WordPress maintenance: what it actually includes and what it costs in 2026

Most small-business websites share the same biography: somebody built them three or four years ago, they looked great at launch, and nobody has really looked at them since. They work — right up until the day they don't. The contact form has been silently failing for two months. The security certificate expired on a Tuesday and browsers started greeting visitors with a red warning. Or the expensive version: an outdated plugin let someone in.

Maintenance exists precisely for this. The problem is that "maintenance" has come to mean anything from a robot pressing the update button once a month to a human who actually answers when you call. Prices differ tenfold between those two, and they should. Let's sort it out.

What serious maintenance includes

Updates with a safety net, not updates on courage. WordPress core, themes and plugins ship updates constantly, and many of them patch security holes that are already public, documented for attackers too. What separates professionals from amateurs isn't pressing the button; it's what happens before: a backup taken seconds ahead of every update wave, so any incompatibility is reversible in minutes instead of becoming a weekend emergency.

Backups that restore, not backups that merely exist. This is the most common illusion of safety in the whole trade. We once took over a site with backups made diligently, daily, for months. At the first real test, the archives turned out to be unrestorable. All of them. A backup that has never been through a restore test isn't a backup; it's a file that keeps you warm. In a serious care plan, the restore test is a recurring procedure, not a promise.

Daily monitoring, not "the clients will tell us". The site down at 3 a.m., the form returning errors, a page broken after an update: the person paid for this should find out first, not the customer who was trying to write to you. Uptime monitoring is technically trivial, which is exactly why its absence is hard to excuse.

A monthly report in plain language. Not an auto-generated export with forty rows of jargon — a few honest paragraphs: what was updated, what got fixed, what deserves attention next month. If your provider can't explain in simple words what they did for your money, it's usually because they didn't do much.

What maintenance does NOT include (and rightly so)

Redesigns, new features, marketing campaigns and content writing are project work, not upkeep. A plan that claims to include all of it at maintenance prices either does it badly or doesn't do it at all. The clear separation works in your favour: you know exactly what you get monthly, and you get a transparent quote when you want more.

What it costs in 2026

Public offers settle fairly cleanly into three tiers:

| Tier | Monthly price | What you actually get | |---|---|---| | Automated | ~€20-50 | scheduled updates, standard backups, a human only when something burns | | Standard, human-run | ~€60-100 | human monitoring, restore-tested backups, monthly report, same-day response | | Extended, with SLA | €180+ | contractually guaranteed reaction times, ongoing optimisation, priority support |

The middle tier is the one that makes sense for most small and mid-sized businesses: serious enough that someone actually looks at your site daily, without the cost of an SLA a brochure site rarely needs. That's where we positioned our own creation and care service — care plans from €60/month, with exactly the list above: restore-tested backups, daily monitoring, a monthly report without jargon.

How to vet a provider before signing

Four short questions tell you almost everything:

1. "When did you last test a backup restore?" — if the answer is a long pause, you have your answer.
2. "What happens, concretely, if an update breaks the site?" — you're listening for "the backup taken beforehand" and "we roll back in X minutes", not "that's never happened".
3. "How do I find out what you did this month?" — a monthly report, or silence for a fee.
4. "What's not included?" — a serious provider answers instantly and clearly. One who says "whatever you need" has defined nothing.

Not sure what state your site is in right now?

That's exactly what our free site health report is for: give us your website address and within 24 working hours you get 3-4 concrete findings by email — mobile speed, security, visible problems — without us installing anything or asking for a single password. And if everything's fine, we'll say that just as plainly: it's the cheapest good night's sleep available.