WordPress website support: updates, security, backups

Website support and maintenance is ongoing care that keeps your site updated, secure and backed up, with small changes done within a day and no need to hunt for a developer each time. It is for owners of websites and online stores on WordPress and other platforms who do not have a developer on staff. Pricing starts from €100 a month, and onboarding takes from 3 days.

Who needs website support

• The site has not been updated for ages, and touching anything feels risky.
• There are no backups, or nobody has checked whether they can actually be restored.
• The developer who built the site is unavailable, and a change is needed today.
• The site has been hacked before or is sending spam.
• The site or store makes money, so every hour of downtime means lost orders.

If you depend entirely on one person who “knows how it all works”, read our page on dependence on a single developer.

What support includes

• Updates of WordPress core, the theme and plugins — first on a copy of the site, then on the live one, so an update does not break sales.
• Daily backups of files and the database, so the site can be restored if something goes wrong.
• Uptime monitoring: if the site goes down, we are the first to know.
• Security: protection against password guessing and form spam, access control, removal of unused plugins and users.
• Small changes within the plan: copy, prices, banners, new pages on an existing template.
• Speed and error checks after changes.
• A monthly report: what was updated, what was fixed, what needs attention.

How we take a site on: stages and timeline

1. Health check. Versions, plugins, backups, security, speed. For sites built by others this step is mandatory.
2. Access and a copy. We get access, take a full backup and, if needed, set up a staging copy.
3. Setup. Automatic backups, monitoring, baseline protection.
4. Critical fixes. If the check finds serious issues, we suggest fixing them before support starts.
5. Ongoing work. Updates, changes on request, a monthly report.

Onboarding takes from 3 days. After that you can send requests any way you like — e-mail, a messenger or our client form, where you can attach a screenshot of the issue.

What affects the price

Tools and platforms

WordPress and WooCommerce are our main support platform; we also work with Shopify, Webflow, Squarespace, BigCommerce and Next.js. We use local Docker environments and staging copies, version control, automatic backups and uptime monitoring. For faster images in WordPress we have our own Image Optimizer plugin.

Examples from our work

For a pharmaceutical group we built and supported several product brand sites for different countries: a custom ACF-block theme, Vite child themes and regular changes. For a food brand’s WordPress and Elementor site we set up a local Docker environment so changes are checked before publishing. For a media company portal on Webflow we keep a backup of every release. These projects are in our portfolio; client names are published only with their consent.

Why updates cannot wait

The vast majority of known vulnerabilities in the WordPress ecosystem sit in plugins and themes, not in the core, and attackers scan for sites running outdated versions. The longer a site goes without updates, the riskier it is to update everything at once: incompatibilities pile up and a simple update turns into a small project. Small, regular updates tested on a copy are the cheapest way to keep a site healthy.

What to do if your site is hacked or down

1. Do not delete files at random or restore an old backup over the hacked site — you lose the traces and recent data.
2. Change passwords for the admin panel, hosting and e-mail.
3. Bring in a specialist: you need to find how the site was compromised, remove the malicious code and close the hole, or it will happen again.
4. Check Search Console for security warnings and request a review after the clean-up.

If your site is down right now, message us and we will see what can be done.

How to choose a contractor

• Where are backups stored, and when was the site last restored from one?
• Do they update on a copy first rather than straight on the live site?
• What is included in the plan and what is billed separately — in writing.
• How fast do they react when the site is down?
• Does access stay with you: admin, hosting and domain should be in your name.

If your previous developer has disappeared and you have no access, start with how to take back your domain, hosting, access and code. If the site works but is slow, see what to fix first to speed it up.

If the site is so outdated that maintaining it costs more than renewing it, we will say so plainly and suggest a redesign. You can start with a technical audit or request support right away.