What is actually in a website maintenance plan?

Straight answer: a real maintenance plan is hosting, software updates, backups, security monitoring, uptime checks and a set amount of human time each month for changes. Everything else on a quote is either one of those six wearing a fancier name, or padding. Prices in Canada run roughly $20 to $200 a month for a small business site, and the gap between those numbers is almost entirely about how much human time is included.

The trouble is that maintenance is sold as a bundle of nouns. You get a list that says "updates, security, backups, support" and a monthly figure, and no way to tell whether that is fair. So here is each piece, what it actually involves, and how much it genuinely matters when you are a plumber or a salon rather than a bank.

Hosting and the domain

Hosting is the space your site lives on and the bill that keeps it reachable. Domain registration is separate and usually $15 to $25 a year. Neither is complicated, and neither should be a mystery.

What matters here is not the cost, it is the ownership. Both should be in accounts with your name and your card on them, or at minimum accounts you can be handed on request. Plenty of owners find out the hard way that the person who built the site owns the address to it, which is a genuinely painful thing to unpick. If any of that sounds familiar, who owns your website after it is built covers where the lines usually sit.

Software updates

This is the line that varies most between providers, because it depends entirely on what your site was built with.

A WordPress site has a core platform, a theme and usually somewhere between ten and thirty plugins, all updated by different people on different schedules. Something in that stack changes almost every week, and occasionally two updates disagree and break a page. That is real, ongoing work, and it is the honest reason WordPress maintenance costs more.

A static site, which is what most small business sites should be, has almost none of that. There is no plugin stack to fall out of sync. Updates mean content changes rather than emergency patching. If your quote is priced for the WordPress problem but your site does not have the WordPress problem, you are paying for a risk you do not carry.

Backups

Cheap to provide and worth having. The question worth asking is not whether backups exist but how far back they go and how quickly one can actually be restored. A backup nobody has ever tested restoring is a hopeful file, not a safety net.

For a small business site, daily backups kept for thirty days is generous and costs the provider very little. Be sceptical of it being presented as a headline feature.

Security monitoring

The realistic threat to a small local site is not a targeted attack. It is an automated bot sweeping the internet for a known hole in an out-of-date plugin. Security monitoring means an SSL certificate that stays valid, sensible server configuration, and something watching for the obvious stuff.

This is another place where the platform decides the price. A site with no database and no login page has a dramatically smaller surface to attack than one running a dozen plugins. Same word on the quote, very different amount of work behind it.

Uptime monitoring

An automated check every few minutes that pings your site and alerts someone if it stops answering. It costs almost nothing to run.

Its value is entirely in what happens next. Monitoring that alerts a person who fixes the problem is worth having. Monitoring that emails you at 2am so you can find out you are offline before your customers do is not maintenance, it is a notification.

The part that actually costs money: human time

Everything above is mostly automated and mostly cheap. The reason one plan is $20 and another is $200 is how many minutes of a real person are attached to it.

This is the line to interrogate. Ask directly: how many changes a month, how quickly do they get done, and what counts as a change. A new photo on a service page and a whole new page are very different jobs, and a plan that treats them as the same either has a limit you have not been told about, or a price that assumes you will never use it.

Most small businesses genuinely need very little here. A few text edits, seasonal hours, a new project photo, a price change. If your plan covers small changes within a couple of business days, that is usually enough. Paying for a large monthly allowance you never touch is the most common way to overspend on maintenance.

The six things on the list cost almost nothing to run. What you are really buying is somebody whose problem it is when the site breaks.

What is usually padding

• Monthly reports nobody reads. An automated PDF of numbers with no interpretation is a screenshot with extra steps. A short note saying what changed and what it means is worth more and takes less time to produce.
• Speed optimisation as a recurring line. Making a site fast is mostly a one-time build decision. Charging monthly to keep it fast usually means it was built slow.
• SEO bundled into maintenance. These are different jobs with different outcomes. Bundling them makes it impossible to tell whether either is working. Keep them on separate lines even with the same provider.
• Unlimited edits. Nothing is unlimited. Either there is an unstated cap, or the price already assumes you will not ask.

What a fair plan looks like

For a small local business with a handful of pages, a fair plan is hosting, updates, backups, SSL, monitoring and a sensible amount of change time, for somewhere between $20 and $60 a month. If you are quoted meaningfully more, the honest questions are what platform the site runs on and how much human time is included, because those two answers explain almost every price difference in this market.

The other thing worth checking is the exit. A plan you can leave with thirty days notice, taking your domain and your files with you, is a fair arrangement. A plan that takes your site offline when you stop paying is not maintenance, it is a hostage situation, and it is more common than it should be. There is more on that in what to do when a designer will not hand over your website.

If you want the wider pricing picture rather than the line items, how much website maintenance costs covers the ranges and what drives them.