How much does website maintenance cost?

They add up different things. Some count only hosting, the domain and updates; others fold in content, design changes, SEO and advertising. Several are written by companies that sell hosting or maintenance plans. So a $50 figure and a $1,000 figure can both be right for what they include. Compare quotes line by line, not by the total.

Look at what's inside each number. WebsiteSetup's $30 to $250 covers hosting, domain, basic security and routine upkeep, and leaves out "major marketing." Network Solutions lists the same $200 to $1,000 a month for small business sites both as a typical total and as its content and marketing line. Expert Market's $6,715 a year adds a $3,600 maintenance package, $2,000 for ten articles and $950 of plugins, at 2023 prices.

The guides also mix site types. Most give separate, higher ranges for online stores and large custom sites. A five-to-twenty-page site for a roofer or plumber sits at the small end of each table.

The running costs you can't skip are the domain, hosting, a security certificate and keeping the software updated and backed up. Everything else is a choice: new pages, photos, design changes, content and marketing. The first group keeps the site online and safe. The second makes it work harder, and it's where quotes vary most.

If a maintenance quote includes SEO or marketing, ask for those lines priced separately so you can see what the upkeep alone costs.

A plan is worth what it does when something goes wrong, not what it does when nothing does. Look for updates tested before they go live, backups stored away from the server, monitoring, a stated number of developer hours, and malware cleanup either included or priced. Cheap plans often run automated updates only, with no person checking the result.

Codeable's guide draws that line clearly. It describes plans at $30 to $50 a month that "typically run automated updates with no staging environment" (a test copy of the site) and "include zero development time." Its own plans include one developer hour a month at $240 and two at $590, and only the higher one includes malware cleanup at no extra cost. It puts recovering a hacked WordPress site at $200 to $2,000 or more.

Before you sign up for any plan, ask:

1. Are updates tested on a copy of the site before they go live?
2. Where are backups stored, how often are they made, and when was a restore last tested?
3. How many developer hours are included, and what's the rate after that?
4. Is malware cleanup included, or priced separately?
5. How fast do you respond if the site goes down?
6. Do I keep every login, and can I cancel any month?

Because new weaknesses in website software are published constantly, and attackers move fast once one is public. WordPress sites run on plugins and on PHP, the programming language underneath, and each has its own support dates. A site nobody updates keeps working until the day it doesn't.

The numbers are recent. Patchstack, a WordPress security company, counted 11,334 new vulnerabilities in the WordPress ecosystem in 2025, with 91% in plugins and 9% in themes. It found that 46% didn't get a fix from the developer in time for public disclosure, and that the median time to mass exploitation for heavily exploited ones was 5 hours.

The language underneath ages out too. PHP 8.2's security support ends December 31, 2026, according to php.net, and after end of life a version "may be exposed to unpatched security vulnerabilities." Ask your host which version your site runs.

Security certificates are getting shorter as well. Under the CA/Browser Forum's rules, the maximum life of a website certificate fell to 200 days on March 15, 2026, and drops to 100 days in March 2027 and 47 days in March 2029. Automatic renewal through your host has to keep working, or visitors see a warning instead of your site.

Yes, if someone on your team will spend a little time on it every month and the site isn't complicated. On a website builder, the platform runs the hosting and its own software, so your upkeep is mostly content. A WordPress site gives you more control and more to maintain: updates, backups and the odd broken plugin.

The work is regular rather than hard. Turn on automatic renewal for the domain with a card that won't expire soon, keep backups on a schedule, apply updates, and check afterwards that the contact form still sends and the click-to-call button still dials. WebsiteSetup puts a do-it-yourself small site at under $100 a year in running costs, before your time.

Where DIY goes wrong is when no one owns it. If updates wait for "when things slow down", a plan or a freelancer on call costs less than a cleanup.

Most of a contractor site's upkeep is checking that the parts that bring in work still work, and keeping the facts current. A broken form or an old phone number costs more than an outdated plugin. Run this list monthly and yearly, whoever does the work.

Every month:

• Send a test form and make a test call from the site; confirm both reach you.
• Apply software updates and confirm a recent backup exists.
• Add photos of recent jobs and keep service areas, hours and services matching your Google Business Profile.
• If you use call tracking, check the numbers on the site still ring through.

Every year:

• Confirm the domain auto-renews, in your name, and check the hosting renewal price.
• Ask your host which PHP version the site runs and when it loses support.
• Remove plugins you no longer use, and check paid licenses are in your name.
• Check license numbers, certifications and insurance details on the site are current.
• Confirm you hold every login: domain, hosting, website admin and analytics. Our guide to who owns your website shows how.

A plan pays off when your site has many plugins, forms or booking tools connected to it, and nobody in your business wants to handle updates. It's harder to justify for a simple builder site that rarely changes. The test is what a day offline or a hacked site would cost you, against the plan's yearly price.

For illustration only: at Codeable's $240 a month, a plan costs $2,880 a year. If a hacked-site cleanup runs $200 to $2,000 or more, by Codeable's figure, and the site is down for days in a busy month, the plan earns its keep for a WordPress site with real traffic. For a five-page builder site, the platform already covers most of that risk.

If your site is old enough that maintenance is mostly patching around problems, a rebuild may cost less over time. Our website redesign page explains how we approach one.

Here is how Mindflow does it. A Website Build is a separate project, from $5,000; larger sites from $8,500. No marketing contract required. We help you set up hosting, a CDN and everything the site needs to run, in your name. You own every account. Website files and copy are yours once paid.

What a build includes and how it runs is on our web design page. Our other website guides are on one page: websites.

How much does website maintenance cost per month for a small business? The 2026 guides we read put it at about $30 to $500 a month for a small business site, depending on what's counted. The low end covers hosting, a domain and automated updates; the high end adds a person's time for testing, fixes and changes. Content and marketing push totals higher.

Is hosting part of website maintenance? Some quotes include it and some don't, which is one reason totals disagree. Hosting keeps the site online; maintenance keeps its software updated, backed up and working. Ask for hosting and maintenance priced as separate lines, and make sure the hosting account is in your business's name.

What happens if I never update my website? It keeps working until a plugin, theme or the PHP version underneath has a published weakness nobody patched. Patchstack found 46% of 2025's WordPress vulnerabilities had no developer fix by public disclosure, so updates alone aren't enough: you also need backups you can restore.

Do I need a maintenance plan for a Squarespace or Wix site? Usually not a technical one. Builders run their own hosting and software, so your upkeep is content: photos, services, hours and service areas. You may still want help with changes or a redesign, which you can buy as needed rather than on a monthly plan.

What's included in a cheap maintenance plan? Often automated updates and backups, with no one testing the result. Codeable describes plans at $30 to $50 a month that run updates with no staging environment and include no developer time. That can suit a simple site; check what happens, and what it costs, when an update breaks something.

• WebsiteSetup, Website Maintenance Costs, read November 1, 2026
• GoDaddy, Website maintenance cost, read November 1, 2026
• Network Solutions, Website maintenance cost, read November 1, 2026
• WebFX, Website maintenance pricing, read November 1, 2026
• Codeable, WordPress maintenance pricing, read November 1, 2026
• Expert Market, Website maintenance costs, read November 1, 2026
• Patchstack, State of WordPress Security in 2026, read November 1, 2026
• PHP, Supported Versions, read November 1, 2026
• CA/Browser Forum, Baseline Requirements for TLS Server Certificates, version 2.3.1, read November 1, 2026

Want to know whether your website is costing you calls before you spend more on it? Get a free AI Visibility Review.