Key takeaways
- WordPress is the right call for most content-driven sites (blogs, marketing, brochures, standard ecommerce, fast launches on a limited budget) and still powers a commanding share of the web.
- A custom web app is the right call when the application IS the business, or when you need complex logic, real-time features, deep integrations, unique UX, or scale that WordPress fights you on.
- The decision is not binary. There is a spectrum from hosted builders through WordPress and headless WordPress to fully custom apps, plus no-code app builders in between.
- Budget reality: a professional WordPress site runs from the low four figures to low five figures. A custom web app MVP commonly starts around $15,000 to $50,000 and a full platform runs well into six figures. Validate ranges against your real scope.
The honest framing
The bad framing is "WordPress or custom?" The honest framing is "what is this thing supposed to do?" If it publishes content and collects leads, WordPress is usually the right tool and trying to prove otherwise is expensive. If the software itself is the product, WordPress will fight you the whole way and the workarounds compound. Most failed picks come from teams asking the wrong question, not from picking the wrong answer.
This piece walks the full spectrum, with real 2026 numbers, then ends with the decision checklist you can take into a kick-off meeting. If you are still upstream of the build decision, our SaaS validation playbook covers what to prove before scoping either path.
The spectrum (not a binary)
Two names cover a half-dozen products. The middle ground is where most teams actually land:
- WordPress.org (self-hosted): You download the free software and install it on hosting you control. Full freedom over themes, plugins, code, and data ownership, in exchange for handling hosting, updates, security, and backups. This is what businesses usually mean by "a WordPress site," and it's the focus of our WordPress development work.
- WordPress.com (hosted): Automattic's commercial managed service. Hosting, updates, and backups are handled for you. Plugin installation and deep customisation are gated behind higher-tier paid plans.
- Custom web app: A custom-coded application built with frameworks. Common stacks: React or Next.js on the front, Node.js, Laravel, Django, or Ruby on Rails on the back. You build the data model, business logic, authentication, and admin yourself. This is the right category for SaaS, marketplaces, dashboards, and anything where the software is the product. We cover the patterns we see most often in our guide to real web application examples.
- Hosted website builders: Wix, Squarespace, Webflow, Framer. All-in-one, design-led, hosting included. Webflow gives designers pixel-level control and a real CMS. Framer is design-and-animation-first. Wix and Squarespace are the most beginner-friendly. Strong for marketing sites, weak for true application logic.
- Headless CMS: Strapi, Sanity, Contentful, headless WordPress. The content backend is decoupled from the front, which is built in something like Next.js and pulls content over API. Sanity is developer-first (schema as code), Contentful is the enterprise managed pick, Strapi is open-source and self-hosted. Headless WordPress keeps WordPress as the editor while a React or Next.js front renders the site.
- No-code / low-code app builders: Bubble for applications, Webflow for sites. The clean rule from the vendors themselves: Webflow is for websites, Bubble is for applications.
You are choosing a point on a spectrum that trades convenience and speed against control and capability, not flipping a single switch.
Where WordPress actually stands in 2026
Confirmed numbers from W3Techs, dated 3 June 2026:
- WordPress is used by 59.4% of all sites whose CMS is known, which is 41.9% of all websites.
- WordPress version 6 runs 83.9% of WordPress sites; most installs are on a modern, maintained branch.
- Among subtechnologies, Elementor appears on 31.3% of WordPress sites and WooCommerce on 19.9%.
The newer story is the slip. Per Search Engine Journal's reading of W3Techs, WordPress declined from 43.2% in December 2025 to 41.9% in late May 2026, six consecutive months of decline, with share flowing mostly to no-CMS / static / AI-built sites rather than to Shopify, Wix, or Squarespace. WordPress is still the runaway leader. It is also no longer growing.
Ecosystem context: WordPress.org lists more than 60,000 free plugins. WooCommerce is the dominant WordPress ecommerce engine; StoreLeads tracked roughly 4.5M live WooCommerce stores and about a 33.4% share of tracked ecommerce sites in 2025. WooCommerce numbers vary widely by methodology (~18% among the top one million sites per BuiltWith, ~39% in broader surveys), so treat any single figure as directional. The ecommerce industry work we ship leans on these patterns daily.
What WordPress is genuinely great at
- Content-heavy and marketing sites. Blogs, news, brochures, marketing hubs, SMB sites. WordPress's home turf.
- Fast time to launch and lower upfront cost. A themed, professionally built site can ship in weeks, not months.
- Non-technical content editing. Marketing staff publish and edit without touching code, which is a real operational advantage.
- Mature SEO tooling. Yoast and Rank Math handle metadata, sitemaps, and structured data with minimal effort.
