Website maintenance is the recurring work of keeping a website online, secure, backed up and current after it goes live, plus the time spent on content changes and small features as the business needs them. It shows up on an invoice as one number, described as hosting, a maintenance plan or a retainer, but it is really six different costs bundled together or billed apart.
This matters because most business owners find out what is actually in that number the hard way: a hosting renewal that jumps without warning, a plugin update that breaks the checkout, a hacked site with no recent backup to restore from. Knowing what maintenance is actually paying for is the difference between comparing two quotes properly and comparing two numbers that cover completely different things.
This guide breaks maintenance into its six parts and what each one costs on its own, what a page builder subscription bundles in and leaves out, and what changes when the ongoing work is an engineering plan rather than a patch job. By the end you should be able to look at any maintenance quote and know exactly what it does, and does not, cover.
Website maintenance is six line items, not one
"Maintenance" is a catch-all term, and that is exactly why it is easy to sell short. Underneath the one line on a quote sit six separate jobs, each with its own cost and its own way of failing if it is skipped.
- Hosting: the server the site actually runs on, and the domain that points to it.
- Security monitoring and malware removal: watching for attacks and cleaning up the site if one gets through.
- Backups: a recent, restorable copy of the site, taken often enough that restoring it does not lose weeks of work.
- Uptime and performance monitoring: knowing the site is down or slow before a customer tells you.
- Software updates: keeping the CMS, plugins, themes and other dependencies patched.
- Content changes and feature work: the actual editing, new pages and small builds, usually billed by the hour or against a monthly allowance.
Hosting, security and backups: the baseline that runs whether you touch the site or not
These three costs exist even if nobody ever edits the site again. Managed WordPress hosting, where the host handles server updates and basic security, typically runs $15 to $60 a month. A .com.au domain renewal adds roughly $15 to $40 a year on top.
Security monitoring and malware removal is usually a separate service or plugin subscription. Sucuri's Website Security Platform, one of the more established options, runs $199.99 to $499.99 a year across its Basic, Pro and Business tiers, roughly $17 to $42 a month depending on how much traffic and how many sites it is covering. A dedicated backup service such as BlogVault runs $149 to $499 a year, about $12 to $42 a month, depending on backup frequency and how much staging and scanning is included.
Skipping this layer is not a theoretical risk. In Sucuri's most recently published Hacked Website Report, covering 2023, 39.1 percent of compromised content management systems were running outdated software at the time of infection. The cost of security and backups is small next to the cost of rebuilding a hacked site from nothing.
Monitoring and updates: catching a problem before a customer does
Uptime and performance monitoring is a small cost for what it catches. A basic checker such as UptimeRobot is free for infrequent checks across a handful of monitors, and paid tiers from around $9 to $65 a month add faster checks, more monitors and alerting for a small team. What matters is not the tool but whether anyone actually looks at the alert: a monitor nobody reads is the same as no monitor.
Updates are the least visible cost and the easiest to defer, which is why they are the most commonly skipped. A CMS, its plugins and its theme all ship security patches on their own schedule. Applying them on a live site without breaking anything means testing on a staging copy first, which is where a chunk of a maintenance plan's hours actually go, not in writing the changelog.
Content changes and feature work: the part billed by the hour
This is the most variable line item, because it scales with what you ask for rather than with the site's size. A new page, an updated price list, a seasonal banner, a small integration: all of it is billed either against a monthly allowance built into a maintenance plan, or by the hour once that allowance runs out. Freelance web developer rates in Australia typically run $32 to $138 an hour, so the total depends entirely on how much you ask for and who is doing it.
This is also where a maintenance plan and a one-off fix diverge in what they actually deliver. A plan's allowance covers the small, recurring asks. A brand new feature, a booking flow, a CRM integration, is project work, scoped and quoted on its own, whether the site is on a plan or not.
What a page builder subscription hides
Squarespace, Wix and Webflow fold hosting, an SSL certificate, basic backups and a baseline of platform security into one monthly subscription, from roughly $15 to $25 a month on Webflow's entry tiers up to $99 on Squarespace's Advanced plan and $159 on Wix's top tier. Seen against the component prices above, that looks like a good deal, and for the bundled parts it often is.
What it does not include is everything in the previous two sections. Content changes are still your time or a contractor's. A feature the template does not already offer is custom work on top of the subscription, not included in it. And the subscription is rented: stop paying and the site, its content and often its domain-linked email come down with it. "Maintenance" on a page builder is really just the hosting and security third of the six items, dressed up as the whole thing.
What an ongoing engineering plan covers
On a full stack site you own outright, the six items split the same way but the economics change. Hosting, security and backups are infrastructure costs rather than a rented platform fee, because there is no subscription tier capping what the site is allowed to do. Content changes and feature work are commissioned as the business needs them rather than squeezed into a fixed monthly allowance, which is closer to how Lumeen's Agentic Core retainer works: continuous development, integrations and monitoring, month to month, priced per project after the discovery questionnaire rather than off a published rate card.
Maintenance, in the end, is just the ongoing price of keeping a website worth having: safe from attack, recoverable if something goes wrong, visible the moment it breaks, current with the software it runs on, and able to change when the business needs it to. Whatever quote you are comparing, check it actually covers all six. The cheapest number on the page is usually the one that only covers three of them.
Key takeaways
- 1
Maintenance is six separate costs, hosting, security, backups, monitoring, updates and content or feature work, whether they are billed as one number or six.
- 2
Skipping updates carries a real cost: 39.1 percent of compromised content management systems in Sucuri's most recent report were running outdated software at the time of infection.
- 3
A page builder subscription bundles hosting, security and basic backups into one number, but content changes, feature work and the cost of leaving stay outside it.
- 4
On a site you own, maintenance is infrastructure cost plus commissioned work, not a subscription tier that caps what you are allowed to build.
Frequently asked questions
What does a website maintenance plan usually include?
Most plans cover hosting, security monitoring, backups and uptime checks, plus software updates for the CMS, plugins and themes. Content changes and new features are usually a separate allowance or billed by the hour once that allowance runs out.
How much should website maintenance cost per month?
For an Australian small business site, expect roughly $90 to $380 a month for a standard plan covering hosting, security, backups, monitoring and routine updates, more for an online store or a high traffic site, and separate hourly billing for content changes beyond the plan's allowance.
Is maintenance included in a Squarespace, Wix or Webflow subscription?
Hosting, SSL and basic backups are bundled into the monthly subscription, which runs roughly $15 to $160 depending on the platform and tier. Content changes and any feature the template does not already offer still cost time, and the coverage stops the moment you stop paying the subscription.
Why does maintenance cost more for a custom built website?
Because more of it is genuine engineering work rather than a platform cost shared across millions of subscribers. The trade-off is ownership: stop commissioning future work and the site keeps running, which is not true of a rented platform.