Website Maintenance Isn't Optional — Here's What It Actually Covers

Nobody budgets for maintenance until the day the site is down, hacked, or the checkout silently stopped working three weeks ago. Here's what maintenance actually is — and what it costs you to skip it.

What maintenance covers

• Security patches — CMS cores, plugins, frameworks and server packages all ship vulnerabilities. Unpatched sites get found by scanners within days.
• Backups — automated, off-server, and tested. A backup you've never restored is a hope, not a backup.
• Uptime monitoring — knowing the site is down before your customers tell you.
• Performance checks — databases bloat, logs fill disks, certificates expire. Small drifts become outages.
• Content & feature updates — prices change, products change, Google changes.
• SSL & domain renewals — the #1 cause of embarrassing downtime is an expired cert or domain.

What skipping it looks like

Real cases I've been called in to rescue:

• A WooCommerce store sending orders to spam for two months — nobody noticed until a customer called.
• A hacked site redirecting mobile visitors to scam pages — desktop looked fine, so the owner never knew.
• A Laravel app that fell over because the disk filled with logs — one line of logrotate would have prevented it.

What it should cost

In Kenya, sensible maintenance runs Ksh 3,000 – 15,000/month depending on complexity — far less than one emergency rescue or a week of lost sales. If someone built your site and vanished, that's fixable too.