Maintenance is the least interesting thing an agency sells and often the most valuable. It is also the easiest to quietly stop paying for, because when it is working, nothing appears to happen.
This is what it actually covers, in plain terms.
Websites decay rather than break
People imagine failure as a site going down. That is rare, and obvious when it happens. The common failures are silent.
- A contact form that stopped delivering months ago, still showing a success message
- An SSL certificate that expired, so browsers now warn visitors away
- Software left unpatched long enough to become a known vulnerability
- A backup that has never been tested and turns out not to restore
- A domain quietly approaching renewal with an unmonitored email on file
The most expensive website failure is the one nobody notices. A quiet month of no enquiries looks exactly like a broken contact form.
What maintenance actually involves
Updates and patching
Every website runs on software that receives security updates. Applying them promptly is routine. Leaving them for a year turns a small job into a risky one, because the gap between versions grows and things start to break when you finally move.
Backups that have been tested
A backup nobody has restored is a file you hope is a backup. Testing means actually restoring it somewhere safe and confirming the result is a working site. Ask when yours was last tested — the answer is revealing.
Monitoring
Automated checks that tell someone the site is down, ideally before your visitors do. Without it, you find out when a member of staff mentions it.
Small content changes
A new phone number, an updated staff listing, a corrected date. Individually trivial, collectively the difference between a current site and one that slowly stops being accurate.
How to tell if yours is being neglected
You do not need technical knowledge for any of these.
- Send yourself a message through your own contact form. Did it arrive?
- Look for the padlock in the address bar. Any warning is urgent.
- Find the oldest dated content on the site. How old is it?
- Ask when the last backup was restored and verified.
- Ask who receives the domain renewal notice.
- Open the site on a phone, on mobile data, and time it.
The contact form test is the highest value item on that list and takes two minutes. Do it today.
A reasonable rhythm
- Monthly — software updates applied, forms tested
- Quarterly — backup restored and verified, performance checked
- Annually — certificate and domain renewals confirmed, content reviewed for accuracy
Do you need to pay someone?
Not necessarily. What matters is that it is somebody's actual job. If a member of staff has the time and the access, that can work. If nobody has been named, then in practice nobody is doing it — and that is the situation this guide exists to prevent.
The organizations that get caught out are rarely the ones who decided maintenance was not worth it. They are the ones who assumed somebody else was handling it.