The monthly invoice for a website is easy to question and hard to judge. Some plans are a server bill with a markup. Others hide a good deal of skilled work behind a single line. The fair way to compare them is not price first. It is what the plan covers, how fast problems get fixed and what you can take with you when you leave.
What should a website maintenance plan include?
A website maintenance plan, often sold as a care plan, is a monthly service that keeps a site online, secure, current and recoverable. At minimum it should cover six things:
- Managed hosting. The server or platform, a content delivery network and a named party responsible when the site slows down.
- SSL certificates that renew themselves. The CA/Browser Forum, the industry body that sets certificate rules, has voted to cut the maximum lifetime of public TLS certificates from 398 days to 47 days in steps between March 2026 and March 2029. Let's Encrypt, a widely used free certificate authority, is moving its default certificates to 45 days by February 2028 and says manual renewal is not recommended. Renewal has to be automated and watched.
- Backups you can actually restore. CISA's guidance for small businesses recommends the 3-2-1 rule: three copies of important files, on two different types of storage, with one copy off-site. It also says to test restores and to be able to roll data back at least seven days.
- Security and software updates. Patchstack counted 11,334 new vulnerabilities in the WordPress ecosystem in 2025, a 42% increase on 2024, with 91% of them in plugins. It also found that roughly half of high-impact vulnerabilities were exploited within 24 hours. Updates are not housekeeping. They are the security plan.
- Uptime monitoring with alerts. Someone should know the site is down before your customers tell you.
- A defined amount of human time. Edits, small fixes and checks, stated in hours, with a stated response time.
Stores, booking systems and sites with logins need more: checks that forms, payments and integrations still work after every update, because those break quietly and cost sales.
What does it cost? A reference point
Prices vary widely with the amount of human time included, so compare scope before you compare headline prices. As one concrete reference, here are OWNIT's published plans:
| Plan | Price | What it includes |
|---|---|---|
| Hosting | $30 per month | Managed hosting, auto-renewing SSL, global CDN, daily backups with one-click restore, 24/7 uptime monitoring with a 99.9% uptime target, firewall and malware scanning, security patching, email support |
| Care | $150 per month | Everything in Hosting, plus up to 1 hour of content edits a month, software and dependency updates, a staging environment, a monthly health check and report, broken-link and form monitoring, next-business-day support |
| Care Plus | $399 per month | Everything in Care, plus up to 3 hours of edits and improvements a month, Core Web Vitals and speed tuning, an uptime SLA with priority restore, a quarterly review and same-day support |
All three are month-to-month, and you keep the site if you cancel. The full scope of each is on our hosting and support page.
What moves any provider's quote up or down: the hours of human time included, the response time promised, the complexity of the site and whether premium plugin or theme licenses are bundled in.
Be equally clear about what a plan does not cover. New pages, new features, redesigns and fresh copywriting are usually projects, quoted separately. Outages at a third party, such as a payment processor or booking tool, are outside any web host's control, though a good provider will tell you quickly and help you work around them. Ask for these boundaries in writing, so a surprise invoice never arrives with your monthly one.
The contract terms to refuse
The price is negotiable. Some terms should not be.
- Your domain registered in the agency's name. ICANN, which coordinates the domain name system, advises against listing website designers, hosting providers or other third parties as the registrant of your domain. The registrant is the holder. Make sure it is you.
- No copy of your code or backups unless you stay. You should be able to download a full backup at any time, without a fee.
- Backups stored only on the same server as the site. One failure takes out both.
- Long auto-renewing terms with exit fees. A care plan should earn its renewal every month.
- "Unlimited small changes" with no definition. Unlimited usually means unmeasured, which means disputed. Ask for hours.
- Fees to hand over access. The logins to your own hosting, analytics and domain are yours.
A checklist before you sign
| Ask | Good answer | Red flag |
|---|---|---|
| Whose name is the domain registered in? | Yours, with your own login | "We handle all that" |
| Can I download a full backup today? | Yes, at any time | Only on request, for a fee |
| When was a restore last tested? | A date and what was restored | "Backups run automatically" |
| How fast are critical security updates applied? | A stated window, in writing | No commitment |
| What counts as an edit, and how many hours are included? | A written definition and a number | "Small changes are covered" |
| What happens when I leave? | Code, data and accounts handed over | Exit fees or silence |
Ask every provider the same six questions, and compare annual cost only after the answers line up. A year of a cheaper plan that cannot restore your site is not cheaper.
How to compare quotes in four steps
- List what your site does. Pages only, or also forms, bookings, payments, logins or integrations.
- Decide how much human time you need. Most sites need a little every month and a lot occasionally, so check how extra hours are priced.
- Run the checklist. Put each provider's answers side by side.
- Price the year, then the exit. Annual cost, plus what it would take to move away if the relationship ends.
When a care plan isn't worth it
- You are on a hosted builder. Platforms such as Squarespace or Wix include hosting and SSL in their subscription. A separate care plan only makes sense if you need regular human edits. Our comparison of custom websites and website builders covers that trade-off.
- You have a developer on staff. Pay for managed hosting alone and keep the human time in-house.
- The site rarely changes and a day offline would not hurt. A hosting-only plan with tested backups is enough.
- The plan has no restore tests and no response times. Then it is a hosting bill with a support email attached, and you can buy that for less.
If you are weighing a plan for a site OWNIT built or one built elsewhere, our team can review it on a free 30-minute strategy call and tell you which hosting and support plan, if any, fits. Until December 31, 2026, OWNIT also offers a free website audit covering speed, mobile use, search visibility and how easily visitors can call or book, a useful baseline before you sign anything.
Frequently asked questions
How much does a website maintenance plan cost per month?
It depends on how much human time is included and how complex the site is. As a reference, OWNIT's published plans cost $30 per month for managed hosting, $150 for hosting plus monthly edits and updates, and $399 for more hours, speed tuning and same-day support. Compare quotes by scope, response times and exit terms, not headline price.
What should be included in website maintenance?
At minimum: managed hosting, automatic SSL renewal, daily off-site backups with tested restores, security and software updates, uptime monitoring with alerts, and a defined number of hours for edits with a stated response time. For stores and booking sites, add checks on forms, payments and integrations, because those break quietly and cost sales.
Do I need a maintenance plan for a WordPress site?
If nobody on your team applies updates promptly, yes. Patchstack counted 11,334 new vulnerabilities in the WordPress ecosystem in 2025, 91% of them in plugins, and found that roughly half of high-impact vulnerabilities were exploited within 24 hours. Someone has to apply updates quickly and test that the site still works afterward.
Can I cancel a website care plan and keep my website?
You should be able to. A fair plan is month-to-month, keeps the domain registered in your name and lets you download your code and backups at any time. OWNIT's plans work that way: cancel whenever you like and keep the site. If a contract charges exit or handover fees, treat that as a warning sign.
Sources
- Back Up Business Data (opens in a new tab)
- Do You Have a Domain Name? Here's What You Need to Know (opens in a new tab)
- State of WordPress Security In 2026 (opens in a new tab)
- Ballot SC081v3: Introduce Schedule of Reducing Validity and Data Reuse Periods (opens in a new tab)
- Decreasing Certificate Lifetimes to 45 Days (opens in a new tab)
Written by The OWNIT Editorial Desk and reviewed against public sources. General information, not legal or financial advice. Spotted an error? Email hello@ownit24.com and we will correct it.