What WordPress Maintenance Really Covers (and What It Doesn't)

“WordPress maintenance” appears on many offers – and means something different everywhere. Sometimes it’s an automatic plugin update once a month, sometimes real technical care. This post makes transparent what sensible maintenance delivers, where its limits are, what it costs, and how to tell substance from label.

Why WordPress Needs Maintenance at All

WordPress powers a large part of the web – and is exactly why it’s a popular attack target. Core, plugins and themes receive constant updates, many of them closing security holes. A site untouched for half a year runs with known vulnerabilities, an outdated PHP version and plugins that get in each other’s way. Maintenance is therefore not a luxury but the insurance that a small problem doesn’t turn into major damage.

What Sensible Maintenance Includes

• Updates – controlled. Keep core, plugins and themes current, test critical updates via staging, use auto-updates where they run safely. Not blindly updating everything – but knowing what an update can break.
• Backups – tested. Regular backups whose restore is actually verified. A backup that doesn’t restore when it counts is no backup (backups done right).
• Security. Vulnerability monitoring (e.g. Patchstack), configuration hardening, fast response to known holes before they’re exploited.
• Availability. Uptime monitoring that alerts you when the site goes down – not the customer first.
• Performance & PHP. Keeping an eye on the site staying fast and running on a current PHP version.
• Documentation. Traceable reports of what was actually done in the period.

Transparency, Not a Black Box

Good maintenance is verifiable. We document the work done in regular reports – including the honest parts: if, say, a data source wasn’t yet fully captured in a period, or a tool is being migrated, that’s stated rather than glossed over. That honesty is exactly the difference between care and label.

What Maintenance Isn’t

For expectations to match, the boundaries belong here too:

• Not free further development. New features, redesigns or larger rebuilds are project work, not maintenance.
• No guarantee against every outage. Maintenance hugely lowers the risk but can’t rule out hosting outages or zero-day holes – it ensures a fast response.
• No substitute for good hosting. Weak hosting holds back even the best maintenance.

What Maintenance Costs

Serious WordPress maintenance usually ranges, depending on scope, from around 30 to 250 € net per month. The price depends less on the number of plugins than on the guaranteed response time, the scope of security and backup services, and whether hack cleanup is included. Very cheap offers often cover only an automatic plugin update – with no tested backups, no monitoring, no one who picks up when things burn. We work with three packages from 79 to 249 € net, cancellable monthly; the details and what’s in each are on our WordPress maintenance page. How the price breaks down exactly is in What Does WordPress Maintenance Cost?.

How to Recognise Good Maintenance

1. Traceable reports instead of “all running”.
2. Tested backups, not just created ones.
3. Staging for critical updates.
4. Honest communication about risks and limits.
5. Availability when it matters.

Related Topics

• Core Web Vitals for WordPress – load times are part of good upkeep
• Fixing WordPress Errors – maintenance prevents many of these errors
• WordPress Security Overview – security as a fixed part of the maintenance routine

---

Want to know what maintenance your site concretely needs – and a partner who documents transparently? Drop us a line – we’ll give you an honest picture of the current state.