Without having access to the actual source code, I wonder what you consider heavy weight about it?<p>If you mean the purpose of the app, PHP is more than capable of handling highly sensitive data if it is written by a capable developer.<p>If you mean traffic wise, a single VPS can easily handle thousands of requests a second, and if you need more you simply add more inexpensive VPS.<p>Unless I misunderstood your sentence?