Launch day feels like a finish line. The new site goes live, everyone celebrates, the invoice gets paid, and the project closes. But a website isn’t a thing you finish; it’s a thing you run. So the honest question, the one that rarely comes up before launch, is this: who maintains a WordPress website after the confetti settles and the project team moves on? For a surprising number of businesses, the real answer is “nobody, until something breaks.”
The gap nobody plans for
Almost every website project is scoped as a build. There’s a designer, maybe a developer, a timeline, and a launch. What’s almost never scoped is the part that lasts far longer than the build: the ongoing upkeep that keeps the finished site healthy, secure, and working. That work doesn’t announce itself. It accumulates quietly, and then one day it’s overdue all at once.
The result is a gap. The people who built the site were never contracted to maintain it, and often can’t, a freelancer’s engagement ends, an agency’s scope was the launch, the in-house person who “handled the website” changes roles. The site keeps serving customers, so everyone assumes it’s fine. Meanwhile the updates pile up, the backups may or may not be running, and the security is frozen at whatever it was on launch day, which is exactly how a healthy site slowly becomes a vulnerable one.
What actually needs doing, forever
Maintenance sounds vague until you list it, at which point it’s obviously a real job. A live WordPress site needs, on a recurring basis:
- Updates, applied and checked. WordPress itself, plugins, and themes ship fixes constantly. They have to be applied promptly, and then verified, because an update can quietly break a form or a layout. We cover why that verification matters in do WordPress updates break sites.
- Security, kept current. A firewall, login protection, malware scanning, and actual cleanup if something gets through, none of which is set-and-forget.
- Backups that work. Automated, off-site, and monitored, so a restore is available and proven before you ever need it.
- Monitoring. Someone or something noticing the site is down or slow, ideally before a customer does.
The full monthly rundown is in our WordPress maintenance checklist. None of it is glamorous. All of it is the difference between a site that keeps working and one that degrades until it fails.
Who ends up doing it (and why that goes wrong)
When no one is formally responsible, the work defaults to whoever is nearest, and none of the usual candidates are a good fit.
Often it’s the owner, at night, googling error messages and hoping the update they just clicked doesn’t take the site down. Sometimes it’s a staffer who is vaguely “good with computers” but has a real job that isn’t this, so maintenance is what they do when they have a spare moment, which is rarely. And frequently it’s nobody: the site runs on autopilot until a hack, an outage, or a broken checkout forces an emergency, at which point the cost of neglect arrives all at once and usually at the worst time.
The through-line is that maintenance done by default, by whoever’s closest, is maintenance done inconsistently. And inconsistency is the exact failure mode that upkeep is supposed to prevent. The updates don’t get skipped because someone decided they didn’t matter; they get skipped because everyone was busy.
The version that actually holds: an owner by design
The fix isn’t heroics; it’s assigning the job to someone whose only job is doing it well, and having it happen on a schedule regardless of anyone’s week. That’s the model we run. When your site is on managed hosting with care included, the answer to “who maintains it” is settled before you ever have to ask:
- Updates are applied automatically, and every time we update your site we verify it still looks and works right with before-and-after checks.
- Security runs by default: a layered firewall and a live list of known attackers stop bad traffic before it reaches you, with malware scanning and removal, breached-password login defense, and blocking of AI bots that copy your content behind them.
- Backups run 3 times a day, off-site, monitored, and locked for 90 days against changes or deletion, even by ransomware, and uptime monitoring means a problem gets caught by us, not by an annoyed customer.
- When you do have a question, there’s support any hour, by email or from your dashboard, with a first reply within 15 minutes.
That’s the whole checklist that a genuinely managed plan should meet, and it’s the standard we hold ourselves to, laid out in full in what managed WordPress hosting should include.
Why this is the calmer, cheaper answer
Handing maintenance to a standing team isn’t just tidier; it’s usually the better deal once you count honestly. The owner-at-night approach has a real cost in hours and stress, and a much larger one on the day something slips through. Assigning it to a “good with computers” staffer costs you their actual work and still leaves gaps when they’re out. A flat, care-included plan replaces both with a single predictable number and coverage that doesn’t depend on anyone remembering.
Our pricing reflects that simplicity: a flat $29.99 a month per site for managed WordPress, and a shared WooCommerce store plan starting at $39.99 a month, billed monthly or annually, cancel anytime, with no visit metering and no renewal spike. One line item, and the “who maintains it” question is answered for good.
Decide it now, not during the outage
The best time to name who maintains your site is before you need them, not in the middle of the emergency that finally forces the question. If your last launch never came with that answer, we’re happy to be it, and moving an existing site to us is free. See what’s covered on our hosting page, or talk to us and we’ll take the upkeep off your plate for good.