01
Updates and patching
Core, plugin, theme and dependency updates tested on a staging copy first, then applied to live, with a rollback ready if anything misbehaves.
FIG 01 · Website care plans
Website maintenance services that keep your site fast, secure and up to date
Launch day is the start, not the finish. We patch, back up, monitor and speed up your site every month, on any stack, so it never becomes the thing that breaks.
See how it works
FIG 02 · Quick answer
What are website maintenance services?
Website maintenance services keep a live website secure, fast and working after launch. Elgrith handles core, plugin and theme updates, off-site backups, security monitoring and malware removal, uptime alerts, speed and Core Web Vitals fixes, and content edits for WordPress, Shopify and custom-built sites, with one point of contact and a client partner in New York or London.
- Projects delivered since 2015
- 1,000+
- Clients across the USA, UK and India
- 250+
- WordPress, Shopify, Next.js and custom apps
- Any stack
- Service levels agreed in your scope
- In writing
FIG 03 · Why it matters
Unpatched plugins are the open door.
Most of the web runs on software that needs constant updates. Sources checked 20 October 2026.
01
39.6%
Of all websites run WordPress
WordPress is used by 58.3% of websites whose content management system is known, which is 39.6% of all websites, according to W3Techs.
Source: W3Techs, Oct 2026(opens in a new tab)02
7,966
New WordPress vulnerabilities in 2024
96% of them were found in plugins and 4% in themes. Plugins are where the risk lives, so they are where maintenance starts.
Source: Patchstack, State of WordPress Security 2025(opens in a new tab)03
33%
Not fixed before public disclosure
In 2024, 33% of vulnerabilities were not fixed in time for public disclosure. Fast, tested patching closes that window on your site.
Source: Patchstack, State of WordPress Security 2025(opens in a new tab)
FIG 04 · What you get
What website maintenance includes
Six jobs that keep a site healthy, done every month by the team that builds sites, not by a plugin that emails you a report nobody reads.
02
Backups and restore tests
Automatic off-site backups of files and database, kept for an agreed retention period, plus restore drills so we know a backup actually works.
03
Security monitoring and malware removal
Vulnerability and malware scanning, firewall rules, least-privilege access and two-factor sign-in. If a site is hacked, we clean it, close the hole and report.
04
Uptime monitoring and incident response
Round-the-clock uptime and SSL checks with alerts to our team. Incidents follow a written process: triage, fix or restore, root cause and a report.
05
Speed and Core Web Vitals
LCP, INP and CLS tracked monthly, with image, caching, CDN and script fixes before slow pages start costing you rankings and sales.
06
Content edits and small changes
New pages, copy and image updates, forms and small features, handled by a developer who knows your site, within the hours in your plan.
Deliverables
12
deliverables, in writing
Included in every build, written into your fixed quote before work starts.
FIG 05 · What we build
Platforms we maintain.
We maintain sites built on any stack, including the ones we did not build. Every new site starts with an onboarding audit, so we know what we are looking after.
01
WordPress maintenance services
Core, plugins, themes and PHP versions kept current and compatible, with plugin bloat reviewed and vulnerable plugins replaced.
02
Shopify store maintenance
Theme updates, app reviews, checkout and order tests, and speed checks as apps pile up.
03
Next.js, React and custom web apps
npm dependency updates, Node.js LTS upgrades, hosting and deployment care for custom PHP, Node and React apps.
Website maintenance packages
Website care plans that fit the site
Three starting points, shaped to your site in a fixed monthly quote. Response targets and change hours for every plan are agreed in your written scope.
Plan 01
Essential
Best for: Brochure sites and small business websites
- Core, plugin and theme updates
- Automatic off-site backups
- Security and uptime monitoring
- A small block of change hours
- Monthly report
Response targets and change hours: agreed in your written scope.
Get a Essential quotePlan 02
Growth
Best for: Lead-generation sites and growing online stores
- Everything in Essential
- Speed and Core Web Vitals fixes
- Search Console and broken-link checks
- Form and checkout tests
- More change hours for content and features
Response targets and change hours: agreed in your written scope.
Get a Growth quotePlan 03
Critical
Best for: Revenue-critical stores, web apps and regulated sites
- Everything in Growth
- Staging-first releases and restore drills
- Accessibility and consent upkeep
- Priority incident handling
- Quarterly audit and roadmap review
Response targets and change hours: agreed in your written scope.
