Skip to content
All articles

SECURITY

What website maintenance actually involves

A website is not finished at launch. What regular maintenance covers, why it matters for security and enquiries, and what tends to happen when nobody does it.

By Michal Winiarski · 23 March 2025 · Updated 11 October 2026 · 3 min read

#Maintenance#Security#Hosting

Share

A website is a bit like a van. It works on the day you buy it, and it keeps working for a while if nobody touches it. Then one day it does not start, usually at the worst possible moment. Maintenance is the regular servicing that stops that from happening.

Here is what it actually covers, in plain terms.

Software updates and security fixes

Every website runs on software: the framework it is built with, the server, the libraries that handle forms and payments. That software gets security fixes regularly, sometimes several a month. Applying them promptly closes the gaps that attackers look for.

This is not theoretical. When security fixes for the framework behind our websites were released in October 2026, we updated every client website we look after, checked each one still worked as before, and put the update live. The clients did not need to do anything.

Backups

If something goes wrong, you need a recent copy to go back to. That means the website itself and, if your site stores anything, such as bookings or customer records, the data too. A backup is only useful if it can actually be restored, so test that it works rather than assuming it does.

Monitoring

Someone should know when your website stops working, ideally before your customers do. Uptime monitoring checks your site every few minutes and sends an alert the moment it does not respond. Error monitoring records when something breaks for a visitor, such as a form that fails or a page that crashes, so it can be fixed even if nobody reports it.

Keeping the details right

Prices change. Opening hours change. Staff join and leave. A website with last year's prices or a phone number that no longer works costs you trust and enquiries. Regular small changes are part of keeping a site useful, not an extra.

Checking forms, emails and speed

The parts of a website that matter most to your business are the ones that move: contact forms, quote requests, bookings, payments, the emails they send. These can fail quietly, for example when an email service changes its rules. Periodic checks, ideally automated, catch problems before they cost you an enquiry.

Speed drifts too. New photos are added at full size, a plugin is installed, a third-party script grows. A quick check every few months keeps the site fast on mobile.

Domains and certificates

Your domain name and your security certificate (the padlock in the browser) both expire if they are not renewed. When either lapses, visitors see warnings or nothing at all, and email on that domain can stop working. Renewals should be set up to happen automatically and checked by someone.

What happens without maintenance

Most neglected websites do not fail dramatically. They slowly get worse: a form that stopped sending emails months ago, a page that breaks on newer phones, an outdated plugin that gets exploited and starts sending spam. By the time anyone notices, the fix is bigger and the lost enquiries cannot be recovered.

Doing it yourself or handing it over

If your website runs on a builder platform, the platform handles some of this for you, but not your content, your forms or your search visibility. If it is a custom website, someone needs to own maintenance.

On our Care Plan, all of the above is included for every website we build: hosting, updates, security fixes, backups, uptime and error monitoring, and up to 30 minutes of changes every month. If you are not sure whether your current site is being looked after, ask whoever built it what was updated last month. The answer will tell you a lot.

Share

More articles