Website Maintenance: What Actually Needs Doing (And How Often)

Most businesses treat their website like a finished product.

Build it once. Launch it. Leave it alone for three years.

Then wonder why traffic drops, conversions fall, and competitors pull ahead.

Your website isn't a project. It's a tool that needs regular maintenance.

Here's what actually matters and how often you should do it.

Why Website Maintenance Matters

Websites decay. Not physically, but functionally.

Security vulnerabilities appear as hackers find new exploits. Software updates release monthly, breaking things if you ignore them. Content goes stale, making your business look inactive. Broken links accumulate as external sites change. Performance degrades as you add content without optimization. Search rankings drop if competitors maintain their sites better.

A website from 2020 that's never been touched is already outdated. Technology moves fast.

What Actually Breaks Without Maintenance

Security Holes

WordPress releases security updates monthly. Plugins get patched weekly. Ignore them, you're vulnerable.

One outdated plugin can give hackers access to your entire site. They can inject malware, steal data, redirect traffic, or hold your site hostage.

Not theoretical. Happens constantly.

Plugin Conflicts

You update WordPress. Now three plugins don't work. Your contact form breaks. Booking system crashes. Nobody can reach you.

Or worse, you don't notice for weeks because you never test your own site.

Broken Functionality

Forms stop sending. Payment processing fails. Links go nowhere. Images don't load.

Users don't report these issues. They just leave.

Google Penalties

Old content. Slow speed. Security warnings. Dead links.

Google notices. Your rankings drop. Traffic disappears.

Backups Fail

You set up automatic backups two years ago. Turns out they stopped working after a hosting migration. You find out when you actually need them.

Too late.

Essential Maintenance Tasks

Weekly

Security monitoring Check for malware, suspicious logins, unusual activity.

Automated tools can do this. You just need to review alerts.

Backup verification Confirm backups are running and files are actually being saved.

Test restore process quarterly to make sure backups work.

Form testing Submit your contact forms. Verify emails arrive. Check booking systems work.

Takes 5 minutes. Catches issues immediately.

Monthly

Software updates Update CMS (WordPress, etc.), themes, plugins.

Do this on a staging site first. Test thoroughly. Then push to live.

Performance check Run speed tests. Check mobile performance. Fix issues promptly.

Use Google PageSpeed Insights or GTmetrix.

Broken link scan Find and fix dead links. Update or remove broken external links.

Tools like Screaming Frog or Broken Link Checker automate this.

Security scan Full malware scan. Check for vulnerabilities. Update security settings.

Plugins like Wordfence or Sucuri handle this.

Quarterly

Content audit Review all pages. Update outdated information. Remove obsolete content.

Check dates, prices, contact info, staff photos, product details.

Analytics review Look at traffic patterns. Find underperforming pages. Identify issues.

Are people bouncing from certain pages? Why?

SEO check Review rankings. Fix technical SEO issues. Update meta descriptions.

Use Google Search Console to find problems.

Design review Is anything looking dated? Broken on new devices? Not matching brand?

Fresh eyes quarterly catch issues you've stopped noticing.

Annually

Full audit Everything. Security, performance, content, design, SEO, functionality.

Like taking your car for a full service.

Technology review Is your CMS version still supported? Plugins still maintained? Hosting adequate?

Old technology becomes liability.

Competitor analysis What are competitors doing better? What features should you add?

Market changes. Your site should too.

User testing Get real people to use your site. Watch where they struggle.

You know your site too well to spot usability issues.

Maintenance Plans: What's Fair

DIY Maintenance

Time cost: 2-4 hours per month Skill needed: Basic technical knowledge Risk: You might miss critical issues

Suitable for:

• Very small sites
• Tech-savvy owners
• Low-traffic sites

Not suitable for:

• Sites generating significant revenue
• Complex functionality
• Mission-critical business tools

Basic Maintenance Plan

Cost: £50-£150/month Includes:

• Security monitoring
• Software updates
• Backup management
• Basic support

Good for:

• Simple brochure sites
• Low traffic
• Standard WordPress sites

Professional Maintenance

Cost: £150-£300/month Includes:

• Everything in basic
• Performance optimization
• Content updates
• Priority support
• Monthly reports

Good for:

• Business-critical sites
• E-commerce
• High traffic sites
• Custom applications

Enterprise Maintenance

Cost: £300-£1,000+/month Includes:

• Everything in professional
• Dedicated account manager
• Custom development hours included
• 24/7 monitoring
• SLA guarantees

Good for:

• Large businesses
• Complex systems
• Multi-site management

What You're Actually Paying For

Peace of mind Site stays online, secure, functional.

Time saving 4 hours per month at £50/hour = £200 value.

Risk reduction Avoid downtime, security breaches, data loss.

Expert knowledge Spotting issues before they become problems.

