Self-Hosting: The Risks You're Not Thinking About (And Why They're Worth It)
Self-hosting your business tools sounds great in theory. Lower costs, true data ownership, no vendor lock-in. But here’s what the marketing doesn’t tell you: it requires ongoing maintenance, and if you don’t have someone who can handle that maintenance, you will eventually have a bad time.
This isn’t a hit piece on self-hosting. I’ve been self-hosting for years and it’s genuinely the right choice for most small businesses. But I think you deserve to understand what you’re signing up for before you start.
What Self-Hosting Actually Means
Let’s be clear about what self-hosting actually involves:
The Software Part (Easy)
Installing Nextcloud or Dolibarr or Mattermost is genuinely not hard. Most self-hosted applications have one-click installers, good documentation, and Docker configurations that make deployment straightforward.
If you’ve ever installed a desktop application, you can install a self-hosted web application.
The Server Part (Moderate)
You need somewhere to run it. This means:
- A VPS (Virtual Private Server) from a provider like Hetzner, DigitalOcean, or Linode
- Basic server administration (updates, backups, monitoring)
- Security configuration (firewalls, SSL certificates, access controls)
This is where most people start running into trouble. Not because it’s inherently complex, but because it requires attention that most people don’t have time for.
The Maintenance Part (Where It Gets Real)
This is the part that matters:
Operating System Updates
Your server runs on Linux (or Windows, but let’s be honest, it’s Linux). Linux releases security patches. These patches need to be applied. Not eventually — regularly.
A server that’s 6 months out of date is a security liability. Every vulnerability that’s been patched in that time is a potential exploit vector on your unpatched server.
Application Updates
Your self-hosted applications also need updating. Nextcloud releases major versions every few months with new features and security patches. Running an outdated version isn’t just missing features — it’s a security risk.
Backups
This should be obvious, but it’s not: self-hosted means self-backed-up. If your VPS provider has a hardware failure and you don’t have off-server backups, your data is gone.
Most VPS providers offer some level of redundancy, but “some level” isn’t a backup strategy.
Monitoring
When something goes wrong with a SaaS product, you file a support ticket and wait. When something goes wrong with your self-hosted setup, you might not know until a user reports it — or until you check your server and find it’s been down for 6 hours.
Security Hardening
Initial security setup is one thing. Maintaining it is another. Are you monitoring for failed login attempts? Are you tracking which ports are exposed? Are you rotating credentials regularly?
The Risk Matrix
Here’s what actually happens when self-hosting goes wrong:
| Risk | Likelihood | Impact | Prevention |
|---|---|---|---|
| Server compromise via unpatched vulnerability | Medium | Critical | Regular OS updates |
| Data loss from hardware failure | Low | Critical | Off-server backups |
| Ransomware via outdated software | Medium | Critical | Regular updates + backups |
| Data breach from misconfiguration | Medium | High | Security audit |
| Extended downtime | Medium | Medium | Monitoring + redundancy |
The common thread? Most of these risks are manageable with proper maintenance. The problem is that “proper maintenance” requires someone paying attention — and most small businesses don’t have anyone whose job it is to do this.
Why Self-Hosting Is Still Worth It
Despite all the above, self-hosting is still the right choice for most small businesses. Here’s why:
True Data Ownership
When you use a SaaS product, your data is on their servers, governed by their terms of service, subject to their pricing decisions. If they decide to raise prices, you can either pay or migrate — and migration is expensive.
When you self-host, your data is on your server, governed by your decisions. You can export it anytime, in standard formats. No vendor lock-in.
Cost Savings That Compound
The math is straightforward:
| SaaS Product | Self-Hosted Alternative | Annual Savings |
|---|---|---|
| Slack (£5/user/mo, 10 users) | Mattermost on £10/mo VPS | £600/year |
| Dropbox (£10/user/mo, 5 users) | Nextcloud on £10/mo VPS | £600/year |
| Mailchimp (£13/mo) | Listmonk on £5/mo VPS | £156/year |
| Asana (£10/user/mo, 8 users) | Plane on £10/mo VPS | £960/year |
For a 10-person business, switching from these SaaS products to self-hosted alternatives saves £2,000-3,000/year. That’s not chump change.
Actual Control
Want to customize how your CRM works? With SuiteCRM running on your own server, you can. Want to add a plugin that the SaaS version doesn’t support? You can. Want to integrate two tools that the SaaS vendor doesn’t offer an integration for? You can build it.
Self-hosted software gives you control that SaaS simply cannot.
The Solution: Managed Self-Hosting
This is where I come in. The model I offer isn’t “here’s the software, good luck” — it’s full-service self-hosting:
What I Handle
Server Setup and Maintenance
- Initial server configuration and hardening
- Operating system updates applied regularly
- Security monitoring and incident response
- SSL certificate management
Application Management
- Application installation and initial configuration
- Regular application updates
- Plugin/theme management
- Performance optimization
Backup and Recovery
- Automated off-server backups
- Regular backup testing
- Disaster recovery planning
- Data export assistance when needed
Monitoring
- Uptime monitoring
- Resource usage tracking
- Security event logging
- Proactive issue identification
What You Get
- All the cost savings of self-hosting
- None of the maintenance burden
- A single point of contact for all your technology
- The security of knowing someone is watching your infrastructure
The Pricing
For most small businesses, the all-in cost is £50-150/month depending on complexity and number of applications. This includes:
- Server hosting (from £10/month)
- Application setup and configuration
- Ongoing maintenance and updates
- Backup management
- Security monitoring
- Support via email/chat
Compare this to the £2,000-3,000/year in SaaS savings, and it’s genuinely difficult to make the math work against self-hosting.
Who Self-Hosting Is NOT For
I want to be honest: self-hosting isn’t right for everyone.
If You Need 99.99% Uptime Guarantees
Self-hosted on a single VPS doesn’t offer the redundancy of enterprise SaaS. If your business cannot function without guaranteed uptime, you need something more robust.
If You Have No Tolerance for Maintenance Windows
Updates require downtime. Even if it’s just 5 minutes while a service restarts, things will occasionally need to go offline for maintenance.
If You Need Phone Support at 3 AM
I offer business-hours support. If you need 3 AM emergency support, you need enterprise software with enterprise support contracts.
Making the Decision
Here’s a simple framework:
Choose SaaS if:
- Your time is worth more than your money
- You have no one who could manage self-hosting
- You need features that require enterprise scale
Choose Self-Hosting (with help) if:
- You want to reduce software costs significantly
- You value data ownership and control
- You can commit to learning basic maintenance, or you have someone who can do it for you
Choose Managed Self-Hosting if:
- You want the cost savings without the maintenance burden
- You want a single point of responsibility for your infrastructure
- You want someone to call when things go wrong
Not sure whether self-hosting makes sense for your business? Start with a complimentary technology audit. We’ll review what you’re spending, what you’re using, and give you a straight answer about whether self-hosting could work for you.