A website is not finished at launch
Most website projects are launched, invoiced and left. We treat upkeep as part of the job: three things kept up on a cadence, with a written log you can see.
A certificate lapses, a security fix goes unapplied, a page is deleted and its address breaks, the ranking drifts. In Sucuri's report on 2023, 39.1 per cent of hacked sites were running out-of-date software when compromised. Pew found 38 per cent of the web pages that existed in 2013 had gone a decade later.
What is checked, and how often
Security. Anything the site is built from that gets a high or critical fix is updated within 14 days, the UK Cyber Essentials standard, and within 48 hours where a public exploit exists. Certificates are watched. Backups are restored monthly to prove they work. A site that stays on WordPress has its plugins patched on the same cadence, reviewed for abandonment, and backed up weekly.
Code. Broken links, redirect chains, failing forms and console errors, crawled for monthly. Dependencies kept current so a security fix is a small change rather than a rebuild.
Search. Core Web Vitals, impressions and clicks, and the redirect map, reviewed monthly.
What we promise, and you can check
- A written log of every check and every change, which is yours.
- No contract longer than a month.
- If we recommend work, the recommendation says what it would cost and what happens if you do not do it.
When something breaks
You email the engineer who looks after the site, not a ticket queue. Essential and Standard: a response within one working day. Full: the same day. The fix and the cause go in the log.
How we price it
| Tier | For |
|---|---|
| Essential | A static site that needs watching, patching and measuring |
| Standard | A site that changes often, with monthly reporting and small changes included |
| Full | A business-critical site, a shop, or a site that stays on WordPress |
No contract longer than a month. Thirty days of Essential comes with every site we build or move. There is no rule that care should cost a fixed share of the build; we looked for the evidence and found none, so each tier is priced for the work listed.
What each tier includes
- Essential. Uptime and certificate monitoring, with an alert to us; Dependency updates within 14 days for anything rated high or critical, 48 hours with a public exploit; Monthly check that the backup restores; Quarterly measurement of speed, accessibility and search, with the figures sent to you.
- Standard. Everything in Essential; Up to two hours of content and small changes a month; A monthly report of Core Web Vitals, search impressions and broken links; Redirect map kept current as pages change.
- Full. Everything in Standard; Up to five hours of engineering a month; Same-day response to anything broken; For a site that stays on WordPress, patching within 14 days, a firewall, weekly tested backups and plugin review.
Questions people ask
What does it cost to run?
Hosting for a static site on Netlify is free up to a monthly usage limit and from $9 a month on its Personal plan, with no plugin licences. Care, if you want it, is quoted separately and carries no contract longer than a month. The editor has no fee. Ongoing care
Sources (3)
Last reviewed 28 October 2026.
Tell us what your site runs on and when it was last looked at.
An engineer will reply within one working day with which tier fits.
Talk to an engineer about looking after your site