What is website maintenance?

Website maintenance is the recurring work that keeps a website secure, working, and true after it launches. In practice that means updating the software it runs on, keeping backups you can restore, watching that it stays up and its certificate stays valid, posting the changes that happen in the organization, testing the forms, and checking speed and accessibility now and then. It is not glamorous. It is the difference between a site that still represents you in year three and one that quietly stopped.

I have built websites for Minnesota schools, nonprofits, clinics, and small businesses for fourteen years, and the sites that fail are almost never badly built. They are well built and then left alone.

What does website maintenance include?

Six things, and a good plan names all six.

Software updates. The platform, its plugins, and its theme. On WordPress this is weekly work, because the plugin ecosystem is where the vulnerabilities are. Patchstack counted 11,334 new WordPress vulnerabilities disclosed in 2025, 91 percent in plugins, with 46 percent lacking a fix on the day they were disclosed and a median of five hours before the first exploit attempt.

Backups. Off-site, kept for weeks, and restored at least once a year to prove they work. An untested backup is a hope.

Security and monitoring. Malware scanning, a firewall, a watch on failed logins, an uptime check every few minutes, and an eye on the SSL certificate and the domain renewal so neither lapses.

Content changes. News, events, the calendar, staff, hours, prices, documents. This is the part most people mean when they say maintenance, and it is the part that costs hours.

Form and link testing. Submitting every form monthly and confirming the email lands, because forms fail silently; finding the links that broke since last month.

Periodic reviews. Speed against Google’s Core Web Vitals, an accessibility pass on new pages and documents, and the Google Business Profile compared to the site, each quarter.

What does it not include?

Hosting and the domain, which are separate bills in your own name. A redesign. New features such as booking, a portal, or an online store. Writing your content from scratch, unless the plan includes writing hours. Search campaigns and advertising. Vendors bundle these differently, which is why “unlimited edits” at one company excludes exactly the things you wanted edited. Read what the hours cover before you compare prices; I laid the market out in how much website maintenance costs.

How often should a website be updated?

Four cadences, and they are different because the risks are different.

Software: weekly. Vulnerabilities are disclosed on no schedule you control and exploited within hours. Weekly updates, taken after a backup, are the slowest cadence that keeps pace.

Content: when it changes, and at least monthly. Hours, staff, events, and prices go stale faster than anyone expects. A monthly pass catches what nobody thought to mention.

The whole site: quarterly. Speed, accessibility, embeds, the Google listing, the analytics. Twenty minutes with each, four times a year.

Logins, renewals, and the restore test: yearly. This is where the expensive surprises hide: a domain registered to a volunteer who left, a hosting plan on an expired card, a backup that was never restored.

The full version, with the reason behind each line, is our website maintenance checklist.

How often should website content be updated?

Whenever a fact changes, and at least once a month, for a reason that has nothing to do with search engines: a visitor who finds one wrong fact distrusts the rest of the page.

I want to be careful about the search engine part, because a lot of maintenance vendors are not. Google says it has “query deserves freshness” systems that show fresher results for queries where people expect them, such as news. It has never said that stale content is penalized or that updating a page for its own sake helps it rank. So do not rewrite the About page every month to please an algorithm. Update it because the staff changed.

Who does website maintenance?

Five kinds of people, and the differences are practical.

Who	What they do	What they do not do
You, or someone on staff	Everything, if they have the time and the login	The weekly software work, once the person who knew the site moves on
Your hosting company	Patches the server and the core software; some sell plugin updates as a small add-on	Content, forms, accessibility, what an update broke, your domain renewal
A national WordPress maintenance vendor	Updates, backups, security, monitoring; small edits through a ticket queue	Sector knowledge, in-person meetings, content creation, often anything they call custom
A freelancer	What you ask, when they are available	Weekly discipline, continuity when they get busy, a backup you have seen
An agency care plan	The software work plus content hours, form testing, periodic reviews, and a named person who answers	Hosting and the domain, which stay in your name

The question that sorts them is who posts your content and who answers when it breaks. Hosts and national vendors are good at the automated parts and absent for the rest. A care plan is the whole list with a person attached. I compared the options in more detail in hiring someone to update your website.

How long does website maintenance take each month?

For a small WordPress site with a dozen plugins, in a month when nothing breaks: about twenty minutes a week for updates, scans, and checks, one to two hours of content and form work, and an hour or two of quarterly or yearly items when they fall due. Two to four hours a month is a fair figure, and it doubles in the month a plugin is abandoned or an update takes down a page builder.

The hours are not why organizations pay for it. They pay because the hours have to happen every week whether or not anyone remembers, and in a school office in January or a nonprofit in the week before a gala, nobody remembers.

What does website maintenance mode mean?

People search this phrase constantly, so here is the short answer. Maintenance mode is a temporary page that tells visitors the site is being worked on, shown while an update or a migration is in progress. WordPress switches it on automatically during updates and occasionally gets stuck there, usually because an update was interrupted; deleting a single file in the site root clears it. It is a feature of the work, not the work itself.

What does it look like for a school, a nonprofit, or a clinic?

The list is the same; the calendar is not.

For a Minnesota charter school, maintenance is a legal rhythm: board minutes on the site within 30 days of approval, the testing calendar by October 1, the literacy plan by June 15, the annual report and lottery policy whenever they change, and a closure banner someone can flip from a phone at 5:40 a.m. in January. For a nonprofit, it is the donate button tested every month, the latest Form 990 where a program officer can find it, the board page kept honest, and the path to the giving page checked before Give to the Max Day on November 19, 2026. For a home care or therapy provider, it is the careers page, which goes stale fastest, and intake forms kept on a tool that will sign a Business Associate Agreement. For a masjid, it is the iqamah table the board sets by hand and a month of nightly updates when Ramadan begins around February 8, 2027.

I keep a page for each of those years: charter schools, nonprofits, healthcare and care providers, and mosques and Islamic centers.

Signs a site is not being maintained

You can usually tell from the outside in two minutes.

• A copyright year in the footer that is two years old.
• A news page whose last item is from 2023.
• A staff page listing someone you know has left.
• A form that returns a thank-you message and then nothing, ever.
• An Instagram feed that shows a blank box.
• A map that is dark with a watermark across it.
• A browser warning about the certificate.
• Hours that disagree with the Google listing.

None of these is the real damage. They are the visible edge of software that has not been patched since the same year the news stopped.

Why is maintenance attached to WordPress so often?

Because WordPress is where most of the sites are and where most of the holes are. W3Techs puts WordPress at 39.6 percent of all websites in October 2026 and at 58.3 percent of sites whose content system it can identify. Its strength is the plugin ecosystem, and its weakness is the same ecosystem: tens of thousands of plugins, written by thousands of people, each one a door. A hosted builder such as Squarespace or Wix patches itself and needs much less of the weekly list, though it needs exactly as much of the monthly and yearly lists.

What does it cost?

The content hours decide it. At the Twin Cities agencies that publish care-plan prices, read in October 2026, a plan with updates, backups, and monitoring but no content time runs $50 to $100 a month; plans with 30 to 60 minutes of edits $149 to $250; about two hours $349 to $474; four to five hours $749 to $850. National WordPress vendors publish $59 to $395 for comparable tiers. TayoPro does not publish a rate card; each of our plans is a fixed monthly price quoted in writing after a free look at the site, and the website maintenance page shows the market range next to each plan so you can place yourself first.

What to do next

Decide who owns Tuesday. If someone on staff does, give them the checklist and the yearly login inventory. If nobody does, send us the URL. We will tell you what the site needs, what is already going wrong, and what it would cost to keep right, whether or not you hire us.