Website maintenance cost depends less on the number of pages than on what the plan promises: how often software is updated, how backups are tested, how fast someone answers when the site breaks and how many hours of changes are included. A small brochure site on a managed platform needs a fraction of the care that a shop with payments, accounts and integrations needs. This guide covers what plans include, tiers by scope, who can do the work, the cost of skipping it and how to read a plan.
Last updated: 28 October 2026.
What is website maintenance?
Website maintenance is the ongoing work that keeps a live site safe, fast, working and current after launch. It covers the technical layer (software updates, security, backups, hosting and monitoring) and the human layer (content edits, small improvements and someone to call when something goes wrong).
A website is not a printed brochure. It runs on software that changes every month: the content management system, its plugins or modules, the server’s language versions, the browsers that read it. Each of those moves on its own schedule. Maintenance is what keeps all of them in step, so the site you paid for keeps working the way it did on launch day.
In short: maintenance is insurance and upkeep in one. The technical part protects the investment and the visitors’ data; the human part keeps the site useful to the business. A plan is simply an agreement on how much of each you buy, and how quickly it is delivered.
What drives website maintenance cost?
No two plans are priced the same way, but the same handful of factors set the size of the bill. Knowing them lets you compare quotes on substance rather than on the headline figure.
- The platform. A self-hosted CMS with many plugins needs regular updates and testing. A hosted builder takes care of core updates itself, which shrinks the technical line but limits what can be changed.
- The number of moving parts. Every plugin, integration, form, payment gateway and third-party script is something that can break after an update.
- What the site handles. Accounts, orders and personal data raise the stakes for security and backups, and so the level of care.
- Response times. A promise to act within an hour, around the clock, costs much more than next-working-day support.
- Included hours. Content edits and small changes are usually the largest variable share of a plan.
- Traffic and hosting. More visitors and heavier pages need stronger hosting and closer monitoring.
At Odduel, a creative and technology agency in Barcelona and São Paulo, we scope maintenance and support the same way we scope a build: by what the site does, not by a fixed package. Automated tools now carry much of the routine checking (update testing, uptime alerts, scans, first-pass reports), so the budget goes where judgement is needed: reviewing what changed, fixing what an update broke and improving the site.
What does a website maintenance plan include?
A complete plan has seven parts. Some plans bundle all of them; others sell them separately. When you compare quotes, check each line, because a low price often means one of them is missing.
Software updates
The core system, the theme and every plugin or module receive updates for security and compatibility. A good plan applies them on a schedule, tests the site afterwards on a staging copy or straight after the change, and keeps a way back if an update breaks a page. “Automatic updates” without testing is not the same service.
Backups and restores
Backups should run daily for most business sites, more often for shops with frequent orders, and be stored away from the server that hosts the site. Ask how long they are kept and, above all, whether restores are tested. A backup nobody has ever restored is a hope, not a safeguard.
Security
Security work includes a web application firewall, malware scanning, login protection, secure configuration and fast patching when a vulnerability is published. Under the General Data Protection Regulation, Article 32, anyone processing personal data must take appropriate technical measures to keep it secure, and a contact form already counts. If your site runs on WordPress, our guide to WordPress security goes into the details.
Monitoring
Uptime monitoring checks every few minutes that the site answers, and alerts someone when it does not. Better plans also watch the certificate’s expiry date, the domain renewal, broken forms, page speed and search-engine errors. Monitoring is cheap to run; the value lies in who reads the alert and how fast they act.
Hosting
Some plans include hosting, others leave it to you. Included hosting simplifies responsibility: one party answers for the server and the site. Check where the server is located (a question for data protection), what resources are reserved, and whether the plan covers the server’s own updates or only the website.
Content edits and small changes
This is the part a business notices most: new text, a team page, a fresh case study, a banner for a campaign. Plans usually include a set number of hours each month. Ask whether unused hours roll over, what counts as a “small change” and what is quoted separately as a project.
