Services · Monthly maintenance
The updates get done. You stop wondering.
WordPress maintenance every month. Updates applied and checked, the site scanned, a clean backup taken, and if an update breaks something, the people who applied it deal with it.
Who this is for
Your site works, and you would like it to keep working. It was built properly, by us or by someone else, and since then the updates have happened in bursts: all at once after a scare, then nothing for months.
You probably already know the feeling. The dashboard says eleven updates are waiting. You are fairly sure one of them is important. You are also fairly sure that clicking the button might break the booking form the week before your busy season.
That is exactly the decision this plan takes off your desk. If someone on your team updates WordPress confidently and just wants to get better at it, training may be all you need, and we will tell you so.
What you get
- Core, theme and plugin updates. Applied every month, then checked, because an update that breaks the enquiry form is not finished.
- Watched every day. We check daily for newly published flaws in the plugins and themes your site actually runs. The serious ones do not wait for the monthly cycle.
- A security scan. Every month the site is scanned for malware and signs of tampering. If scanning was never set up, we set it up first.
- A backup before, and a clean one after. Nothing changes until there is a copy to come back to, and each month finishes with a clean backup.
- Malware cleanup included. If a site on the plan is infected, cleaning it is part of the plan, not a separate invoice.
- Plugins kept honest. Abandoned, duplicated or unused plugins get flagged rather than left installed as an open side door.
- Licences tracked. Bring your own premium plugin or theme licences and we remind you when one is about to lapse. An expired licence quietly stops security updates.
- Human oversight. A person looks at what software misses: a comment section filling with spam, a contact form that has stopped sending, email from your site that no longer arrives, anything that does not look right.
- A person who knows the site. When an update needs a decision, you hear from us with the options in plain English, not a log file.
Why monthly is the minimum
A skipped update tells strangers which lock is broken.
When a plugin developer fixes a security flaw, the fix and a description of the flaw go public together. From that moment anyone can see what the old version got wrong, and automated scanners start looking for sites still running it. For the flaws attackers care most about, the median gap between going public and the first attack is about five hours, according to Patchstack’s research.
So the monthly cycle is the floor, not the plan. The Australian Signals Directorate’s Essential Eight expects internet-facing services to be patched within 48 hours when a working exploit exists. Your website is an internet-facing service. The daily watch is how the urgent ones get dealt with between cycles, not at the end of the month.
How it works
What it costs
From$70a month, inc GST
One standard WordPress site.
Shops, heavy custom builds and very long plugin lists are quoted before we start. If you are moving to our managed hosting as well, the platform and the site are then looked after by the same people.
Who does the work
Maintained by the same people who clean up hacked sites. That changes what we notice.
An update setting that has quietly switched itself off. An administrator account nobody recognises. A plugin that is still installed but has not been maintained by its developer for two years. Those are the things we find inside compromised sites, so they are the things we look for in healthy ones. As Luke Elin puts it in The Same Seven Mistakes, the technology has changed completely and the mistakes have not.
Common questions
Do you maintain sites you did not build?
What if an update breaks something?
Is malware cleanup really included?
Do I need your hosting as well?
What does “from $70” cover?
Next step
Hand over the updates.
Send us the site address. We will look at what is installed and tell you what needs doing first, before the first month begins. From then on, the updates are ours to worry about.