WordPress Care Plans

Someone keeping an eye on your WordPress site. From $10 a month.

Updates applied, vulnerabilities watched, backups taken and verified — on whatever host you already use. It costs less than a sandwich and it is the difference between a site that quietly keeps working and one that gets hacked on a Tuesday.

Start a conversation See our rates

WordPress updates and security monitoring in progress

The problem

Nearly every hacked site was hacked through a known hole

With a patch that had been available for weeks.

WordPress itself is not especially insecure. What gets sites compromised is the long tail of plugins and themes, where a vulnerability is disclosed, a fix is published, automated scanners immediately start hunting for sites that have not applied it. Yet many site owners don't regularly log in to run updates on a regular basis.

The gap between “patch available” and “patch applied” is where essentially all of the damage happens. Closing that gap is not difficult. It is just relentless, and it is nobody’s favorite job.

The other half of the problem is backups. A lot of sites have a backup plugin installed that either stopped running months ago or is writing backups to the same server as the site — which is no help at all when that server is the thing that failed.

Our WordPress care plans address the two issues, as well as provide proactive monitoring of your site and live patching of any detected vulnerabilities through Patchstack - even if the plugin developer has not yet released a fix.

Included

What a care plan covers

The same work whether you host with us or not.

WordPress core updates
Plugin updates
Theme updates
PHP version compatibility checks
Patchstack vulnerability monitoring
Pre-update backup snapshots
Regular off-site backups
Uptime monitoring
Antispam mitigation
Broken link and error checks
A human to email when something looks wrong

What happens when a vulnerability is announced

Patchstack notifies us when a plugin or theme on your site has a disclosed vulnerability. We assess whether it applies to your configuration, apply the patch, and where no patch exists yet, either apply a virtual patch or disable the affected component and tell you what we did and why.

What is not included

General technical support, content changes, new pages, design work and new functionality are billed at our standard rate of $105/hr. Repairing a site that breaks for reasons unrelated to our updates is also hourly. We will always talk to you before starting billable work.

Plans

Two ways to get a care plan

The care plan is the same. The only question is who runs the server.

Stay where you are

Care Plan

$10 /month

$6/month for each additional site. Your site stays on your current host and you keep that relationship.

Core, plugin and theme updates
Patchstack vulnerability monitoring
Off-site backups
Uptime monitoring

Best value

Hosting and care together

Hosting + Care Plan

$12.50 /month

$7.50/month for each additional site. Billed annually in advance and fully refundable if you leave.

Everything in the Care Plan
Fast managed hosting, 99.9% uptime guarantee
DNS hosting and management
Transactional email delivery
Free or low-cost CDN video hosting

For only $2.50 more per month, hosting and care together is usually the better deal — you get faster hosting and company responsible for the everything. But if you like your current host, or moving is inconvenient, the standalone care plan exists precisely so you do not have to.

Getting started

How it works

Usually running within a couple of days.

We look at the site first. Before anything starts, we check what is installed, whether anything has known vulnerabilities, and whether the host can support current software. If there is a backlog of neglected updates, we will quote that separately rather than folding a large job into a monthly fee.
You create an administrator account for us. You keep your own. We add our monitoring and management tooling to the site.
We take a full off-site backup. Before touching anything, so there is always a known-good starting point.
Updates run on a regular schedule with a snapshot taken beforehand and monitoring afterwards.
You hear from us when it matters. Not a monthly report nobody reads — an email when something needs your attention or a decision.

Questions

Frequently asked questions

Do I have to move my hosting to you?

No. That is the entire point of the standalone Care Plan — your site stays exactly where it is, with whatever host you already use. If you are happy with your host, keep them. If you are not, we also offer managed hosting with a care plan included for $12.50/month.

What access do you need?

An administrator account on the WordPress site, and ideally access to wherever backups can be stored off-site (while we make our own backups, having two redundant sources of backups is best practice). We do not need your hosting billing login or your domain registrar password. You keep your own administrator account throughout — we never ask a client to give up their own access.

What happens if an update breaks my site?

We take a backup before applying updates and check the site afterwards. If something breaks, we roll back. If the breakage needs actual repair work rather than a rollback — a plugin that has been abandoned by its developer, for example — that is billed at our normal hourly rate, and we will talk to you before spending your money on it.

Is my site too small for this?

Almost certainly not. At $10/month the plan is aimed squarely at small sites where hiring anyone hourly to do maintenance would not make sense. With the rise of AI, new vulnerabilities are constantly being discovered and automated attacks are scanning sites, regarldess of size.

Does the care plan cover content changes?

No. The plan covers keeping the site secure, updated and backed up. Editing content, adding pages or building new functionality is billed at our hourly rate. We can also set up a monthly package if you have a predictable amount of change work each month.

What if my host is really bad?

We will tell you. Some hosts are slow enough or restrictive enough that we cannot do a good job, and in that case we would rather say so upfront than take your money monthly. Usually the fix is either a different host or moving to our managed hosting.

Also available

Let's talk

There is no charge for an introductory conversation. Tell us what you are trying to do and we will tell you honestly whether we are the right fit — and roughly what it should cost.