= WordPress website on Oracle Cloud. =

Someone suggested me to host my WordPress website on Oracle Cloud, because they provide a lot of resources for free in their "Free Tier", which is sufficient to Host a new Website

So, I just wanted to know how secure Oracle Cloud is

And what security measures should I take, to avoid being Hacked or overcharged?
Because, I have read many reddit posts, users complaining that they got Hacked or overcharged on AWS or Google Cloud, with a bill of $40-60k or so

However, I did contacted an Oracle Cloud support agent, via chat, regarding this matter. He told me that Oracle Cloud is impossible to Hack and I don't need to do anything once I create an account with them

What should I do? Need your advice?
Note: I have never used any Cloud Computing service (AWS, Google Cloud) before. I am Hosting my website with Siteground, WPX since many years

Standard security practices. Enable multi factor authentication. Don’t reuse password

Honestly, AWS, Azure or any other top level enterprise cloud providers are pretty secure. The hacking issues of cloud accounts would be due people reusing their leaked passwords or clicking on the phishing mail. If you follow above mentioned practices there is a 98% chance you won’t be hacked

If you just want to host a simple Wordpress website, you can go with oracle cloud or even IBM cloud. Just make sure you setup proper billing alerts so that you can identify if anything’s going wrong

I would recommend going with a hosted WordPress solution if all you are doing is hosting a WordPress website

Also I strongly recommend avoiding anything to do with Oracle. They are basically the tech equivalent of Satan. Some of their tech is pretty good, but they have really questionable business practices in my opinion. They seem to really like tocompanies as a business strategy. Some of their license terms are really anti-competitive like restricting what hypervisors can be used with the Oracle Database software

I definitely wouldn't trust any claims they make about anything. And expect them to jack prices up eventually (probably a lot) if they gain any sort of marketshare

He told me that Oracle Cloud is impossible to Hack and I don't need to do anything once I create an account with them

While Ithe phrasing of it (nothing is impossible, that phrase should not be in tech support's vocabulary), at the same time they're kind of right


Most cases of "hacked accounts" are because API keys are leaked/lost/stolen. Keep them secret. If 2FA is available, use it

Most cases of overcharging are not reading the rules around the various "free tiers". In AWS, you get enough hours to run one particular instance type for a month, and a reasonable amount of data. But if you go over those amounts by running a second instance, or transferring too much data, then you're on the hook for that. Not enough people seem to be able to understand that relatively simple concept and just assume "I'm a free tier user, it's all free"

I can't tell how much technical background you have, but going to a barebones cloud provider from a managed hosting solution is going to involve quite a bit of hands on work. Eg. Oracle/AWS/Azure will allow you to launch an Ubuntu virtual machine, but that's about it. Sure they have some tutorials on how to install wordpress on top of that, but you're in charge of setting up everything + making sure there's good enough backups, replication, and security on that machine

Overall, unless you have specific needs or high volume I don't see how a cloud provider would be better here - you might save 10 or 20 dollars a month, but spend many hours configuring stuff that would be ready out of the box elsewhere

== Similar to this post ==
r/elementorWordpress Website with Elementor Contact Form not routing100%142/21/2021
r/WordpressWordpress site with SimpleSAML100%29/30/2020
r/WordpressWordpress - log in members only content100%1610/14/2021
- r/dockerWordpress installation with existing mysql database67%411/16/2020
r/WordpressWordpress site not working on some specific browsers100%113/14/2021
- r/devopsAm I the only one, or is Azure really taking off?86%2161d
- r/devopsWriting is on the wall at the startup I work at94%965d
- r/devopsIs it a bad idea to store secrets in code?83%1404d
- r/devopsSenior DevOps Interviews95%901d
- r/devopsUnemployed sysadmin looking for help in focusing on93%783d
- r/devopsDevOps vs Cloud Engineer93%972d
- r/devopsHow do you debug a docker container of a minimal linux95%694d
- r/devopsBest book on kubernetes?93%362d
- r/devopsSWE to DevOps87%392d
- r/devopsIs production VPC access via VPN an anti-pattern?98%5515h