A website is not a thing you buy once. It runs on software that changes underneath it, on a server someone has to keep secure, and it accumulates content and problems in equal measure. Most "maintenance" packages mix genuinely essential work with filler, so it helps to know which is which.
The parts that genuinely matter
- Security patching. Frameworks, libraries and the operating system all publish fixes. Applying them is the single most valuable maintenance activity, and the one most often skipped because nothing visibly breaks when you do not.
- Backups that have been restored. An untested backup is a belief, not a backup. It should be automated, stored somewhere other than the server it came from, and restored occasionally to prove it works.
- Uptime monitoring. You should hear that the site is down from a monitor, not from a customer.
- Certificate renewal. Usually automatic, and worth confirming rather than assuming, because an expired certificate makes a site look unsafe in every browser at once.
The parts that matter less than they are sold
Monthly "content updates" bundled whether you need them or not, cosmetic reports that count visits without interpreting them, and SEO line items that amount to running a scanner and forwarding the output. None are harmful; they just are not what protects the site.
Dependencies are where sites rot
A modern site depends on a long chain of libraries. Left alone for a year, updating becomes a large, risky job rather than a small routine one, because the gaps between versions accumulate. Regular small updates cost less in total than one big migration under pressure, and they are far less likely to break something on a deadline.
Who has the keys
The least glamorous maintenance question and the one that causes the most trouble: does your business control the domain registration, the DNS, the hosting account and the code repository? If any of those sit only with an agency, a routine change can become a negotiation. Ask now, while relations are good.
How we approach it
We manage servers as well as build on them, so patching, backups, monitoring and certificates are the same conversation rather than two suppliers pointing at each other. Related reading: does website speed affect rankings.
Ask us for a review if you are not sure what is currently being done to your site.