- Huge plugin and theme ecosystem. 60,000+ free plugins means most common needs (forms, SEO, caching, memberships) have an off-the-shelf answer.
- Standard ecommerce via WooCommerce. For conventional catalogue-and-checkout stores, WooCommerce is proven and widely supported. Our ecommerce solutions work uses WooCommerce more often than not for the SMB range.
- Large talent pool. WordPress developers are abundant across every budget, from freelancers to specialist agencies. Cost framing in our developer hiring guide applies cleanly here.
Where WordPress breaks down
The hard truths, sourced to primary research:
Performance, out of the box. Per the June 2025 Core Web Vitals Technology Report, only 43.44% of WordPress mobile sites pass all three Core Web Vitals, last among major platforms behind Duda (83.63%), Shopify (75.22%), Wix (70.76%), Squarespace (67.66%), and Drupal (59.07%). The 2025 HTTP Archive Web Almanac puts WordPress's mobile pass rate around 45% and notes year-over-year improvement of only about 4%. The cause is rarely WordPress core. It's heavy themes, page builders, plugin bloat, and cheap hosting. Per CrUX data, only about 32% of WordPress sites have good Time to First Byte. The fix is hosting plus discipline, not a different CMS.
Plugin bloat and conflicts. Each plugin adds PHP execution, database queries, and assets. Practitioners commonly flag 30 plugins as the point to start asking hard questions, and conflicts between plugins from different developers are a frequent source of breakage. Elementor alone can add over 21 MB of unzipped code.
Security surface. WordPress is the most-attacked platform because it is the most popular. Patchstack's State of WordPress Security 2025 logged 7,966 new ecosystem vulnerabilities in 2024 (a 34% jump year over year), of which 7,633 (96%) were in plugins, 326 (4%) in themes, and only seven in WordPress core. Wordfence blocked and logged over 54 billion malicious requests and over 55 billion password attacks in 2024, including over 1.1 billion SQL injection attempts and 9 billion cross-site scripting attempts. Sucuri's 2023 report found WordPress accounted for 95.5% of detected CMS infections. The pattern is consistent: core is solid, the add-on ecosystem is the attack surface.
The maintenance treadmill. Core, theme, and plugin updates are continuous. Abandoned plugins are a real risk; Patchstack's bug-hunting community contributed to the removal of 1,614 vulnerable plugins and themes from WordPress.org in 2024.
Customisation ceilings. Complex, unique business logic, multi-step workflows, fine-grained roles, and real-time features all fight against WordPress's page-and-post model. You can force it with custom plugins, but at that point you are building custom software inside a CMS, which carries the cost of both.
What a custom web app is genuinely great at
- Complex or unique business logic. Anything that does not map cleanly to posts, pages, and products.
- Scalability and performance. Full control of stack, rendering strategy, caching, and infrastructure.
- Full control of UX and data. The interface and data model are yours to shape, not constrained by themes.
- Real-time features. Chat, live dashboards, collaborative editing, live updates. Native to app frameworks, awkward in WordPress.
- Integrations and custom APIs. First-class API design rather than plugin-mediated connections.
- Multi-tenant SaaS. A single codebase serving many isolated customers. The standard architecture for subscription software, where one update reaches every tenant at once.
- Tailored security and no per-plugin licensing sprawl. A smaller, owned attack surface and no annual plugin license stack.
- Differentiated product and codebase ownership. The product becomes a real competitive moat, and you own the code.
The honest counterweight on custom
- Higher upfront cost. MVP commonly $15,000 to $50,000. Full platforms run into six figures.
- Longer time to market. Months, not weeks. Well-scoped MVPs typically land in a 3-to-5-month range.
- You need a team to maintain it. No vendor handles updates for you.
- You rebuild what WordPress gives free. CMS, authentication, admin panels, media management all have to be built or assembled.
- Overkill for simple sites. For a brochure site or blog, custom development is usually wasted money.
