Web maintenance service plans, compared on what firms publish

Agencies with a verified published price

How to shortlist a web maintenance service

1. Get the scope written as a list of tasks with a frequency. Core and plugin updates, security patching, backups with a stated retention, uptime monitoring, malware scanning, performance checks, broken link checks and content edits are separate items. Ask for each one with how often it happens and who verifies it, because a plan described in adjectives cannot be compared with anything.
2. Ask when a backup was last restored, not whether one exists. Every provider takes backups. Far fewer have tested a restore this year. Ask for the recovery process, the target recovery time, where copies are stored, and the date of the last restore they actually performed. This one question separates a real plan from a checkbox on a hosting dashboard.
3. Pin down the response commitment and the escalation path. Ask what counts as an emergency, the response time for one, whether cover extends to evenings and weekends, and who to contact when the usual person is away. A form that has been silently broken since Friday is the most expensive maintenance failure a small business suffers and it is entirely preventable.
4. Separate maintenance hours from improvement hours. Many plans include a small allowance of content edits or development time. Ask how many hours, what happens to unused ones, the rate for work beyond the allowance, and whether that work is scheduled or queued. Bundled allowances are where retainers quietly stop delivering value.

What a maintenance plan should actually protect you from

There are four realistic failure modes for a small or mid sized business website: it goes down, it gets compromised through an unpatched component, something breaks silently after an update so enquiries stop arriving, and it degrades until it is slow enough to lose visitors. A good plan addresses all four with something concrete: patching on a stated cadence, monitoring that alerts a human, a functional test of the contact forms after every significant change, and periodic performance checks.

That last item is worth asking about specifically. The Core Web Vitals measures documented on web.dev describe loading, interactivity and layout stability as experienced by real visitors, and a site drifts on all three as content, images and third party tags accumulate. A maintenance provider who reports on those quarterly is doing something useful. One who reports only that updates were applied is describing housekeeping.

What our index records for maintenance providers

We record what each provider publishes on its own website: plan tiers and prices where stated, the minimum term where disclosed, what each tier includes, named clients where the provider names them, and location, each entry carrying the date it was checked. Where a provider publishes no price we record the absence rather than estimating a figure that would be indistinguishable from a guess.

We take no payment for placement or ranking. Use the index to assemble a comparable set of plan tiers, then apply the questions above. In our experience of reading published plans, the differences that matter are rarely visible in the price: response commitments, restore testing and whether a human checks that the forms still work are what separate plans that look identical on a pricing page.

Questions people actually ask

Is a maintenance plan worth it for a simple brochure site?

Usually yes, but a modest tier is enough. The value is having somebody responsible for patching and for fixing a broken form quickly, not the volume of tasks. If your site is a static build with no content management system, your risk profile is lower and your plan should cost less accordingly.

Can our hosting company cover this?

Managed hosting often includes server patching, backups and uptime monitoring, which overlaps with the cheaper end of maintenance plans. What it rarely includes is application level responsibility: theme and plugin conflicts, a broken form, or a content change. Check the overlap before paying twice.

What should be included in every plan regardless of tier?

Security patching on a stated cadence, off site backups with a tested restore, uptime monitoring that alerts a person, a functional check of enquiry forms after updates, and a named contact with a response commitment. Anything beyond that is a legitimate upsell rather than a baseline.

Who should hold the hosting and domain accounts?

Your business, in your name, with billing you control, granting the provider access. This is the arrangement that keeps a maintenance relationship easy to end. Plans where leaving means losing the site or the domain are worth avoiding whatever the monthly price looks like.

Browse agencies by specialty

• SEO agencies with verified facts
• PPC agencies with verified facts
• Social media agencies with verified facts
• Content marketing agencies with verified facts
• Email marketing agencies with verified facts
• Performance marketing agencies with verified facts