What happens if I don’t maintain my website?
Nothing, for months — which is why it keeps happening. Then one of five things: a known vulnerability is exploited, the contact form silently stops delivering, the certificate expires and browsers warn visitors away, a platform update breaks the site, or the content is simply wrong for long enough to cost you enquiries.
The delay is the problem
An unmaintained website does not degrade visibly. It looks exactly as it did on launch day for a long time, which is excellent evidence that maintenance was unnecessary right up until the moment it is not. The failures below are not hypothetical risks; they are the ordinary lifecycle of a site nobody is looking after.
The five things that actually happen
- Compromise through a known vulnerability. Automated scanning finds out-of-date components continuously, and the result is usually not dramatic — injected spam links or redirects that only some visitors see. Businesses commonly discover it from a customer or from a search engine warning, not from their own site looking wrong.
- The contact form stops delivering. This one deserves emphasis because it is silent on every axis: the visitor sees a success message, the business sees no enquiries, and nothing appears in any log. A changed mail provider setting, an expired API key or a blocked request is enough. Enquiries do not bounce — they simply never existed.
- The TLS certificate expires. Modern hosting usually renews automatically, until a configuration change means it does not. Browsers then actively warn visitors away, and most leave.
- An update breaks something. On a CMS the plugin ecosystem shifts constantly, and an automatic update can break a layout or a form. Unattended, this stays broken until someone notices.
- The content becomes wrong. Old prices, departed staff, discontinued services, last year’s hours. This has no incident and no alert, and it is the most expensive one, because the visitor simply decides you are not operating and leaves.
What is recoverable, and what is not
| Failure | Recoverable? | Cost of recovery |
|---|---|---|
| Compromise, with good backups | Yes | Restore, patch, change credentials, request review if flagged |
| Compromise, without backups | Partially | Rebuild — and search standing can take months to return |
| Form not delivering | The form, yes | The enquiries, never — they are simply gone |
| Certificate expiry | Yes | Hours, once someone knows |
| Broken update | Yes | Hours, plus however long it sat broken |
| Stale content | Yes | Trivial to fix, impossible to quantify what it cost |
Two of those rows are worth re-reading. Lost enquiries cannot be recovered at any price, and search standing lost to a compromise comes back slowly. Everything else is an inconvenience with an invoice attached.
The minimum if you are not paying anyone
Declining a maintenance plan is a legitimate decision for a low-stakes site. If you make it, do these four things, because they cover most of the downside for no monthly cost: set up free uptime monitoring that emails you; submit a test enquiry through your own contact form once a month and confirm it arrives; know where your backups are and restore one at least once; and put a recurring calendar reminder to read your own website twice a year as a stranger would.
The form test is the one people skip and the one that pays for itself. A business can lose every enquiry for months without a single signal that anything is wrong.
This question comes up most often in our Website Care & Maintenance engagements.