Updates and patching
Platform, plugin and dependency updates applied and tested, so security fixes land before they are needed.
A website is a running system, not a finished object. Small business website maintenance covers the updates, monitoring, backups and checks that keep it fast, secure and actually able to take an enquiry — including the failures nobody notices until a customer mentions them.
No vague retainer. Each item below is either in your plan or it is not, and you can see which.
Platform, plugin and dependency updates applied and tested, so security fixes land before they are needed.
Regular automated backups held off-site, with a restore procedure that has actually been tested.
Uptime checks with alerting, so a site going down is something we tell you about rather than the other way round.
Page speed and Core Web Vitals tracked over time, with image, script and caching work when they drift.
Periodic live testing of contact forms, notifications and connected workflows. Silent form failure is the most expensive bug a business site can have.
A defined allowance of content and page edits each month — new services, updated pricing, staff changes, seasonal notices.
An outage is obvious and gets fixed. The expensive problems are the ones nobody sees: a contact form that stopped delivering after a DNS change, a certificate that expired over a weekend, a page that dropped out of the index, a script that doubled load time on mobile. Each one runs for weeks before somebody happens to notice, and every enquiry lost in that window was already paid for.
Monitoring exists to shorten that window. Most of what maintenance buys is not repair — it is the difference between finding a problem in an hour and finding it in a month.
Search Console errors, broken internal links, redirect chains, slow pages and crawl problems are all technical maintenance issues that show up as ranking problems. Handling them as part of routine upkeep is considerably cheaper than commissioning an SEO audit later to discover the site has been quietly degrading.
New pages, redesigns, new functionality and large content projects are quoted separately. That keeps the monthly figure honest and predictable — you are not paying a padded retainer in case you need something, and we are not incentivised to do less.
If someone else built it, the first step is an audit: platform and versions, hosting arrangement, whether backups exist, outstanding security issues, and anything that will cause trouble later. You get that summary in writing before committing to anything ongoing. Occasionally it shows the honest recommendation is a website redesign rather than maintaining a site that is past economic repair.
Software and platform updates, security patching, backups, uptime and performance monitoring, broken link and form checks, Search Console error handling, and a defined allowance of content edits each month. Larger changes are quoted separately so the monthly fee stays predictable.
For anything that generates enquiries, yes. Unpatched software gets exploited, forms break silently after a provider change, and performance degrades as content accumulates. The common failure is not dramatic — it is a contact form that has been failing quietly for six weeks.
Usually. We start with an audit of the current state — platform, versions, hosting, backups, known issues — and give you a written summary before agreeing to an ongoing arrangement, so neither side inherits surprises.
A site that is down or a broken contact form is treated as urgent and handled the same working day. Routine edits are batched into the normal cycle. Exact response commitments are written into the agreement rather than implied.
Yes. Page speed and Core Web Vitals are tracked over time, because degradation is gradual and rarely noticed by anyone who visits the site daily. Website performance optimization is part of the ongoing work, not a separate upsell.
You take everything with you: domain, hosting account, code, content, analytics and any automation workflows. There is no notice trap and no data held hostage.
Send the domain and who currently looks after it. You will get a written summary of technical health, risks and what maintenance would realistically cover.