Head-to-head, with 2026 numbers
| Dimension | WordPress | Custom Web App |
|---|---|---|
| Upfront cost (estimate) | DIY ~$100 to $500/yr; freelancer ~$500 to $5,000; agency ~$3,000 to $30,000+ | MVP ~$15,000 to $50,000; full platform ~$150,000 to $250,000+ |
| Ongoing / maintenance (estimate) | Hosting ~$20 to $150/mo; maintenance ~$50 to $200/mo; premium plugins ~$200 to $600/yr | Dev team or retainer; cloud hosting scales with usage |
| Time to launch | Weeks | Months (MVP ~3 to 5 months) |
| Scalability | Good with engineering and managed hosting | Designed for it |
| Performance (out of box) | Often weak (~43% pass CWV on mobile) | Controllable, can be excellent |
| Security | Large attack surface, mostly via plugins | Smaller owned surface, but you own all of it |
| Customisation | Ceiling for complex logic | Effectively unlimited |
| Content editing | Excellent for non-technical staff | Must be built (or use a headless CMS) |
| SEO | Mature plugins (Yoast, Rank Math) | Must be built in (SSR/SSG, metadata, schema) |
| Hosting | Shared to managed WordPress | Cloud / PaaS (Vercel, AWS, etc.) |
| Ideal team | Marketers + occasional dev | Product + engineering team |
| Ownership / lock-in | Own content; theme and plugin lock-in risk | Full code ownership |
| Typical use cases | Blogs, marketing sites, standard ecommerce | SaaS, marketplaces, dashboards, unique products |
For a deeper US-market breakdown of the WordPress and website development ranges, see our piece on affordable custom website development services in the USA. Hourly rates that drive these ranges (estimates): North America and Western Europe roughly $110 to $230/hr; Eastern Europe roughly $20 to $50/hr.
The decision framework
Choose WordPress when most of these are true:
- The site's job is to publish content and generate leads (marketing site, blog, brochure, content hub).
- You need standard ecommerce (catalogue, cart, checkout) that WooCommerce covers.
- Non-technical staff must edit content daily.
- You need to launch fast on a limited budget.
- Your differentiation is your content and brand, not software behaviour.
Choose a custom web app when most of these are true:
- The app IS the business (SaaS, marketplace, platform).
- You have complex or unique business logic, workflows, or roles.
- You need real-time features or heavy third-party integrations.
- You need a differentiated UX that templates cannot deliver.
- You expect scale and performance demands you want to control directly.
The hybrid options most teams actually land on:
- WordPress for marketing + custom app for the product. Marketing site on WordPress so marketers own it, product on a custom stack. Very common, very sensible, and the structure we recommend most often to funded startups.
- Headless WordPress. Keep WordPress as the editor, render a fast Next.js front end. Buys performance, reduced public attack surface, and flexibility at the cost of running two systems and losing some plug-and-play plugin behaviour.
- WordPress now, custom later. Validate cheaply on WordPress, rebuild custom when the logic outgrows it. Be aware that migrating late carries real cost and template-based sites usually require a rebuild, not an upgrade.
The eight questions to answer before deciding:
- Is this primarily content, or primarily an application with logic?
- Who edits it day to day, and how technical are they?
- Do you need real-time, multi-user, or multi-tenant behaviour?
- How many and how deep are the integrations?
- Is your UX a differentiator or a convenience?
- What is your realistic launch deadline and budget?
- Will you have engineering capacity to maintain a custom build?
- Is this a 6-month bet or a multi-year platform?
These are the same questions we walk through in our web app design contract guide before any engineering commitment.
SEO considerations, both paths
WordPress: SEO is largely a solved problem via mature plugins (Yoast, Rank Math) that handle meta tags, sitemaps, and structured data with little effort. The weak spot is Core Web Vitals, where WordPress sites underperform (43.44% mobile pass rate in the June 2025 report) mostly due to themes, builders, and hosting. Fixable with a lightweight theme, caching, image optimisation, and quality managed hosting.
Custom web app: Nothing is automatic. You build meta tags, sitemaps, and structured data yourself, and choose a rendering strategy that search engines can crawl. With Next.js, server-side rendering and static site generation deliver fully rendered HTML to crawlers, and the Metadata API generates titles, descriptions, and canonical URLs. SSR and SSG also tend to improve Core Web Vitals (LCP especially) versus pure client-side rendering. A well-built custom front end can beat a typical WordPress site on performance, which is itself a ranking and conversion factor. Patterns we use here cross over with the work covered in our web app redesign checklist.
Common myths and mistakes
- "WordPress can't scale." It can, with engineering and managed hosting. Major high-traffic publishers (TechCrunch among them) run on WordPress. The honest caveat is that scaling WordPress well takes the same engineering discipline people assume only custom apps need.
- "Custom is always better." For a brochure site or blog, custom is usually wasted money and slower to launch.
- "WordPress is free." The software is free. A real site is not. Budget for hosting, premium plugins, a theme, and maintenance.
- Over-engineering a simple site. Prestige is not a requirement. If WordPress serves the job, use it.
- Choosing custom for prestige when WordPress would serve the actual need.
- Outgrowing WordPress and migrating late. This is a real and expensive failure mode. If you know complex functionality is coming within 2 to 3 years, building custom from the start is often cheaper than rebuilding later.
What we recommend (and how we scope it)
Start by classifying the project, then pick the lightest tool that fully does the job.
