Almost every emergency call I get starts the same way. Somebody's site is down, or it is showing a white screen, or Google is warning people away from it, and the last thing anybody did to that site was two years ago when it launched. Nobody was watching it. Nothing was maintained. And now it is Thursday afternoon and the phone has stopped ringing.
A care plan is the boring monthly thing that prevents almost all of it. It is not glamorous and it does not make your site look different. It just means the site keeps working, and when something does go sideways somebody catches it before your customers do.
What Actually Breaks A WordPress Site
It is rarely dramatic. In my experience running 44 or so client sites, the failures cluster into four buckets, and all four are preventable.
Plugin updates that conflict. WordPress and its plugins update constantly. Most of the time nothing happens. Occasionally two plugins disagree and the site throws a fatal error, or the contact form quietly stops sending and nobody notices for six weeks. That second one is worse. A down site is obvious. A form that silently fails just looks like business got slow.
Outdated code getting exploited. Nobody is personally targeting your carpet cleaning business. Bots scan the entire internet for known vulnerabilities in old plugin versions and hit whatever answers. If your site has been sitting on a plugin version with a public exploit, it is only a matter of time. Once it is compromised, you are looking at cleanup, a Google reconsideration request, and a stretch of time where your site is flagged in search results.
Expired things. Domains, SSL certificates, and licenses all expire. Every one of those takes a site down or throws a browser warning, and every one is on a calendar somebody was supposed to be watching.
Slow decay. The database fills with revisions and transients, images get uploaded straight from a phone at full size, the cache config drifts. No single event, just a site that gets a little slower every month until it is losing people on mobile.
What A Care Plan Covers
- Core, theme, and plugin updates, tested first. Updates run on a staging copy, get checked, and then go live. Not clicked blindly on the production site on a Friday.
- Offsite backups. Stored somewhere other than your host, because a backup living on the server you are trying to restore is not a backup. Restorable in minutes, tested regularly.
- Malware scanning and a hardened setup. Firewall rules, login protection, file change monitoring, and a scan that runs whether or not anyone is thinking about it.
- Uptime monitoring. The site gets checked around the clock. If it goes down I know before you do, which is the entire point.
- Performance upkeep. Database cleanup, image optimization, cache configuration, and a periodic look at Core Web Vitals so speed does not quietly rot.
- Small content edits. Change hours, swap a phone number, add a service, update a photo. The things that are too small to invoice and too important to skip.
- A monthly report. What was updated, what got blocked, how the site is performing. So you know something is actually happening.
The Math Nobody Runs
A care plan looks like an expense until you price the alternative. Here is what the alternative actually costs.
A malware cleanup on a compromised site runs a few hundred dollars minimum, and that is just the cleanup. Add the time your site sits flagged in search results, the emails bouncing because your domain reputation took a hit, and the customers who saw the warning and called somebody else. A site that is down for two days during a busy week costs a service business more than a year of maintenance.
Then there is the quiet version. A contact form that stopped delivering in March and nobody noticed until June. Three months of leads that filled out the form, never heard back, and assumed you did not want the work. There is no invoice for that one, which is exactly why it is the expensive one.
Maintenance is cheap because it is boring. Recovery is expensive because it is urgent.
What A Care Plan Is Not
I would rather set expectations than sell you something you misunderstood. A care plan is not a redesign, it is not unlimited development hours, and it is not a marketing service. If you want a new page built, a booking system integrated, or an SEO campaign run, those are separate projects with their own scope.
It is also not a guarantee that nothing will ever break. Hosts have outages. Plugin developers ship bad releases. What it guarantees is that when something breaks, it gets caught fast, there is a clean backup to restore from, and you are not spending a Saturday trying to figure out who to call.
The Part Clients Do Not Expect
The thing people tell me months in is not about security or backups. It is that they stopped thinking about their website. The site stopped being a thing on the mental to do list that never got done. Hours change, they send me a text, it is handled. A plugin needs updating, it already happened. That is most of the value and it does not fit on a feature list.
The other thing worth knowing: a maintained site is a faster site, and a faster site ranks better and converts better. Maintenance is not just insurance. It is the floor that everything else you do online is standing on. If you are running ads or investing in local SEO while the site loads in seven seconds on a phone, you are paying to send people to a bad experience.
How To Tell If You Need One
- Log into your WordPress dashboard. If you cannot, that is answer enough.
- Look at the update count next to Plugins. If there are more than a handful sitting there, the site has been unattended.
- Submit your own contact form and see whether the email actually arrives. Do this today regardless of anything else in this post.
- Check when your domain and hosting renew, and whether the card on file is still valid.
- Load your homepage on your phone on cellular data, not wifi, and count the seconds.
If any of those made you uncomfortable, the site has been running on luck. Luck works right up until it does not.
Want Me To Take It Off Your Plate
You can see what I cover and what it runs on my care plans page. If you are not sure which level fits, send me the domain through my contact page and I will look at what you are running, tell you what shape it is in, and give you a straight answer about whether you need managed maintenance or just a couple of fixes. Sometimes it is the second one, and I will say so.
Related reading: how I build a month of ad creative in one afternoon, and my take on whether Hostinger is the right host for a small business site.