Faster response Problems fixed in hours, not days.

Red Flags in Maintenance Contracts

No clear scope "We maintain your site" isn't specific enough.

Automatic renewal with cancellation fees Dodgy. You should be able to cancel anytime.

No reporting How do you know they're doing anything?

Hidden costs "Updates included, but custom work is extra" where "custom" means anything useful.

No backup access You should always have access to your own backups.

Ownership unclear Make sure you own your site, not them.

Tasks Often Missed

Email Deliverability

Forms work, but emails go to spam. Check email headers, SPF records, authentication.

SSL Certificate Renewal

Most renew automatically now. But when they don't, your site shows security warnings. Check expiry dates.

Database Optimization

WordPress databases bloat with revisions, spam, and unused data. Clean quarterly.

Image Optimization

New images get uploaded at full resolution. Old images never get compressed. Site gets slower.

Mobile Testing

Desktop works fine. Mobile has issues nobody reports because most people browse on phones now.

Accessibility

Laws change. Standards update. Accessibility features break. You're potentially liable.

When to Hire vs DIY

Do it yourself if:

• You have technical skills
• You have time consistently
• Your site is simple
• Downtime isn't critical
• You enjoy this stuff

Hire someone if:

• Your time is worth more than maintenance costs
• Your site generates revenue
• Downtime costs you customers
• You lack technical knowledge
• You want to focus on your actual business

Calculate honestly: What's your time worth? How long does maintenance take? Is DIY actually cheaper?

What Good Maintenance Looks Like

Proactive, not reactive Issues caught before they affect users.

Documented Monthly reports showing what was done.

Tested Changes tested on staging before going live.

Communicated You know when updates happen and why.

Transparent Clear pricing, clear scope, clear process.

Emergency vs Maintenance

Maintenance prevents emergencies.

Paying £100/month for maintenance is cheaper than paying £1,000 to fix a hacked site urgently.

Regular backups mean quick recovery. No backups mean complete rebuild.

Updated software means fewer vulnerabilities. Outdated software means sitting duck.

Our Maintenance Approach

At Arcscribe, we offer maintenance for sites we build and selected existing sites.

What's included:

• Weekly security monitoring
• Monthly updates (CMS, plugins, themes)
• Automated backups with quarterly restore tests
• Performance monitoring
• Broken link checks
• Form testing
• Priority support
• Monthly reports

What's not included:

• Content changes (charged separately or included depending on plan)
• Design changes
• New features
• Major platform migrations

Pricing: £120-£250/month depending on site complexity.

Guarantee: Cancel anytime. No lock-in. You own everything.

We only take on maintenance if we can actually deliver value. If your site is simple enough for DIY, we'll tell you.

Questions to Ask Your Maintenance Provider

What specifically is included? Get a detailed list.

How often do you update software? Monthly minimum. Weekly for security patches.

How do you test updates? Staging site testing is standard. If they update live directly, run.

Where are backups stored? Offsite, encrypted, regularly tested.

What's your response time? For emergencies vs routine issues.

Do I get reports? Monthly reports should be standard.

Can I cancel? Anytime, or locked in?

What happens to my data if I leave? You should get everything.

DIY Maintenance Checklist

If you're doing it yourself, use this:

Weekly:

• Check site loads properly
• Test contact forms
• Review security alerts
• Verify backups ran

Monthly:

• Update WordPress core
• Update all plugins
• Update theme
• Run security scan
• Check broken links
• Test on mobile
• Review analytics

Quarterly:

• Full security audit
• Performance optimization
• Content audit
• Test backup restore
• Review user experience

Annually:

• Full site audit
• Technology review
• Competitor analysis
• User testing

Set calendar reminders. Actually do them.

The Cost of Neglect

Real example from a client:

Hadn't touched their WordPress site in 18 months. Got hacked. Malware redirected traffic to spam sites. Google blacklisted them. Lost rankings. Lost traffic. Lost revenue.

Recovery cost: £2,500 Lost business during downtime: ~£5,000 Time to recover rankings: 6 months

Total cost: £7,500+

Maintenance cost for 18 months: £2,160

They learned the expensive way.

The Bottom Line

Website maintenance isn't optional. It's not something to think about later.

Your website is a tool. Tools need maintenance.

Do it yourself if you can commit to it properly. Hire someone if you can't or shouldn't.

But don't ignore it.

Need reliable website maintenance?

We maintain sites we've built and occasionally take on existing sites if they're well-built.

Transparent pricing, clear scope, no lock-in contracts.

Or we can train you to maintain it yourself if that makes more sense.

Email: isaac.marshall@arcscribe.co.uk Phone: 01603 327078

Arcscribe provides website maintenance and support for UK businesses. Based in Norwich, we keep sites secure, fast, and functional so you can focus on running your business.