What does website maintenance actually include?
Updates, security, backups, monitoring and the small fixes nobody notices until they are missing. Here is what each one is for.
Website maintenance is the ongoing work that keeps a live site secure, working and current: software and plugin updates, security patches, backups, uptime and form monitoring, bug fixes, performance checks and small content changes. A website is software running on a server, and software that nobody looks after degrades. Most site failures we are asked to fix were not caused by an attack. They were caused by an update that nobody was watching.
The parts of website maintenance
Core, theme and plugin updates. WordPress and its plugins release updates constantly, for features, compatibility and security. Applying them keeps the site safe. Applying them carelessly is one of the most common ways a working site goes down, because one component updates and another that depends on it does not.
Security patches and monitoring. Known vulnerabilities in popular plugins are scanned for automatically by bots within days of being published. Keeping software current closes those doors; monitoring catches the cases where something gets through.
Backups that can actually be restored. A backup is only worth something if the files and the database are both current and both restorable. A surprising number of sites have one without the other.
Uptime and form monitoring. Knowing within minutes that the site is down, or that the contact form has stopped delivering, rather than finding out from a customer weeks later.
Bug fixes and troubleshooting. Broken links, layout problems on a new phone, a page that stopped loading after a browser update.
Performance. Speed drifts as content and plugins accumulate. Periodic checks keep pages fast on mobile, which matters for visitors and for search.
Small content changes. New staff, new hours, a new service, a seasonal banner. Small changes made promptly are what keep a site looking alive.
What happens when nobody maintains a site
The failure is rarely dramatic at first. A plugin falls out of date. A contact form stops delivering because an email service changed its rules, and enquiries quietly disappear. A certificate expires and browsers start warning visitors away. Then one day an automatic update completes halfway, and the whole site shows an error page until someone with server access repairs it.
We see each of these regularly, and the pattern is always the same: the site worked, so nobody was looking at it. The cost of the repair is almost always larger than the cost of the attention that would have prevented it, and that is before counting the enquiries lost while it was broken.
Forms deserve their own line
For most business websites the contact form is the whole point. It is also the part most likely to fail silently. Form services change plans, get cancelled or start filtering real messages as spam, and the site keeps saying "Thank you" while nothing arrives. Part of maintenance is sending a test enquiry on a schedule and confirming that it lands. It is a small check that protects the main thing the site is for.
Custom features need maintenance too
If your site runs a custom plugin, a booking system or an integration with another platform, it needs someone who understands that code to keep it compatible as WordPress and the connected services change. That is why our custom WordPress plugin work includes maintenance and support options: core compatibility updates, security patches, performance work, bug fixes and feature enhancements.
Who should do it
Some businesses have a technical person in-house, and for them maintenance is a matter of process: a schedule, a staging copy for testing updates, and a habit of checking forms. Most small and mid-sized businesses do not, and for them maintenance belongs with whoever built or knows the site. At Foxz Creative, website maintenance is part of our monthly retainers, alongside design and marketing support, so the same team that knows the site keeps it healthy.
If you are commissioning a new site, decide who will maintain it before launch, not after. It is part of what we plan on every web design and development project.
Quick answers
How often should a website be updated?
Software and security updates should be applied as they are released, tested first where possible. Monitoring should run continuously, and forms should be test-submitted on a regular schedule.
Do static websites need maintenance?
Less than WordPress sites, because there are no plugins to update, but they still need hosting, certificate and form checks, link fixes and content changes.
Is website maintenance included in a retainer?
At Foxz Creative, website maintenance is one of the items covered by our monthly creative retainers, alongside design, marketing and priority support.
Want someone watching your site?
We keep sites updated, secure and working as part of our monthly retainers.