Support and reporting
Support means a named route for requests (email, ticket, phone) with a stated response time. Reporting means a short monthly summary of what was updated, what was found, what was fixed and how the site performed. Without a report you are paying for work you cannot see.
Website maintenance plans by scope
Plans rarely differ in kind; they differ in depth. The table below sets out four common tiers by scope. It shows what is typically included, not a price, because the price follows the platform and the number of moving parts described above.
| Essential | Standard | Business | Critical | |
|---|---|---|---|---|
| Suits | Small brochure site | Company site with forms and a blog | Shop or site with accounts | Revenue depends on every hour online |
| Updates | Monthly, tested | Every two weeks, tested on staging | Weekly, tested on staging | As released, with a planned window |
| Backups | Daily, kept off-site | Daily, restore tested each quarter | Several a day, restore tested monthly | Near real time, restore drills |
| Security | Firewall and scans | Plus hardening and login protection | Plus vulnerability alerts and reviews | Plus incident plan and named responder |
| Monitoring | Uptime | Uptime, certificate, forms | Plus speed and search errors | Around the clock, with escalation |
| Content hours | None or on request | A few hours a month | A larger monthly allowance | Dedicated time each week |
| Response time | Next working day | Same working day | Within working hours, priority | Within the hour, at any time |
| Reporting | Short monthly note | Monthly report | Monthly report and quarterly review | Monthly report and service reviews |
Read across a row rather than down a column. Most businesses do not need the Critical tier, but many shops sit on an Essential plan they outgrew the day they started taking payments. Pick the tier by what an hour offline would cost you, then adjust the content hours to how often you actually change the site.
In-house, freelancer or agency?
Three kinds of people can maintain a website. Each has a real place, and the honest choice depends on the size of the site and on who needs to be reachable when it breaks.
| In-house staff | Freelancer | Agency | |
|---|---|---|---|
| Cost structure | A salary, whatever the workload | Hourly or a small monthly fee | A monthly plan by scope |
| Knowledge of the business | Deepest | Grows over time | Grows over time, kept in documentation |
| Cover for holidays and illness | Needs a second person | Often none | Built into the plan |
| Range of skills | Limited to the hire | Usually one specialism | Development, design, content, SEO |
| Response at night or weekends | Rarely | Depends on the person | Set in the agreement |
| Best for | Large sites with daily changes | Small sites with simple needs | Growing sites where several skills meet |
An in-house developer makes sense once the site changes every day and needs constant attention; below that, most of the salary pays for waiting. A freelancer is often the most economical choice for a simple site, as long as you accept the risk of a single point of contact. An agency costs more than the cheapest freelancer for the same hours, but you buy cover, a range of skills and a process. Our comparison for redesigns, agency, freelancer or in-house for a website redesign, applies to maintenance too.
What does skipping maintenance really cost?
The bill for no maintenance never arrives as a monthly invoice, which is why it is easy to underestimate. It arrives all at once, usually at the worst moment.
Security incidents
Outdated plugins are one of the most common ways sites are compromised. Cleaning a hacked site, restoring it, finding the way in and closing it is emergency work, charged as such. If personal data was exposed, Article 33 of the same regulation may require you to notify the supervisory authority within 72 hours of becoming aware of the breach, and the time spent on that falls on you.
Downtime and lost enquiries
A site can be down for days before anyone inside the business notices, especially at weekends. A contact form can stop sending messages for weeks with no visible error. Every lost order or unanswered enquiry is a cost, even if it never shows up in the accounts.
Search visibility
Slow pages, broken links, expired certificates and server errors all harm how search engines see a site. Recovering lost positions takes far longer than keeping them.
Accessibility and compliance
Since 28 June 2025, the European Accessibility Act has applied to many consumer services sold online in the EU, including e-commerce. An accessible site can drift out of conformity as content is added without care. Maintenance is where new pages and components get checked.
The forced rebuild
The largest hidden cost is the rebuild. A site left alone for a few years can reach a point where the software can no longer be updated in steps: the theme no longer works with the current system, plugins are abandoned, the server’s language version is retired. At that point, maintenance becomes a new project. Our guide on how much a website costs shows what that involves.