Get a Critical quoteWe do not publish prices: every plan is a fixed monthly quote after a free call and an onboarding audit. How our engagements work
Response times and SLA
When something breaks, you know what happens next
Every issue gets a severity level. Response and resolution targets for each level are agreed in your written scope before you sign, so there is never a debate during an outage.
| Severity | What it means | What we do | Response target |
|---|---|---|---|
| P1Site down or hacked | The site is offline, defaced, infected or cannot take orders or leads. | Treated as top priority: restore from a clean backup or fix in place, then a root-cause report. | Agreed in your written scope |
| P2Broken feature | Checkout, a form, sign-in or a key page is broken, but the site is up. | Reproduce, fix on staging, test and release, then confirm with you. | Agreed in your written scope |
| P3Change request | New content, a design tweak or a small feature. | Scheduled into your plan hours and confirmed in writing. | Agreed in your written scope |
If your site goes down or is hacked
- Step 01
Alert
Monitoring flags downtime, malware or errors to our team.
- Step 02
Triage
We confirm the problem, its severity and who is affected.
- Step 03
Restore
Service is restored from a clean backup or fixed in place.
- Step 04
Root cause
We find and close the hole so it does not happen again.
- Step 05
Written report
What happened, what we did and what we recommend.
Reporting
Your monthly report, in plain English
One page every month: what we updated, what we fixed, what we found and what we recommend next. No jargon, no padding.
Honest advice
When to redesign instead of maintain
- The theme or framework is no longer supported, so updates keep breaking things
- Core Web Vitals fail on most pages even after tuning
- The site cannot do what the business now needs without major rework
- The design no longer matches your brand or your buyers
If two or more apply, maintenance money is better spent on a rebuild. We will tell you so.
Website design and developmentMonthly maintenance reportSample
0.00%
Uptime this month
0
Updates tested and applied
0/31
Daily backups completed
Core Web Vitals, mobile pages passing
Largest Contentful Paint0%
Interaction to Next Paint0%
Cumulative Layout Shift0%
Done this month
- Updated 9 plugins on staging, then on live
- Restore test from last Sunday’s backup: passed
- Fixed 3 broken links found in Search Console
- Compressed hero images on 4 slow pages
- Edited copy on the pricing and team pages
Recommended next: replace an unmaintained slider plugin and fix layout shift on the blog template.
FIG 06 · Process · 5 steps
From handover to first report
An onboarding audit, a fixed monthly quote and secure access, then a plain-English report every month.
- Step 01
Free call
Tell us about your site, its stack, its traffic and what keeps you up at night. We tell you honestly what it needs.
- Step 02
Onboarding audit
We review your code, plugins or apps, hosting, backups, security and speed, and write up the risks in plain language, including sites another agency built.
- Step 03
Fixed written quote
A care plan scope with what is included, how often, the change hours and the response targets, all agreed in writing before we start.
- Step 04
Access handover
Secure access set up with least privilege and two-factor sign-in. Hosting, domains and backups stay in accounts registered to your business.
- Step 05
First report, then every month
Your first monthly report covers what we updated, fixed and found, and what we recommend next. Then the same every month.
FIG 07 · What you get
What every care plan covers
The exact tasks, frequencies and change hours are written into your fixed monthly quote before we start.
12items
- Onboarding audit of your current site
- Core, plugin, theme and dependency updates
- Staging copy for testing updates
- Automatic off-site backups
- Scheduled restore tests
- Security and malware scanning
- Uptime and SSL certificate monitoring
- Core Web Vitals and speed checks
- Search Console and broken-link checks
- Form and checkout tests
- Content edits within your plan hours
- Monthly maintenance report
FIG 08 · Tech & tools
The tools behind the work
Proven, well-supported tools, chosen for your project and set up in accounts your business owns.
- WordPress
- WooCommerce
- Shopify
- Next.js
- React
- Node.js LTS
- PHP
- Cloudflare
- AWS
- Vercel
- Google Search Console
- PageSpeed Insights
- Lighthouse
- GitHub
FIG 09 · Who it’s for
Care that fits your site.
