Who this is for
This article is for teams close to implementation and comparing concrete delivery options.
Key takeaways
- Infrastructure: hosting, TLS certificates, backups and restore tests, uptime monitoring.
- Security: dependency updates, patching, access review, incident response.
- Content and small changes: a defined pool of hours for edits that do not need a project.
Maintenance sounds like insurance and is usually priced like a mystery. The word covers everything from parking a domain to a team that answers at nine on a Sunday. Before you compare offers, insist that both describe the same duties.
The Four Layers of a Real Retainer
- Infrastructure: hosting, TLS certificates, backups and restore tests, uptime monitoring.
- Security: dependency updates, patching, access review, incident response.
- Content and small changes: a defined pool of hours for edits that do not need a project.
- Improvement: performance, tracking and small conversion work that keeps the site earning.
Numbers You Should See in the Contract
Vague promises are what make maintenance feel like a scam. Four numbers turn it into a service.
- 1Response time by severity: site down, feature broken, cosmetic.
- 2Backup frequency and, more importantly, tested restore time.
- 3How many hours of changes are included and whether unused hours roll over.
- 4Who owns the accounts: domain, hosting, repository and analytics.
A backup you have never restored is not a backup. Ask when the last restore test happened.
What Is Usually Not Included
Retainers cover keeping the site healthy, not building new things. New sections, integrations and redesigns are projects. Say that plainly in the contract, because that ambiguity is where the disputes live.
What Skipping Maintenance Really Costs
The cost is rarely the repair. It is the traffic lost while things are broken and the compounding effect of small neglect.
- Outdated dependencies turn into a rewrite instead of an update.
- A certificate expiry costs a day of traffic and some trust.
- Content nobody can edit gets stale and quietly stops ranking.
- The person who knew how it worked leaves, and nothing is documented.
How to Buy It Sensibly
Match the tier to the role the site plays. A brochure site needs infrastructure and security. A site that carries inquiries needs the change pool as well. A store or portal needs monitoring with alerting and a named response time, because downtime has an hourly price.
Not sure what your current maintenance covers? Send us the contract and we will tell you what is missing.