Resources  /  May 9, 2026

WordPress website management: what is included?

Website management sounds simple until you try to compare offers. One provider means “we update the plugins”, another means “we run your entire site”. This guide explains what a good WordPress management service normally includes, what is often left out and which questions help you compare fairly.

The core of a management service

A proper service looks after the things that quietly keep a WordPress site healthy:

  • Updates. WordPress itself, your theme and every plugin, ideally tested before they go live so an update does not break your pages.
  • Backups. Regular copies of the site stored away from the server, and a plan for restoring them. A backup you have never tested is only a hope.
  • Security. Checks for known weaknesses, malware scanning, and protection against obvious attacks such as automated login attempts.
  • Monitoring. A watch on whether the site is up, so a problem is found by the provider before it is found by your customers.
  • Small content changes. Swapping a photo, updating a price or editing a line of text, without opening a new project each time.
  • Reporting. A short, regular note saying what was done and what needs your attention.

Extras that are worth asking about

  • Speed checks. Looking at images, plugins and settings when a site feels slow.
  • Broken link and form checks. Making sure contact forms still send and important pages still work.
  • Hosting help. Advice on a good host, or help moving to one.
  • Restoring a hacked site. Cleaning up and bringing the site back, and who pays for it if it happens.
  • Search basics. Keeping page titles, descriptions and sitemaps in good order.

What is often not included

Read the small print for these, because they cause most disagreements:

  • Larger jobs such as redesigns, new sections and new features
  • The cost of premium plugins, themes or licences
  • Hosting and domain renewal
  • Writing new content or producing photography
  • Emergency work outside the normal scope

None of these are unreasonable to charge for, but you should know in advance, and the answer should be in writing.

Questions to ask any provider

  1. Which updates do you test first, and how?
  2. Where are backups stored, and how often are they taken?
  3. What happens if my site is hacked, and what does that cost?
  4. How many small changes can I request, and how do I ask?
  5. Do you work on sites you did not build?
  6. Can I cancel, and do I keep full access to my site?

Pricing models you will see

Some providers charge a flat monthly price with a defined list of tasks. Others sell hours or “credits” for changes. A flat price with a clear list is easier to budget, as long as the list is genuinely clear. Be wary of a very low price with a long list of exclusions.

What a month looks like with a good provider

Updates are tested and applied, backups are checked, the site is scanned, and you receive a short summary. Most months, the answer is that everything is fine, which is exactly the point.

What we offer

Our WordPress care plans start from $99 a month and cover updates, backups, security checks, monitoring and small changes. We also look after sites built by other people. If you are an agency that wants this for your clients under your own brand, see our white label website maintenance service, and our guide to maintenance plans for more detail.