Scheduled monthly care — updates, audits, backups, with a written report you can show your board.
Base scope of work — applies to all tiers. See the tier comparison below for hours and SLA specifics.
Updates happen on the same days each cycle. You always know when your site will touch new code.
File integrity, user roles, plugin CVE check, login surface, REST API exposure — written results, not a vendor dashboard screenshot.
We restore one backup to staging every month to prove the restore actually works. Most agencies skip this.
CrUX + Lighthouse run on the same five URLs each cycle. Alerts fire on a 15% slow-down before users notice.
Two pages: what we did, what we found, what to do next month. Email-ready for your boss or board.
No ticket form, no shared inbox. You message the same engineer who knows your codebase.
Transparent process — you always know what stage we're at and what comes next.
We run a free 30-point audit before you commit. Findings come back the next day.
We pick a tier based on traffic, plugin count, and risk tolerance. We will not upsell you to Premium if Standard fits.
Fix critical issues found in the audit, set up monitoring, configure backups, document the stack.
Scheduled updates, audits, and edits per your tier. You see every change in the monthly report.
PDF on the 1st. Standard + Premium tiers add a 30-minute call to walk through it.
Pick the level that fits your size and required response time. You can switch tiers between months.
For brochure sites and small blogs that just need to stay current.
For business sites and stores where uptime maps to revenue.
For revenue-critical eCommerce, membership, and high-traffic content sites.
Scope transparency — no surprises in the monthly report.
Access we require — passed via secure channel (1Password / Bitwarden).
"The monthly PDF is what sold our CFO. We finally had a paper trail showing the agency was doing something instead of just sending invoices."
"Switched from a US agency charging $600/mo with no reporting. Same coverage on Standard, plus actual numbers in the monthly review."
Maintenance is scheduled work on a calendar: updates, audits, backups, reporting. Support is reactive: someone calls, something is broken, we fix it. Most of our clients buy both. The maintenance plan keeps small issues from becoming emergencies; the support contract handles whatever still slips through.
A care plan bundles routine work into a monthly subscription with a fixed price. Instead of paying hourly when something happens, you pay a predictable retainer and get a set number of hours plus standing services (backups, monitoring, audits). The wording ‘care plan’ is the agency-industry term for it. We just call it Care Basic / Standard / Premium.
If the site brings you no money and you do not mind it being down for a week, no. If it does anything commercial — bookings, leads, sales, an active blog — yes. WordPress plugin CVEs are published almost every week, and 56% of WordPress hack incidents trace back to unpatched plugins. The cost of one incident is usually higher than a year of care.
You can. The math we see in client audits: the average site that does its own updates accumulates 8 to 14 hours of accumulated breakage per year (CSS shifts, deprecated hooks, plugin sunsets). At our hourly rate that is more than Care Standard for the same year. Plus you carry the staging-and-test burden yourself.
First 20% overage is free. After that, two options: bump to the next tier from the next billing month, or pay $35/hour for the overage. We never stop a job in the middle, and we always warn you before we cross your hour cap.
Updates run on staging first, never on production cold. We diff the front-end, smoke-test the critical user journeys, then push. In four years we have rolled back two updates total. Premium tier ships the staging report to you for sign-off before the production push.
Yes, both — every client signs a service agreement covering scope, response times, ownership, and termination. NDA on request, usually mutual. We can sign your paper or ours.
Yes. Month-to-month, no long contracts. Cancel by the 25th and you will not be billed the next month. We export all credentials, backups, and documentation back to you on exit.
This page is the scheduled side of WordPress care: a monthly cadence of updates, security checks, backups, and a written report on the 1st of every month. If you need ad-hoc fixes or 24/7 incident response, see our WordPress support & maintenance page — that one covers urgent breakage. Together they form a complete care package. Most clients run both.
First month is risk-free. If after 30 days the monthly report does not show real progress, we refund the month in full — no questions, no exit interview.