3 audiences
Small business
Never think about updates again.
Your site stays patched, backed up and fast, and small changes are one email away.
- Updates and backups handled for you
- Content edits within your plan hours
- Plain-English monthly report
- Sites another agency built, after an audit
Online stores
Protect every order.
Checkout and order tests, app reviews and speed checks, because a broken checkout costs money by the minute.
- Weekly checkout and form tests
- Shopify app and WooCommerce plugin reviews
- Core Web Vitals tracked monthly
- Incident process agreed in your scope
Regulated
Upkeep your compliance team will sign off.
Clinics, law firms and financial services need more than updates: access control, consent and accessibility kept in check.
- Least-privilege access and two-factor sign-in
- Cookie consent and UK GDPR upkeep
- WCAG 2.2 accessibility checks
- Written records of every change
FIG 10 · Working with us from the USA and UK
Built in New Delhi. Run on your hours.
Every project gets a point of contact in New York or London and an engineering team in New Delhi. Here is how today’s working days line up, live.
New York
North America
--:--ET
New Delhi team Your working day- Shared working time
- ≈ 3 hours today
- New Delhi is
- 10.5 h ahead
- Live calls, your time
- 9 a.m. to 12 p.m. ET
London
UK & Europe
--:--UK
New Delhi team Your working day- Shared working time
- ≈ 4.5 hours today
- New Delhi is
- 5.5 h ahead
- Live calls, your time
- 9 a.m. to 1:30 p.m. UK
Three ways to work together
- 01
Fixed-scope project
A written scope, one fixed price and a dated plan. Suits websites, apps and MVPs.
- 02
Dedicated team
Designers and engineers on your roadmap every month, billed monthly.
- 03
White label
For US and UK agencies: our work, your brand, unbranded deliverables.
Every engagement
- Fixed quote in USD, GBP or INR after a free 30-minute call
- NDA before discovery. You own all code, designs and content
- A working demo every sprint, not status slides
- Reply within one business day, calls inside your hours
Book a call
Calls on ET or UK hours
FIG 11 · Compare
Website maintenance checklist: what we do and how often
| Task | Typical frequency | Why it matters |
|---|---|---|
| Backups (files and database) | Daily | A clean restore point if an update, hack or mistake breaks the site |
| Security and malware scans | Daily | Catches injected code and known vulnerabilities early |
| Uptime and SSL monitoring | Continuous | You hear about downtime from us, not your customers |
| Core, plugin, theme and dependency updates | Weekly | Closes security holes, most of which live in plugins |
| Form and checkout tests | Weekly | Broken forms lose leads and orders silently |
| Broken links and 404s | Monthly | Keeps visitors and crawlers on working pages |
| Speed and Core Web Vitals | Monthly | Slow pages cost rankings and conversions |
| SEO health (Search Console errors, sitemaps) | Monthly | Spots indexing problems before traffic drops |
| Accessibility checks (WCAG 2.2) | Quarterly | Keeps the site usable for everyone and lowers ADA and UK legal risk |
| Restore test | Quarterly | Proves the backups actually work |
| SSL and domain renewals | Before expiry | Avoids certificate warnings and lost domains |
| Monthly report | Monthly | One page showing what was done, found and recommended |
FAQ
Frequently asked questions
Straight answers about Website Maintenance with Elgrith.
Website maintenance covers everything a live site needs after launch: core, plugin, theme and dependency updates, off-site backups and restore tests, security scans and malware removal, uptime and SSL monitoring, speed and Core Web Vitals fixes, SEO health checks, content edits and a monthly report. Elgrith writes the exact list and frequencies into your plan before we start.
FIG 12 · Related
Keep exploring
Software Testing & QA
Manual, automated & app testingCloud & Deployment
Hosting, CI/CD & DevOpsWebsite Design & Development
Fast, custom sites that convertTechnical SEO
E-commerce Development
Shopify, Plus & headless storesIT Services
Managed IT, security & supportHealthcare
Mobile App Maintenance
OS updates, fixes & monitoring
Free 30-minute call
Let’s build something people remember.
Tell us where you want to be in 12 months. We’ll reply within one business day with a plan, a timeline and a fixed quote.
Pick a day for your call
OpenPick a day. You'll choose a time in your own time zone on the next step.