pixelgravitas
Free Assessment

Home/Website Maintenance

Website Maintenance

Website maintenance services from one named engineer, not a ticket queue.

Three published plans, one accountable engineer, and a written report every month. No quote required to see what it costs, and no discovery call required to start.

Published pricing, no sales call Month to month, cancel anytime
Response< 1 dayEvery enquiry answered by the lead engineer.
ContractMonth to month30 days' notice. No annual lock-in, no auto-renew trap.
Platforms5WordPress, WooCommerce, Webflow, custom-coded and JS stacks.
Pricing3 plansPublished rate card, per site per month, on the pricing page.

Scope

What our website maintenance services
include, in plain terms.

Website maintenance is the ongoing service of keeping a live website updated, backed up, monitored and secure — usually billed monthly rather than sold as a one-time project. "Maintenance" still means something different at every agency, though. Here's exactly what our website maintenance services cover — and what triggers a separate quote instead.

Updates, tested firstApplied to a staging copy and checked, then pushed live — not switched to auto-update and hoped for the best.
Daily offsite backupsStored away from your host with 30-day retention, and restores are tested — not just assumed to work.
Uptime & SSL monitoringChecked continuously. You hear about a problem before your customers do.
Security hardening & scanningActive malware scanning and hardening, not a security plugin left on its default settings. Already infected? See malware removal.
Performance checksFlagged before a slow page starts costing you rankings or conversions.
A monthly report, alwaysPlain English, sent whether anything happened or not — so you're never wondering what we did.

How changes are handled: every plan includes monthly support hours for your changes: 2 on Care, 4 on Care + Secure, 6 on Store Care. Work beyond those hours, technical work on Care, and hack recovery on Care are quoted separately, before any work starts — never added to an invoice afterward. Compare exactly what's in each plan →

The checklist

A website maintenance checklist,
by how often it should run.

Whoever maintains your site, these are the tasks that should be happening and how often. If you can't say who is doing each one, nobody is.

Daily & continuousBackups · uptime checks · SSL expiry · malware scanning The things that need to be caught within hours, not at the end of the month. Automated, but someone has to read the alerts. Every dayautomated + watched
WeeklyCore, plugin & theme updates · security patches · form tests Patches for popular plugins land constantly. Each update should be tested on a staging copy before it goes live. Every weektested, then applied
MonthlyPerformance & Core Web Vitals · broken links · test restore · report Catches the slow drift: a page getting heavier, a link going dead, a backup that wouldn't actually restore. Every monthchecked + reported
QuarterlyPlugin audit · user & access review · hosting and PHP version check Remove what's unused, revoke old logins, and plan upgrades before the host forces them. Every quarterreviewed
YearlyDomain & licence renewals · accessibility and legal pages · full audit The renewals that cause the most embarrassing outages, plus a wider look at whether the site still fits the business. Every yearrenewed + audited

Frequencies reflect how we run maintenance on client sites. The monthly report below is an illustrative example of the format.

Platforms

Built for how your
site is actually built.

The update process, the risks, and what "tested" means are different on every stack. We maintain the platform you actually have, not a generic checklist.

WordPressCore, theme and plugin updates tested together, because the conflicts happen between them. Plugin bloat and abandoned plugins get flagged.WordPress maintenance →
WooCommerceEvery update is checked against checkout, payment gateways and stock before it goes live, ideally outside your peak trading hours.WooCommerce maintenance →
WebflowNo plugins to patch, so the work shifts to forms, integrations, CMS collections, SEO settings and publishing safely.Webflow maintenance →
HTML & static sitesFew moving parts, but forms, SSL, hosting and third-party scripts still break. Quiet sites get forgotten until they do.Support for HTML & custom-coded sites →
React · Laravel · Next.jsDependency and framework upgrades, security advisories, build pipelines and environment config, handled as code releases.One-time fixes for a neglected stack →
Not sure what you're on?The free assessment identifies the platform, the hosting and the update backlog before anything else.Get the assessment →

The monthly report

What you get every month,
whether anything broke or not.

A plain-English summary you can read in two minutes. This is an illustrative example of the format, not a real client's report.

Monthly maintenance report · example-site.comExample · illustrative
UpdatesWordPress core + 11 plugins updated after staging test. 1 plugin held back pending a known checkout conflict.1 held
Backups30 of 30 daily off-site backups completed. Test restore to staging succeeded.OK
UptimeOne short outage caused by the host, detected and reported to them within minutes.OK
SecurityMalware scans clean. 2 unused admin accounts removed.OK
PerformanceHomepage got heavier after a new hero image; compressed it and load time is back to baseline.Fixed
Next monthHost is retiring your PHP version next quarter; upgrade scheduled and tested on staging first.Planned

Recent work

Recent maintenance and security work.

