Website maintenance costs: what you actually need vs. what you don't

The website maintenance market for small businesses is a mess. Quotes range from $50/month (probably not enough) to $2,000/month (probably too much). Here’s what you actually need, what’s optional, and what’s a money grab.

What every site needs (non-negotiable)

These are not nice-to-haves. Skipping them costs you eventually.

Hosting + SSL

You need somewhere for the site to live. Modern static sites can be hosted for under $5/month on AWS S3+CloudFront, Cloudflare Pages, or Vercel — and SSL is automatic and free at all three. WordPress hosting realistically lands at $20–$80/month for managed providers like WP Engine or Kinsta.

Realistic cost: $5–$80/month.

Backups

Daily off-site backups, with one-click restore. If your site is hacked or your provider has an incident, you need to be able to restore in minutes.

Realistic cost: $5–$20/month if not bundled with hosting.

Security updates

For static sites: nearly zero — the platform handles it. For WordPress: critical. WordPress core, themes, and plugins should be updated within 48 hours of CVE publication. This is where 90% of WordPress hacks come from.

Realistic cost (WordPress): $30–$80/month for managed updates.

Uptime monitoring

If your site goes down, you need to know before your customers do. UptimeRobot offers free monitoring for up to 50 sites; Pingdom and Better Uptime charge $5–$15/month.

Realistic cost: Free–$15/month.

SSL renewal

Modern setups auto-renew. Legacy installs need a calendar reminder, but should not need a paid service.

Realistic cost: $0.

What good agencies bundle (worth paying for)

These are real value-adds that small businesses can’t reasonably do themselves.

Content edits (hours/month)

Small businesses constantly need: new staff bio, holiday hours update, new service description, swap an image. Most agencies bundle 1–4 hours/month at $100–$200/hour effective rate. Worth it if you actually use the hours; not worth it if you don’t.

Performance monitoring + tuning

Sites that loaded fine in 2024 can drift on Core Web Vitals as you add content, plugins, or third-party scripts. Active monitoring + quarterly tuning keeps Lighthouse scores from rotting.

SEO monitoring

Tracking keywords, backlinks lost, pages dropping out of indexing. Useful at $50–$100/month bundled.

What’s a money grab

Treat these with skepticism.

”Speed optimization” as a separate $500/month line item

If your site is slow, fix the site once. You don’t pay an ongoing fee for it to stay fast — a static site stays fast unless you actively make it slower.

”Plugin licenses included” upsells

Most premium WordPress plugins are $50–$200/year. Don’t pay an agency $50/month per plugin license.

”Dedicated server” for a brochure site

If you’re a service business with 5,000 visitors a month, you do not need a dedicated server. Static hosting on Cloudflare or CloudFront will outperform any “dedicated server” for this use case — and cost 20× less.

”We’ll respond within 4 hours” as a paid SLA on a $200/month plan

The math doesn’t work. A 4-hour SLA requires actual humans on call. If a $200/month agency is offering it, they’re either lying or about to go out of business.

What we charge

Transparency: our maintenance plans are $149 (Essentials), $349 (Standard), $899 (Premium). Standard is the right tier for most SMBs — it includes 2 hours/month of edits and active SEO monitoring on top of the basics.

How to compare quotes

Get three quotes. Ask each:

1. What is included? Get a literal bullet list.
2. What is the response-time SLA, and is it real or aspirational?
3. Will you handle critical security CVEs within 48 hours?
4. Do you bundle Core Web Vitals monitoring and quarterly performance tuning?
5. What is the cost to leave?

If the answers are vague, you have learned something.