WordPress maintenance plans compared: vendors, hosts, and local agencies

WordPress maintenance is sold three ways: by national vendors who do nothing else, by hosting companies as a thin add-on, and by local agencies as a care plan with content hours. I read every price page I could reach in October 2026 and put the numbers in one place, because the single most useful thing you can know before buying any of these is which band you are shopping in.

Everything below is a published figure from the vendor’s own page on the date given, not an estimate. Where a vendor publishes nothing, I say so. Where I could not load a page, I leave it out rather than guess.

What does a WordPress maintenance plan actually include?

Strip away the brand names and every plan is some subset of six jobs:

1. Updates. WordPress core, plugins, and themes, applied on a schedule, ideally after a backup and ideally checked afterward. This is the whole defense against the way small sites get hacked, which is an unpatched plugin found by a script.
2. Backups. Off the server, kept for a stated number of days, and restorable. A backup that has never been restored is a hope.
3. Security. Malware scanning, a firewall, login hardening, and a promise about what happens if the site is compromised anyway.
4. Monitoring. Uptime checks every few minutes, with the alert going to the vendor, plus SSL and domain expiry watched.
5. Edits. Content changes posted for you, measured in minutes, tasks, or “unlimited” with exclusions.
6. Response. How fast someone replies, and whether that is a reply or a fix.

Entry tiers do the first four. Mid tiers add capped edits. Top tiers add priority response and sometimes a strategy call. The thing almost nobody includes, at any tier, is a person submitting your forms every month to confirm the email arrives, which is the failure I see most often on inherited sites.

National WordPress maintenance vendors

Vendor	Plans per month, read October 2026	Edits	Response	Hosting
WP Buffs	Maintain $89, Protect $179, Perform $239, Custom $359	Unlimited from Protect; excludes custom development, design, content creation	24/7 by email, no SLA	No
WP SitePlan	Essentials $79 (shown $59 billed annually), Professional $149, Enterprise $279	None on Essentials; help-desk tasks of about 30 minutes on Professional; unlimited requests on Enterprise	1 to 2 business days; support Monday to Friday, 8 to 5 Eastern	Add-on
FixRunner	Premium $69 (90 minutes), Rocket $99 (120 minutes), Advance $169 (240 minutes), Small $300 (8 hours), Medium $500 (12 hours); three-month minimum	Time bank per tier	One-hour response promised on all plans; one-time fix $49	Optional
SiteCare	Gold $435, Diamond $2,190	5 edits plus 5 quick fixes on Gold; 10 edits and unlimited fixes on Diamond	One-hour SLA on Diamond only	Included
websitemaintenanceservices.org	Essential $95, Advanced $195, Elevate $395	Varies by tier	Not stated	No
GoDaddy Website Care	Not published	Edits reportedly require the plan	Not published	Yes

Three notes on reading that table. Maintainn, a name that still appears in a lot of roundups, now redirects to SiteCare. FixRunner’s one-hour response is a response, not a fix, and it comes with a three-month minimum. And the “unlimited” plans start around $179 a month, which is the point at which a national vendor and a mid-tier local plan cost about the same; the difference from there is who the person is.

For a standard site whose owner writes their own content and does not need anyone to understand their sector, the entry tiers here are genuinely good value. The weak spots are the ticket queue, the exclusions, and the fact that nobody at a national vendor knows that your calendar page is wrong.

Managed hosting is not maintenance

Every managed WordPress host markets itself with the word maintenance somewhere. Here is what they publish and what they actually do.

Host	Entry price, read October 2026	Core updates	Plugin and theme updates	Edits
WP Engine	Essential $28 a month, billed annually	Automated	Smart Plugin Manager is an optional add-on on Essential	None
Kinsta	$35 a month, or $30 billed annually	Not stated on the plans page	Automatic Updates add-on, $3 per environment per month after a free month	None
Flywheel	Starter $25 a month, billed annually	Handled	Managed Plugin Updates add-on, $8 per site per month	None
SiteGround	StartUp $17.99 at renewal, GrowBig $29.99, GoGeek $44.99	Managed autoupdates	Same line, not separated	None
Pressable	Signature 1 $20.83 a month, billed annually	Pressable manages core	“Site owners are responsible for keeping other plugins and themes up to date”	None

So a host gives you a patched server, core updates, nightly backups, and a firewall for $18 to $50 a month, and sells you plugin updates for $3 to $8 more. What you do not get is anyone checking whether the update broke your menu, posting the new staff member, testing the donation form, or noticing the hours are wrong. Hosting is the floor. Buy it in your own name, then decide separately who the person is.

What about Squarespace, Wix, and Shopify?

Builder platforms remove the software layer entirely. Squarespace publishes $19 to $99 a month on annual billing across its four plans, read October 2026, and Shopify’s Basic plan is $39 monthly or $29 a month billed yearly. Wix’s pricing page rendered inconsistently when I read it, so I am not quoting it.

What those subscriptions cover: hosting, SSL, platform updates, backups. What they leave to you: the content, the forms, the accessibility of what you upload, the domain renewal after the first year, Shopify theme and app updates, and whether the site still says the right things. If your site is a brochure that rarely changes, a builder plan plus a yearly look is enough. If someone has to post news, events, or staff changes most months, you are shopping for the content layer, and a plan built around patching WordPress is the wrong product.

Twin Cities agencies that publish care-plan prices

Six local agencies print their maintenance prices. I read each page on October 20, 2026.

