WordPress is free. You can download it, install it, pick a free theme, and have a website running in an afternoon. But calling WordPress 'free' is like saying a car is free because you do not pay for the engine. Once you start using it properly, the actual cost quickly adds up. The real cost of WordPress is not the software. It is everything else you do not see coming.
The real costs hidden in 'free WordPress'
Hosting that does not embarrass you
Free hosting is out there, but you should not use it for a business. Free hosts have low uptime, slow servers, terrible support, and they inject adverts into your site. You need proper hosting.
Good WordPress hosting costs £30 to £100 per month. You need fast servers (at least SSD storage, PHP 8.0 or higher, enough RAM to handle traffic spikes). You need automatic backups. You need a support team that can help if something goes wrong. You need DDoS protection. Shared hosting is cheaper (£5 to £15 per month) but the server is shared with dozens or hundreds of other sites, so if they get attacked or overloaded, your site suffers.
Do not try to save money on hosting. A business website sitting on a cheap host that is slow and often down will cost you more in lost customers than you save in hosting fees. Budget £40 to £60 a month for hosting that actually works.
A decent WordPress theme or page builder
Free themes exist, but they are often bloated, outdated, or badly designed. A professional theme costs £30 to £80, and you usually pay again when you renew the licence (annual or lifetime, depending on the developer).
Some people buy page builders like Elementor Pro or Beaver Builder (£99 to £199 per year) to design the site visually instead of coding. This is reasonable if you are not a designer and need the visual interface. But it is another cost on top of WordPress and hosting.
Total first-year cost for theme and builder: £100 to £300. Then ongoing renewal fees if the theme or plugin uses subscriptions.
Essential plugins and add-ons
WordPress does almost nothing out of the box. You need plugins to add basic features.
Security (Wordfence, iThemes Security): £100 to £200 per year. You need this. WordPress sites are attacked constantly because they are so common. A security plugin scans for vulnerabilities, blocks brute-force login attempts, and cleans up if you get hacked.
Backups (UpdraftPlus, Backwpup): £80 to £150 per year if you buy the premium version. You need automatic backups stored offsite, not on your server.
SEO (Yoast, Rank Math): £100 to £200 per year for the premium version. The free version is okay, but the premium features help you optimise for search properly.
Forms (WPForms, Gravity Forms): £100 to £400 per year if you need anything beyond basic contact forms.
E-commerce (WooCommerce, Shopify integration): free in theory, but you often need premium plugins for payment gateways, shipping, and inventory. Another £50 to £300 per year.
CDN and caching (Cloudflare, W3 Total Cache): £0 to £200 per year depending on features.
Spam and security tools (Akismet): £50 to £100 per year if you have a blog.
Total first-year cost for plugins: £500 to £1,500. Then renewal fees every year.
Premium content and templates
Stock photos (if your images matter): £120 to £300 per year for a subscription service like Unsplash Pro or Pexels Premium. Or you pay per-image prices on Shutterstock or Adobe Stock, which gets expensive fast.
Icon libraries, font subscriptions, template packs: another £50 to £200 per year if you care about design quality.
Domain registration and email
Your domain costs £10 to £20 per year. Email (if you want a real email address like you@yourbusiness.co.uk instead of Gmail) costs another £60 to £200 per year depending on how many addresses you need and whether you buy it through WordPress or elsewhere.
SSL certificate
In 2026, this is almost always free (included with hosting), but some hosts charge £30 to £50 per year for a better SSL certificate. Do not overpay for this. Free SSL is fine for most businesses.
The plugin conflict nightmare
Here is something nobody warns you about: plugins fight with each other.
You install a security plugin, and it breaks the page builder. You add an SEO plugin, and the site gets noticeably slower. You install an 'optimise images' plugin and it corrupts all your photos. You add a backup plugin and it fills up the server with massive backup files.
