Website maintenance is the cost nobody budgets for. The build gets quoted, approved, and paid. Then a year later the contact form has quietly stopped sending, the SSL certificate has expired, and nobody is sure who was supposed to be watching.

Here is what maintenance actually consists of, and what it should cost.

What is genuinely required

These are not optional for any live website:

  • Hosting — somewhere for the files to live and be served from
  • Domain registration — renewed annually, typically $10–$20 for a standard .com
  • SSL certificate — free through Let's Encrypt and included by most hosts; a browser warning on your site costs you customers immediately
  • DNS — usually included with the domain or the host

For a static site, that is close to the whole list, and it can run from nearly nothing to a few dollars a month. For a database-driven site it is the starting point rather than the total.

What is required if you run a CMS

WordPress, Drupal, and similar platforms add obligations that static sites do not have:

Core, theme, and plugin updates. Security patches ship regularly. A site running a year-old plugin stack is a genuinely likely target — most compromises of small business sites come through known, already-patched vulnerabilities rather than anything sophisticated.

Backups you have actually tested. An untested backup is a hope, not a plan. Restoring one should be something you have done at least once deliberately.

Update compatibility checking. Updates occasionally break layouts or conflict with each other. Somebody has to look at the site after applying them.

This is why the same five-page site costs very different amounts to keep running depending on what it was built on.

What is worth doing but not urgent

  • Uptime monitoring — so you find out your site is down before a customer tells you
  • Form monitoring — the most common silent failure on a small business site is a contact form that stopped delivering months ago
  • Analytics and Search Console review — knowing whether traffic is going up or down
  • Broken link checks — particularly after any content change
  • Content freshness — hours, prices, staff, and service lists drifting out of date

Typical price ranges

Doing it yourself: $10–$50 a month

Hosting plus the domain, plus your own time. Realistic if your site is static or very simple and you are comfortable with the technical side. Less realistic for WordPress, where the time cost is real and the consequence of neglect is a compromised site.

Hosted platform plans: $20–$50 a month

Wix, Squarespace, and similar bundle hosting, SSL, updates, and support into the subscription. Maintenance in the technical sense is handled. Content updates are still your job, and the site stops existing if you stop paying.

Managed maintenance plans: $50–$300 a month

An agency or studio handles hosting, updates, backups, monitoring, and usually a small allowance of content changes. The range is wide because what is included varies enormously. Ours is $50 a month and covers hosting, one standard-priced domain, DNS, SSL, CDN, monitoring, backups, routine technical maintenance, and deployments — with content changes and new features billed hourly rather than bundled into a vague allowance.

Enterprise retainers: $500+ a month

Includes strategy, reporting, content production, and SEO campaigns. This is marketing spend with maintenance attached, not maintenance. Reasonable for businesses running an actual growth program; considerable overkill for a five-page service site.

Questions to ask before signing a maintenance contract

The word "maintenance" hides a lot. Before agreeing to a monthly fee, get plain answers to these:

  • What specifically is included, listed as tasks rather than adjectives?
  • Are content changes included, and if so how many hours a month?
  • Who owns the hosting account and the domain — you, or them?
  • What happens to the site if the contract ends?
  • What is the response time for something being broken?
  • Are backups taken, where are they stored, and how quickly can one be restored?
  • Is there a minimum term or an automatic renewal?

The ownership question is the one that matters most. A plan where the provider holds the domain and the code is not a maintenance plan; it is a hostage situation with an invoice attached. You should be able to leave and take the site with you.

If a maintenance quote cannot be broken down into specific tasks, it is not a maintenance quote. It is a subscription.

What skipping maintenance actually costs

The failures are rarely dramatic. They are quiet, and you often find out months later:

The form that stopped working. A mail configuration changes, a spam filter tightens, and inquiries vanish. You do not get an alert. You just get fewer calls and assume business is slow.

The expired domain. A renewal email goes to an address nobody checks. The site disappears, and recovering a lapsed domain is anywhere from irritating to impossible.

The compromised CMS. An unpatched plugin becomes an entry point, and your site starts serving spam or malware. Cleanup costs more than a year of maintenance, and Google's warning interstitial costs you traffic while it lasts.

The information nobody updated. Old hours, old prices, a staff member who left in 2023. Every one of those is a customer having a bad experience with your business before they have met you.

A sensible baseline

For most small businesses: keep the site simple enough that maintenance is small, budget for hosting and the domain, put uptime and form monitoring in place, and set a reminder to review the content twice a year. If your site runs on a CMS, either commit to the update schedule yourself or pay someone to own it — leaving it unowned is the expensive option.

If your site is currently unmaintained and you are not sure what state it is in, the free audit checklist is a reasonable place to start.

Want someone to take the technical upkeep off your hands? Ask about managed care — $50 a month, month-to-month, and you keep ownership of the code and domain.