WordPress Website Maintenance Packages: What They Cover
A WordPress website maintenance package is a monthly retainer that covers core, plugin and theme updates, off-site backups, security checks and the fixes that appear when an update breaks something. In the UK, small business plans usually cost £25 to £150 a month. The useful ones say what happens when a plugin fails, not just that updates are included.
What a WordPress maintenance package actually covers
Most UK packages are retainers, not one-off jobs. You pay every month and someone else handles the CMS work WordPress generates even when you publish nothing. A credible quote names these jobs:
- WordPress core updates, usually delayed a few days so first-wave bugs are known
- Plugin and theme updates, including premium plugins if you provide the licence keys
- Backups of files and the database, kept off the live server, with a restore that has been tested
- Uptime checks every 1 to 5 minutes, alerting a person, not only an inbox you ignore
- Malware scanning, login protection and a written plan if the site is injected
- A fixed block of time or tickets for conflicts: white screens, forms that stop sending, layout breaks after an update
Often missing, or billed extra: new pages, product edits, WooCommerce payment failures, speed work, a staging copy, and hosting. Some firms work on your existing host. Others only touch sites on their own stack. Neither is automatically better. Moving host for a quiet brochure site can cost more in downtime than it saves.
If a plan is under £30 a month and promises unlimited support, read the definition. Unlimited usually means unlimited questions about the retainer, not unlimited development.
What UK packages cost
These are market ranges I see for small business WordPress sites, not a quote from any one firm.
| Option | Typical monthly cost | What you usually get | What you usually do not get |
|---|---|---|---|
| DIY on shared hosting | £5 to £25 for hosting only | You click updates yourself | Anyone watching security or failed updates |
| Budget retainer | £25 to £50 | Core and plugin updates, weekly backups, uptime email | Staging, same-day response, shop support |
| Standard small business | £50 to £100 | Updates, daily backups, malware checks, 30 to 60 minutes of fixes | Content, redesign, new features |
| Agency or WooCommerce care | £100 to £250+ | Staging, priority response, performance, checkout support | A full-time developer; quiet months still cost the retainer |
Regional freelancers often charge £20 to £40 a month less than central London agencies for the same scope. A £150 London retainer is worth it if you need a named person and a four-hour response. It is not worth it for a five-page site that changes twice a year.
A one-off rescue for a hacked site, a failed update or a white screen commonly runs £150 to £400 fixed, or £75 to £120 an hour. One incident is cheaper than a year of care. Three incidents are not. Factor that in rather than assuming you will never need either.
Why WordPress needs this when a static site often does not
WordPress core ships minor releases through the year and a major release most years. A typical small business install runs 15 to 40 plugins, each from a different author. When a plugin lags behind a core or PHP change, you get a blank page, a broken checkout or a contact form that fails silently.
The platform is a default target for automated attacks because so many sites run unpatched plugins. Security on an £8 shared host is usually a scanner that emails you after the damage. It does not read changelogs, hold back a bad release, or restore last night's backup.
A static HTML brochure can sit untouched for two years apart from the SSL certificate. A WordPress site left for two years is a liability: outdated PHP, abandoned plugins, and a backup nobody has restored. That is the gap a package is meant to close.
DIY, a care package, or a full monthly website plan
You have three practical routes. None is morally better. They fit different budgets and different sites.
- Do it yourself. Block 1 to 2 hours a month. Update on a staging copy if you have one, then live. Test the mobile menu, forms and, if you sell, checkout. Download a backup. Cost is hosting only. The failure mode is a skipped month and an update that lands on a Friday afternoon.
- Add a WordPress maintenance package on hosting you already pay for. This fits if the site is sound, you are happy with the host, and you only need care. Confirm they can work on your host. Some only support WP Engine, Cloudways, SiteGround or their own servers.
- A pay-monthly website plan: a setup fee, then a monthly price that includes hosting, updates and ongoing management, so you are not juggling a host, a developer and a plugin bill. That suits a rebuild with no lump sum, or a hands-off arrangement after launch. I offer one-off website builds and this monthly route. For current figures, see arlowebstudio.com.
Do not buy maintenance for a dying theme or a page builder nobody can edit. You would be paying to patch a site you should replace. Rebuild first, then put a package around the new site.
What to get in writing before you pay
Two quotes at £60 a month can be completely different jobs. Get answers in the proposal, not on a sales call:
- Are updates run on staging then live, or only on the live site? Who clicks the button?
- Backup frequency, how many days are kept, and the date of the last restore test on a real client site
- Included minutes or tickets each month, and the hourly rate when you go over (£60 to £90 an hour is common in the UK)
- Response time for a down site versus a text change
- Who pays to renew security plugins, backup plugins and the theme licence
- Whether WooCommerce, membership or multilingual is in scope
- What they do if they cannot reproduce a bug
- Exit terms: you keep backups, licences and an administrator login. The host is not used as a lock.
Treat unlimited websites at £19 a month as a warning. One person cannot properly test updates across 80 WordPress installs. A realistic load for staging, review and rollback is roughly 20 to 40 sites per maintainer. A three-month rolling agreement is enough for both sides. Avoid 12-month lock-ins with no break after a failed restore.
Red flags on cheap WordPress retainers
- Unlimited updates with no staging and no mention of rollback
- Backups stored only on the same server as the website
- A £40 plan that claims 24/7 coverage with no named person, only a ticket queue
- A forced host migration with no technical reason
- A security plugin sold as the entire service, with nobody checking the front end after updates
- No monthly note of what was updated, held back or broken
After three months you should log in and see core, plugins and theme on current versions, or one version behind with a written reason. Backup logs should show a restore test date. Uptime for a simple brochure site should sit above 99.9 percent, accepting that cheap shared hosting still has short blips. If you only receive a branded PDF and the dashboard versions have not moved, you paid for a report.
Frequently asked questions
How much should I pay for a WordPress maintenance package in the UK?
Budget retainers run £25 to £50 a month. Most small business sites that need real update testing and a few fixes sit at £50 to £100. WooCommerce or same-day response pushes you to £100 to £250. Below £25 you are usually buying plugin automation, not a person.
Does my hosting already include WordPress maintenance?
Almost never, beyond auto-updates you cannot control. Hosting keeps the server running. Maintenance is core, plugins, themes, backups you can restore, and a human when an update breaks the layout. Some managed WordPress hosts blur the line. Read whether they roll back a failed plugin and whether support covers your custom theme.
Can I maintain WordPress myself?
Yes, if you will actually do it. Block 1 to 2 hours a month, use staging if you can, test forms and checkout, and keep off-site backups. Skip a few months and you are in the same position as someone with no package.
What do most WordPress maintenance packages leave out?
New pages, copy changes, redesign, new features, and often WooCommerce order problems. Hosting may be extra. Plugin and theme licence renewals are often extra. Ask for exclusions in writing before you compare two similar monthly prices.
Should I buy a package or rebuild the site first?
If the theme is abandoned, the builder is locked, or the site is slow on mobile, maintenance only delays a rebuild. Get the site into a maintainable state, then pay for care. If you need a new site and have no lump sum, a pay-monthly plan with a setup fee, then hosting, updates and management on one invoice, is the other route.
Do I still need a package if I never log in?
Yes, more so. WordPress still receives core and plugin updates. Attackers do not care that you stopped editing. A quiet site with old plugins is an easier target than a busy one that is patched.