WordPress is endlessly flexible because anyone can write a plugin, but that flexibility comes with a cost: plugins are written by different people with different standards. Some are well-maintained. Some are abandoned. Some have security holes. Some have memory leaks. Finding the combination that works together without breaking your site is real work.
If you do not know WordPress inside out, debugging a plugin conflict can take hours. You might need to hire a WordPress developer to fix it, which costs £50 to £150 per hour. That £300-a-year security plugin just cost you an extra £300 in developer time when it broke your site.
Page speed, Core Web Vitals, and the performance cost
WordPress sites are slow by default. The software is flexible and feature-rich, but flexibility has a cost: every plugin you add is more code to run on every single page load, and it adds up fast.
Page speed matters. Google ranks faster sites higher. Visitors leave slow sites. On a phone on 4G, a heavy WordPress site can take long enough that people give up and go back to the results page.
Fixing page speed requires more plugins (caching plugins, image optimisation, lazy loading, CDN). This gets expensive and complicated. You might spend £200 to £400 on performance plugins and then still need a developer to tweak server configuration, remove unused code, and optimise the database. That is another £500 to £2,000 in developer time.
A properly optimised WordPress site has good Core Web Vitals scores. An unoptimised one might score 40 out of 100. Fixing it is possible, but it is not free.
Security and the constant update burden
WordPress itself is patched regularly. Themes are updated. Plugins are updated. If you do not update everything, you are vulnerable to known security holes. A WordPress site that has not been updated in three months is a liability.
Some updates break things. A WordPress core update might break a plugin. A plugin update might break another plugin. You need to test updates before applying them to a live site, which means setting up a staging environment. That is advanced work.
If you do this yourself, you are spending 2 to 4 hours per month keeping everything updated and patched. If you hire someone to do it, that is £200 to £400 per month (or a fixed retainer, which is at least £50 to £150 per month).
Your time is the biggest hidden cost
Building a WordPress site is not actually free. It costs your time.
If you are reasonably technical, you might spend 30 to 40 hours setting up WordPress, installing plugins, configuring security, tweaking performance, and learning how everything works. That is a full-time week of work.
If you are not technical, you might spend twice that, and you still end up with a site that is slower and less secure than one built by a professional.
At £25 per hour (a conservative estimate of what your time is worth), that is £750 to £1,500 just in your labour. Add that to the plugin and hosting costs and you are already at £1,500 to £2,500 in year one.
And that is just the build. Ongoing maintenance, security updates, plugin updates, and troubleshooting will cost you 2 to 4 hours per month for the life of the site. Over five years, that is another 120 to 240 hours of your time. At the same hourly rate, that is £3,000 to £6,000 just to keep the site running.
When WordPress actually makes sense
WordPress is genuinely good in the right hands. It is powerful, flexible, and you own everything.
It makes sense if you are a developer and you enjoy tinkering. It makes sense if you are willing to invest in learning and you have the time. It makes sense if you need custom functionality that no other platform supports.
For a small local business owner who is not technical, WordPress almost never makes sense. You might save money on the build, but you spend it and more on maintenance, security, and your own time.
The honest comparison
A professional custom-built site from an agency costs £2,000 to £5,000 upfront. It is secure, fast, and professionally designed. It requires minimal maintenance from you. It is owned and managed by professionals.
A DIY WordPress site costs £0 upfront, but £500 to £1,500 per year in hosting, plugins, and tools. Plus 2 to 4 hours per month of your time forever. Plus the risk that you misconfigure something and get hacked, or a plugin breaks your site, or performance degrades and you do not know why. Plus the time you spend learning WordPress, debugging issues, and keeping it patched.
Over five years, the total cost of ownership for WordPress is often £3,000 to £5,000 plus hundreds of hours of your time. You end up spending as much as a professional build, but without the expertise, polish, or security.
If your time is worth anything at all, WordPress is not free. It is a commitment that requires months of learning and years of maintenance. For most small business owners, paying someone else to own the website and keep the lights on is not an expense. It is the smart choice.