Your site's address on sitehost.dev

Every site gets a free address of its own at yourname.sitehost.dev. The studio itself and these docs stay on shermanwebdesign.com.

Your free address

When you create a site called, say, graceharbor, it's live at once at https://graceharbor.sitehost.dev.
Each address under sitehost.dev is a separate website run by its own owner. Keeping client sites on their own domain, apart from the studio, means a site's pages and scripts can never act as the studio or reach your studio sign-in.
You can still put the site on your own domain (Domains). The custom domain becomes the primary address and the sitehost.dev address redirects to it.

Sites made before October 23, 2026

Older sites had addresses like graceharbor.shermanwebdesign.com. They now also have graceharbor.sitehost.dev, which is their new main address unless a custom domain is the primary.
The old address keeps working: pages and files redirect permanently (301) to the same path on the primary address, so links and bookmarks still land in the right place and search engines move over to the new address.
Form posts, flows and webhooks (/api/…) and /.well-known/… on the old address are not redirected, so forms and integrations that still use it keep working. Update them to the new address when convenient.
In the studio the old address is listed as legacy. It can't be chosen as the primary address, and it doesn't cost anything.
If your site uses Sign in with Studio, sign-in now happens on the primary address automatically. Visitors signed in on the old address sign in once more.

Site names

A name is one part of the address: lowercase letters, digits and inner dashes, up to 63 characters. Some names are reserved and can't be used for new sites:

names we use for our own services or that people expect to be official, such as admin, support, status, docs, mail or test;
names of well-known companies and services that are often imitated, such as google, paypal or usps;
names that start with studio- or xn--, and names containing words like login, signin, verify, password or wallet.

Existing sites keep the names they have.

Security on every site

HTTPS only. sitehost.dev addresses also tell browsers to always use HTTPS.
Pages can't be shown inside another website's frame (protection against clickjacking), and browsers are told not to guess file types.
Forms may send to your own site or to any HTTPS address.
Sign-in cookies set by the studio for your site belong to your address only and are never shared with other sites.

Reporting abuse

To report phishing, malware or spam on a site under sitehost.dev, email abuse@shermanwebdesign.com with the full address of the page. The same contact is shown at sitehost.dev.