A real site costs $0 if you stack the right free tiers — domain, hosting, CDN, and SSL all have legitimate freeforever layers. Freenom-style domains died, but alternatives survive: eu.org, is-a.dev, and Cloudflare's ecosystem cover everything from hobby projects to production apps. The full $0 stack with every layer covered is hidden below.
— RELATED GUIDES —
Domain claimed, pages deployed, SSL auto-issued — the whole stack runs on free tiers that outlast most startups. Ship the project tonight, keep the total at zero.
LAYER ONE — DOMAINS
Free hostname options ranked by legitimacy:
eu.org is the pick: free forever, runs on Cloudflare's nameservers, indistinguishable from a real TLD to visitors. Apply once, park it, use it for years.
LAYER 2 — HOSTING
LAYER 3 — SSL + CDN
SSL never costs money anymore: Cloudflare's proxy gives universal HTTPS on any domain pointing at it, GitHub Pages/Netlify/Vercel auto-provision Let's Encrypt certs, and origin certs are free through the same providers. CDN: Cloudflare's free plan covers DDoS protection + edge caching for hobby traffic.
The only paid domain worth buying: your brand name ($10/year at-cost through Cloudflare Registrar) — everything else stacks free.
WHERE FREE STACKS DIE
Every failure mode on this stack is boring and repeatable:
Projects that ship small and stay boring never meet any of this: one domain, one repo, one visitor counter you actually look at.
STACK SUMMARY
Free hostname options ranked by legitimacy:
| Option | What you get | Durability |
| eu.org | free subdomain that LOOKS like a real TLD (name.eu.org), Cloudflare-supported | approval queue days-weeks, effectively permanent |
| is-a.dev / js.org / dev-like registries | GitHub-verified subdomains for dev projects | application-gated, high quality |
| Freenom alternates (.tk era dead) | some ccTLD promos still rotate | unreliable — avoid for anything real |
| Cloudflare Registrar | at-cost paid domains ($10ish/yr) | permanent — cheapest paid tier exists |
| GitHub Pages / Vercel / Netlify subdomains | username.github.io style | permanent for hobby, ugly URL |
eu.org is the pick: free forever, runs on Cloudflare's nameservers, indistinguishable from a real TLD to visitors. Apply once, park it, use it for years.
LAYER 2 — HOSTING
- Static sites: Cloudflare Pages, GitHub Pages, Netlify — unlimited bandwidth, free SSL, git-push deploys. This covers 90% of projects (portfolios, docs, landing pages, blogs).
- Serverless dynamic: Cloudflare Workers (100k requests/day free), Vercel serverless functions, Netlify functions — backend logic without a server.
- Full VM: Oracle always-free ARM (see the Free VPS guide — linked below), Azure Students $100/year — actual SSH boxes for $0.
- Databases: Cloudflare D1/KV free tiers, Supabase 500MB Postgres, PlanetScale free tier, MongoDB Atlas 512MB — every database category has a real free tier.
LAYER 3 — SSL + CDN
SSL never costs money anymore: Cloudflare's proxy gives universal HTTPS on any domain pointing at it, GitHub Pages/Netlify/Vercel auto-provision Let's Encrypt certs, and origin certs are free through the same providers. CDN: Cloudflare's free plan covers DDoS protection + edge caching for hobby traffic.
The only paid domain worth buying: your brand name ($10/year at-cost through Cloudflare Registrar) — everything else stacks free.
WHERE FREE STACKS DIE
Every failure mode on this stack is boring and repeatable:
- Domain approval limbo: eu.org applications sit quiet for days or weeks with no status mail. File once, build on a temporary pages.dev hostname in the meantime, and stop re-applying - repeated requests reset your position in the queue.
- Oracle reclamation: always-free ARM boxes get harvested when accounts go months without a login or the instance shape drifts outside policy. Keep a tiny heartbeat script running and stay inside the documented limits.
- Rate walls: Workers' 100k requests/day disappears fast once a crawler finds the project. Free WAF rules and a rate-limit expression upstream cost nothing and keep the quota for real traffic.
- Abuse suspension: free hosting dies fastest when the payload is the problem - phishing kits, cracked downloads, spam landings get crawled harder than paid plans because every abuse report costs the provider money.
- Single-vendor gravity: one company for DNS, pages, and functions means one company's bad afternoon takes the whole project down. Splitting DNS away from hosting is free and takes ten minutes.
Projects that ship small and stay boring never meet any of this: one domain, one repo, one visitor counter you actually look at.
STACK SUMMARY
Bash:
domain: eu.org (free, permanent) or $10 Cloudflare Registrar
static: Cloudflare Pages (free, unlimited bandwidth)
dynamic: Cloudflare Workers or Oracle ARM VM (free)
database: Cloudflare D1 or Supabase (free tiers)
ssl/cdn: Cloudflare proxy (free)
total: $0— RELATED GUIDES —
- How to Get Free VPS Forever (No Card Needed)
- How to Get Unlimited RDP Using VCC (Method 2026)
- Kali Linux: The Complete Beginner Field Manual
- Nmap Explained: Scan Any Network Like You Own It
- Bug Bounty Roadmap: First Payout in 90 Days
- Free SMTP for Unlimited Sending: The 2026 Stack
- Cashout OpSec: Discipline After the Exit
Domain claimed, pages deployed, SSL auto-issued — the whole stack runs on free tiers that outlast most startups. Ship the project tonight, keep the total at zero.
Last edited: