One of the questions I get asked most often is: “What does website maintenance actually mean?”
Fair question. It’s one of those terms that gets thrown around without clear definition. Some developers mean “we’ll update your content whenever you want.” Others mean “we’ll make sure the technical bits don’t break.” Many don’t really know what they mean—they just know they want recurring revenue.
Let me break down what maintenance actually involves, what you can ignore, and what to budget.
The Non-Negotiables: Security & Uptime
Two things genuinely require ongoing attention: keeping your site secure and keeping it online.
Security updates happen because the software your site runs on gets updated. WordPress releases security patches. Plugins fix vulnerabilities. If you’re on a static site like Astro or Next.js, the underlying packages get updates.
Ignore these and you’re playing Russian roulette with hackers. I’ve seen businesses lose their entire site because they ran outdated software with known vulnerabilities.
How often? Check for security updates weekly. Apply them within 24-48 hours of release. Critical patches (ones that fix active exploits) need immediate attention.
Who does it? Your developer or hosting provider. Most modern hosting (Vercel, Netlify, WP Engine) handles some of this automatically. But someone still needs to monitor and respond.
Uptime monitoring means automated checks that ping your site every few minutes. If it goes down, you get an alert immediately. Not hours later when a client emails asking why they can’t book an appointment.
Free tools like UptimeRobot work fine for this. Paid services like Pingdom give you more detail about what broke. Either way, it should be set up and running 24/7.
Backups: Your Insurance Policy
Daily automated backups are non-negotiable. Not weekly. Not “whenever I remember.” Daily.
I’ve restored sites from backups for:
- Clients who accidentally deleted pages
- Plugin updates that broke the site
- Hosting provider issues
- Actual security breaches
- Developer mistakes (including my own)
A good backup system:
- Runs automatically every day
- Stores backups off-site (not just on the same server)
- Keeps 30 days of history minimum
- Tests restores monthly to verify they work
- Takes no more than an hour to restore from backup
Most quality hosting includes this. If yours doesn’t, that’s a problem worth fixing. Backup plugins for WordPress (UpdraftPlus, BackupBuddy) cost £50-80/year. Cheap insurance.
Content Updates: How Much Do You Really Need?
This is where expectations often diverge from reality.
What most businesses actually update:
- Service descriptions when offerings change
- Team photos when staff join/leave
- Opening hours for holidays
- Blog posts if you’re actively blogging
- Pricing (maybe once or twice a year)
- Testimonials as you collect new ones
How often is that? For most service businesses, you might make content changes once or twice a month. Some months, nothing changes.
This doesn’t require a developer. If your site is built properly, you should be able to update content yourself through a CMS or by editing simple files. I train every client on this during handoff.
When you DO need a developer for content:
- Adding entirely new page templates
- Restructuring site navigation
- Changing the design or layout
- Adding new functionality (forms, integrations, etc.)
Those are occasional projects, not monthly maintenance. Budget separately for them.
Performance Monitoring: Monthly Check-Ins
Site speed degrades over time. You add more images, plugins accumulate code, third-party scripts get heavier. What loaded in 1.5 seconds six months ago might now take 3 seconds.
That matters for both user experience and SEO. Google explicitly factors speed into rankings.
Monthly performance check:
- Run PageSpeed Insights or GTmetrix
- Check Core Web Vitals scores
- Review largest images for optimization opportunities
- Test on mobile devices
- Check for broken links
Takes 30 minutes if you know what you’re doing. Catches problems before they hurt your search rankings or conversions.
If you want professional maintenance without lock-in, our SEO and optimization service includes ongoing optimization and updates.
SEO Maintenance: Quarterly Reviews
SEO isn’t set-and-forget. Your competitors are publishing content. Google updates algorithms. Your target keywords shift as customer language evolves.
Quarterly SEO review:
- Check Google Search Console for errors
- Review which pages are ranking (and which dropped)
- Identify new keyword opportunities
- Update outdated content
- Fix broken links and 404 errors
- Review and update meta descriptions
This is about maintaining rankings you have, not aggressive growth. If you want to actively improve SEO, that’s a separate project with more intensive work.
Most service businesses don’t need monthly SEO work. Quarterly is plenty unless you’re in a highly competitive market.
What About WordPress Updates?
WordPress specifically needs more frequent attention because of the plugin ecosystem.
Core WordPress updates: Monthly, usually minor patches. Occasionally major version updates (WordPress 6.x to 7.x) that need testing.
Plugin updates: Weekly checks. Popular plugins update frequently. Some are security patches, others are feature additions.
Theme updates: Less frequent, maybe quarterly. Unless there’s a security issue.
The danger with WordPress is plugins conflicting with each other. An update to Plugin A breaks Plugin B, and suddenly your contact form stops working. This is why you need:
- Staging site to test updates before applying to live site
- Developer who knows your setup and can fix conflicts
- Recent backup before any major updates
Static sites (Astro, Next.js) don’t have this problem. You update packages occasionally, test locally, deploy when ready. Much lower maintenance burden.