Two hacked sites we cleaned up. The full write-ups show what was found, how it was fixed and what stops it happening again.

Fake CAPTCHA malwareA safety-training provider's WordPress site showed every visitor a full-screen "Google verification" asking for a one-time code. A manual search of the database and files found nothing; an AI-assisted scan of the site's source found the hidden script.Fake CAPTCHA malware removal case study →
Spam pages hackWone8 Estates found hundreds of fake product pages, many in Japanese, indexed by Google under its own domain. We cleaned both the database and the files, closed the ways back in, and asked Google to re-crawl.Spam pages cleanup case study →

Why this, not a typical retainer

The terms are the difference.

Most maintenance pages read the same: "proactive monitoring," "peace of mind." Ours is built around four things many maintenance pages leave out.

Published pricing, not "contact us"Three plans, one number each, on the pricing page — see it before you ever have to talk to anyone.
A named engineer, not a ticket queueYou deal with the same person before and after you sign — not a rotating support desk that resets the story each time.
A guarantee with numbers in itFirst response within 1 business day; emergencies 2 hours (4 outside business hours, 9am–6pm ET). Credentials back within 48 hours if you leave. All set out in our maintenance agreement.
Month to month, alwaysThirty days' notice cancels it. No twelve-month contract to catch on a renewal date.

Your options

Website maintenance agency, freelancer,
or doing it yourself?

All three can work. The difference is who is accountable when something goes wrong at an inconvenient time. For what each option typically costs, see the website maintenance cost guide.

 Do it yourselfFreelancerLarge agencyPixelGravitas
Updates tested before going liveRarely; usually auto-updateDepends on the personUsuallyAlways, on a staging copy
Off-site backups, restore testedIf you set it upSometimesUsuallyDaily, with restores tested
Someone watching uptimeYou, when a customer tells youVariesYesContinuously
Who answers when it breaksYouOne person, when availableAn account manager firstThe lead engineer
PricingTools and your timeUsually hourlyOften "contact us"Published, per site per month
Best forSimple sites and technical ownersSmall, low-risk sitesLarge, multi-team organisationsBusinesses that want one accountable owner

When to hire

Signs you need a website
maintenance company.

If two or more of these sound familiar, it's likely costing you more unmaintained than a plan would. Running a small business without in-house IT? See small business website management.

Nobody owns the siteThe developer who built it has moved on, and nobody is sure who has the logins.
Updates keep piling upThe dashboard shows dozens of pending updates because the last one broke something.
You don't know if backups workThere may be backups. Nobody has ever tried restoring one.
You hear about outages from customersThe site went down, and the first alert was an email from someone trying to buy.
It's getting slowerPages that used to load quickly now drag, and rankings or conversions are slipping with them.
It's been hacked beforeA site that was compromised once, without hardening, is a likely target again.

Process

Three steps.
No mystery.

The most common reason people don't enquire with a website maintenance company is not knowing what happens after they do. So here it is.

1 Day 1

You send the URL

One form, three fields. No discovery call required to get started, no sales sequence.

2 Within 1 business day

We send a written scope

Which tier fits, why, and what — if anything — needs fixing first. In writing, not on a sales call.

3 Ongoing

We maintain it, and tell you

Updates, backups and monitoring run continuously; you get a plain-English report every month.

Everything in one place

Website maintenance services,
page by page.

Each part of website maintenance has its own page with the detail: what's included, what it costs, response times and how it works for your kind of site.

Pricing

Website maintenance service plans:
one public rate card.

No "contact us for a quote." Every rate for our website maintenance services is published on the pricing page, with one plan for each kind of site: a simple site, a business site or an online store.

Simple site

Care

Up to 10 pages and a contact form, with no bookings, logins or payments.

  • Updates installed safely, tested first
  • Backed up every day, stored off-site
  • Watched around the clock
  • A plain-English report every month
  • 2 hours of content changes every month
See rates & inclusions
Recommended · Business site

Care + Secure

More than 10 pages, or bookings, memberships and integrations. Everything in Care, plus:

  • Security protection and malware scans
  • 4 hours of changes or fixes every month
  • Hacked? We clean it up, once a year included
  • Site down? We start within 2 hours (4 at night and weekends)
See rates & inclusions
Online store

Store Care

Any site that takes payments. Everything in Care + Secure, plus:

  • A test purchase after every update
  • Payments and stock checked
  • 6 hours of changes or fixes every month
See rates & inclusions

Agencies: white-label maintenance for portfolios of five or more sites has its own terms and pricing. Agency pricing →

Who you're dealing with

A name and a face,
not a contact form.

You're handing someone the keys to your website. You should know who they are.

