Why a website needs ongoing care
A website is not a brochure that stays printed. The software underneath it changes constantly. Browsers update, security holes are discovered and patched, plugins are abandoned by their authors, and the services your site connects to change how they work. Left alone, even a well-built site slowly degrades.
The damage is usually quiet. A contact form stops sending emails and nobody notices for weeks. A plugin conflict breaks the mobile menu. An expired certificate puts a warning in front of visitors. Staff bios, prices and opening hours drift out of date. None of this makes headlines, but each one costs enquiries and credibility.
What website maintenance includes
A sound maintenance arrangement covers four areas. The exact scope depends on your platform and how much you change the site.
Keeping it running
- Core, theme, plugin or app updates, tested before and after they are applied.
- Regular off-site backups, with restores tested rather than assumed.
- Uptime monitoring and alerts when the site goes down.
- Security certificate, domain and hosting renewals tracked.
Keeping it safe
- Security monitoring and malware checks.
- Strong authentication and removal of old user accounts.
- A clear plan for what happens if something goes wrong.
Keeping it fast and findable
- Speed and Core Web Vitals checks after changes.
- Broken link and crawl error monitoring in Google Search Console.
- Forms and tracking tested so enquiries are actually recorded.
Keeping it accurate
- Content updates: services, team, prices, hours, policies.
- Accessibility checks on new content.
- Small improvements based on how visitors use the site.
Do it yourself, a staff member, a freelancer or an agreement?
Each option can work. What matters is that someone specific is responsible.
| Do it yourself | Staff member | Freelancer as needed | Maintenance agreement | |
|---|---|---|---|---|
| Good for | Very simple sites, technical owners | Larger teams with in-house skills | Occasional fixes on stable sites | Sites that bring in revenue |
| Updates and testing | When you remember | Depends on priorities | Usually only when asked | Scheduled and tested |
| Backups and recovery | Often untested | Varies | Rarely included | Regular, tested restores |
| Response when something breaks | You figure it out | If they are available | When the freelancer is free | Agreed response times |
| Main risk | Neglect and time cost | Key-person dependency | No ongoing ownership | Paying for scope you do not need, if poorly defined |
Hosting is not the same as maintenance
Many businesses assume their hosting company looks after the website. Usually it does not. A host keeps the server running; most do not update your plugins, test your forms, fix layout problems or check that enquiries arrive. Some managed hosting includes automatic core updates, which helps, but does not replace someone checking the site afterwards.
It is also worth checking who controls your domain. A .com.au domain should be registered to your business, with renewal reminders going to an address you monitor, not to a former developer. Lost domains are one of the most painful and avoidable website problems.
WordPress and Shopify maintenance
WordPress needs the most attention: core, theme and plugin updates, each of which can conflict with the others. We apply updates in a controlled way, test key pages and forms afterwards and keep the plugin list lean. Turning on automatic updates for everything is convenient but risky on a business site, because nobody checks what broke. More on building WordPress sites that are easy to maintain on our WordPress web design page.
Shopify handles hosting, security and core updates itself, but stores still need care: app reviews and clean-ups, theme updates, product data checks, shipping rate and GST settings, and checkout testing after changes. Our Shopify web design page covers store setup in more detail.
Custom sites have fewer moving parts, but dependencies, hosting and integrations still need periodic review.
Security, data breaches and search visibility
A compromised website can expose personal information submitted through forms. Organisations covered by the Privacy Act have obligations under the Notifiable Data Breaches scheme, which can require notifying affected people and the OAIC when a breach is likely to cause serious harm. Keeping software current, limiting what forms collect and maintaining tested backups all reduce that risk. This is general information; check your obligations with an adviser.
Neglect also hurts search visibility. Hacked sites can be flagged in search results, slow sites lose ground, and broken pages waste the authority you have built. Regular maintenance protects the results of your SEO work as well as your reputation.
Dental website management and other regulated practices
For dental practices and health clinics, website management includes keeping content compliant over time, not just technically sound. Practitioners join and leave, treatment offerings change, and AHPRA's advertising guidance applies to every update: no testimonials about clinical care and no claims that create unreasonable expectations. A maintenance arrangement should include a quick review of new content against those rules before it goes live, while final responsibility stays with the practice.
The same principle applies to law firms, financial advisers and real estate agents: outdated fee information, staff details or listings create risk as well as confusion.
Maintenance for sites we did not build, and what drives the cost
We take on websites built by others. The first step is an intake review of the platform, hosting, plugins or apps, backups, security, speed and accessibility. That tells us whether the site can be maintained as it is, needs a clean-up first, or would honestly be better replaced, in which case our website redesign process protects what it already earns.
Cost depends on the platform, the number of plugins and integrations, how often content changes, the response time you need and how much improvement work you want each month. We do not publish prices or ranges; we agree a defined scope. New clients start with a strategy session with the founder (A$425 excl. GST). Because we work from the Netherlands, routine updates can happen during your night, outside your business hours.