The site is live, the design landed well, and the first visits are trickling in. That is usually when the question nobody asked before hiring the build finally shows up: now what? A website is not furniture you buy once and forget: it is a living system, running software that gets security updates every few weeks, holding data that needs protecting, and being judged by a search engine that rewards — or punishes — speed and reliability. That is, in short, website maintenance.
Here is what it actually covers, the price ranges the market works with today depending on the type of site and who manages it, and what happens — backed by real data — when it gets skipped.
What website maintenance is, and why it is not optional
Website maintenance is the set of recurring tasks that keep a site running, secure and up to date after it goes live: updating the software behind it, watching for unauthorised access attempts, backing up data, checking load speed, and fixing what breaks before a visitor notices. It is not the same as the initial website build, even though it is usually hired from the same agency that built the site: building is putting up the house, maintenance is paying the service charge, checking the pipes and changing the lock when it is due.
The most common misunderstanding is assuming that once a site is built, it is done. In practice, a CMS (WordPress, PrestaShop, WooCommerce, Shopify or whatever runs the site) ships security updates frequently, and every plugin or extension installed is one more piece that can go stale. The more moving pieces, the more maintenance the whole thing needs.
What a serious maintenance plan actually includes
Not every maintenance contract covers the same ground, and that is the first trap when comparing prices: look at what each tier includes, not just the final number. Here is what a complete service should cover.
Updates and security
Updating the CMS core, plugins, themes and the libraries the site depends on. It sounds mechanical, but it is not: a badly applied update can break something that used to work, so it needs testing before it is signed off. On top of that comes malware scanning and watching for suspicious access attempts.
Backups
Automated, regular backups stored off the server itself (if the problem is the server, a copy sitting on it does you no good), and tested from time to time to confirm they actually restore. A backup that has never been tested is, in practice, no backup at all.
Performance and uptime
Monitoring that the site is up around the clock, optimising images and caching so it loads fast, and reviewing the hosting. A slow site does not just annoy visitors: Google penalises it in rankings.
Support and minor content changes
Most plans include a pool of hours or a monthly number of requests for small changes: updating a text, adding a news item, swapping a photo, fixing a broken link. Bigger changes — a new section, a partial redesign — are almost always quoted separately.
Analytics and technical SEO
Checking that Google keeps indexing the site properly, watching for new crawl errors, and, on fuller plans, a periodic report on what was done and how the site is performing. Without this kind of tracking, a technical problem can quietly drain traffic for weeks before anyone notices.
How much website maintenance costs: real ranges
The Spanish market broadly runs from €19 to €400 a month, and that wide span mostly comes down to the type of site, how many tasks the plan covers, and whether maintenance is handled by a freelancer or by an agency with a real team and support. As a rough reference, for a standard corporate WordPress site:
Basic plan (roughly €19-39/month)
Covers the bare minimum: core and plugin updates plus regular backups. Enough for a simple informational site with little traffic and no business-critical functions, where an hour of downtime is not a real loss.
Standard plan (roughly €49-79/month)
Adds support for small changes, reports on what was done, and a check after every update to confirm nothing broke. This is the range that fits most small businesses running an active site that generates leads or sales.
Advanced or custom plan
For online stores, sites with integrations (CRM, ERP, payment gateways) or high traffic, the price goes up and stops being a flat rate: constant monitoring, more frequent backups, guaranteed response times and, often, reserved development hours every month. If you run an online store, maintenance matters even more: an hour of downtime mid-campaign is not an inconvenience, it is lost revenue in real time.
On top of maintenance itself, factor in hosting (roughly €5-17/month for something decent) and the domain (€10-20/year), which often show up as separate line items on the quote.
| Plan | Price | What it covers |
|---|---|---|
| Basic | €19-39/month | Core and plugin updates, plus regular backups. |
| Standard | €49-79/month | The above plus support for small changes, reports, and a check after every update. |
| Advanced or bespoke | No fixed rate | Constant monitoring, more frequent backups, guaranteed response times and reserved development hours each month. |
On top of maintenance come hosting (€5-17/month for decent quality) and the domain (€10-20/year), which are often quoted separately.
What happens if you skip it
This is where cutting the cost stops looking clever. Industry data suggests thousands of WordPress sites are compromised every single day worldwide, and the large majority of the cases studied — well over 80% — had an outdated core, plugin or theme at the time of the attack. It is not an abstract threat: it is by far the most common cause, ahead of weak passwords or misconfiguration.
The practical consequences of a neglected site, from mild to serious:
- It gets slow. Without optimisation or caching, performance degrades over time — and traffic with it.
- It loses Google rankings. An undetected technical issue (broken links, indexing errors) can undo weeks of content work.
- It becomes vulnerable. An outdated plugin is an open door, and automated attacks find it on their own — nobody has to be targeting you personally.
- It goes down, and nobody notices in time. Without monitoring, a site can be down for hours or days before anyone at the company realises, usually because a customer mentions it.
- If you get hacked, data leaks. Contact forms, orders, customer records: if the site handles personal data, a security failure stops being just a technical problem.
Rebuilding a hacked site or clawing back lost rankings almost always costs far more than years of maintenance would have.
Do local digitalisation grants cover website maintenance?
In Spain, the Kit Digital programme funds the rollout of digitalisation solutions, including web presence, and projects of this kind typically bundle a maintenance and support period (usually twelve months) into the grant itself, after the implementation phase. Exact terms depend on the current call and the size bracket of the business, so it is worth confirming with the agency or advisor managing the grant before assuming anything. If you operate outside Spain, check whether your local government runs an equivalent SME digitalisation scheme — several EU countries do.
How to choose based on your business stage
There is no single «right» plan for everyone; it depends on how critical the site is to the business right now:
- If you are just starting out and the site is mostly a calling card, a basic plan covering updates and backups is enough. The important part is not dropping to zero: someone needs to be checking the site at least once a month.
- If the site already earns its keep — generating leads, selling, or acting as the front door for customers — a standard plan with support and post-update checks stops being a nice-to-have: every hour of downtime or undetected fault has a real, measurable cost.
- If you run an online store or business-critical integrations, maintenance becomes part of running the business, not an accessory expense: you need guaranteed response times and someone who answers the same day, not in 72 hours.
How we approach it at Cruslar
When we hand over a website, we do not disappear the next day: we propose a maintenance plan sized to what that specific site actually needs, no more and no less. If you have just launched and traffic is still modest, we are not going to sell you the most expensive tier. If your revenue already depends on the site, we will tell you that just as plainly, with the numbers on the table. And where it applies, we also check whether the project qualifies for digitalisation grants or other funding currently available.
Frequently asked questions
Can I maintain my own site myself?
If you have the technical know-how and the time, yes — at least the basic layer of updates and backups. The usual problem is time: someone has to stay on top of it, and a badly applied update without experience can take the site down for hours.
What happens if I stop paying for maintenance?
The site keeps running, but it stops being updated and watched. Nothing happens the first month, or the second; the risk grows over time, like an overdue vehicle inspection.
Does maintenance include design changes?
No, unless the plan says so explicitly. Maintenance keeps what already exists running and secure; a redesign or a new section is a separate project, almost always quoted on its own.
Is it the same for WordPress as for an online store?
No. A standard corporate website and an online store have different needs: the latter handles payments, stock and customer data in real time, so it usually needs more frequent backups and shorter response times.
Let's talk about your website maintenance
If you have a site and are not sure who is actually watching it right now, this is a good moment to check. Tell us what site you have, what you use it for, and how business-critical it is: we will tell you honestly what level of maintenance you really need, without overselling it.
