Website Maintenance Plan: What It Should Include and How to Check Your Support

A site rarely breaks all at once. One plugin falls a version behind, a contact form quietly stops sending leads, the last backup is a month old, and nobody notices until a customer calls. A website maintenance plan is a written list of who checks what and how often, so the site stays safe, fast and working. Hosting alone does not do that job. This guide gives a business owner a practical plan: what to check every month, quarter and year, what to put in a contract, and how to tell that no one is really looking after your site.

Website maintenance plan: hosting, support and improvements are three different jobs

Owners often assume that paying for hosting means someone watches the site. It does not. Hosting keeps the server running, support keeps the site itself healthy, and improvements change what the site does. Mixing them up is the most common reason a site has no real care. Here is website maintenance vs hosting in one table.

Job	What it covers	Usually paid as
Hosting	Server, SSL certificate, domain renewal	Fee to a hosting company
Maintenance and support	Updates, backups, monitoring, fixing breakages	Monthly retainer or support contract
Improvements	New pages, features, design, integrations	Separate project budget

Write down which of the three you actually have. If only the first row has a name next to it, the site is unsupported. A team that provides web development services will usually offer the second row as a monthly service after launch.

Every month: updates, backups, forms and uptime

Monthly work is small, but it must not be skipped. Most website maintenance plans start from this website maintenance checklist, so ask for it in this order:

1. Update the CMS, plugins and themes, first on a staging copy if the site is business-critical.
2. Check that a fresh backup exists and is stored away from the server.
3. Send a test message through every form and confirm it reaches a real inbox.
4. Review uptime alerts and fix anything that repeated.
5. Remove unused plugins, old admin users and expired access.

A backup that has never been restored is only a hope. The UK National Cyber Security Centre explains how small businesses should back up their data, including keeping copies offline and testing recovery. Our website security checklist covers the access and update basics behind this list.

Every quarter: speed, security, links and analytics

What to review each quarter

• Page speed on the home page and the top landing pages, on mobile.
• Security scan, user roles and password hygiene.
• Broken links, redirects and error pages.
• Analytics goals: are calls, forms and purchases still counted?
• Search Console messages about indexing or mobile problems.

A maintenance plan for your website works only if each quarterly check ends with a short note: what was found, what was fixed and what needs budget. Each quarter, the plan should name who does the maintenance of the website and who signs off the result. Without that note, the owner never sees the value of the work. Simple.

Every year: design, content, legal pages and accessibility

Yearly tasks are the part that website maintenance plans most often forget. Step back from the technical side once a year. Read the main pages as a new customer would: are prices, services, addresses and team names still true? Compare the privacy policy, terms and cookie banner with what the site really does. Then check accessibility. The European Accessibility Act has applied since 28 June 2025, and its rules are set out in Directive (EU) 2019/882. In the United States, the Department of Justice publishes web accessibility guidance under the ADA. We explain both in our guide to website accessibility requirements under the EAA and ADA. Which rules apply depends on your market, so confirm the details with a lawyer.

What to put in a website support contract

A good website support contract is short and specific. Vague promises such as “we look after the site” cannot be checked. Prices for web maintenance plans differ widely, so compare what each website maintenance package includes, not only the fee. Ask for these points in writing:

• Response time: one for a site that is down, another for a small request.
• Access: who holds the domain, hosting and admin accounts. They must be in your name.
• Backups: how often, where stored and when recovery was last tested.
• Monthly report: updates done, incidents, uptime and open requests.
• Data protection: a data processing agreement under GDPR Article 28 if the provider can see personal data.

The maintenance of a small website needs a plan, not goodwill. Included hours and a clear price for anything outside them prevent arguments later. For servers, deployments and monitoring, DevOps services can be added to the same agreement.

Seven signs your website support does not really exist

• No one can name the person who updates the site.
• The CMS and plugins show pending updates for months.
• You have never seen a report.
• Backups sit on the same server as the site.
• A form broke and you heard about it from a customer.
• Admin accounts belong to former staff or freelancers.
• The contractor answers only when you chase.

If three or more apply, treat the site as unsupported and ask for a proper website support plan with a named owner and a schedule. That is the minimum.

How to hand a website over to a new contractor

Every website maintenance plan should also describe the handover. Switching providers is easier when the first step is documentation, not a new quote. Ask the old team for admin and hosting access, a full backup, the list of plugins and integrations, DNS records and the history of changes. Let the new contractor audit the site before signing, and agree a short handover period when both sides are available. Keep ownership of the domain and accounts throughout, so no one can hold the site hostage. A website support plan that lists these items makes the next change painless.

Free site health check and a website maintenance plan for your business

You can order website maintenance as a monthly service or start with a one-off check. Our web development team reviews CMS and plugin versions, backups, forms, speed and access, then writes a short fix list.