Our Tech Stack vs WordPress: The Numbers Don't Lie

Why “High Performance” Isn’t Just Marketing

Every web agency claims “high performance”. But when you ask how, most can’t answer beyond “we use a fast hosting”. We can — because our stack is fundamentally different from what 95% of Indonesian agencies use.

Here’s the full breakdown.

The Full Stack: What We Actually Use

Layer	Our Stack	Typical WordPress Agency
Framework	Astro (Islands Architecture)	WordPress + Elementor/Divi
JavaScript Sent	0 KB (zero JS for static pages)	300-800 KB (jQuery + plugins)
Database	None (static HTML, no SQL)	MySQL (single point of failure)
Hosting	Cloudflare Edge (300+ cities)	Shared hosting (1 server in SG/US)
Image Format	Auto AVIF/WebP (10x smaller)	JPEG/PNG (manual optimization)
Security	A+ grade (zero attack surface)	C-D grade (login page, xmlrpc, plugins)
SSL	Full strict, auto-renewed	Basic, sometimes self-signed
CDN	Built-in, global edge	Extra cost, often skipped

The Real Numbers: Head-to-Head Comparison

We ran Google Lighthouse audits on our own builds vs typical WordPress clinic sites in Indonesia. The results:

Metric	Eranya Build	Average WP Clinic Site	Why It Matters
Performance Score	95-100	25-55	Google ranks faster sites higher
First Contentful Paint	0.6s	2.8-4.2s	Time until patient sees anything
Total Blocking Time	0ms	800-2000ms	Page feels “frozen” on mobile
Largest Contentful Paint	0.8s	3.5-6.0s	Google’s primary speed metric
Security Headers	A+	C-F	Patient trust + data protection
JavaScript Bundle	0 KB	350-800 KB	Kills performance on 4G phones

These aren’t theoretical numbers. Run any WordPress clinic site through PageSpeed Insights yourself.

Why Zero JavaScript Matters for Clinics

When a patient opens your website on their phone in the waiting room, on the bus, or at 11pm with low signal — they’re on 4G or even 3G. Every kilobyte of JavaScript means:

• More loading time (300KB JS = 2-3 extra seconds on 4G)
• More battery drain (parsing JS is CPU-intensive)
• More chance they leave (53% abandon after 3 seconds)

Our Astro builds ship zero JavaScript for informational pages. The booking button, your doctor profiles, treatment lists — all rendered as pure HTML. Instant.

Why No Database Means No Hacking

WordPress stores everything in a MySQL database. This creates attack vectors:

1. SQL Injection — Hackers send malicious queries through forms
2. Brute Force Login — wp-admin is publicly accessible by default
3. Plugin Vulnerabilities — 1 outdated plugin = backdoor into your site
4. XML-RPC Attacks — WordPress legacy API that’s open by default

Our static architecture has none of these. There’s no database to inject. No login page to brute force. No plugins to exploit. The site is just HTML files served from Cloudflare’s edge network.

For a clinic handling patient inquiries, this isn’t a feature — it’s a necessity.

Why Cloudflare Edge > Shared Hosting

Shared hosting means your website lives on one server, usually in Singapore or the US. When a patient in Surabaya loads your site, the request travels:

Patient Phone → Surabaya → Singapore → Server → Singapore → Surabaya

Round trip: 200-400ms just for the network, before any content loads.

With Cloudflare Edge, your static site is cached in 300+ cities worldwide, including Jakarta, Surabaya, and Bali:

Patient Phone → Surabaya → Cloudflare Surabaya Edge → Done

Round trip: 10-30ms. That’s 10x faster before a single line of code runs.

The Bottom Line

“High performance” isn’t a logo on a slide deck. It’s a technical architecture decision that directly impacts:

• How many patients book (speed → conversion)
• How Google ranks you (Core Web Vitals → SEO)
• How safe patient data is (no database → no breach risk)
• How much you pay for hosting (static → 90% less server cost)

We chose this stack because it’s the same architecture used by companies like Nike, Porsche, and The Guardian. The difference is, we make it accessible to clinics and small businesses — not just Fortune 500s.

References

1. Google: Core Web Vitals as Ranking Signal
2. Cloudflare: Global Network Map
3. Astro: Why Astro - Zero JS by Default
4. Sucuri: Hacked Website Report - WordPress
5. HTTPArchive: State of WordPress Performance