Website Maintenance & Development Company

Q: You're new. Why would I trust you with my site?

Fair. PixelGravitas is a new brand, so our case studies are real engagements told in full rather than a wall of logos: a US stair lift website rebuilt for older readers, and two hacked WordPress sites cleaned and locked down. On top of that, you get a free written assessment before any money changes hands, month-to-month terms with no lock-in, and full credential handover on request at any point. Judge the report, not the marketing.

Q: What does a website maintenance and development company do?

Keeps an existing site updated, backed up, secure and working, fixes it when something breaks, and builds what comes next: new features, migrations, custom applications, or a dedicated developer working on your code. One team across all of it, instead of a new supplier for each problem.

Q: How much does website maintenance cost?

Care plans start from $89 per site per month. Every plan and rate, including agency volume pricing, is published on the pricing page next to typical market ranges. Repairs and projects are quoted as a fixed fee before any work starts.

Q: Which platforms do you work on?

WordPress, WooCommerce, Webflow, static HTML and custom-coded sites, including PHP, Laravel and CodeIgniter applications. Shopify is out of scope, except for migrating away from it.

Q: What happens if I want to leave?

You give 30 days' notice, and we hand over every credential, backup, document and access we hold within 48 hours, and help your next provider pick it up. No exit fee, no hostage situation with hosting or DNS, no proprietary plugin that breaks when we go.

Q: Do you host the site, or does it stay where it is?

It stays where it is unless there is a technical reason to move it, and if there is, we will tell you what the reason is. We are not a hosting company reselling space; that is a different business with a different incentive.

Q: What if my site gets hacked while on a care plan?

Recovery is included on the Care + Secure tier, so you are not quoted an emergency rate at the worst possible moment. On the Care tier, recovery is quoted as a fixed fee before work starts.

Q: You're based in India. Does that matter for my timezone?

We work with clients across the US, UK, Europe and Australia. Monitoring runs continuously regardless of timezone, human replies land within one business day, and on Care + Secure an emergency has a response target of 2 hours in business hours and 4 hours outside them. If you need someone in your own timezone at 3pm every day, we are probably not the right fit and would rather say so now.

Q: Can you work with our existing developer or agency?

Yes, and it is common. We can take the maintenance and security layer while your developer keeps building, add a dedicated developer to your team, or work behind an agency entirely white-labelled.

What we actually do

Three ways to work
with us.

Everything further down this page sits underneath, but you only ever buy one of these three things. Pick the one that matches where you are today.

01 — Ongoing

Keep it running

Updates, backups, security and monitoring on a monthly plan. Nobody has to remember to do it, and you hear from us only when something needs a decision.

Fixed monthly rate · per site

02 — Urgent

Fix it fast

Hacked, broken, down or slow. We diagnose, contain and restore — then harden it so the same thing doesn't happen twice.

Fixed fee, agreed first · per incident

03 — Planned

Build what's next

New features, a migration, a custom application or better tracking. A dedicated developer reviewed by a lead engineer, or a piece of work scoped properly first.

Dedicated or scoped · agreed first

Maintain · build · grow

What our website maintenance
& development company handles.

Three kinds of work, one team. Each links to the page that explains it in full.

Maintain & secureUpdates tested on staging, daily off-site backups, uptime and SSL monitoring, security hardening and a monthly report.Website maintenance services →

Fix what's brokenHacked, down, broken after an update or locked out. Contained, cleaned and fixed, with the way in closed.WordPress malware removal →

Dedicated developersPHP, Laravel and CodeIgniter developers working in your tools, with code reviewed by a lead engineer before release.Hire PHP developers →

Custom web applicationsCRMs, portals, internal tools and API integrations built around how your business actually works.Custom web applications →

Tracking & conversionGA4 and conversion tracking that survives a redesign, and more enquiries from the traffic you already have.Analytics & tracking →

Lead systemsForms, CRM and follow-up connected, so enquiries turn into a visible pipeline instead of a busy inbox.Lead generation systems →

Platforms

WordPress, WooCommerce
and Webflow maintenance.

WordPressCore, plugin and theme updates on staging first, security hardening, and fixes for the things that break WordPress most often.WordPress website maintenance service →

WooCommerceEvery update tested against checkout, payments and stock before it goes live, because a broken cart costs sales by the hour.WooCommerce maintenance →

Webflow & customWebflow sites, static HTML and custom PHP applications, including Laravel and CodeIgniter. Shopify only for migrating away.Webflow maintenance →

Start where it hurts

Something isn't working.
Start there.

Most people don't arrive shopping for a maintenance retainer. They arrive because something broke. Pick the symptom — it routes straight to the fix.

Slow website Hacked website Broken after an update Website down White screen of death 500 error Not indexed Tracking not working Poor Core Web Vitals SSL error Locked out of wp-admin Something else? Ask us →

What we operate

Twelve capabilities.
One system.

Each is a standing capability, not a package. They share monitoring, escalation and reporting — which is why a problem found on a care plan gets fixed rather than quoted.

Start here

Website Maintenance

Updates, backups, uptime monitoring and a person who answers. The service most people actually need, and the relationship every other capability attaches to.

/website-maintenance/ 7 layers

Website Security

Hardening and recovery across application, plugin, database and server — engineering, not a plugin you install once.

/website-security/

Development

WordPress, WooCommerce, Webflow and hand-coded builds.

/web-development/

Repair

Hacked, broken or down. Recovery first, hardening after.

/website-repair/

Performance

Core Web Vitals, load time and server response.

/website-performance/

Analytics

GA4 and tracking that survives a redesign.

/analytics-tracking/

Conversion

More enquiries from traffic you already have.

