Modern WordPress Stack

Bedrock — structured, secure and Composer-powered

Bedrock is a modern WordPress stack that simplifies configuration and customisation by integrating seamlessly with Composer. With a well-organised project structure and top-notch development tools, kick off professional WordPress projects the right way.

Get started with Convesio Talk to our team
bedrock/ project structure
📁 my-bedrock-site/
├── config/ # env-specific configs
├── .env # credentials (git ignored)
├── composer.json # dependencies
├── composer.lock
└── web/PUBLIC ROOT
├── app/ # wp-content
│ ├── plugins/
│ ├── themes/
│ └── mu-plugins/
└── wp/CORE # git ignored
Why Bedrock
Composer-managed
Environment variables
Separate web root
Git & CI/CD ready
9+ years maintained
Convesio supported
Overview

What is Bedrock?

Bedrock is a WordPress stack designed to streamline configuration and customisation of WordPress installations by integrating with Composer — the standard PHP dependency manager. With comprehensive development tools and a well-organised project structure, developers can kick off projects efficiently. Over 9 years of continuous maintenance has made it the most widely used Composer-based WordPress setup.

Traditional WordPress vs Bedrock Stack — structure, security, Composer integration and modern deployment
The benefits of Bedrock

Cutting-edge WordPress boilerplate

Over 9 years of continuous maintenance. Enhanced Git integration. Seamless Composer workflow. Bedrock gives your WordPress projects a robust, well-established foundation.

Composer for WordPress

Manage WordPress Core, plugins, and themes as versioned Composer packages. Running composer install builds the entire site — no dashboard clicks, no manual FTP uploads. Reproducible builds every time.

Enhanced security

Bedrock's file structure limits access to non-public files — only the web/ directory is the public web root. Config files and credentials sit outside browser reach. Includes wp-password-bcrypt for stronger password hashing.

Environment-specific config

Uses Dotenv to set up different config values for local, staging, and production environments. Sensitive database credentials and API keys live in a .env file — never committed to your repository.

Git-friendly workflow

WordPress Core is git-ignored and managed by Composer — your repository contains only your actual code. Enables proper team collaboration, code review, and pull request workflows that traditional WordPress cannot support cleanly.

CI/CD deployment ready

Bedrock's structure is built for automated pipelines. Deploy via Git and CI/CD tools rather than FTP. In non-development environments, plugin and theme editing via the admin panel is automatically disabled for added stability.

mu-plugins autoloader

Automatically loads must-use plugins from subdirectories — enabling cleaner organisation of essential plugins that must run on every request, without manual activation or scattered plugin files.

Feature comparison

Bedrock vs Traditional WordPress

Bedrock leverages WordPress Core functionality and is compatible with most plugins — while adding structure and tooling that traditional WordPress lacks by default.

Feature Bedrock Traditional WordPress
WordPress coding standards 1— Optional add-on✓ Default
Traditional WordPress structure 2— Not used✓ Default
Separate configs per environment✓ Dotenv (.env)— Single wp-config.php
Environment variables✓ Built-in— Not native
Custom wp-content directory✓ web/app/— Fixed location
Composer for WordPress installation✓ Full control— Manual / FTP
Composer for plugins & themes✓ Versioned packages— Dashboard only
mu-plugins autoloader✓ Built-in— Manual
Separate public web root✓ web/ directory— Root exposed
Secure password hashing✓ wp-password-bcrypt— MD5 default

1. WordPress coding standards are not enforced by default in Bedrock, but can be added if preferred.  |  2. Bedrock leverages WordPress Core functionality and is compatible with most plugins.

How it works

Three pillars of the Bedrock stack

Bedrock improves on standard WordPress across three fundamental dimensions — dependency management, security, and configuration.

1

Composer manages everything

WordPress Core, plugins, and themes are declared in composer.json with pinned versions. No manual updates — everything is tracked and reproducible.

2

File structure enforces security

Only the web/ directory is the public web root. Config files and .env credentials live above it — inaccessible from the browser by design.

3

Dotenv per environment

Each environment reads from its own .env file. Database credentials and API keys never touch your Git repository — separate for local, staging, and production.

The next generation of WordPress hosting

Convesio's modern container-based architecture fully supports Bedrock's workflow — including Composer deployments, web root configuration, and environment variable management. More performance, scalability, security, and peace of mind.

7-day free trial
Free white glove migration
No downtime or data loss
Full Bedrock & Composer support
Get Started 7-day free trial · No credit card required
FAQs

Bedrock questions answered

Common questions from developers and agencies evaluating a Bedrock-based WordPress workflow.

Ask our team
Bedrock is a modern WordPress boilerplate that replaces the traditional all-in-one structure with a more organised, secure, and developer-friendly layout. It integrates Composer for dependency management, Dotenv for environment configuration, and separates public files from private configuration — providing a solid foundation for professional WordPress development.
Bedrock provides a more scalable, maintainable, and secure project structure — ideal for professional teams and complex WordPress projects. It enables proper Git workflows, team collaboration, and automated deployments that are difficult or impossible with a standard WordPress install. The initial setup has a small learning curve but pays dividends immediately.
Yes — Convesio's modern container-based architecture fully supports Bedrock's modern WordPress workflow. This includes Composer-based deployments, proper web root configuration pointing to the web/ directory, and environment variable management via the hosting dashboard. Convesio is an excellent hosting choice for Bedrock-powered sites.

Ready to build on a modern WordPress stack?

Start your Bedrock-powered WordPress site on Convesio — with full Composer support, container isolation, and a team that understands modern WordPress development.

Get started with Convesio Talk to our team
Composer-managed
Security by structure
9+ years maintained
CI/CD ready

Learn more at thecloudszone.com  ·  Recommended host: Convesio static sites ↗