-in-One WP Migration flaw.

    Roughly 3.2 million sites left exposed to takeover.

    SecurityWeek ↗

None of these were WordPress itself. They were plugins: the parts you added to make a blog do normal blog things. Every plugin is another door, and you're the one who has to keep checking the locks.

After the move

Same site. None of the upkeep.

Nothing to patch

No plugins. No updates. No 2am alerts.

Your site is rebuilt as plain code running on Cloudflare's global network. There's no admin login for bots to hammer and no plugin store to get poisoned.

Yours, actually

You own the code.

It lives in your GitHub. If you ever leave, you take the whole site with you. No lock-in, no export headaches.

Fast by default

Faster than your WordPress site. Guaranteed.

Pages are served from the edge, close to every visitor. We show you the before/after PageSpeed score, or you get a refund.

Keep writing

Write in a simple editor.

You publish in Nanoblog, a clean visual editor. Prefer AI? Connect your own agent and let it draft and publish for you. Your call.

72 hours, start to finish

You send one email. I do the rest.

  1. 01 Hour 0

    Send me access.

    A temporary admin account and DNS access, through a one-time secret link. Never your own password, never plain email.

  2. 02 Hours 1–64

    I rebuild everything.

    Every post, page, image and URL. Your design, matched. Your forms working. Redirects mapped.

  3. 03 Hour 72

    You go live.

    I switch your domain over and hand you the before/after PageSpeed scores. Your old site sits untouched for 30 days, just in case.

Two migrations a week · the 72-hour clock starts at your slot

Proof, not promises

My own sites run this way.

I'm not selling a stack I don't use. Every site below runs on Cloudflare Workers with Nanoblog as the editor. Check the scores yourself.

SiteWhat it isMobile scoreLCP
homeby3pm.comBook and newsletter962.3s
michalhlavacek.comPersonal site972.1s
quicktab.coProductized service991.8s
nanoblog.coThe editor itself912.7s
wdnn.comRetention agency962.3s

Test any of them: pagespeed.web.dev →

The risk is mine

Four guarantees. In writing.

  1. 01Full refund

    Live in 72 hours.

    If your site isn't live within 72 hours of your slot starting with working access, you get a full refund.

  2. 02Full refund

    Faster, or free.

    Your home page on Google PageSpeed (mobile), median of 5 runs, before the move and on handover day. If the new score isn't higher, full refund.

  3. 03Fixed free

    No broken links.

    Every old URL redirects to the right place. Find one I missed in the next 90 days and I fix it free.

  4. 04Switch back

    30-day undo.

    Your WordPress site stays untouched for 30 days. Change your mind, and we point the domain back.

Exact definitions, measurement and refund process: Terms →

One price

$1,497, once. Then $29 a month.

Typical WordPress care plans run $100–$300 a month before hosting. After the move, you pay $29.

WordPress today

$100–300 /mo + hosting

  • Care plan to keep plugins patched
  • Plugin licenses & security add-ons
  • Your time, every update

After the move

$29 /mo

  • Nanoblog editor
  • Nothing to patch
  • First 3 months included

For sites up to 300 posts. Bigger? I'll quote it. I take two migrations a week.

One price

$1,497 one-time

One-time migration, covered by all four guarantees.


  • Full rebuild on Cloudflare Workers, your design matched
  • Every post, page, image and URL moved
  • Forms and everything else your site does today, working
  • 301 redirects mapped and tested
  • Code in your GitHub, yours forever
  • 3 months of Nanoblog included, then $29/month
  • Before/after PageSpeed report
Check my site

Paid upfront, covered by all four guarantees. Terms

Is this for you?

Yes, if:

  • Your site is mostly posts and pages: a blog, a magazine, a company site
  • You're tired of updates, plugin scares or the hosting bill
  • You want to keep writing, not maintain software
  • You'd like an AI agent to help publish, or might later

Not yet, if:

  • You run a WooCommerce store
  • Your site is a membership or course platform (ask me first)
  • You change your theme every month and love tinkering in wp-admin
  • You need the site moved in under 72 hours
Michal Hlavacek

Who's doing the work

Hi, I'm Michal.

I've spent a decade building software and retention systems for US e-commerce brands. I built Nanoblog because I was tired of babysitting WordPress for sites that only needed to publish words.

Every migration is done by me, not handed to a junior. That's why I take two migrations a week, and why I'll only take sites I'm sure I can deliver in 72 hours.

— Michal Hlavacek, founder of Nanoblog

Questions people ask before paying

Will I lose my Google rankings?

Your URLs stay the same wherever possible, and every one that changes gets a 301 redirect, which is how Google expects a move to be handled. Faster pages tend to help, not hurt. I can't promise rankings (nobody honest can), but I guarantee no broken links for 90 days.

What do I actually need to give you?

A separate WordPress admin account for me (never your own password) and access to your domain's DNS. You send both through a one-time secret link I give you, not plain email, and you delete my account after handover. The 72-hour clock starts at your slot once both work.

Can I still edit my site myself?

Yes. You write and edit in Nanoblog, a visual editor. No code, no AI required. If you want an AI agent to draft or publish, you can connect your own.

What happens to my contact forms and other features?

I rebuild what your site does today, so forms, signups and embeds keep working. If something can't come across, I'll tell you before you pay.

Where is my site hosted, and who owns it?

It runs on Cloudflare's network, and the code lives in your GitHub. It's yours.

What does it cost after the move?

The first 3 months of Nanoblog are included. After that it's $29/month. No plugin licenses, no security add-ons, no care plan.

Why pay upfront?

Because the risk is on me: if you're not live in 72 hours, or the new site isn't faster, you get a full refund. And your old site stays untouched for 30 days.

I'm on WooCommerce. Can you move my store?

Not yet. This is for content sites. Reply anyway and I'll tell you honestly what your options are.

The next plugin alert is a matter of when

Three days from now, you could be off WordPress.

Send me your site. I'll tell you what moves, what changes, and whether it's a fit.

Roughly how many posts?

Reply within one business day · Full refund if I miss 72 hours