What “Managed Hosting” Actually Means (and Doesn’t)

The hosting industry uses “managed” to mean wildly different things, from “we installed cPanel for you” to “we run the server layer on your behalf.” This article breaks down what managed hosting should actually include, why the definition needs to evolve as AI accelerates security threats, and how InMotion Hosting draws the responsibility line between provider and customer.

Managed hosting means the provider is responsible for keeping the server itself running and secure: the operating system, kernel, control panel, networking, and infrastructure-level threats. You focus on your sites and applications. The provider handles the layer underneath them.

That definition sounds straightforward. In practice, the word “managed” has been stretched, hollowed out, and refilled with whatever a given provider feels like including. Some treat it as “we put cPanel on the server.” Others treat it as a true sysadmin partnership. The gap between those two interpretations can mean the difference between a stable production environment and a 3 a.m. recovery call you weren’t expecting.

Why “Managed” Means Different Things at Different Providers

The industry never agreed on a shared definition. As Wikipedia notes in its entry on dedicated hosting, no industry standards have been set to clearly define the management role of dedicated server providers. Every host uses the term. Each defines it differently. That ambiguity is the whole problem.

A recent r/webhosting thread put this into sharp relief. The original poster asked how the community personally defines “managed VPS” in an era of fast-moving exploits and AI-accelerated vulnerability discovery. The replies were all over the map. Some said a control panel alone makes a server “managed.” Others described managed hosting as an ongoing sysadmin partnership where the host owns patching, monitoring, backups, and incident response. One commenter framed it as a clean split: unmanaged is infrastructure rental, managed is an ongoing sysadmin partnership. Another argued that putting cPanel on a server and calling it managed is a marketing shortcut, not a service description.

That mix of opinions matches what shoppers actually run into. Two providers can list “managed VPS” on identical product pages and deliver very different services behind them.

What Should Be Included in Managed Hosting at Minimum

If “managed” is going to mean something useful, it should cover the layers most customers cannot reasonably maintain without becoming a part-time sysadmin. At a baseline, that means:

• 24/7 monitoring of hardware health, uptime, disk, and power
• Proactive security patching on the operating system and kernel
• Control panel updates kept on a stable release channel to limit breakage
• DDoS protection at the network layer
• Data center and network coverage, including hardware replacement
• Human technical support that can actually troubleshoot infrastructure issues

Backups, malware defense at the application layer, and same-day expert consulting are common add-ons rather than universal inclusions. That distinction matters. Many customers assume “managed” includes restorable backups by default. It often does not. This is where surprise costs and gaps in coverage usually show up.

How AI-Accelerated Threats Are Changing the Definition

The window between a CVE being published and being actively exploited has been shrinking for years. AI tooling has compressed it further.

The recent cPanel authentication bypass is a useful example. By the time the patch was publicly available, exploits were already circulating. A provider that waits for a customer to file a ticket before applying critical patches is not really managing the server. They are reacting to it.

This is where the old definition of managed hosting breaks down. Convenience features like a control panel or a one-click reboot do not protect a server when a vulnerability is being weaponized within hours of disclosure. Proactive operations do. In its reply on that same Reddit thread, the official InMotion Hosting account argued that waiting for a customer to file a ticket before applying critical patches is no longer a workable model for any provider calling themselves managed. The bar for “managed” should rise. Proactive patching and hardening should be the baseline, not a paid upgrade.

What InMotion Hosting Includes in Every Managed Plan

We draw the line clearly. On a managed server with InMotion Hosting, the server layer is our responsibility. That includes:

• OS security updates, applied proactively
• Free OS upgrades performed regularly, not billed as an add-on
• cPanel and WHM kept on the stable release channel
• 24/7 hardware and service health monitoring
• DDoS protection across our private network
• Data center and network coverage, including hardware replacement
• 24/7 human technical support from US-based engineers, even if you have root access

On Managed VPS and Managed Dedicated Servers, that baseline also includes two hours of Launch Assist for site migrations. On Managed Dedicated, Advanced Product Support (APS) handles tickets as a front-line team, not as a paid escalation tier. cPanel-to-cPanel and WordPress migrations are included at no charge across all managed plans.

Customers can choose to disable OS or cPanel upgrades. If they do, the management agreement changes and they take on more responsibility for what happens next. We tell customers that upfront rather than burying it in a footnote.

