What does website maintenance actually include?
A real maintenance plan covers four things: keeping software patched, backups you have tested restoring, uptime and security monitoring, and an allowance of content changes. Australian plans commonly run from around $100 to $500 a month. The differentiator is rarely the feature list — it is the response time when something actually breaks.
The four things that constitute maintenance
Maintenance plans are often sold as long feature lists, which obscures the fact that nearly all of the value sits in four activities.
- Patching. Keeping the platform, plugins, themes and underlying libraries current. On a WordPress site this is the single highest-value item, because the overwhelming majority of compromises exploit a known vulnerability in an out-of-date component rather than anything novel.
- Backups that have been restored. An untested backup is a belief, not a protection. The question to ask is not whether backups run but when one was last restored successfully.
- Monitoring. Uptime checks, certificate expiry, and malware scanning. The value is in finding out before a customer tells you, or before Google flags the site as unsafe.
- Content changes. An allowance of small updates — prices, staff, hours, a new service. This is what determines whether the site stays accurate, and it is the item clients actually use.
What the market rates buy
Australian maintenance plans for small business sites commonly sit between roughly $100 and $500 a month, and the tiers are reasonably consistent across providers.
| Rough band | Typically includes | Typically excludes |
|---|---|---|
| Entry | Automated updates, automated backups, uptime monitoring, security scanning | Human review of updates, content changes, guaranteed response time |
| Mid | The above plus a monthly content allowance and a human checking the site after updates | Out-of-hours response, performance work, development |
| Business-critical | Defined response times, staged updates, performance monitoring, larger change allowance | New feature development, which is quoted separately |
The gap between entry and mid is more significant than the price suggests. Automated updates occasionally break a site, and an automated plan with no human looking means the site can be broken for as long as it takes someone to notice — which on a low-traffic business site can be days.
How to read a plan that looks cheap
Very low-priced plans are usually entirely automated, which is not fraudulent — automation genuinely handles most of the routine work. What you are not buying is judgement and availability. Three questions establish what you have:
- If the site goes down at 9am on a Monday, what is the committed response time, and is it in the agreement or just in conversation?
- Does a person look at the site after updates are applied, or does the plan assume no news is good news?
- Is restoring from backup included in the plan, or billed as an incident when it is needed?
What maintenance is not
Maintenance keeps the site you have working. It is not search optimisation, not content marketing, and not new functionality. Plans that bundle "SEO" into a low monthly fee are usually supplying a report rather than work, and a report nobody acts on is a cost rather than a service.
It is also worth knowing that a static site — one built as plain files rather than running a content management system — has a genuinely smaller maintenance surface, because there is no database and no plugin ecosystem to patch. That does not eliminate the need for monitoring, backups and content changes, but it removes the largest category of risk. It is one reason to ask what a site is built on before accepting that a particular maintenance cost is unavoidable.
This question comes up most often in our Website Care & Maintenance engagements.