Launch day feels like the end. The site is live, everyone shares the link, you finally relax and forget about website maintenance. Small business owners almost always do.

Then six months later, the contact form stopped working three weeks ago and nobody noticed. Or the site shows a weird error. Or Google says it’s “not secure.”

A website is like a car. You can buy a great one, but if you never change the oil, one day it just stops on the freeway. Maintenance isn’t exciting. It’s what keeps the car running.

Here’s what it actually involves, what you can do yourself, and when it’s worth paying someone.

Why websites break (even if you don’t touch them)

This surprises a lot of people: “I didn’t change anything, why did it break?”

Because the world around your site keeps changing:

• WordPress, themes and plugins get updates to fix bugs and security holes. If you never update, you fall behind. If you update carelessly, something can break.
• Browsers and phones change. What worked fine two years ago can look odd today.
• Hackers use bots that scan thousands of sites looking for old, unpatched software. It’s not personal. Your site just has to be the one with the door unlocked.
• Your business changes. New prices, new hours, new services. An outdated site quietly tells customers wrong things.

Website maintenance: small business checklist in five parts

1. Updates

Like the oil change. WordPress, the theme and every plugin need updates regularly.

The trick isn’t just clicking “update.” It’s doing it carefully: one at a time, checking the site afterwards, and having a backup in case something goes wrong.

2. Backups

A backup is your spare key. You don’t think about it until you’re locked out.

Good backups are:

• Automatic: you shouldn’t have to remember.
• Regular: more often if your site changes a lot.
• Stored somewhere else: not only on the same server. If the server has a problem, the backup goes with it.
• Tested: a backup you’ve never restored is a hope, not a plan.

3. Security

Think of it like locking the shop at night. You don’t need a vault, but you do need a good lock.

• A secure connection (the lock icon, HTTPS).
• Strong passwords, and not sharing the admin login with everybody.
• Protection against bots that try to guess passwords.
• Removing plugins you don’t use. Every plugin is another door.

4. Speed and health checks

Sites get slower over time: bigger photos, more plugins, more stuff. A slow site loses visitors and gets less love from Google.

Every so often someone should check:

• That the site still loads fast on a phone.
• That there are no broken links.
• That contact forms, booking buttons and WhatsApp links actually work. (Send yourself a test message. Seriously.)

More on speed here: Website speed optimization

5. Content updates

This is the part customers notice most.

• Prices, hours and services up to date.
• Holiday hours posted before the holiday, not after.
• Fresh photos from time to time.
• Both languages updated, if your site is bilingual. It’s easy to update the English page and forget the Spanish one.

Can I do it myself?

Sometimes, yes. Here’s an honest comparison.

Doing it yourself works if:

• Your site is simple.
• You’re comfortable logging into WordPress.
• You’ll actually set a reminder and do it every month.
• You know how to restore a backup if an update breaks something.

Paying someone makes sense if:

• You’d rather spend that time running your business.
• Your site brings in customers or sales every week, so downtime costs you money.
• You don’t want to learn what a “plugin conflict” is (fair enough).
• You have a store, booking system or forms that must always work.

There’s no shame in either. Just don’t pick option three: nobody does it.

What does maintenance cost?

It varies a lot. Some people charge per hour when something breaks, some charge monthly.

In my case, the Care Plan is $60 a month and includes hosting on a fast server, security, regular backups, updates, and one hour of changes per month: prices, photos, hours, text, whatever you need. The idea is that you don’t have to think about the website at all.

Whatever you choose, compare it with the cost of the alternative: a site that’s down for a week, a hacked site, or customers calling a number that no longer works.

Signs your site needs attention right now

If any of these sound familiar, don’t wait:

• Your browser shows “not secure” next to your address.
• You haven’t logged in for months (or don’t know the password).
• The contact form hasn’t sent you a message in a long time. (Is it really that quiet, or is it broken?)
• Your hours or prices on the site are wrong.
• The site feels slow on your phone.
• You see plugins asking for updates, and the list is long.

A simple monthly routine

If you want to handle it yourself, here’s a routine that takes under an hour:

1. Check the backup ran and is stored off the server.
2. Update WordPress, theme and plugins, one at a time.
3. Visit your main pages on your phone after updating.
4. Send a test message through your contact form.
5. Review prices, hours and promos, in both languages.
6. Delete anything you don’t use: old plugins, draft pages, test content.

Write it on a sticky note. Put it next to your monthly bills.

What I’d do if I were you

If your website brings you customers, protect it like you’d protect your shop:

1. Make sure you have automatic backups stored outside your server. Today.
2. Decide who is responsible for updates. A name, not “someone.”
3. Set a monthly reminder for the routine above.
4. If you don’t have the time or patience, hand it off and forget about it.

That’s exactly why my Care Plan exists: I keep your site running, secure and up to date while you run your business. Or ask me for a free quote and I’ll take a look at how your site is doing.

Frequently asked questions