A website care plan is a monthly service that keeps your site working after launch: software updates applied and checked, backups that have actually been test-restored, uptime and form monitoring, security watching, renewals tracked, and a named person to call when something goes wrong. Across the UK market, small-business plans typically run from around £25 to £300+ a month depending on how much genuine work is included.

If you've never had one, the fair question is whether this is just an agency inventing recurring revenue. Sometimes it is. So this article covers what actually degrades on an unmaintained website, what a proper plan should include, how pricing tends to work, and the questions that expose a plan that's all standing charge and no care.

Websites don't stay finished

A website isn't a brochure that sits quietly in a drawer. It's software running on a server, tied to a domain, a security certificate, an email system and usually a stack of third-party code, all of which keep changing underneath it whether you touch the site or not. Browsers update. Email providers tighten their rules. Hosts retire old software versions. None of it announces itself; things just gradually stop working.

The cruel part is that most failures are silent. Your homepage can look perfect while, behind it, the contact form stopped delivering enquiries in March.

What quietly breaks on an unmaintained website

Renewals nobody is watching

Domains, certificates and hosting renew against payment cards that expire and email addresses nobody checks any more. When a domain lapses, your website and your email go down together, and getting a lapsed domain back can mean redemption fees, or at worst watching someone else register it. A lapsed domain is the single most avoidable disaster in this industry.

Security certificates

When an SSL certificate expires, browsers replace your website with a full-screen "your connection is not private" warning. Most visitors leave immediately. Certificates usually renew automatically, right up until a server change quietly breaks the automation and nobody's watching.

Software and plugin updates

Most small-business sites run on a CMS plus a pile of third-party plugins. Skip the updates and you accumulate publicly known security holes; the majority of hacked small-business sites are hit by automated bots scanning for exactly those, not by anyone targeting the business itself. But updates applied blindly break things too. Clicking update is only half the job. You update, then you check the site still works.

Forms that fail silently

This one deserves special attention because nobody ever notices in time. Email providers keep tightening the rules (SPF, DKIM, DMARC) about which servers are allowed to send mail for your domain. A contact form that delivered perfectly last year can quietly start landing in spam, or nowhere at all. The website looks fine. The enquiries simply stop. More than one business has blamed a quiet patch on the economy while their own site was binning leads.

Backups nobody has tested

A backup that has never been restored is a hope, not a backup. The classic failures: backups stored on the same server that just died, backup jobs that silently stopped running months ago, or backups that captured the files but not the database. The only test that counts is an actual rehearsed restore.

Slow decay

Page speed drifts downwards, links to other sites die, hosts deprecate old PHP versions, and search engines notice all of it. None of this takes the site offline. It just makes it steadily worse, and steadily cheaper-looking, until someone finally asks why enquiries have dried up.

What a proper care plan includes

Plans vary between providers, but a genuine one should cover most of this list:

• Updates applied and then checked: CMS, plugins and server software, with the site tested afterwards rather than left to luck.
• Offsite backups with test restores: copies held away from the hosting itself, and periodically restored to prove they work.
• Uptime and form monitoring: knowing the site is up, and that enquiries are actually arriving in an inbox.
• Security monitoring: scans, sensible firewall rules, and action when something gets flagged.
• Renewals tracked: domain, certificate and hosting dates on a calendar someone actually owns.
• Included support time: small content changes and fixes without a fresh quote every time.
• A named human: a real person with stated response times, not a ticket queue that goes nowhere.

This is broadly what our own website care plans cover. We built them because staying around after launch is half the point of building a site properly in the first place.

What website care plans cost

Three pricing models dominate the market:

1. A flat monthly fee: the most common. Across the UK you'll see anything from roughly £25 to £300+ per month for small-business sites, with e-commerce and booking sites at the higher end because there's more to break and more at stake when it does.
2. Tiered plans: a basic tier for updates and backups, higher tiers adding support hours, priority response or performance work.
3. Hosting bundled in: one fee covering hosting and care. Perfectly fine, but ask what you're getting beyond the hosting itself.

The number matters far less than what's actually done for it. A £40 plan where updates genuinely happen and restores get tested is worth more than a £150 plan that's a standing charge with a dashboard. The way to tell them apart is to ask, which brings us to the questions.

Questions to ask any care plan provider

1. What exactly happens each month, and can I see a report of it?
2. When did you last test-restore one of my backups, and where are they stored?
3. Do you monitor that my forms actually deliver, end to end?
4. What's included in the fee, and what gets billed as extra?
5. If the site is hacked, is the cleanup included?
6. If I cancel, what do I take with me?

A good provider answers all six in plain English without checking with anyone. Vagueness on the backup question in particular tells you everything.

Do you actually need a care plan?

Honestly: not always. If your site is a single page on a fully managed platform that handles updates, certificates and backups automatically, the risk is lower and a full plan may be overkill.

But if your website brings in enquiries, bookings or sales, runs on a CMS, or shares its domain with your business email, then this work has to be done by someone: you, a member of staff, or a provider. The maintenance needs doing either way. The real question is who's doing it. If you can't name the person, the honest answer is nobody.

Common questions

What is a website care plan?

A website care plan is an ongoing monthly service that keeps a website healthy after launch: applying and testing software updates, taking and test-restoring backups, monitoring uptime and forms, watching security, tracking renewals, and usually including some support time for small changes. It replaces the gamble of only calling a developer once something has already broken.

How much does a website care plan cost in the UK?

Across the UK market, small-business care plans typically run from around £25 to £300 or more per month, depending on the complexity of the site and how much genuine work is included. E-commerce and booking sites sit at the higher end. The monthly figure matters less than what is actually done for it, so ask for a monthly report.

Can I look after my website myself?

Yes, if you have the time and the discipline. You would need to apply updates and check nothing broke, keep offsite backups and occasionally test-restore one, watch renewal dates, and test your forms end to end every month. In our experience most business owners manage this for about three months before it quietly slides down the to-do list, which is exactly when problems start.

My hosting company says maintenance is included. Is that enough?

Usually not. Hosting maintenance means the host looks after their servers: the hardware, the network and the base software they run. It almost never includes updating your website's own software, testing your contact forms, checking your backups actually restore, or fixing your site when something breaks. Read what is actually listed rather than the word maintenance.

We stay after launch

We're Bare Creative, a two-person web studio in Somerset, and looking after sites long after launch day is a deliberate part of how we work, not an upsell bolted on at the end. If you'd like your website watched by people who know it, have a look at our care plans or get in touch. We're happy to review what you've currently got, even if it was built by someone else.