- If it is content or a standard store: default to WordPress. Use a lightweight theme, limit plugins, put it on quality managed hosting from day one. Benchmark to change course: if you find yourself stacking 30+ plugins to fake application behaviour, or your Core Web Vitals stay red after proper optimisation and hosting, you have outgrown the platform.
- If the app is the business: build custom, but start with a tightly scoped MVP in the $15,000 to $50,000 range to validate before committing to a six-figure platform. Threshold to expand: real user traction and validated demand for specific features, not assumptions. The scope discipline in our MVP vs full product framework applies cleanly.
- If you need both a marketing presence and a product: run the hybrid. WordPress (or a builder) for marketing, custom app for the product. This is usually the highest-value structure for a funded startup. Many teams in our legal, healthcare, and restaurant work end up here.
- Consider headless WordPress only if you have front-end engineering capacity and a genuine need for performance or multi-channel delivery. Otherwise its dual-system overhead is not worth it for a typical SMB site.
- Decide migration intent early. If complex functionality is clearly coming within 2 to 3 years, build custom from the start rather than paying twice.
For the "I just need a website" reader: you very likely do just need a website, and WordPress or a builder is the honest answer. The moment your idea depends on what the software does rather than what it says, that is the signal to invest in a custom build. Our WordPress development and website development teams scope both paths end-to-end so the choice is honest.
Key takeaways
- WordPress wins for content-driven sites, fast launches, and standard ecommerce. It still powers 41.9% of the web but has slipped six months running.
- Custom web apps win when the application IS the business, when business logic is unique or complex, or when real-time and integrations matter. Cost more upfront. Win long-term on control and differentiation.
- The hybrid (WordPress for marketing, custom app for the product) is the most common honest answer for funded startups.
- Performance is the WordPress weak spot: 43.44% mobile CWV pass rate. Fixable with lighter themes, caching, and proper hosting, but you have to do the work.
- Security is a plugin problem, not a core problem: 96% of WordPress ecosystem vulnerabilities in 2024 were in plugins, not in core.
FAQ
Is WordPress still relevant in 2026?
Yes. WordPress is used by 59.4% of all sites whose CMS is known and 41.9% of all sites overall per W3Techs as of June 2026. The market share is declining month over month for the first time in years (down from 43.2% in December 2025), with the lost share going to no-CMS / static / AI-built sites rather than to a rival CMS. WordPress remains the dominant CMS by a wide margin.
When should I choose a custom web app over WordPress?
When the software itself is the product (SaaS, marketplace, platform), when you need complex business logic, real-time features, deep integrations, multi-tenant architecture, or a differentiated UX. Also when you expect scale or performance demands you want to control directly, and you have or can hire the engineering capacity to maintain it.
How much does a custom web app cost compared to WordPress?
WordPress sites typically run from $500 to $30,000+ depending on whether you use a freelancer, an agency, or DIY. A custom web app MVP usually starts at $15,000 to $50,000 and full platforms run $150,000 to $250,000+. Hosting and maintenance differ too: WordPress runs $20 to $150 per month, while custom apps need a dev team or retainer and cloud hosting that scales with usage.
Is WordPress secure enough for a business site?
WordPress core is secure. Patchstack found only seven vulnerabilities in core in 2024 versus 7,633 in plugins (96% of the total). For a business site, security comes from disciplined plugin choice, managed hosting, regular updates, and removing unused plugins. The biggest risks are abandoned plugins, weak credentials, and outdated installs, not WordPress itself.
Should I go with headless WordPress?
Only if you have front-end engineering capacity and a real performance, security, or multi-channel need. Headless WordPress decouples the editor from the front end (typically Next.js or React) and buys speed and a reduced public attack surface, but you now run two systems and lose some plug-and-play plugin behaviour and live preview. For a typical SMB marketing site, the dual-system overhead is rarely worth it.
Can I start on WordPress and migrate to custom later?
Yes, and many teams do exactly this. The caveat is that migrating late carries real cost: template-based WordPress sites usually require a rebuild rather than an upgrade, and the content and SEO migration takes work. If complex functionality is clearly coming within 2 to 3 years, building custom from the start is often cheaper than paying twice. If demand is still unproven, validate cheaply on WordPress first and rebuild when the logic outgrows it.
Ready to scope the right path?
Most picks fail because the team asked the wrong question, not because they picked the wrong tool. We scope both paths end-to-end through our WordPress development and custom website development teams, plus the hybrid setup most funded startups actually need. Tell us what your project has to do and we will recommend the lightest tool that fully does the job. Or check our pricing options if you are evaluating engineering support for either path.