/conversion-optimization/

Automation

Removing manual steps between form and follow-up.

/automation/

Lead systems

Plumbing that turns visits into visible pipeline.

/lead-generation/

Dedicated Developers

PHP, Laravel and CodeIgniter developers who work in your tools, with every change reviewed by a lead engineer before it ships.

/hire-developers/php/

Custom Web Applications

CRMs, client portals, internal tools and API integrations, built around how your business actually works.

/application-development/

Migrations

Moving off Wix, Squarespace, Drupal, Joomla or Shopify without losing rankings, tracking or your team's patience.

/migrations/

Most websites don't fail on launch day.
They fail quietly, eighteen months later.

Which is the part nobody is paid to watch

How it works

Three steps.
No mystery.

The most common reason people don't enquire is not knowing what happens after they do. So here it is.

1 Day 1

You send the URL

One form, three fields. No discovery call required to get started, no sales sequence, no gated PDF.

2 Within 1 business day

We send findings

A written report on performance, security posture, update status and tracking integrity — with the actual problems named, not a score out of 100.

3 Your call

You decide

Fix it yourself with our notes, hire us for the fixes, or put the site on a care plan. The report is yours either way.

Who you're dealing with

A name and a face,
not a contact form.

You're handing someone the keys to your website. You should know who they are.

Naveen Kumar

Founder & lead engineer · Based in Chennai, India, working with clients across the US, UK, Europe and Australia

I have spent years building and running WordPress, WooCommerce and custom-coded sites for clients directly — writing the code, managing the servers, and staying on call when something breaks. PixelGravitas is that same hands-on approach, focused on the maintenance, security and development work most agencies hand off to whoever's free. If your site goes down, you are talking to the person who fixes it, not a support queue.

LinkedIn hello@pixelgravitas.com

Under the hood

Security is a stack,
not a plugin.

A site is compromised at whichever layer was left thinnest. We work down the whole stack, because an application hardened on top of an unpatched server has not been hardened.

Staging firstUpdates run on a staging copy and are checked before they touch the live site.

Version controlCustom code in Git. Every change is traceable and revertible.

Backups, offsiteDaily, 30-day retention, stored away from the host — and restores are tested, not assumed.

Credential hygieneAccess in a password manager, 2FA everywhere, scoped to least privilege.

Rollback planEvery update has one. If a patch breaks the site, it goes back in minutes.

Old sites welcomeInherited a neglected install with 40 outdated plugins? That's the normal starting point, not a problem.

07ProtectionWAF, rate limiting, bot filteringEdge

06MonitoringFile integrity, change detection, alertsWatched

05ServerOS patching, PHP version, permissionsHardened

04DatabasePrefixes, credentials, injection surfaceHardened

03PluginsVulnerability tracking, abandoned code removedAudited

02ApplicationCore updates, config, admin surfaceHardened

01WebsiteSSL, headers, public surface areaVerified

You shouldn't need to know what a PHP version is to run a business.

That's the job we're taking off your desk

Pricing

Website maintenance plans,
with published prices.

Plans start from $89 per site per month. No “contact us for a quote”: every rate is published on the website maintenance cost page, tiered by number of sites, with agencies paying the same rates at volume as everyone else.

Essential

Care

For a stable site that just needs someone responsible for it.

Core, plugin & theme updates
Daily offsite backups
Uptime & SSL monitoring
Monthly report

See rates & inclusions

Most chosen

Care + Secure

Everything in Care, plus active hardening and a fixed monthly support allowance.

Everything in Care
Hardening & malware scanning
Support hours included
Performance regression checks
Emergency response

See rates & inclusions

Volume

Agency

Same service, white-labelled, priced for portfolios of five sites and up.

Everything in Care + Secure
Your branding on all reports
Direct escalation channel
Written non-solicit

Agency terms

Care plans are the only thing we sell at a fixed monthly rate, because they are the only thing with a fixed monthly scope. Repairs, projects, growth retainers and ad-hoc hours are priced by the shape of the work — the full rate card breaks down every number.

See the full rate card

Response < 1 day Every enquiry answered by a person, not a queue.

Platforms 5 WordPress, WooCommerce, Webflow, custom, JS stacks.

Terms 30 days Notice period. No annual lock-in, no auto-renew.

Handover 48 hrs Every credential returned on request. No exit fee.

Where this is written: service terms for notice, handover and response times; backups for the daily, 30-day, off-site backup policy.

Risk reversal

The terms are the guarantee.

A new brand can't lean on reputation, so it has to lean on terms. These are ours, in plain words, before you spend anything.

Assessment before paymentYou get written findings first. If the report is useless, you've lost nothing.

Month to monthNo annual lock-in, no auto-renew trap. Cancel with 30 days' notice.

Your credentials stay yoursFull handover on request, within 48 hours, no exit fee and no proprietary lock-in.

We tell you before we bill youAnything outside the plan gets quoted and approved first. No surprise invoices.

Objections, answered

The questions people
actually ask.

Written to answer the doubt, not to rank for it. If a question here makes us look worse, it stays.

You're new. Why would I trust you with my site?

Fair. PixelGravitas is a new brand, so our case studies are real engagements told in full rather than a wall of logos: a US stair lift website rebuilt for older readers, and two hacked WordPress sites cleaned and locked down. On top of that, you get a free written assessment before any money changes hands, month-to-month terms with no lock-in, and full credential handover on request at any point. Judge the report, not the marketing.

What does a website maintenance and development company do?

Keeps an existing site updated, backed up, secure and working, fixes it when something breaks, and builds what comes next: new features, migrations, custom applications, or a dedicated developer working on your code. One team across all of it, instead of a new supplier for each problem.

How much does website maintenance cost?