Plenty of Houston businesses pay a monthly fee for "website maintenance" and couldn't tell you what they get for it. The invoice arrives, the site still loads, so it must be fine. Then one day the contact form stops sending, or the site gets hacked, and it turns out "maintenance" meant very little.
Real website maintenance covers software updates, backups that get test restored, uptime and security monitoring, regular checks that your forms still deliver, certificate renewals, small content edits and a plain report of what was done. If your vendor can't show you each of those in writing, you're paying for a promise instead of a service. Use the checklist below to find out.
Why maintenance matters more than it looks
A website isn't a brochure you print once. Most small business sites run on software, often WordPress plus a theme and a handful of plugins (add on pieces of software that add features). That software gets updates for bugs and security holes all the time. Browsers change. Email providers change their rules. Hosting servers get upgraded.
I see this a lot: a site nobody has touched in two years, running old plugins with known security problems, with a contact form that quietly broke months ago. The owner had no idea, because a lead that never arrives makes no noise.
Good maintenance is how you catch those problems before your customers do.
The checklist to hold your vendor to
1. Software updates, done carefully
- The core platform, theme and plugins are updated on a regular schedule, with security fixes applied promptly.
- The server's PHP version, the programming language most WordPress sites run on, is kept on a supported release.
- Updates are tested before or right after they go live, because an update can break a layout or a form.
- Plugins nobody uses anymore get removed instead of just switched off.
Ask how they handle an update that breaks something. "We roll it back from a backup and fix it" is a good answer. A blank stare isn't.
2. Backups, with restores that have been tested
Almost every vendor says they do backups. Far fewer have ever tried restoring one. A backup you've never restored is a hope, and you don't want to find out it's broken on the day you need it.
- Backups run automatically, at least daily for sites that change often.
- They include both the files and the database, which is where your pages, posts and form entries live.
- Copies are stored somewhere other than the same server as the site.
- Several past versions are kept, so you can go back to before a problem started.
- A test restore is done on a schedule, and you're told when it happened and whether it worked.
3. Uptime and security monitoring
- Something checks that your site is up around the clock and alerts a real person when it's down.
- Logins are protected with strong passwords, limits on repeated failed attempts and only the user accounts you actually need.
- Someone watches for malware, which is harmful code slipped onto a site, and for signs of tampering.
- A firewall or similar protection blocks common attacks before they reach the site.
4. Form checks that go all the way to the inbox
This is the one most maintenance plans miss, and it's the one that costs you the most. A form can look perfect and still fail to deliver. Email settings change, spam filters get stricter, a plugin update breaks something small.
- A real test submission goes through every form on a regular schedule.
- Someone confirms it actually lands in the right inbox or CRM, not just that the "thank you" message appeared.
- Your domain's email settings, the records that prove your site's messages are legitimate, are set up so form notifications don't land in spam.
We take this seriously enough that forms and tracking is its own service, and our email setup covers the records that keep messages out of spam.
5. SSL certificate renewals
The SSL certificate is what puts the padlock in the browser bar and lets your site load over https. Certificates expire. When one lapses, visitors see a scary warning page instead of your site. Renewal should be automatic, and someone should check that it actually renewed.
6. Small edits without a new contract
Hours change, staff come and go, prices move. A good plan includes a clear amount of small edit time each month, so updating your phone number doesn't turn into a quote and a two week wait. Get the included amount in writing so there's no confusion later.
7. Speed and broken link checks
- Phone speed is checked regularly, since sites tend to slow down as things get added.
- Broken links and missing pages are found and fixed.
- Google Search Console, Google's free tool that reports problems it finds on your site, is checked for new errors.
8. A report you can actually read
At least monthly, you should get a short, plain report. It should list what was updated, when backups ran and when a restore was last tested, any downtime, the form test results and what edits were made. If the report is a wall of charts with no plain answers, ask for plain answers.
Questions to ask before you sign
Whether you're hiring someone new or checking on your current vendor, these questions sort real maintenance from a monthly invoice:
- When was the last time you restored one of my backups, and did it work?
- Where are my backups stored, and how far back do they go?
- How do you find out if my site goes down, and who gets the alert?
- How often do you test my forms, and how do you confirm the message arrived?
- What happens if an update breaks something?
- How much edit time is included, and what counts as a small edit?
- Do I have my own admin login, and do I own my domain and hosting account?
That last one matters more than people think. You should always have access to your own domain, hosting and site. If a vendor holds all the keys and you part ways, getting them back can be painful.
What maintenance can and can't promise
Be careful with plans that promise specific response times or perfect uptime unless the terms are spelled out in a signed agreement you've read. No honest vendor can promise your site will never have a problem. What good maintenance does is make problems rarer, catch them sooner and make recovery routine instead of a crisis.
Maintenance also won't fix a site that was built poorly. If your site is slow, hard to update or held together with a dozen plugins, a redesign may save more money over time than patching it every month.
Start with what's broken right now
Before you pick a plan, find out where your site stands today. Our website care covers everything on this checklist, and you get the exact price in writing before anything starts. But the first step is knowing what's already leaking.
Get a free Lead Leak Check and we'll test your forms, phone speed, tracking, Google basics and what AI answers say about your business.