Analytics & Conversion Tracking
Your site should tell you:
- How many visitors you get
- Where they come from
- Which pages they visit
- How many convert (contact form, bookings, calls)
Someone needs to:
- Monitor this monthly to spot issues
- Check forms are working (test submissions)
- Verify tracking is accurate (not double-counting, not missing data)
- Report basic metrics if that’s part of your package
This isn’t heavy work, but it’s important. A broken contact form can cost you weeks of leads before you notice.
What You DON’T Need
Let me save you some money by listing things that are often sold as “maintenance” but aren’t necessary:
“SEO optimization” every month - Unless you’re actively building new content or fighting for competitive keywords, monthly SEO work is overkill. Quarterly is plenty for maintenance.
Design updates - Your design doesn’t need monthly tweaking. If you want seasonal designs or regular refreshes, that’s a preference, not maintenance.
Content writing - Some packages bundle blog writing as “maintenance.” That’s content marketing, not maintenance. Totally fine if you want it, but call it what it is.
Social media posting - Not website maintenance. That’s marketing.
Email campaigns - Also marketing, not maintenance.
I’m not saying these things aren’t valuable. But they’re not maintenance in the sense of “keeping your site working properly.” They’re growth activities, which are different.
Realistic Maintenance Packages
Here’s what I consider fair for different types of sites:
Basic Static Site (5-10 pages):
- £50-75/month or £500/year
- Uptime monitoring
- Monthly performance check
- Quarterly SEO review
- Emergency fix response (if something breaks)
- Up to 1 hour of content updates
WordPress Site (10-20 pages):
- £100-150/month
- All of the above, plus:
- Weekly WordPress/plugin updates on staging then live
- Monthly backup verification
- Security monitoring
- Up to 2 hours of content updates
E-commerce or Complex Site:
- £200-400/month
- All of the above, plus:
- Daily security monitoring
- Payment processing verification
- Inventory system checks
- Priority support
DIY vs. Managed Maintenance
What you can do yourself:
- Content updates on pages
- Adding blog posts
- Checking analytics monthly
- Testing forms yourself
- Updating contact info
What you should outsource:
- Security updates (especially WordPress)
- Performance optimization
- Broken functionality fixes
- Technical SEO issues
- Backup management
The dividing line is: Can this break the site? If yes, get help. If no, you can probably handle it.
Some businesses prefer fully managed (pay someone to do it all). Others want minimal technical coverage and handle content themselves. Both are valid, just choose based on your time and technical comfort.
Red Flags in Maintenance Packages
Watch out for:
Unclear scope - “Unlimited updates” sounds great until you learn they mean “unlimited security patches” not “unlimited design changes.” Get clear definitions.
No response time guarantee - If your site breaks on Friday afternoon, when will it be fixed? Monday morning? That weekend? Four hours? This should be spelled out.
Locked-in annually without clear terms - Maintenance contracts should be cancellable with reasonable notice (30-60 days). If they require 12-month commitments with no exit clause, that’s a red flag.
No backup proof - “We do backups” is not the same as “Here’s your backup history and we test restores monthly.” Ask for proof.
Includes “unlimited content updates” - This either means they’re overcharging to account for high usage, or they’ll throttle you once you actually use it. Hourly caps are more honest.
Questions to Ask Your Developer
Before signing a maintenance agreement:
- What’s included in monthly rate vs. billed separately?
- How quickly will you respond to a site-down emergency?
- Where are backups stored and how often are restores tested?
- Can I cancel with 30 days notice or am I locked in?
- Do you provide monthly reports on what was done?
- What happens if the site breaks after an update you did?
- Is there a cap on included hours, and what’s your rate beyond that?
Good developers have clear answers to all of these. Vague answers suggest they haven’t thought it through.
My Maintenance Approach
I’m transparent about what I include in maintenance packages:
Weekly: Security update checks and application if needed.
Monthly: Performance review, backup verification, analytics check, form testing. 1-hour content update allowance (banked if unused up to 3 hours).
Quarterly: SEO review, comprehensive testing, identify improvement opportunities.
As needed: Emergency response within 4 hours during UK business hours, 12 hours evenings/weekends.
Cost varies by site complexity (£75-150/month typically) but the scope is clear upfront. No surprises, no hidden hourly rates, no locked-in contracts beyond the current term.
Final Thoughts
Website maintenance isn’t mysterious. It’s:
- Keeping software updated (security)
- Making sure it stays online (monitoring)
- Maintaining backups (insurance)
- Checking performance monthly (speed)
- Reviewing SEO quarterly (rankings)
- Being available for fixes when needed
Most of this should be automated. The manual work is checking that automation worked and responding when something needs human judgment.
You don’t need to pay £500/month unless your site is genuinely complex. But paying nothing and hoping for the best is penny-wise and pound-foolish. The middle ground—£75-150/month for professional coverage—makes sense for most service businesses.
Your website is a business asset. Maintain it like one.
