Website maintenance is sold as a monthly line item and rarely explained. Here is what the work actually consists of, so you can tell whether what you are paying for covers the things that genuinely go wrong — or only the things that are easy to put on an invoice.
Websites do not usually fail dramatically. They drift. An update is skipped, a form quietly stops delivering, a page gets slower, and none of it is visible until something has already been lost. Maintenance is the practice of noticing before that happens.
The parts that protect you
Updates, applied deliberately
WordPress core, themes and plugins are updated constantly, and a significant share of those updates close security holes that become publicly documented the moment they are released. An unpatched site is not obscure — the vulnerability is catalogued and the versions affected are listed.
The complication is that updates occasionally conflict with one another. So the useful version of this is not simply “click update”: it is taking a backup first, applying updates, then confirming the site still works. Automatic updates with nobody checking afterwards can leave a broken site live for days.
Backups you have actually restored
A backup nobody has ever tested is an assumption. The questions worth asking are how often backups run, where they are stored, how far back they go, and whether a restore has ever been performed. Backups kept only on the same server as the site are of limited use in precisely the scenario where you need them.
Uptime and security monitoring
Knowing your site is down matters most when you find out before your customers do. Monitoring should cover availability, unexpected file changes, and repeated failed login attempts — the last of which is the ordinary background noise of the internet and occasionally the start of something worse.
The part most plans leave out
Checking the things that generate business
This is the most valuable item on the list and the one most often missing. A contact form that stops delivering is the classic silent failure: the page loads perfectly, the visitor believes they have made contact, and the enquiry simply never arrives. Nothing on the front end reveals it, and uptime monitoring will report the site as entirely healthy throughout.
The same applies to click-to-call links, booking steps and checkout flows. If nobody tests these on a schedule, the first indication of a problem is usually a customer mentioning that they tried to get in touch weeks ago. Ask specifically whether functional testing of enquiry routes is included, because it frequently is not.
Watching performance drift
Pages accumulate images, scripts and plugins over time, and each addition costs a little speed. Because the decline is gradual it rarely triggers action, but the cumulative effect on both visitors and search visibility is real. Periodic review catches it while it is still a small fix.
A frequent and easily corrected example: photographs uploaded as PNG files rather than in a compressed format, which can make a page several times heavier than it needs to be for no visible gain in quality.
Questions worth asking before you sign
- What exactly is included each month? Updates only, or testing and monitoring too?
- Where are backups stored, and has a restore been tested?
- Are forms and enquiry routes functionally tested, and how often?
- Who is responsible if an update breaks something, and what is the response time?
- Do I keep access to my own hosting, domain and accounts? You should. If you cannot reach your own site without going through your agency, that becomes a problem at exactly the wrong moment.
- What is not covered? Content changes and new features are usually separate from maintenance, which is reasonable — but it should be stated rather than discovered later.
Doing it yourself
This is entirely viable, and some businesses handle it well. It works when one person genuinely owns the task, updates are applied promptly, a backup is taken first, and someone checks the site and submits a test enquiry afterwards. Putting it in a calendar rather than relying on remembering is most of the battle.
Where it tends to break down is not capability but attention. The gaps between updates grow during busy periods, which are usually the periods when you can least afford the site to be down. That is the honest case for handing it to someone else — not that it is difficult, but that it is easy to deprioritise.
How this relates to being found
Maintenance does not produce rankings. Speed, uptime and a site that has not been compromised all contribute to how a site performs in search, but that is SEO work and this is not a substitute for it. What neglect does do is steadily undermine results you have already paid to achieve, which is a slower and more frustrating way to lose ground.
Not sure what your current plan covers?
We can review the state of your site — what is out of date, whether backups exist and work, and whether your enquiry forms are actually delivering. A practical assessment of what is being looked after and what is not.