Monthly Website Maintenance Plan: What Should Be Included, What Is Not, and How to Compare Plans

Key takeaways

• A plan is a list of tasks, not a price. Compare the tasks first. Two plans at the same monthly fee can differ by a whole category of work, such as backups or emergency fixes.
• Seven items cover most sites. Updates, backups, security and uptime checks, fixes, content edits, speed checks and a monthly report. Add accounts and exit terms as an eighth, since they protect you.
• The list changes by platform. A WordPress site has the most to update. Webflow, Framer and Shopify handle the server side, so the work shifts to content, forms, apps and fixes.
• Plans usually leave out the big jobs. New features, redesigns, new pages and hosting are commonly quoted separately. Ask where the line sits.
• Allowances are the hidden part. Check how many edits you get, how fast they are done, and what happens when you go over.
• For prices, use our cost guide. This post is about scope. Our website maintenance cost guide has the platform bills and published plan prices.

What a monthly maintenance plan is

A monthly maintenance plan is a standing agreement. Someone looks after your site every month, so you do not have to hire help each time something breaks. It is not a one-off fix and it is not a redesign.

Sellers describe these plans in similar terms. In the pages we read on 3 November 2026, common parts were monthly updates, backup checks, security scans, uptime monitoring and a monthly report. Higher tiers added speed work. Several sellers say new features, design changes, content updates and hosting are outside the base plan, and that anything outside it is quoted separately. Emergency work such as malware removal was included in the top tiers of one provider and sold on the side for the lower ones.

That last point is the lesson. The same word, "maintenance", covers a very small plan and a very full one. So read the task list before you read the price.

The eight-part checklist

Use this list when you compare plans. A good plan answers each line in writing.

If a plan cannot answer item 2 or item 8 in a clear sentence, treat that as a warning. Backups decide whether a bad day is a small problem or a lost site. Accounts decide whether you can walk away.

The checklist by platform

The eight items do not weigh the same on every platform. This table shows where the work sits. The "Platform handles" column is the general split between a hosted builder and a self-managed site. Confirm the detail with the maker or the studio, since plans and features change.

WordPress sits on the heavy end for a reason you can verify. The WordPress documentation says that minor core updates, which carry maintenance and security fixes, are enabled by default, while plugins and themes are generally not updated automatically (checked 3 November 2026, WordPress developer documentation). The same page says to back up before updating and to check that the backups can be used. So on WordPress, someone has to own the plugin and theme updates and the backup test. If a plan does not name that person, you are paying for less than you think.

For the PHP part of that job, see our guides on how to check and update PHP on WordPress and how to back up WordPress before a PHP update.

What plans usually leave out

Most plans stop at routine upkeep. These are the jobs that tend to fall outside the monthly fee.

1. New features and new pages. A new booking form, a new service page or a new store section is a project, not upkeep.
2. Redesigns. A fresh look is priced as a build. See our guide to what a website redesign costs.
3. Hosting and platform bills. Sellers often keep these separate, and some bundle them. Check which. Our website hosting cost guide shows what that bill looks like.
4. Licences and apps. Page builder licences, premium plugins and store apps are billed by their makers.
5. Large content work. Writing copy, shooting photos or moving hundreds of products is outside a standard request queue.
6. Recovery after a hack, when the plan has no security cover. Cleaning a hacked WordPress site can be a separate service. Our guide on how to check a hacked WordPress site shows what that work involves.

When a plan lists none of these as excluded, ask. A short exclusions line is often a sign nobody thought about it, not a sign that everything is covered.

How to compare two plans

Put the plans side by side, using the checklist, and score each line as included, capped or not included. Then check the allowance numbers.

Price comes last. Also check the notice period. Once two plans cover the same tasks, the cheaper one wins. If they differ in tasks, work out what the missing tasks would cost you on their own. Our cost guide has the published prices to compare against.

Red flags

• No written task list. "We keep your site running" is not a scope.
• No backup answer. If they cannot say where backups live or how long a restore takes, assume they have no tested process.
• Accounts in their name. Your domain, hosting and analytics should sit in your name. Our guide on hiring a studio safely covers this, and the same advice applies to a Webflow agency.
• Unlimited everything. Real work has limits. "Unlimited edits" usually hides a slow queue or a fair-use clause in small print.
• No report. If nothing is sent to you, you cannot tell whether anything happened.
• A long contract with no exit. Look for the cancel terms before you pay the first month.

Maintenance keeps a site healthy. It does not grow traffic, and for that our website audit checklist is the better start.

When you do not need a plan

A plan is not always the right answer. Keep it simple if one of these fits.

This guide does not apply if you run your own hosting or have an in-house developer who already does these jobs. In that case, use the checklist to audit what they do, not to buy a plan.

How we help at Amariq

We build and look after sites on Webflow, Framer, WordPress and Shopify, and also on Wix, Squarespace and custom builds. When a client asks about upkeep, we start with the eight-part list above and agree which lines they need, so the plan matches how often the site changes. Our Webflow maintenance service describes what a plan covers. For a build or a rebuild, our Webflow development and WordPress development pages explain how we work. Projects are priced from scope, never by the hour. The client owns the design, copy and code after the final payment, and the domain, hosting and analytics accounts sit in the client's name.

Frequently asked questions

What does a monthly website maintenance plan include?

Most plans include updates, backups, security and uptime checks, fixes, speed checks and a monthly report. Content edits vary, so ask how many are included. Plans differ in the size of each task, which is why the written list matters more than the name of the plan.

How much is monthly website maintenance?

It depends on the platform and the scope, and sellers publish wide ranges. Our maintenance cost guide lists the platform bills and the care plans six studios publish, with the date each was read. Use it to see where a quote sits.

Is a monthly maintenance plan worth it?

It is worth it when your site changes often or runs on software that needs updates, such as WordPress. It is less useful for a small hosted site that rarely changes. Count the hours you would otherwise spend, and the cost of a day offline.

What is not included in website maintenance?

Commonly new features, redesigns, hosting, licences and large content work. Some plans also exclude emergency recovery after a hack. Always ask for the exclusions in writing.

Do Webflow sites need maintenance?

Yes, though less than WordPress. The platform is looked after by its maker, but forms, integrations, content and layout fixes still need an owner. Our Webflow forms guide shows one area where small problems appear.

Do Shopify and Framer sites need maintenance?

They need less server-side work than WordPress, because the platform runs the hosting. They still need someone to review apps, scripts, content and speed. Our Shopify website cost guide and Framer website cost guide show the running costs for each.

How do I know the plan is actually doing the work?

Ask for a monthly report that lists updates applied, backups taken and requests completed. You can also spot-check, for example by asking to see a recent backup date or the last update log. A plan that cannot show this is hard to trust.