Why "maintenance" means different things to different agencies
Ask ten agencies what a website care plan includes and you'll get ten different answers. Some mean "we'll answer your emails eventually." Others mean a genuine, monitored service with backups, patching and reporting. Before you sign up for anything billed monthly by card, it's worth knowing exactly what should be on the list — and what shouldn't.
This isn't about scaring you into buying a plan. Plenty of simple, static sites survive fine without one. But if your site takes payments, captures leads through forms, or runs on a CMS with plugins and dependencies, ongoing care isn't optional extra polish — it's what keeps the thing working.
Uptime monitoring
At minimum, a care plan should include automated checks that ping your site every few minutes and alert someone the moment it goes down. Without this, you find out your site is offline when a customer calls to ask why, or — worse — you never find out at all. Good monitoring includes:
- Checks from multiple locations, not just one server
- Alerts sent to a person, not just logged silently
- A record of downtime history you can review
What "response time" should actually mean
A plan that promises to "respond quickly" is meaningless without a number attached. Ask for a specific commitment — same working day, within 4 hours, whatever it is — and get it in writing. If an agency won't commit to a number, that tells you something.
Backups and restore testing
Everyone says they do backups. Far fewer actually test that those backups can be restored. A backup that's never been restored is a hope, not a safety net. A proper plan includes:
- Automated daily or weekly backups stored off the live server
- Backups kept for a rolling period (30-90 days is typical)
- Periodic test restores to confirm the backup actually works
- A documented process for restoring quickly if something breaks
This matters more than it sounds. Hosting providers fail, updates go wrong, and content gets accidentally deleted. The backup is the thing that turns a disaster into an afternoon's inconvenience.
Security patching and platform updates
If your site runs on WordPress, Shopify apps, or any CMS with plugins, those components need updating regularly. Unpatched software is the single biggest reason small business sites get hacked — not sophisticated targeted attacks, just automated bots scanning the internet for known vulnerabilities in outdated plugins.
A care plan should cover:
- Core platform updates (CMS version, framework updates)
- Plugin and dependency updates, tested before going live
- Security scanning for malware or injected code
- SSL certificate renewal so your site doesn't suddenly show "not secure"
Dependency updates aren't glamorous, but they're the job
Nobody gets excited about updating a plugin from version 4.2 to 4.3. But skipped updates compound — eventually you're stuck on a version so old that upgrading becomes risky, expensive, and can break the site outright. Regular small updates are far cheaper than one big overdue one.
Performance budget checks
A site that loaded fast at launch can slow down over time as images pile up, plugins accumulate and content grows. A decent care plan periodically checks:
- Page load times against a defined budget
- Image sizes and compression
- Any new scripts or trackers that have crept in and are dragging things down
Small content edits
This is the visible part most people think of when they hear "maintenance" — updating a price, swapping a photo, fixing a typo, adding a team member. It's a legitimate and useful part of a plan, but it shouldn't be the *only* thing on it. A plan that's just "we'll make small edits for you" without the technical side covered is a content service wearing a maintenance costume.
Analytics reporting
You should know, at a glance, whether your site is doing its job. A useful plan includes a simple monthly or quarterly summary: visitor numbers, where traffic is coming from, which pages are working, and — if relevant — form submissions or enquiries. This doesn't need to be a 40-page report. A short, honest summary is more useful than a dashboard nobody opens.
What should NOT be included
Be wary of plans that promise everything. A care plan is maintenance, not a design retainer. It should not be expected to cover:
- New pages or new sections of the site
- Redesigns or visual overhauls
- New features or functionality
- Marketing campaigns, SEO strategy, or ad management
These are all legitimate services — but they're project work, usually quoted and billed separately. A plan that blurs this line tends to either under-deliver on maintenance or over-promise on scope, and someone ends up disappointed.
How to compare plans
When you're looking at two care plans side by side, ignore the marketing language and check for these specifics:
- Is backup restoration actually tested, or just assumed to work?
- Is there a named response time commitment?
- Are updates tested on a staging copy before going live, or applied directly to the live site?
- What exactly counts as a "small edit" — is there a time or request limit per month?
- Can you cancel any time, and do you keep access until the end of the period you've already paid for?
That last point matters more than people expect. A plan that locks you into long notice periods, or cuts access off mid-month after you cancel, is not a plan designed with your interests in mind. Fair billing looks like: pay monthly by card, cancel whenever you like, keep full access through the end of the month you've already paid for.
The real cost of not having one
The cost of skipping maintenance rarely shows up as a single dramatic event. It shows up quietly:
- A contact form that's been silently failing for three weeks because a plugin update broke it, and nobody noticed
- A domain that lapses because a renewal email went to a spam folder, taking the whole site offline
- A hacked site that gets flagged by Google and quietly drops out of search results
- A slow site that visitors abandon before it even finishes loading
None of these require a catastrophic failure — just neglect. A care plan is, in effect, insurance against the boring failures that actually happen to most small business sites.
Where to go from here
If you're weighing up whether a care plan is worth it for your site, look at our pricing to see what's included at each level, from basic monitoring through to fuller ongoing support. If you'd rather talk it through first, get started here and tell us about your site — we'll tell you honestly whether you need one, and which level makes sense.