That's the idea behind Buster for the Ghost blog framework (run Ghost locally or on a highly restricted web server then generate a static site from it you uploa

That's the idea behind Buster for the Ghost blog framework (run Ghost locally or on a highly restricted web server then generate a static site from it you upload somewhere else) but it doesn't look maintained unfortunately: https://github.com/axitkhurana/buster https://github.com/axitkhurana/buster I'd be very interested to know about more solutions like the above as it doesn't seem well explored. I've had some success running WordPress on Heroku (uploads go to AWS S3 and the database is hosted on AWS RDS) which I much prefer to the way typical VPSs are administrated. The Heroku filesystem doesn't allow the WordPress PHP files to be altered, you can't SSH in to the live server and you can recreate and rollback the whole server state in seconds if there are any problems. Either way, the more static the better in terms of minimising the attack surface and admin time in my opinion.