Choose WordPress website care plan: what actually affects your monthly cost

Most WordPress care plans look identical on paper. Updates, backups, security monitoring—they all promise the same.

The difference shows up when your site breaks at 9pm on a Friday. Or a plugin update wipes out your booking form. Or you need a quick feature added and realise your plan only covers emergencies.

We’ve built care plans for property businesses handling hundreds of enquiries a month. Museums trust us when downtime means lost ticket sales.

The right maintenance package depends on what your website actually does for your business. A brochure site with 200 visitors a month needs different support than a membership platform or a site handling daily transactions.

The wrong choice leaves you exposed when something fails. Or you end up paying monthly for monitoring you’ll never use.

Key takeaways

• WordPress care plans vary from basic monthly updates to full technical support with dedicated development time
• The right maintenance package comes down to what happens to your business when your site goes offline
• Choosing by feature lists often means paying for unused services or missing support when problems hit

Start with the website's job

The care package that makes sense depends on what your site actually does. A brochure site that gets updated twice a year needs plugin updates, reliable hosting, and backups.

That’s usually enough because not much changes between updates.

Sites that handle enquiries, bookings, sales, or donations work differently. Downtime costs money.

A broken contact form means lost leads. These sites need active monitoring, frequent backups, security patches, and someone available when something breaks.

If you’re running campaigns, publishing new content, or testing ways to improve conversions, basic maintenance won’t cut it. Site performance matters when you’re trying to grow.

You need work that improves speed, fixes problems before users notice, and keeps content management running smoothly. The Household Cavalry Museum site handles ticket sales and memberships, so we monitor it daily and keep response times fast during peak booking periods.

How we see care structured

A hosting layer

This covers managed hosting with basic site protection. You get security monitoring, automatic backups, and uptime guarantees.

A free SSL certificate comes standard. Some hosts throw in a CDN to speed up loading times.

This setup works when your site changes occasionally and someone internal handles content updates. The focus is on keeping things stable.

Active technical oversight

This layer adds proper website care through regular WordPress updates, plugin maintenance, tested deployments, and monthly reporting.

Caching gets configured properly. Backups run on a schedule.

You get priority support when something needs fixing. It fits businesses that depend on their website for revenue and can’t tolerate downtime.

Updates get tested before going live, and you see what’s happening through clear reports. There’s a defined process when issues come up.

Strategic delivery and improvement

This level combines maintenance with ongoing strategy and regular improvements. It includes check-ins, quarterly reviews, and performance work that happens proactively.

Marketing teams use this when their website needs to keep pace with campaigns. Content updates, speed optimisation, and performance tweaks become part of the workflow.

Purpose Homes scaled across multiple sites during rapid expansion. They needed more than hosting—someone to manage technical updates, improve performance, and keep the website aligned with business priorities.

Most agencies label these tiers differently, but the structure stays roughly the same.

What matters when choosing website maintenance

Updates need to happen regularly and safely. Test changes on a staging site before they touch your live environment, with a rollback plan ready if something breaks.

Daily automated backups should store copies offsite, separate from your hosting provider. Monthly reporting shows what’s been updated, what’s backed up, and what needs attention.

Security monitoring should run continuously. Security scans and malware removal need to be available when needed.

Uptime monitoring catches downtime before your visitors notice. Performance monitoring tracks load times, and database cleanup prevents slowdowns.

Look for plans that include performance optimisation, security scanning, and speed optimisation as ongoing tasks. A free SSL certificate, CDN setup, and caching configuration should come standard.

Support matters most when there’s a guaranteed response time. An email address alone won’t help when your site goes down at 9pm on a Friday.

When a plan stops fitting

A business chooses basic hosting because the site runs three pages and gets fifty visitors a week. The website sits there, unchanged for months.

Then the sales team starts running ads on LinkedIn. Five new landing pages go live in a fortnight.

Forms collect enquiries, traffic jumps to 800 visits a week, and the site needs weekly attention instead of quarterly check-ins. Plugin updates stack up because no one’s testing them.

Page speed drops from two seconds to seven. The contact form stops sending emails, and what used to need no maintenance now breaks twice a month.

The plan worked when it was chosen. It stopped working because the website’s job changed.

This happens when you pick based on what the site does in April and ignore what happens by September. A site audit shows what’s actually required now, which often looks nothing like what was needed twelve months ago.

Questions to ask before you choose

Start with how updates are handled and how often they run. Ask what backup system runs in the background, how frequently it saves your site, and how quickly they can restore everything if a hack or error wipes content.

