WordPress maintenance, three tiers, no upsell games.
A WordPress site isn’t “set it and forget it.” Plugins update. WordPress core changes. Security threats evolve. And most site problems don’t start with a big crash — they start with one missed update, one vulnerable plugin, or one backup you thought was running. The three maintenance plans below cover that, at three different intensities. Pick the one that matches how active your site is.
Side-by-side. Smallest to largest.
| SIMPLE | $25/mo | Fully automated · weekly updates · uptime monitoring · no human hours included |
| BASIC | $55/mo | Monthly updates · daily security scans + backups · hacked-code fixes · light human time |
| PLUS | $100/mo | Weekly updates · daily scans + backups · 48-hour fix turnaround · active human time |
Need hosting too? See Managed Hosting at $35/mo. Plans are sold separately.
Three levels of “we’ve got it.”
Included: WordPress core, plugin, theme updates weekly (minor + patch versions auto-applied) · vulnerability scanning via WPVulnerability API weekly (vulnerable plugins auto-updated even on major versions) · major version updates reported but not auto-applied · 24/7 uptime monitoring every 5 minutes · SMS alert after 2 consecutive failures · recovery alerts when site comes back up · automated weekly health-report email.
Not included: human-curated reports · daily security scans (vs weekly) · hacked-code remediation · plugin-conflict fixes · content tweaks (those are billed hourly).
Best for: small brochure sites, low-traffic clients, anyone who wants a “set it and forget it” safety net at the lowest possible price. Especially good as a year-1 onboarding plan with upgrade path to BASIC.
Included: WordPress core, plugin, theme updates monthly · performance monitoring monthly · security scan daily · 24/7 uptime monitoring every 15 minutes · database + webpage backups daily · backup restoration as needed · fixes for hacked code · fixes for SD-installed plugin conflicts · monthly health report.
Best for: smaller sites, lower-traffic clients, clients who rarely request changes but want the site watched and patched.
Included: WordPress core, plugin, theme updates weekly · performance monitoring weekly · security scan daily · 24/7 uptime monitoring every 15 minutes · database + webpage backups daily · backup restoration as needed · fixes for hacked code · fixes for SD-installed plugin conflicts · weekly health report · 48-hour turnaround on requested fixes.
Best for: actively-maintained sites, e-commerce, clients who request changes regularly, businesses where the site is the lead-generation surface.
It’s basic risk management.
WordPress is powerful because it’s modular — plugins and themes can do almost anything. But that also means: updates can introduce conflicts, vulnerabilities can appear in third-party plugins, backups can silently fail, performance can degrade over time, small errors can turn into major downtime.
Maintenance isn’t optional if your website matters to your business. It’s basic risk management. The question isn’t whether you need it — it’s which cadence matches how active your site is.
If the site is brochure-static and rarely changes, SIMPLE is enough. If it’s a content surface with monthly updates, BASIC works. If it’s an actively-maintained business site where downtime or breakage costs you, PLUS is the right tier.
Most people mix these up.
Hosting and maintenance are different things. You can have great hosting and still get hacked if WordPress isn’t maintained. And you can maintain WordPress perfectly on weak hosting and still have performance and uptime problems.
If you want the cleanest setup, pair maintenance with managed WordPress hosting on the same retainer.
Maintenance plans work on your own hosting too. The plans above are platform-agnostic for the WordPress side; the hosting is yours to keep or move.
Pick a tier, or ask which one fits.
If you’re not sure, schedule a call. Five minutes about your site and traffic, and I’ll tell you which plan fits.
Schedule a call