Hosting · All systems operational Melbourne time AEDT

Maintain · WordPress

WordPress maintenance.

Updates, backups, security, and monitoring on a monthly plan, so your WordPress site stays secure and reliable without you having to think about it.

Free WordPress health check.

Not sure what state your WordPress site is in? We’ll check its plugins, settings, and security against known problems, test it from the outside, and send you a short report on what needs attention.

Ask for a health check

  • What we look for

    • Out-of-date WordPress, plugins, and themes
    • Known security holes
    • Abandoned plugins
    • Loose ends that let attackers in
    • Server and PHP versions
    • Speed on mobile
    • SSL and blocklist status

  • What you get

    • A short report in plain English
    • Findings in priority order
    • Usually within two business days
    • No logins or passwords needed

Why WordPress needs maintenance.

WordPress sites need regular care. Security fixes come out all the time, sites get slower as they grow, and an out-of-date site is the easiest kind to break into. Maintenance keeps on top of all three, so small problems are caught before they become big ones.

  1. The biggest target on the web

    WordPress runs over 40% of all websites, so every hole found in core or a plugin gets probed across millions of sites within hours. The probing is done by bots, not people. Nobody has to pick your site for it to be attacked.

  2. The updates never stop

    Core, plugins, themes and PHP all patch constantly, and most patches fix security holes that have just been made public. Once a fix is released, attackers know exactly what to look for, so the sooner it’s applied, the safer the site.

  3. Sites slow down over time

    Databases grow, plugins accumulate, images pile up. A site that was fast at launch gets slower a little at a time, and a slow site loses visitors, sales, and search rankings.

  4. Small problems compound

    A failed backup, an expiring certificate, a plugin that clashes with another: spotted early, each one is a quick fix. Left unnoticed for months, they add up, and that’s usually how a site ends up broken or offline. Regular monitoring means they’re picked up while they’re still small.

WordPress maintenance plans

Barebones Updates and backups Standard Protection and performance Advanced Everything, plus online stores
Monitor
We check every minute that the site is responding. If it goes down, we know within a minute and start looking.
If something on the site changes in a way it shouldn’t, we get told and we look into it, usually before you’ve noticed anything.
We make sure the certificate that keeps the site on https stays valid and renews on time.
We keep an eye on the domain’s renewal date and warn you well before it’s due, so a missed renewal doesn’t take the site offline. It’s the cheapest disaster there is to avoid, and the worst one to have.
We crawl the site for dead links and missing images, and fix or flag what turns up.
The site’s underlying errors get collected in one place, so a recurring problem gets found and fixed instead of quietly piling up.
We track the speed and stability scores Google measures, and tune the site when they slip.
Update
We keep WordPress itself on a current, supported version.
We keep plugins and the theme up to date, which is where most security holes get patched.
We run updates on a staging copy first, check the site still works, and only push them live once it’s right. If something breaks, we roll it back.
After updates, we click through the important parts of the site to make sure they still work.
We keep your store software updated. It’s the part most likely to break a checkout if it’s left to drift.
We run a test purchase after changes, so you find out a checkout broke before a customer does.
Protect
The basics locked down on every site: login attempts throttled so passwords can’t be guessed, the WordPress version hidden from bots, the built-in code editor switched off, and the usual ways in closed.
Your site sits behind Cloudflare. Known attackers, brute-force logins and common exploits get blocked before they reach the server, and the site loads faster for it.
If someone tries to knock the site offline with a flood of traffic, it gets absorbed before it lands.
When a hole is found in a plugin you run, a rule can block the exploit as soon as it’s made public, often before the plugin author has shipped a fix. Powered by Patchstack.
Every backup is scanned for injected code and backdoors, so you get told which files are affected and we clean them up. It keeps a history, so you can see the site is clean again.
Every login, plugin install and settings change is recorded, so if something changes on the site we can see who did it, from which IP, and when.
Enhance
We check how fast the site loads and where it’s slow, on a regular schedule.
We act on the review: compress images, tidy code, and remove what is slowing the site down.
We serve pages from a fast cache instead of rebuilding them every time, so the site loads quicker.
We clear out the clutter WordPress accumulates so the database stays lean and quick.
When pages move or get renamed, we set up redirects so links and search rankings don’t break.
We check key pages against accessibility basics, so the site stays usable for everyone.
Backup
A full copy of the site taken every day and kept off the server, so a bad day usually costs you no more than a day. It runs whether or not we host the site.
If something goes wrong, we restore the site from a recent backup.
If the site is hacked or badly broken, we get it back to a clean, working state.
A copy every hour instead of every day, so you’d usually lose no more than an hour of work. Worth it for a store, or any site that changes through the day.
$50/mo$100/mo$150/mo

With our hosting

Host with us, save 20% on maintenance.

When we host the site too, every maintenance plan is 20% off, for as long as we host it. Compare hosting sizes →

Barebones Usually $50 now $40/mo
Standard Usually $100 now $80/mo
Advanced Usually $150 now $120/mo

Not sure which plan? Tell us about the site and we’ll suggest one →

Prices in AUD excluding GST.

Once-off

Just need a once-off?

Not ready for an ongoing plan? We’ll go through the site once, bring everything up to date, fix what needs fixing, and hand it back in good shape. Just keep in mind it’s a fresh start, not ongoing protection: it stays secure only as long as it’s kept up to date.

From $400

Ask about a once-off

Emergency recovery

Too late, already hacked?

If your site’s already been hacked, defaced, or filled with spam and malware, we can still help. We take it offline if we need to, clean it out, get it back to a working state, and put protection in place to make it much less likely to happen again. It’s the thing maintenance is meant to prevent, but if you’re already here, let’s just get it sorted.

Emergency rates

Get help now

Tell us about your site

Fill in the blanks and send. If you’ve chosen a plan, it’s already filled in. If not, we’ll suggest one.

Send us a message

To Chris Anderson <chris@brightspire.com.au>

We need for , .

Where to next