Naveen Kumar, founder and lead engineer of PixelGravitas

Naveen Kumar

Founder & lead engineer · Based in Chennai, India, working 9am–6pm US Eastern with clients across the US, UK, Europe and Australia

I built and ran WordPress, WooCommerce and custom-coded sites for clients directly for years before starting PixelGravitas — writing the code, managing the servers, staying on call when something broke. If your site goes down, you're talking to the person who fixes it, not a support queue. More about how I work →

Questions, answered

Website maintenance services:
common questions.

What exactly counts as "website maintenance"?

Core software updates, security monitoring, daily backups, uptime checks and a monthly written report, as listed in the scope section above. It does not include new design work, content writing or marketing; those are quoted separately as projects or growth retainers, never bundled into a maintenance rate to inflate it.

What does a website maintenance company actually do each month?

It keeps the site updated, backed up, monitored and secure, and tells you what it did. In practice that means testing and applying updates, confirming backups ran and can be restored, watching uptime and SSL, scanning for malware, checking performance, fixing what breaks and sending a written report.

How often should a website be maintained?

Backups and uptime checks should run daily or continuously. Updates should be reviewed at least weekly, since security patches for popular plugins are released constantly. Performance, broken links and a test restore are worth checking monthly, with a fuller review of plugins, access and hosting each quarter.

Is website maintenance the same as website management?

They overlap. Website maintenance is the technical upkeep: updates, backups, security and uptime. Website management is broader and can also include content changes, SEO and reporting. Our plans cover maintenance; content and growth work is available as extra hours on a plan or a growth retainer.

Do you only work on WordPress?

No. WordPress and WooCommerce are the largest share of what we maintain, but Webflow, static HTML sites and custom-coded stacks in React, Laravel and Next.js are covered too. See the platform section above for what changes by platform.

Can you take over a site another developer built?

Yes. Taking over a site someone else built is a normal starting point. The free assessment checks the current state of the site first: platform, update backlog, backups and any security issues, so you know what needs fixing before regular maintenance begins.

Do you offer website maintenance for small businesses?

Yes. The entry plan is priced for a single small-business site, with no minimum term. You don't need an agency-sized budget or a multi-site portfolio.

What happens if my site goes down outside business hours?

Sites on Care + Secure and Store Care get an emergency response with a stated target time, not a "best effort" promise: 2 hours in business hours (9am–6pm ET, Monday to Friday), 4 hours at night and weekends. The full terms are in our maintenance agreement, and the agency page for the full incident SLA if you manage a portfolio.

Will I lose access to my own site or hosting?

No. You keep ownership of your domain, hosting and admin access at all times; we work inside your accounts, not ours. If you ever want to leave, every credential is handed back within 48 hours, with no exit fee.

How much do website maintenance services cost?

Market rates run from about $50 to $750 per site per month, depending on the site and how much hands-on time is included (market range, checked September 2026). Our three plans are priced per site, per month, with nothing hidden behind a quote. The exact figures, what each plan includes and how they compare with the market are on the website maintenance cost page.

What are the types of website maintenance?

There are four. Preventive maintenance keeps problems from starting: updates, backups, uptime and security monitoring. Corrective maintenance fixes something after it breaks. Adaptive maintenance keeps the site working as its surroundings change, such as a host retiring a PHP version. Improvement work makes the site better, such as speed or accessibility. The checklist above is mostly preventive; plans with support hours cover the corrective and adaptive work too.

What should a website maintenance proposal include?

The scope in plain terms, what is excluded and how extra work is quoted, the first-response and emergency response times, the notice period, who owns the domain, hosting and logins, and how everything is handed back if you leave. Our maintenance agreement page lists each of these clauses and what we commit to.

Where are you based? Do you offer website maintenance near me?

We're based in Chennai, India, and maintain sites remotely for clients across the US, UK, Europe and Australia. Maintenance doesn't need an in-person visit, so what matters is the response time you're promised, which is stated in hours: a first response within 1 business day, and 2 hours (4 outside business hours) for emergencies on Care + Secure and Store Care.

How is this different from hiring a freelancer or a big agency retainer?

A freelancer tends to disappear when they get busy; a large agency retainer routes you through account managers before you reach anyone technical. Here, the lead engineer answers your email, and senior developers do the work under his review. The comparison table above sets the options side by side.

Start here

See what your site actually needs.

Send the URL. We'll tell you what's covered, what it costs, and what — if anything — needs fixing first, in writing.

  • 1We look at the live site: platform, size, and current update/security status.
  • 2You get written findings plus a plan recommendation and the reasoning behind it.
  • 3You decide what happens next. No follow-up sequence if you don't reply.

Free website assessment

Three fields on purpose. We reply within one business day, and we don't add you to a mailing list. Prefer email? Contact us.

Get a free website assessment