Monthly website care plans, sometimes called maintenance plans, support plans or retainers, have become a common way for small businesses to keep their websites healthy without employing a developer. They can be excellent value. They can also be a monthly charge for very little.
The difficulty is that plans often look alike on paper. Almost every one promises “updates, backups and security”. This post explains what a good care plan should include, the details that separate strong plans from weak ones and the questions to ask before you sign up.
What a care plan is for
A care plan exists to make sure your website stays secure, fast and working, without you having to think about it, and to give you someone to call when something goes wrong or needs changing.
That means a care plan is really buying three things:
- Prevention: routine work that stops problems happening.
- Detection: monitoring that spots problems early.
- Response: a reliable, knowledgeable person who acts when something needs doing.
Judge any plan on all three.
What a good plan should include
Updates, done carefully
WordPress core, themes and plugins kept up to date. The important detail is how. Good plans take a backup first, test updates (ideally on a staging copy), check key pages and forms afterwards and roll back quickly if something breaks. “We click update all once a month” is not the same service.
Critical security updates should be applied promptly, not left for the next scheduled visit.
Backups you can rely on
Automatic, regular backups of files and database, stored separately from your server, with enough history to go back before a problem started. A strong plan also tests restores periodically, because an untested backup is only a hope.
Security monitoring and hardening
Malware scanning, alerts for suspicious changes, sensible protections against automated attacks and periodic reviews of user accounts. If something is found, the plan should say what happens next and whether clean-up is included.
Uptime monitoring
Regular checks that your site is responding, with alerts going to someone who will act, not just to an inbox nobody reads.
Performance care
Sites slow down over time as content, plugins and data accumulate. Good plans keep an eye on speed and Core Web Vitals and address problems before visitors notice.
Small changes and support
Many plans include an allowance of time each month for content updates, small fixes or questions. Check how much, what counts and what happens to unused time.
Clear reporting
You should be able to see what was done each month: updates applied, backups taken, issues found and fixed. Reporting shouldn’t be a glossy PDF of meaningless numbers, but it should give you confidence the work is happening.
The details that separate good plans from weak ones
Response times
How quickly will they respond to an urgent problem, such as your site being down or hacked? Is that during business hours only? Is it a commitment or an aspiration? A plan without a clear response time may not help much when you need it most.
What’s excluded
Read the exclusions carefully. Common ones include hack clean-ups, restores, major updates and work caused by third-party changes. A cheap plan that excludes everything difficult can end up expensive.
Who does the work
Is it a person who knows your site, or an automated system plus a ticket queue? Automation is useful, but someone needs to understand your site when it matters.
Ownership
You should own your domain, your hosting account (or have clear rights to your site’s files and data) and your website. A good provider makes leaving straightforward, even if they’d rather you stayed.
Hosting
Some plans include hosting; others work with hosting you already have. Either can work, but be clear about who is responsible for what, especially when something fails.
Questions to ask before you sign
- How are updates tested before they reach my live site?
- Where are backups stored, how long are they kept and when was a restore last tested?
- What happens if my site is hacked? Is clean-up included?
- How quickly do you respond to urgent issues, and how do I reach you?
- What’s included in the monthly time allowance, and what’s billed separately?
- What will I see each month to show the work was done?
- Who owns the domain, hosting and website?
- What happens if I want to leave?
The best providers welcome these questions.
Is a care plan worth it?
For a business without in-house development skills, whose website matters to its income, a good care plan is usually worth it. The cost is predictable, problems are caught early and you have someone to call. Compare the monthly fee with the cost of a single emergency clean-up, a week of downtime or a slow site losing enquiries for months.
For a very simple site with little at stake, and someone on staff who will genuinely do the routine work, a plan may be less essential.
The takeaway
A good care plan buys prevention, detection and response, not just a list of features. Look closely at how updates are done, whether backups are tested, what happens in a security incident, how fast they respond, what’s excluded and who owns what.
Our monthly maintenance plans are designed around exactly these questions. Get in touch and we’ll walk you through how we’d look after your site, and answer every question on this list.