Website maintenance costs: what care plans charge vs what the work actually is

The market rates, what you are actually buying, and why the platform your site runs on decides most of the bill.

A small business website typically costs $35 to $100 a month to maintain, and a dedicated WordPress care plan from a specialist runs $89 to $359 a month — sources and dates below. We are Freedom35 Web Design, and we should say up front that we sell the alternative: we build custom sites free in about 7 days, and hosting, security and updates are all inside one annual plan — $180, $600 or $1,200 a year. So we have a position here. The numbers are real either way.

What do care plans actually charge?

Source What it covers Price Checked
WebFX maintenance pricing guide Small business website, typical upkeep $35–$100/mo Page dated Dec 19, 2025; read Aug 13, 2026
WebFX maintenance pricing guide Mid-size business site $125–$500/mo Same page
WebFX maintenance pricing guide E-commerce site $1,500–$2,500/mo Same page
WP Buffs published plans WordPress care: updates, backups, monitoring, up to speed and security work $89–$359/mo wpbuffs.com/pricing, Aug 13, 2026
WebFX hourly rate One large agency's published rate for ad-hoc work $150/hr Same WebFX page

Take the spread seriously. $35 a month and $500 a month are both "website maintenance" for a small business, and the difference is rarely the amount of work — it is what the site is built on and how the vendor prices risk. Note also what a care plan is not: none of those prices include building the website in the first place.

What does website maintenance actually consist of?

Strip the packaging off a care plan and the work is this:

  • Hosting and SSL. Keeping the site online and the padlock valid. Largely automatic once set up correctly.
  • Backups. Copies you can actually restore from, not just copies.
  • Software updates. The platform, its theme, and every plugin. This is the item that varies from "nothing" to "a part-time job" depending on the stack.
  • Security. Mostly a consequence of the item above: unpatched software is how small business sites get compromised.
  • Uptime monitoring. Knowing the site is down before a customer tells you.
  • Content changes. New prices, new staff, new hours. The only item on this list a business owner actually notices.

The honest summary: maintenance is mostly nothing, occasionally everything. Most months, a well-built site needs no human attention at all. The month something breaks, you need someone competent who answers. A care plan is partly labor and partly insurance, and it is priced like insurance on whatever the site is built on.

Why do WordPress sites cost more to look after?

Because there is more to go wrong, and it goes wrong on a schedule. A typical small business WordPress site runs the WordPress core, a theme, and a stack of plugins, each updated by a different author on a different timetable. Updates can conflict with each other. A plugin author can abandon a plugin your site depends on. Skipping updates is not an option, because unpatched plugins are the standard way in for attackers. This is the treadmill, and it is genuinely why WordPress care plans exist and charge what they charge — the $89-a-month entry plan cited above is largely paying someone to run other people's updates carefully, week after week.

A static site — plain pages served from a CDN, which is how we build — steps off the treadmill. There is no database to compromise, no admin login to brute-force, no plugins to patch. The maintenance surface is a fraction of the size, which is not a boast about effort; it is a property of the architecture. It is also why we can fold maintenance into an annual price that would not cover two months of a typical care plan.

Do you need a maintenance plan at all?

Depends entirely on the stack and on you. Three honest cases:

  • WordPress site, non-technical owner: yes, buy a plan or a reliable freelancer, because the update treadmill does not pause while you are busy, and the cost of skipping it arrives as a hacked site at the worst possible time. This is the case the care plan industry legitimately exists for.
  • WordPress site, technical owner: maybe not. If you are comfortable running updates weekly, testing after each one, and restoring from a backup under pressure, you are the plan. Be honest about whether you will still be doing it in month eight.
  • Static site: mostly no. There is no software on the site to patch. What you still need is hosting, SSL renewal, backups, and a person to call — which is either a few small bills and your own time, or bundled with whoever built it.

The pattern worth noticing: maintenance cost is decided at build time, not billing time. The platform choice made in week one sets the maintenance bill for every year after, and it is the least discussed line in most proposals. Ask about it before the build, when it is still cheap to change.

What should you refuse to pay for?

  • Maintenance on a site that has no moving parts. A five-page static brochure site does not need a $100-a-month care plan. If a quote includes one, ask what, specifically, is being maintained.
  • "Security monitoring" with no stated deliverable. Real security work is updates, backups you can restore, and access control. A line item that names none of those is a word, not a service.
  • Hosting marked up without being named. Hosting a small business site costs the vendor very little. Bundled is fine — we bundle it — but "hosting: $50/mo" as its own line deserves the question "with whom?"
  • Paying twice. A care plan that charges hourly for content changes on top of the monthly fee is two bills wearing one name. Either the plan includes changes or it does not; the quote should say which.

How does our model work instead?

There is no separate maintenance bill. The annual plan — $180 for Hobby, $600 for Business, $1,200 for Pro, prepaid annually with a 12-month minimum — is the entire cost, and it covers hosting, SSL, backups with rollback to any previous deploy, monitoring, and the content changes, which we handle through update requests: 4 a year on Hobby, 12 on Business, 24 on Pro. One update request is one email containing any number of small changes to existing pages, done together, up to about half an hour of work. The allowance runs by the year and resets at renewal, so requests can be saved up rather than expiring monthly. Your domain (about $12–15 a year, in your name) is the only thing outside the plan; the full list of what is and is not included is on the pricing page, including the fair-use limits, published so you can check them rather than trust us.

Is capped worse than "unlimited edits"? For a business that changes its site weekly, yes — and some of the monthly companies in our $99-a-month teardown would serve that business better. For the typical small business, which touches its site a handful of times a year, an honest cap costs less than an unlimited promise priced as if everyone used it.

The totals, side by side

Per year Typical WordPress setup Freedom35 Business plan
Build Paid separately, up front Free, in about 7 days
Care plan / maintenance $420–$1,200+ ($35–$100/mo, per WebFX) Included
Hosting Sometimes separate, sometimes bundled Included
Content changes Depends on plan; often hourly 12 update requests a year
Software patching Required, forever Nothing to patch — no plugins exist
Total per year $420–$1,200+ after the build $600, build included

One caution against ourselves: if you already own a WordPress site you are happy with, a fair care plan is a reasonable thing to buy, and cheaper than rebuilding for its own sake. The comparison above is for someone deciding what to build, not someone deciding whether to abandon what works. And if the real question is whether to hire anyone at all, read Wix vs hiring a web designer first — DIY moves the maintenance cost to zero dollars and some of your evenings.

One price, once a year, build included

We build the site free. From $180 a year, keeping it running is our problem.