Agency	Plans per month	Content time	Response	Notes
ProWeb365 (Roseville)	Essentials $250, Standard $450, Premium $850	60, 120, 240 minutes	Next business day on Standard; same day on Premium	Daily backups kept 30 days with monthly restore tests; hosting separate; 90-day setup period
Minneapolis Made	Basic $149, Professional $349, Enterprise $749	None, 2 hours, 5 hours	4-hour response on Professional; 1-hour SLA on Enterprise	Annual billing saves 15 percent; no rollover; $85 an hour otherwise
Wooly Mammoth Design	Basic $174, Premium $324, Professional $474	30, 90, 120 minutes	“24/7 support”, no SLA	Managed hosting and nightly backups included
Snowbelt Creative	Starter $50, Pro $175, Premium $425	None, 1 hour, 3 hours	Priority on Premium	Sold as WordPress hosting; Starter is hosting and daily backups only
Minnesota Web Studio (St. Paul)	Hosting and maintenance from $100	Content quoted separately	Not stated	Runs on Cloudways
GEEK (Minneapolis)	GEEKling $59, GEEKness $129, GEEK King $249	60 minutes of site updates on the top tier	8-hour after-hours response on the top tier	Page undated

Eleven other agencies I checked publish no maintenance price at all: Gasman Design, Iceberg Web Design, Windmill Strategy, Hook Agency, Snap Agency, Creative Arc, Plaudit Design, Perrill, 8bitstudio, Triton Commerce, and Mankato Web Design, which bills maintenance at $225 an hour with no monthly plan.

The local market sorts cleanly by content time: $50 to $100 with none, $149 to $250 with 30 to 60 minutes, $349 to $474 with about two hours, $749 to $850 with four to five. That is the yardstick for any local quote, including ours.

What a hack cleanup costs if you have no plan

The reason entry-tier maintenance is cheap is that cleanup after a compromise is not. Read October 2026:

Vendor	Price	What you get
Sucuri	$229, $339, or $549 a year	Unlimited cleanups, with malware removal promised within 30, 12, or 6 hours by tier; firewall-only plans at $9.99 or $19.98 a month
MalCare	Repair $299 a year, Fortify $499 a year, per site	Automated cleanup, expert reply within 24 or 6 hours
WP Fix It	$137 per cleanup	“Most of our cleanups are resolved in the same day”, 90-day guarantee

Patchstack’s 2026 report counted 11,334 new WordPress vulnerabilities disclosed in 2025, 91 percent of them in plugins, with 46 percent having no patch available on the day of disclosure. That is the arithmetic behind weekly updates. A plan that includes cleanup and restore, bought before the incident, costs less than any of the three rows above bought after it.

How to choose by situation

A brochure site that rarely changes. Your hosting plan plus a yearly look, or the cheapest national tier if the site runs WordPress with more than a handful of plugins. Do not pay for content hours you will not use.

A school. You need the tier where a person posts things on a calendar: board minutes within the statutory window, the lottery dates, the testing calendar, closure banners, and a quarterly accessibility pass on new documents. That is a local plan with about two hours a month, or a national vendor plus a staff member who owns the calendar. The charter school and private school pages lay out the year.

A nonprofit. Same logic, with the donation form tested monthly, the giving-day pages built on time, and the 990 and board pages kept current for funders. If the site is on Squarespace, skip the WordPress tiers entirely and buy content time.

A clinic or care provider. The plan has to keep tracking pixels off intake pages, keep forms on tools that will sign a business associate agreement, and keep the counties and services matching your license record. A national vendor will not know to do any of that unless you tell them.

An online store. Shopify handles the platform. Buy a plan for theme and app updates, seasonal merchandising, and conversion fixes, with most of the hours landing in the ten weeks before Christmas.

Three things to read before you sign anything

“Unlimited” has a definition. It means small content changes by ticket. Every vendor excludes custom development, design, and writing. Ask what a new page from your copy counts as, because the answer varies.

Response is not resolution. A one-hour response means someone replies within an hour. Nobody in this market promises when the problem is fixed. Decide whether you are paying for the reply or for the fix, and ask what the vendor’s actual median time to fix was last quarter.

Annual prepay discounts are common, not expected. Minneapolis Made takes 15 percent off, SiteCare offers two months free, WP Engine takes 20 percent off hosting. A discount for prepaying a maintenance plan is fine if the exit terms are fine; a year’s prepayment to a vendor who holds your hosting is a year of leverage you gave away.

Where TayoPro fits in this comparison

We are a local studio, so we sit in the Twin Cities table, with one difference: I do not publish a rate card. You get a fixed monthly price in writing after a free look at your site, and the local bands above are what the same level of service costs elsewhere, so you can judge the number. What the plans include is on the website maintenance page: weekly updates after a backup, daily off-site backups with a yearly restore test, forms submitted and confirmed every month, a speed and accessibility pass every quarter, a named person in Central time, and no contract. Hosting and the domain stay in your name, which is the part I would check first with anyone on this page, including us.

What to do next

Count the plugins on your site and count the things that have to change on it in a normal month. The first number tells you how much you need the patching; the second tells you which band you are in. Then compare quotes inside that band, not across it.

If you would like a second opinion on a quote you already have, or a look at what your site needs, send us the URL. We will tell you which tier fits, even when the honest answer is a national vendor’s entry plan.