If you’ve ever gotten a WordPress maintenance quote, you’ve probably seen a list that looks something like this: unlimited content updates, 24/7 monitoring, priority support, SEO health checks, security scanning, and a monthly report — all bundled into a flat fee that can run anywhere from $50 to $500+ a month. Some of that is genuinely necessary. Some of it is a basic task list dressed up to look expensive.
After 14+ years doing this work myself — not managing a team that does it — here’s what your site actually needs every month, and where I’ve seen the invoice get padded.
What your site actually needs
Strip away the marketing language and a healthy WordPress site needs a short, consistent list of things done well and on schedule:
- Core, theme, and plugin updates — tested before they go live. Blindly auto-updating everything can break a site just as easily as skipping updates. Someone needs to actually check the site after each update, not just click “update all” and move on.
- Backups that are provably restorable. A backup nobody has test-restored isn’t a backup, it’s a hope. Ask when your provider last actually restored one, not just took one.
- Uptime monitoring with a real response. Automated alerts are cheap to set up. What matters is whether a person actually looks at the alert and acts on it.
- Basic security hardening. A firewall, login hardening, and — often overlooked — removing plugins and themes you’re not using. Unused code sitting on your site is one of the most common ways sites get compromised.
- A broken-link and error check after updates. Updates are the single most common cause of a suddenly-broken page. Someone should be looking, not waiting for you to notice.
- A basic performance check. Did last month’s plugin update quietly make every page load slower? Someone should catch that before it costs you traffic.
What often gets padded onto the invoice
- “Unlimited content edits.” Sounds generous, but most solo business owners make a handful of edits a year, not every week. You can end up paying every single month for a service you’ll actually use twice.
- “Priority support” tiers. Often it’s the exact same fix, just queued differently. Worth asking: what’s the actual response-time difference, in writing, between the cheap plan and the expensive one?
- Generic “SEO monitoring.” A monthly PDF restating your traffic numbers isn’t SEO work — it’s a report. Ask specifically what was changed on the site, not just what was measured.
- Hosting bundled at a markup. Some providers quietly mark up hosting two or three times over and fold it into the “plan” price. Ask what the hosting would cost you directly, separate from the service fee.
- Long lock-in contracts for something that should be a month-to-month relationship. If a maintenance plan is genuinely worth the price, it shouldn’t need a 12-month contract to keep you around.
Questions worth asking before you sign up
- What exactly happens to my site each month, step by step?
- When did you last actually test-restore a backup, not just take one?
- What’s your real response time when something breaks — in writing?
- Is hosting included, and if so, what would it cost me directly?
- Can I cancel month-to-month, or am I locked into a contract?
A provider that can answer all five plainly, without dodging, is worth paying. One that gets vague is telling you something too.
What this looks like for a solo-run site
This is essentially the checklist I run every month for every site I maintain myself — no ticket queue, no account manager relaying messages, and no line items that exist just to pad the invoice. If you want to see what that looks like as actual pricing, my Care Plans page breaks down the three tiers I offer, all built around this exact list.
A slow site is often a maintenance problem in disguise, so see why your WordPress site might be slow. To read how I handle this work, visit my WordPress development services page, or contact me to talk through your site.