Short answer: website maintenance means keeping WordPress, the theme and plugins updated, taking backups you can restore, monitoring uptime, renewing the domain and SSL, keeping pages fast and making small content edits. Without it a site rarely fails at once; it gets slower and more vulnerable until something breaks.

Website maintenance is the ongoing work that keeps a site secure, fast and working after launch: updating WordPress core, the theme and plugins, keeping backups you can actually restore, monitoring uptime, renewing the domain and SSL certificate, keeping pages fast and making small content changes. Without it, a site rarely fails all at once. It gets slower, more vulnerable and more fragile until an update, an expired renewal or an attack finally breaks it.

Here is what each part involves, what goes wrong when it is skipped, and a checklist you can use whoever does the work.

What does website maintenance include?

WordPress core, theme and plugin updates

WordPress, its themes and its plugins are updated regularly by their developers, often to close security holes. Skipping updates leaves known weaknesses open; applying them carelessly can break the site. Good practice looks like this:

take a fresh backup before updating
update core, theme and plugins, then check the pages that matter: home, contact form, and checkout if you run a shop
try bigger updates on a staging copy first
remove plugins and themes you no longer use, because unused code can still be a way in

Security

Updates are the foundation, but not the whole job:

strong, unique passwords and two-factor authentication for admin accounts
only the admin users you actually need, each with the lowest role that works
protection against repeated login attempts
regular malware scans and a firewall at hosting or site level
a PHP version that still receives security updates

Backups and restore testing

A backup only counts if it can be restored. Check four things:

Frequency. Daily is sensible for most business sites. An online store takes orders every day, so a week-old backup means lost orders.
Location. Copies stored away from the main server, so one failure does not take out both.
Retention. Enough older copies to go back to a point before the problem started, because a hack is not always noticed straight away.
Restore tests. Restore a backup to a test copy now and then, so you know it works before you need it.

Uptime monitoring

An external service checks the site every few minutes and alerts someone when it goes down. It is also worth checking the things that fail silently: a contact form that stops delivering email looks fine to visitors, but no enquiries arrive.

Domain and SSL renewals

Your domain and your SSL certificate both expire. If the domain lapses, the website and any email on it stop working, and if it is not renewed in time someone else can register it. If the SSL certificate lapses, browsers warn visitors that the site is not secure. Maintenance means auto-renewal where possible, up-to-date contact details at the registrar, and knowing exactly who holds the account. If you are planning a new site, our website preparation checklist covers the domain questions to settle before launch.

Performance

Sites get slower over time: more plugins, heavier images, a database full of old revisions and spam. Regular performance work includes compressing images, caching, cleaning the database and checking page speed on mobile. Speed affects both how visitors behave and how search engines rank your pages; our SEO and speed service goes into more detail.

Content edits and technical support

Opening hours change, prices go up, new services appear. Outdated information quietly costs you trust. Maintenance should include someone who can make those changes and answer “why is this happening?” when something looks wrong.

What happens without maintenance?

These are the typical ways an unmaintained site fails:

A plugin breaks after an update. An automatic or rushed update conflicts with the theme or another plugin. The result can be a blank page, a broken layout or a checkout that no longer takes payments.
The domain expires. The renewal notice goes to an old email address, the card on file has expired, and one morning the website and the email are gone.
The site gets hacked. Outdated plugins are a common way in. Hacked sites end up with spam pages, redirects to other sites or warnings in browsers and search results, and some hosts suspend them.
Pages get slow. Nobody notices the gradual slowdown until visitors start leaving and rankings slip.
Something fails silently. The contact form stopped sending weeks ago, or the SSL certificate expired over the weekend.
There is no usable backup. The only copy is months old, sits on the same server that just failed, or has never been tested.

Almost all of these are cheap to prevent and expensive to fix.

We do this work every month for the client sites on our care plan, from Optimus Center’s multi-section site for a translation agency and language centre to a WooCommerce jewellery store.

A practical website maintenance checklist

Use this list whether you maintain the site yourself or want to check the work of whoever does.

Every month

Confirm a recent backup exists before making any changes
Update WordPress core, the theme and plugins
After updating, check the home page, key service pages, the contact form and checkout
Review security scan results and failed login alerts
Check the uptime report for outages
Delete plugins and themes you no longer use
Update outdated content: prices, hours, team, offers

Every quarter

Restore a backup to a test copy and confirm it works
Review admin users and remove anyone who no longer needs access
Test page speed on mobile for your most important pages
Clean up the database and check that new images are compressed
Confirm your PHP version is still supported
Look for broken links and errors in Google Search Console

Every year

Check the domain renewal date and your contact details at the registrar
Confirm the SSL certificate renews automatically
Review your hosting plan: the renewal price and what it includes
Review your privacy and cookie policies
Check renewal dates for any paid plugin or theme licences

How much does website maintenance cost?

Website maintenance cost depends almost entirely on what is included, so compare the scope before you compare prices. Ask any provider:

Is hosting included, or billed separately?
Is the domain renewal included?
How often are updates applied, and does someone check the site afterwards?
How often are backups taken, where are they stored, and are restores tested?
Are content edits included, or charged per job?
What happens if the site is hacked or goes down?
Is there a minimum term, and who owns the domain and the files?

For reference, the B63 care plan is €150 per month for 24 months. It includes the website build itself with €0 upfront, secure hosting, domain renewal, WordPress, theme and plugin updates, daily backups, performance optimisation, technical support and content edits on request. The details are on our website maintenance page. If you would rather do the work yourself, our comparison of the monthly plan and a one-time build helps you price that option honestly.

FAQ

Can’t I just switch on automatic updates?

Automatic updates are useful for small security releases, but they apply changes with nobody watching. If an update breaks something, you may not find out until a customer tells you. At the very least, pair them with daily backups and a regular look at the site.

How often should a WordPress site be updated?

Check for updates at least once a month and apply security updates as soon as practical. Online stores and sites with many plugins benefit from more frequent checks.

Does a small site that rarely changes still need maintenance?

Yes. Even if your content never changes, the software around it does. Plugins, PHP versions, browsers and security threats all move on, and the domain and SSL certificate expire regardless.

What does B63’s website maintenance include?

Secure hosting, domain renewal, WordPress, theme and plugin updates, daily backups, performance optimisation, technical support and content edits on request, all within the €150 monthly care plan.

If you are not sure what state your current site is in, start with the monthly checklist above: it will quickly show you what has been neglected. And if you would rather hand the whole list to someone else, see how the care plan works or get in touch and we will talk it through.

What website maintenance actually includes (and what happens without it)