Where Root Access Fits Into the Managed Responsibility Line

Root access creates real ambiguity in a managed environment. The Reddit thread surfaced this clearly. Multiple commenters pointed out that once a customer modifies configs, installs random packages, or disables security controls, no provider can realistically guarantee the result.

Some hosts respond by removing root access on managed plans entirely. That tightens the support guarantee but takes away control that developers and agencies often need.

We keep root access available on Managed VPS and Managed Dedicated. That means the responsibility line shifts based on what you do with it. If you change configurations at root, you own the consequences of those changes. Our support team will still help troubleshoot and point you in the right direction, which is more than many hosts will do once you have shell access. If a server is exploited because of customer-side changes on an unmanaged or formerly managed plan, we will provide a clean server and migrate what we can on a best-effort basis.

The boundary is documented rather than implied. That is the part the industry has historically been weakest on.

What Premier Care Adds for VPS and Dedicated Customers

Server-layer management does not cover everything a production site needs. Application-level malware, granular backup retention, and same-day expert assistance live above the layer most managed plans address. Premier Care fills that gap.

On Managed VPS, Premier Care adds:

• Monarx malware defense with automated mitigation
• 300 GB of automated backup storage
• 24/7 priority access to Advanced Product Support

On Managed Dedicated and High Capacity Servers, Premier Care adds:

• Monarx malware defense
• 500 GB of automated backup storage
• One hour per month of InMotion Solutions consulting for complex work like custom server setup, performance tuning, or firewall configuration

APS is included on all managed Dedicated Servers regardless of whether Premier Care is purchased. Premier Care extends that level of access to VPS customers and adds the data protection and consulting layers that most agencies and founder-led businesses need.

How InMotion’s Ownership Model Affects What “Managed” Means

A provider’s structure shapes how they can deliver on the word “managed.” We have been founder-led, employee-owned, and self-funded for 25 years. We are not backed by private equity, and we do not depend on hyperscale cloud providers underneath us.

What that means in practice:

• We own the hardware, the network, and the data centers (Virginia, California, and Amsterdam)
• Support is staffed by US-based humans, not chatbots or outsourced scripts
• Technicians complete extensive training before handling customer interactions
• There is no pressure to cut support costs to satisfy outside investors

That ownership model is the reason we can offer free OS upgrades, keep humans available 24/7, and treat managed hosting as an actual partnership rather than a subscription label. Providers that resell someone else’s cloud, or that have been rolled up by holding companies focused on margin extraction, often cannot match that level of accountability even when they want to.

What Unmanaged Actually Looks Like

Unmanaged hosting is exactly what one Reddit commenter described: rented infrastructure. You get an instance, an OS image, and a network connection. Everything else is yours.

On an unmanaged plan with InMotion:

• You handle operating system updates and patches
• You manage your control panel and application updates
• Technical support is available on a best-effort basis, and our team will still point you in the right direction even if we cannot do the work for you
• Data center coverage, network, and hardware replacement monitoring are still included
• DDoS protection still applies
• You can purchase InMotion Solutions time for advice or hands-on work

That model fits sysadmins, engineering teams with in-house Linux expertise, and developers who want full control and have the time to maintain it. For most businesses, it is the wrong fit. The cost savings disappear the first time something breaks at 2 a.m. and there is no one to call.

How to Evaluate a Managed Hosting Provider Before Signing Up

Marketing pages will not give you a clear answer. The product description on two providers’ “managed VPS” pages can look identical and mean entirely different things. Before signing up, ask:

• Who patches the OS and kernel, and how quickly after a CVE is disclosed?
• Are control panel updates included or billed separately?
• Are backups included, what is the retention policy, and how granular are restores?
• Is malware detection at the application layer included or an add-on?
• Is technical support staffed by humans 24/7, and where are they based?
• What happens if the server is compromised? Who handles cleanup and remediation?
• If root access is provided, where does the provider’s responsibility end and yours begin?

If a sales team cannot answer those questions clearly, the word “managed” on their pricing page is doing a lot of work it cannot back up.

Talk to a Real Person Before You Decide

Hosting is operational infrastructure. The provider you choose affects uptime, security posture, and how much of your week disappears into server maintenance. If you want to talk through what “managed” should look like for your specific workload, our team is available 24/7 and will give you straight answers about what is and is not included.

Explore Managed VPS, Managed Dedicated Servers, or Premier Care to see how we define the service before you commit to it.