How do you read a maintenance plan?
A maintenance plan reads like a short contract, and should be read like one. Before you sign, go through it in this order.
- Check the scope against your site. Does the plan name your platform, your plugins, your shop, your integrations? A generic list of tasks may not cover what you actually run.
- Find the response time, and when it applies. “Four hours” during working days in one time zone is not the same as four hours at any time.
- Ask how updates are tested. On a staging copy, straight after the change, or not at all? Who checks the pages that matter most, such as the checkout and the forms?
- Ask about backups and restores. Where are backups stored, how long are they kept and when was a restore last tested?
- Read what the included hours cover. What counts as a small change, do unused hours roll over and what is the rate beyond them?
- Look for what is excluded. Recovery after a hack, third-party licences, hosting and redesign work are often outside the plan.
- Confirm who owns what. You should own the domain, the hosting account (or have full access to it), the content and the code, and receive the admin access in writing.
- Check the exit. How much notice is needed, and what do you receive when you leave: backups, credentials, documentation?
- Ask for a sample report. It shows what you will see each month, and how seriously the provider takes the work.
A fair quote for maintenance follows a short brief: the address of the site, the platform, what it does for the business and how fast you need answers. With that, a provider can audit the site and propose a fixed monthly scope instead of a guess.
How much maintenance does your site need?
The right level is set by consequences, not by the size of the site. Ask three questions.
What happens if the site is offline for a day? If the answer is “a few people cannot read about us”, an Essential plan with good backups is enough. If the answer is “we lose orders”, you need tested updates, frequent backups and a same-day response at least.
How often do you change the content? A business that publishes every week needs included hours; one that updates its site twice a year can buy changes as small projects when they come up.
What data does the site hold? Names and email addresses from a form already bring obligations. Accounts, orders and payments call for a stronger security line and a written plan for incidents.
Before you sign up for any plan, it helps to know the state of the site today. Running through a website QA checklist gives you a baseline of what works and what does not, and makes the first month of any plan more useful.
Questions people ask
How much should website maintenance cost?
It depends on the platform, the number of plugins and integrations, what the site handles (forms, orders, accounts), the response time you need and the content hours included. A simple brochure site needs a fraction of the care a busy shop needs. The fairest way to know is a short brief and an audit, followed by a fixed monthly quote.
Is website maintenance included in hosting?
Usually not in full. Hosting companies keep the server running and may update the core system, but they rarely test plugin updates, fix broken pages, edit content or answer for the website itself. Managed hosting covers more than basic hosting. Read what is promised for the site, not only for the server, before assuming you are covered.
Can I maintain my website myself?
Yes, for a simple site, if someone in the business has the time and the discipline. You need to apply updates, check the pages afterwards, keep tested backups away from the server and watch for alerts. Most owners stop once the site handles payments or personal data, or when nobody notices a problem for a week.
What is the difference between maintenance and support?
Maintenance is the scheduled work that prevents problems: updates, backups, security, monitoring and reports. Support is the response when something is needed: a fix, a question, a content change or a small improvement. Most plans combine both, but check the balance, because a plan heavy on prevention may include very few hours for your own requests.
How often should a website be updated?
Security updates should be applied as soon as they are tested, often within days of release. Routine updates for the core system, theme and plugins usually follow a weekly, fortnightly or monthly cycle depending on the plan. Content is a separate question: update it whenever the business changes, and review every page at least once a year.
What happens if I stop paying for maintenance?
Nothing visible at first. The site keeps running, but updates stop, backups may end and nobody watches the alerts. Over months the software falls behind and the risk of a security problem grows. Before stopping, make sure you hold the domain, the hosting access, a recent backup and the admin credentials in your own name.
Maintenance is the part of a website nobody sees when it is done well, and everybody notices when it is not. Start by listing what your site does for the business and how long it can afford to be offline; that tells you the scope. If you would like an audit of your current site and a plan built around it, see our website maintenance and support service or tell us about your site.
