What website maintenance actually covers, honestly
What does website maintenance include?
Hosting, the domain and certificates, security and platform updates, backups, uptime monitoring, and a reasonable amount of change work. Anything beyond that should be named specifically. A fee that lists only "maintenance" is not a scope, it is a word.
"Maintenance" is one of those words that survives on a quote because nobody wants to admit they are not sure what it means. Here is what it should cover, item by item, and what is filler.
The parts that are genuinely necessary
Hosting. Somewhere for the site to live. Cheap for a small business site, and a real cost.
The domain, renewed. A few pounds a year, and the single most consequential renewal you have. An expired domain takes down your website and your email at the same time, and if it lapses long enough somebody else can buy it.
Certificates. The padlock. These renew automatically almost everywhere now, and when they do not, browsers show visitors a full-page security warning. It is a rare failure with a severe effect.
Security and platform updates. WordPress and similar need regular updating, and an out-of-date installation is the most common way a small business site gets defaced or hijacked. A site built as static files has much less of this, which is a genuine argument for building them that way.
Backups, and having tried restoring one. An untested backup is a belief, not a backup.
Uptime monitoring. So that you find out your site is down from a monitor rather than from a customer.
Add those honestly and, for a small business site, it is a modest monthly figure. Anyone charging substantially more is charging for something else, which is fine if they say what.
The part that is worth the most
Changes, done for you.
This is what separates a fee that earns its place from a hosting bill with a nicer name. The realistic failure for a small business site is not being hacked. It is going stale, because every edit needs chasing someone.
An allowance generous enough that you never hesitate to ask is worth more than any of the technical items above, because it is the one that keeps the site true.
Watch how it is worded. "Up to 30 minutes of changes per month" is a scope. "Reasonable changes included" is a relationship, and works well right up until you and your supplier disagree about "reasonable". Prefer something countable.
What is often padding
Monthly reports nobody reads. A PDF of traffic figures, automatically generated. If it does not come with a sentence saying what changed and what to do about it, it is evidence of activity rather than activity.
"SEO included" with no specifics. Real search work is research, page changes, listings work and links, and it can be described. If nobody can tell you what was done last month, nothing was.
Security plugins listed as a service. Installing one is a ten-minute job done once.
Vague "performance optimisation". Ask what the page speed score was before and after. If there is no number, there was no optimisation.
How to tell which you are paying for
One question, asked once a year:
What did you actually do on my site in the last twelve months?
A good supplier answers with specifics. Updated these things, changed that page in March, renewed the certificate, fixed the form when the mail provider changed. It might be a short list, and that is fine.
A poor supplier answers with the categories again: monitoring, security, maintenance. That means nothing happened, which may genuinely be correct, but you should then be paying for availability at availability prices rather than for work at work prices.
The thing most plans leave out
Almost every maintenance plan covers the website and stops at its edge. Meanwhile, for a local business, the things that most affect whether anyone finds you sit outside it:
- The Google Business Profile, its hours, categories and photographs
- Reviews arriving, or not
- Whether your details are consistent across the internet
- What search engines and AI assistants currently say about you
None of that is website maintenance in the traditional sense, and all of it matters more than a plugin update. It is why our own specification is deliberately not organised around the website: the site is one of seven parts, and it is rarely the part holding a business back.
Worth asking your current supplier which of those four they consider theirs. The answer is often none, which is not a criticism, but it does tell you what is not being looked after by anybody.
Common questions
- Do I really need a maintenance plan?
- You need hosting, a renewed domain, valid certificates and someone to make changes. Whether that is bundled as a plan or bought separately matters less than whether all four are actually somebody's job.
- Why is my maintenance fee higher than my hosting cost?
- Because hosting is the cheapest part. Most of a fair fee is availability, meaning someone reserving time to respond, and that costs whether or not you use it in a given month.
- What is a reasonable number of changes to include?
- For a small business site, enough that you never hesitate to ask for a price or phone number update. If you find yourself weighing up whether a change is worth raising, the allowance is too tight.