Website maintenance: what it actually involves (and what happens if you skip it)

Nobody buys a website dreaming about maintenance. But every website is software running on infrastructure, and software left untouched doesn't stay the same — it decays. Plugins fall behind, certificates expire, forms silently stop sending, and one day the site that "was fine" is offline, hacked or quietly losing every enquiry it should have caught. Here's what maintenance actually means, and how to make sure you're covered.

What proper maintenance covers

• Software and plugin updates. On platforms like WordPress this is the big one: updates patch security holes, and unpatched sites are exactly what automated attacks scan for. Updates also break things occasionally — which is why "someone applies them and checks the site still works" beats auto-update-and-hope.
• Backups you can actually restore. Off-server, automatic, tested. A backup that's never been restored is a hope, not a plan.
• Security monitoring and SSL. Certificate renewal, malware scanning, uptime monitoring that alerts someone before your customers notice.
• The boring functional checks. Do the forms still deliver? Does checkout still work? Broken contact forms are the silent killer — the site looks perfect while every enquiry vanishes.
• Content changes. Prices, opening hours, team members, seasonal updates. A site that's visibly out of date tells customers you might be too.

What neglect actually costs

The failure modes aren't hypothetical: hacked sites serving spam (then blacklisted by Google), expired certificates greeting visitors with security warnings, hosting renewals missed and domains lapsing, forms that stopped working after a mail provider change six months ago. Each one costs more to fix reactively than a year of looking after it would have — and that's before counting the enquiries lost while nobody noticed.

Who's actually responsible for yours?

The most dangerous answer is "I assumed the web company handled it." Many builds are handed over with hosting in your name and no ongoing arrangement — meaning nobody is updating, backing up or watching anything. Check today: who hosts the site, who renews the domain, who gets alerted if it goes down, who fixes it when a form breaks? If any answer is "not sure", that's the gap.

What it should cost

In the UK, standalone maintenance plans typically run from around £25 to £150+ a month depending on the platform and what's included — more for shops. The alternative model, which we use at Atlantas Media, builds hosting, security, updates, monitoring and content changes into a single monthly subscription, so maintenance isn't a bolt-on you can accidentally not have. We've compared the models properly in subscription vs upfront websites.

The static advantage

Worth knowing: sites built as static pages (pre-built files on a CDN rather than a database assembling pages on demand) have dramatically less to maintain — no plugin treadmill, minimal attack surface, and speed as a side effect. It's one reason modern static builds suit small businesses so well: less to go wrong is itself a feature.

The five-minute audit

• Submit your own contact form — did the message arrive?
• Check your domain and hosting renewal dates and who pays them
• Confirm a backup exists somewhere other than the server itself
• Load the site on your phone on 4G — still fast, still padlocked?

Maintenance is the least glamorous line on any website quote and the one that determines whether the site is still earning for you in year three. Make sure someone owns it — by name.