What to Look for in a Website Maintenance Plan

A real website maintenance plan should cover three separate jobs: keeping the site secure and online, keeping it working (no broken links or forms), and keeping it current with small design and content changes. Most plans only cover the first two — and buyers usually don't find out until they need the third.

That gap is the root of almost every bad surprise with these plans. Someone signs up for "maintenance," assumes that means "if I need something changed, it's handled," and then finds out six months in that changing a headline or swapping a photo costs an extra invoice. The plan wasn't misrepresented, exactly. It just meant something narrower than they assumed.

Here's what to actually check before you sign anything.

Security updates and backups

This is the baseline. Any plan worth paying for should include:

• Regular updates to your CMS, plugins, and any third-party libraries the site depends on
• Malware and vulnerability scanning
• Automated backups on a real schedule (daily, ideally), stored somewhere other than the same server as the live site
• A tested way to restore from backup, not just a backup that's never been checked

Ask directly: "If the site goes down or gets hacked at 2am, what happens, and how fast?" A vague answer means there's no real process behind it.

Uptime monitoring

Someone should know the site is down before your customers do. That means automated monitoring that checks the site at intervals (minutes, not once a day) and alerts a human when it fails. Ask what the alert threshold is and who receives it. "We check on it sometimes" is not monitoring.

Broken links and form checks

This one gets skipped constantly because it doesn't sound urgent, but it's often the most expensive to ignore. A contact form that silently stops sending emails, or a quote-request form with a broken submit button, can cost you leads for weeks before anyone notices. Ask whether the plan includes:

• Periodic checks that forms actually deliver submissions somewhere you'll see them
• Link checks for pages that 404 or point to dead resources, especially after any redesign or URL change
• Basic checks after any plugin or platform update, since updates are the most common cause of something quietly breaking

Content and copy updates

This is where plans diverge hard. Some maintenance plans include a set number of content updates per month — swapping out a price, updating a bio, posting a new hours notice. Others treat every single content change as billable outside the plan. Neither approach is wrong, but you need to know which one you're buying. If the sales page just says "content updates" with no specifics, ask for the actual number and what counts as one.

Small design tweaks

Distinct from content updates: adjusting a layout, resizing something for mobile, changing a button color, tightening up a section that looks off on a new phone. This is the category most plans exclude entirely, because it requires design judgment, not just editing a field in a CMS. If your business changes seasonally, adds services, or just needs the site to keep looking current, this matters more than it seems like it would up front.

Hosting management

Find out whether hosting is included in the plan or billed separately, who owns the hosting account, and what happens to your site if you cancel. Some providers host your site on infrastructure you never get direct access to — which means "cancelling the maintenance plan" can mean losing the site entirely, not just losing support. Ask this before you sign, not after you want to leave.

If cancelling means losing access to your own site, you don't actually own it. Get clarity on hosting ownership up front.

Response time commitments

"Priority support" means nothing without a number attached. A real plan should tell you:

• How fast they respond to a report that something's broken (hours, not "soon")
• How fast small requests actually get done, not just acknowledged
• What happens if something is urgent — is there an emergency path, or do you wait in the same queue as routine work

Get this in writing, even if it's just an email confirming what was said on a call.

Why the confusion happens

"Maintenance" is a fuzzy word by design. It costs a provider a lot less to sell backups and updates and call it a maintenance plan than it does to staff actual design and content work on demand. Both are legitimate businesses to run. The problem is buyers usually assume the second when they're being sold the first, because the marketing language doesn't distinguish between them.

The fix is simple: don't ask "what's included in maintenance." Ask, specifically, "if I need the homepage headline changed next month, is that covered, and how long does it take?" The answer tells you which kind of plan you're actually looking at.

Where Fieldstone Build fits

This article is meant to help you evaluate any maintenance plan, including ones that have nothing to do with us. But since it's a common gap: most technical-hygiene plans stop at security and uptime, and treat design or content changes as extra work, billed separately, on their schedule.

Fieldstone Build is built around the other half of that gap — unlimited design and content requests, queued one at a time, with a 48-72 hour turnaround, for a flat monthly fee. You can pause or cancel anytime, and you keep full ownership of the code either way. It's one way to close the gap described above. It's not the only way, and it's not a fit for every business. But if you've been burned by a plan that only covered backups, it's worth understanding what the alternative looks like.