A website is not a one-time purchase. Software ages, passwords leak, plugins break and content goes out of date, usually when nobody is looking. Website maintenance is the routine work that keeps a site secure, fast and accurate after launch. Here is what it normally includes, what it costs to ignore, and how to decide who should do it.
What website maintenance usually includes
Packages differ from one provider to the next, but most good maintenance plans cover the same core jobs:
- Software updates. Content management systems, themes, plugins and server software all release fixes. Applying them promptly closes known security holes.
- Backups. Regular copies of your files and database, stored somewhere other than the web server, so you can restore after a hack, a bad update or a mistake.
- Security monitoring. Malware scans, login protection, an up-to-date HTTPS certificate and a quick response if something looks wrong.
- Uptime monitoring. An alert when the site goes down, so you hear about it before your customers do.
- Speed checks. Large images, bloated plugins and slow hosting creep in over time. See our guide to Core Web Vitals for what to measure.
- Broken link and form checks. A contact form that silently stops sending email can cost you real enquiries.
- Small content edits. Updating hours, prices, team photos or a new service page.
Who does what
The confusion usually comes from three separate parties: you, your hosting company and your web designer. Assuming someone else is handling something is the most common maintenance failure.
| Task | Often handled by | Worth confirming |
|---|---|---|
| Server and hosting uptime | Hosting company | Whether they monitor and what support hours apply |
| Software and plugin updates | Designer, maintenance provider or you | Who tests the site after an update |
| Backups | Hosting company or maintenance provider | How often, where stored, how fast you can restore |
| Domain and certificate renewals | You or your designer | Whose account they sit in and who gets the reminders |
| Content changes | You or your designer | Turnaround time and any limits on edits |
TipAsk in writing who is responsible for each row. A short email now saves an argument after something breaks.
What it costs to skip maintenance
Neglect rarely shows up on day one. It appears as a hacked site, a checkout that fails after an update, a certificate that expires and puts a browser warning in front of every visitor, or pages that slowly become slower. Rebuilding or cleaning a compromised site usually costs more than months of routine care, and downtime means lost enquiries while it lasts.
What maintenance costs
Prices vary widely. They depend on the platform, how many plugins or integrations the site uses, whether it sells products, how fast you need changes made, and how many edits are included each month. A simple brochure site needs much less attention than a store with payments and inventory.
When comparing plans, look past the monthly figure and check what is actually covered: backup frequency, restore time, included edit hours, and whether security clean-up is included or billed separately. Cheap plans that only promise "updates" often leave the real work to you.
Do it yourself, or hand it off?
- Be honest about your time. Updates and monitoring need to happen on a schedule, not when you remember.
- Check your comfort with risk. An update can occasionally break a layout. Someone needs to notice and fix it quickly.
- Consider the site's role. If it brings in leads or sales, an hour of downtime has a real cost.
- Pick one accountable owner. Whether that is you or a provider, a single named person avoids gaps.
If you would rather not carry that list yourself, our Website Management service covers updates, hosting care, fixes and monthly improvements. You can see how it fits with our other work on the services page, and our guide on what a website costs explains how ongoing care fits into the overall budget.
A simple monthly checklist
- Log in and confirm updates are applied.
- Check that a recent backup exists and you know how to restore it.
- Submit your own contact form and confirm the email arrives.
- Open the site on your phone and click through the main pages.
- Check when your domain and certificate renew.
- Review Google Search Console for errors.
Not sure what state your site is in? Tell us about it and we will give you an honest view of what it needs.