A WordPress care plan is a monthly retainer covering everything a live WordPress site needs to stay secure and online: plugin, theme and core updates (tested on staging before applying to live), weekly off-site encrypted backups via WPVivid, security hardening and Wordfence or Sucuri malware monitoring, 24/7 uptime monitoring via UptimeRobot or Better Uptime, monthly performance check, and a set allocation of small development changes each month. Problems are prevented rather than patched after the fact.
Who it's for
What's included
How the process works
Onboarding audit
I review your site's current state — pending updates, security posture, backup coverage, speed — and document what needs stabilising before regular care begins.
Stabilise
I fix outstanding issues, implement a reliable off-site backup schedule, harden security with Wordfence or Sucuri, and set up uptime monitoring so we start from a clean baseline.
Monthly care
Each month I run updates safely (staging test first), monitor uptime and malware scanning, handle your small changes, and check Core Web Vitals haven't degraded.
Reporting
You get a clear monthly report of what was done, what changed and anything worth watching — no jargon, just the practical state of your site.
Common questions
Care-plan clients get priority response. The 24/7 uptime monitoring (via UptimeRobot or Better Uptime) alerts me to downtime before most clients notice. For hacks, I restore from the most recent clean off-site backup via WPVivid, remove any remaining malware using Sucuri or Wordfence, identify the entry point (usually an outdated plugin with a known CVE), patch it, and harden security so it doesn't recur — typically resolved the same day. Clients not on a care plan who need emergency recovery should see my site rescue service.
Rarely — because I stage-test all updates before applying them to the live site. When an update causes a conflict (most commonly between WooCommerce and a payment gateway plugin after a major WooCommerce version release), I catch it on staging and resolve the conflict or hold the update until the conflicting plugin issues its own compatibility patch. If a live site is ever affected despite staging tests, I roll back from the same-day backup taken before the update batch ran.
Yes. Care plans are month-to-month with no minimum contract. You own your site and all credentials (hosting, WordPress, DNS) — you're never locked into anything. If you cancel, I'll give you a full export of your off-site backups and handover documentation covering your site's setup.
Everything from a simple brochure site with 10 pages to a WooCommerce store processing hundreds of orders daily. I match the plan to your site's complexity — a five-page business site doesn't need the same update testing overhead as a WooCommerce subscription store running Stripe Billing, WooCommerce Memberships, and a custom shipping API. The base care plan covers everything a brochure site needs; WooCommerce stores get staging-tested updates and checkout performance monitoring as standard.
Yes — every care plan includes a monthly allocation of small changes: updating page content, adding sections, adjusting layouts, fixing display issues or configuring new plugins. Changes that exceed the monthly allocation are quoted and approved separately. For larger new features or redesign work, I quote separately under a project scope. This model means you have a single point of contact for ongoing site performance, security and development — rather than separate vendors for maintenance and development.