Website maintenance for a small business isn’t one line item — it’s five distinct areas of work that most owners lump together into a monthly bill they don’t quite understand. This post breaks down what maintenance actually covers, what’s essential vs optional, and how to work out whether you’re paying for the right things or paying twice for the same things.
By Christopher Mollard, founder of J4G Design — Fulham, running website maintenance for small businesses since 2017. Last updated 10 Sep 2026
What does website maintenance actually cover?
It somewhat depends on what maintenance plan you’re on, however for small business website maintenance breaks down into these distinct areas:
- Security and updates — WordPress core updates, plugin updates, security scanning, backup management
- Hosting — where the site lives, uptime monitoring, SSL certificate renewal
- Content updates — editing pages, adding blog posts, swapping images, updating team members
- Technical health — page speed monitoring, broken link fixes, uptime response, error monitoring
- Small design or feature changes — occasional layout tweaks, new page additions, form updates
Different providers bundle these differently, which is why comparing quotes is difficult.
What’s essential to pay for on a small business website?
Two things are non-negotiable for any business-critical website:
- Regular WordPress core and plugin updates — outdated plugins are the #1 way small business sites get hacked. Without ongoing updates, security risk compounds monthly.
- Working backups, stored offsite — daily automated backups, kept in remote storage, tested for restore. If the site fails, you have a recent clean copy.
Everything else is business-dependent. A site earning revenue needs uptime monitoring. A site that gets one blog post a year doesn’t need weekly content admin. Pay for what your business actually uses.
What’s optional for most small businesses?
These are some commonly-billed maintenance items that most small businesses don’t actually need:
- Daily manual site checks — automated monitoring does this cheaper and more reliably
- Unlimited content changes — if you edit the site twice a year, this is subsidising other clients’ heavier usage
If any of these are listed on your current maintenance contract, ask what they actually deliver in practice.
What’s the difference between website maintenance and website hosting?
Hosting is where the site lives — the server capacity, bandwidth and infrastructure. Maintenance is the ongoing work done to keep the site secure, updated and functional.
Most small business hosting includes zero maintenance beyond keeping the server running. Some providers offer “managed WordPress hosting” that includes core updates but rarely plugin updates or design work.
Confusing the two is a common way to end up paying twice — once to the hosting provider for “maintenance” (that’s usually just uptime) and once to a designer for actual maintenance work.
What should be in a website maintenance contract?
A useful maintenance contract lists specific items (although may not mention the technical specifics):
- Update frequency — how often WordPress core and plugins are updated (monthly is standard)
- Backup frequency and retention — daily, kept for at least 30 days
- Where backups are stored — remote storage, not on the same server as the site
- Uptime monitoring — what happens if the site goes down at 3am
- Response time for issues — how quickly you get a reply to an urgent problem
- Content changes included per month — small text edits, image swaps
- What’s out of scope — new page builds, brand changes, e-commerce work (this might not be listed but will have been mentioned somewhere before)
If your current arrangement doesn’t specify these, ask for it in writing. If a provider won’t put it in writing, that’s the answer.
What are the tiers of website maintenance that make sense for a small business?
Three levels of website maintenance that reflect real small business needs:
- Care Standard — updates, backups, security scanning, uptime monitoring. What every business site needs.
- Care Standard + retainer changes — Care Standard plus a set number of small content changes each month. Good for businesses that update the site 1–3 times a month.
- Full retainer with proactive work — Care Standard plus a monthly allowance of design or content work. Suitable for businesses growing quickly or running frequent campaigns.
Owners who need less than Care Standard’s scope should question whether they need a maintenance contract at all — some sites genuinely don’t. Ones who need more should track whether their retainer allowance actually gets used, or whether they’re paying for capacity they don’t consume.
How do I know if I’m overpaying for website maintenance?
Three questions to run against your current contract:
- What did you use last month? If the contract includes content changes and you didn’t request any, you paid for capacity that expired
- What was actually done in the last 90 days? Ask for a change log. If the answer is vague, you’re paying for peace of mind more than services
- What would happen if you dropped a tier? Some providers structure tiers so you can only go up. Others let you flex. Which one do you have?
The right maintenance contract matches actual usage, has clear scope, and includes a change log. If yours doesn’t, happy to take a look and give you an honest read.