Check what security monitoring they use and how they respond when a threat appears. Ask if they track uptime and what happens when the site goes offline.

Find out if they test forms, checkout flows, or other critical features. A contact form that stops working can cost you enquiries for weeks before anyone notices.

Ask what reporting you receive and whether it flags real problems or just lists completed tasks. Some providers send logs full of version numbers that tell you nothing.

Others include a monthly audit that points out broken links, slow pages, or declining search rankings. Check how much technical support time comes with the plan and how they handle troubleshooting beyond that limit.

If you need help with content changes or new features, ask how they prioritise requests. See if WordPress support includes priority support for urgent fixes.

A quick way to choose

If your site exists to build trust, managed hosting handles updates and backups.

If you need enquiries coming through reliably, a website maintenance plan keeps things secure and running without daily checking.

If your site generates actual income and you want someone improving it month by month, a full WordPress care plan does that. We’ve seen this with clients like Purpose Homes, where the site supported triple-digit growth because someone was actively maintaining and refining it.

Frequently asked questions about WordPress maintenance

What comes standard in a care plan, and what gets billed separately?

Most plans include plugin updates, theme updates, WordPress core updates, and automated backups that run daily or weekly. You also get malware scanning and uptime monitoring.

Support time usually comes as a fixed monthly allowance. Design changes, new features, or content updates fall outside basic maintenance and get billed separately.

Some providers bundle hosting into the monthly fee. Others charge it separately. SSL certificates used to be extra, but most hosts now include them at no additional cost.

If your site breaks and needs malware removal, that might use your support hours or trigger a separate fee depending on how severe the problem is.

How much maintenance does a brochure site need versus an eCommerce shop?

A brochure site with contact forms needs less monitoring than a shop processing payments. If your site goes down at 3am, it’s annoying. If your checkout fails during a product launch, you lose money.

Ecommerce sites need daily backups, faster response times, and someone who can fix payment gateway problems quickly. A 10-page service site can usually work with weekly backups and next-business-day support.

The number of plugins matters more than the site type. A shop running WooCommerce, a booking system, and several payment gateways needs careful update management. A portfolio site with five plugins needs less attention.

How frequently should WordPress updates get applied?

We apply core security updates within 48 hours of release. Minor version updates (like 6.4.1 to 6.4.2) go in the same day if they patch a vulnerability.

Theme updates and plugin updates get tested on a staging environment first, then applied to live sites within a week.

Major WordPress releases (like 6.4 to 6.5) wait two weeks after launch so early problems get patched. Leaving updates for months causes bigger problems than applying them regularly.

A site six months behind often breaks when you finally run them all at once because plugins have moved through several versions that don’t work together.

What does maintenance cost for a small site with 20 plugins?

For a 10-page WordPress site with 20 plugins, you’ll usually pay between £50 and £150 each month. That covers updates, backups, security monitoring, and some support time.

Plans at £50 to £75 include updates and basic care, but hosting isn’t part of the deal. You get about 30 minutes of support each month. If you pay £100 to £150, you’ll likely get hosting, daily backups, and an hour of support thrown in.

Price range	What you get	Support time
£50-£75	WordPress updates, automated backups, malware scanning	30 minutes/month
£100-£150	Everything above plus hosting, daily backups, staging site	1 hour/month

If you want design tweaks or new features, those use your included support time or get billed as extras. Growth Partner clients get maintenance bundled with ongoing development, which fits best for sites that change a lot.

What backup system should a care plan include?

Daily automated backups should save to an offsite location, and hang onto copies for at least 30 days. Weekly backups are the bare minimum for a business site, but it’s not enough for most people.

The backup should include the database, all WordPress files, uploaded media, and your wp-config file.

• The database
• All WordPress files
• Uploaded media
• The wp-config file

Some cheap plans only back up the database. That leaves you at risk of losing images if something goes sideways.

If your site breaks, you should be able to get a restore within four hours during business hours. We keep staging copies of client sites to test updates before they go live.

Offsite backups protect you if the hosting server fails. Backups stored on the same server as your site won’t help if that server catches fire or gets hacked.

What response times make sense for emergencies and routine tasks?

If your site gets hacked or checkout stops working, you want a response within two hours during business hours. Most care plans offer next-business-day for routine tasks, but jump in within two to four hours for anything critical.

Round-the-clock support costs extra. If your site takes orders overnight and downtime means missed sales, you’ll need 24/7 monitoring.

We aim for a one-hour response on critical problems during UK business hours. If checkout fails, we stop what we’re doing and fix it.

Routine tasks, like adding a page to the menu, go into the regular support queue. You’ll hear back within 24 hours.

Growth Partner clients get staging environments and a tested update process. For Southampton Athletic Club, every change gets checked before it goes live. Their site handles daily membership signups and payments, so a broken signup just means people give up and leave.

Critical issues include:

• Site completely down
• Checkout or payment gateway broken
• Malware detected
• Database errors preventing access

Routine issues include:

• Theme updates on low-traffic pages
• Minor content changes
• Plugin updates that don’t affect core functions

Common questions about care plans

What belongs in a monthly WordPress maintenance package?

A monthly package should cover plugin updates, theme updates, and WordPress core updates. These usually run weekly or as soon as updates come out.

Backups need to run daily and store off-site. If something breaks during an update, you’ll want a backup that actually works.

Security monitoring catches malware, failed login attempts, and file changes. This runs all the time, with alerts sent when something looks off.

Performance checks look at page speed, uptime, and server response times. If those drop, whoever manages your site should dig in before visitors notice.

Support access means there’s someone to contact when the site breaks or you need help. Response time depends on your plan.

How can I verify a plan handles security, updates and backups correctly?

Ask how often updates run and whether they test them first. Weekly automated updates with staging environment tests usually work better than monthly manual updates.

Check where backups store and how long they keep them. Off-site storage on Amazon S3 or similar protects against server failures. Thirty days of daily backups gives you plenty of restore points.

Security monitoring should include uptime checks, malware scans, and firewall logs. Ask what happens when the monitoring finds something and who responds.

Ask for examples of their update logs or security reports from current clients. If they can’t show you what monthly reporting looks like, you won’t know what you’re getting.

What support availability and response times work for site emergencies?

Office hours support (9am to 5pm, Monday to Friday) costs less but leaves you waiting if the site crashes at 6pm or on the weekend.

Extended hours or 24/7 emergency response costs more. This matters if you run e-commerce, take bookings, or lose revenue when the site goes down.

Response time means someone acknowledges the issue and starts looking into it within the promised window. Fix time depends on the problem, so it might take longer.

Most plans offer different response times based on how serious the issue is. A totally down site gets a faster response than a minor styling problem.

How do providers price care plans and what changes the cost?

Most providers charge a monthly fee based on service level. Basic plans covering updates and backups start around £50 to £150 per month. Plans with priority support, performance optimisation, and development hours run £200 to £500 per month.

Service level	Typical monthly cost	What's included
Essential	£50-£150	Updates, backups, security scans
Standard	£150-£300	Everything in Essential plus monitoring, monthly reports, business hours support
Premium	£300-£500+	Everything in Standard plus priority support, performance optimisation, development hours

Site complexity changes the price. A WooCommerce shop with custom integrations needs more care than a five-page brochure site.

Monthly support hours matter. Some plans include two hours for small changes, others include ten. Extra hours cost more.

Longer contracts sometimes lower monthly fees. Annual contracts often come out cheaper per month than rolling monthly deals.

What monthly reporting and checks should I receive?

Uptime reports show when your site was accessible and any downtime. Anything above 99.9% uptime means less than 45 minutes of downtime per month.

Update logs list which plugins, themes, and core files got updated, when, and if any issues popped up. This helps track work and spot problems later.

Core Web Vitals measure loading speed, interactivity, and visual stability. Google uses these for rankings. Monthly tracking shows if performance gets better or worse.

Security scan results cover malware checks, failed login attempts, and any vulnerabilities found. Clean scans confirm your site stayed safe that month.

Backup confirmations prove backups ran and list restore points. Failed backups need sorting out straight away.

Traffic and error logs highlight broken links, 404 errors, and odd traffic spikes. A jump in 404s might mean something broke during an update.

When should I hire a freelancer, agency, or in-house developer for site maintenance?

Freelancers usually cost less for basic care on a simple site. They handle updates and backups, but you might wait if they're busy or away.

If a freelancer becomes unavailable, you could end up stuck. That's a risk some people take to save money.

Agencies bring a team, so there's always someone around. When one person takes time off, someone else steps in and keeps things moving.

This matters most for e-commerce or membership sites, where downtime hits revenue. Agencies charge more, but you don't rely on just one person.

In-house developers suit teams making constant changes or running several sites. If you're adding new features every week, bringing someone on staff can make sense.

Hiring in-house gets expensive unless you need at least 20 hours of work every month. Most small sites don't hit that threshold.

It's really the site's complexity that shapes this choice. A charity with a basic brochure site won't need an in-house developer.

If you're a retailer shipping 500 orders a day, you'll probably need someone on hand all the time.