What website maintenance actually costs, and which invoice you end up with.
The bill lands in one of three brackets. Do the upkeep yourself and it is roughly $50 to $150 a year in hosting and a plugin license or two, paid mostly in unpredictable hours rather than dollars. Put a maintenance service or retainer on it and a typical small business site is $50 to $500 a month, with ecommerce and high-traffic sites running past $2,000. Or move to a managed platform where the hosting and the CMS are one system, and a large chunk of that monthly work never becomes a line item at all, because there is simply less to maintain. Same website, three very different invoices. The honest answer to "how much does website maintenance cost" depends entirely on which path you are on and how complicated your site actually is.
| Maintenance path | What the bill covers | Typical cost per year |
|---|---|---|
| Do it yourself | Hosting and a plugin license or two, paid mostly in your own hours | $200 to $600 |
| Service or retainer, small business | $50 to $500 a month for updates, backups, monitoring, and a human on call | $600 to $6,000 |
| Agency retainer, ecommerce or high-traffic | $500 to $2,500 a month, revenue-grade response times and remediation | $6,000 to $30,000 |
| Managed platform (Devani Hosting) | Hosting and CMS as one system, no separate plugin stack to patch | Free tier, or a low plan for custom domains and multiple sites |
Those are not four markups on the same product. They are different starting points, and the sticker figure hides where the real money goes. What follows is what each path actually costs once everything is counted, and where that last row comes from, because a managed platform does not automate the maintenance so much as remove most of the reasons it exists.
The work hiding inside the word maintenance.
Before the dollar figures make sense, it helps to name the actual jobs, because a lot of people underestimate what is in the bucket.
- Core, plugin, and theme updates. Every WordPress plugin you install is software someone else maintains, and it needs updating on its own schedule, often weekly. Skip it long enough and you are running known security holes. What that update cycle actually takes, month over month, is worth reading in full.
- Backups, tested ones. Not just a backup existing somewhere, but one you have actually confirmed restores cleanly. Most people find out theirs does not work at the worst possible moment.
- Security monitoring. Malware scanning, firewall rules, brute-force login protection, and the occasional cleanup when something gets through anyway. Most of this traces back to where WordPress security risk actually concentrates, which is rarely core software itself.
- Uptime monitoring. And the response when a site goes down at 2am.
- Performance tuning. Caching plugins, image optimization, database cleanup. These degrade over time as content and plugins pile up, which is why a WordPress site slows down even when nobody changed anything on purpose.
- Small content edits and compatibility testing. Swapping a headline, fixing a typo, updating a price, then checking that a routine plugin update did not quietly break a theme, a form, or checkout.
That list is why maintenance is not one task. It is a recurring set of small jobs that never fully stops as long as the site is live. Now the three paths, in order of who carries the hours.
Doing it yourself, cheapest in dollars, priciest in time.
If you are comfortable in the WordPress dashboard, DIY maintenance for a simple brochure site runs maybe $50 to $150 a year in direct costs: domain, basic hosting, maybe one premium plugin license, plus real hours, figure two to six a month for a small site, more if you are slow at it or something breaks.
The honest problem with DIY is not the money, it is that the hours are unpredictable. A month where every plugin update goes cleanly costs you twenty minutes. A month where an update conflicts with your theme and takes down your contact form costs you an afternoon, and that afternoon usually is not the afternoon you had free. I have watched business owners lose entire weekends to a plugin conflict they did not cause and cannot diagnose, because nothing about WordPress tells you which of forty installed plugins is the problem. DIY works well for people already comfortable with a CMS, running a simple site, who genuinely do not mind the occasional lost evening. It works badly for anyone who resents the time, because that resentment compounds every month the site stays live.
A clean month costs you twenty minutes; a bad month costs you an afternoon, and it is never the afternoon you had free.
A maintenance service or retainer, predictability you can budget for.
This is what most small businesses actually end up paying for, and it is a legitimate, well-priced option for a lot of sites. A maintenance service for a straightforward small business WordPress site typically runs $50 to $500 a month depending on scope. On the low end you are usually getting core and plugin updates, a backup schedule, and basic uptime monitoring, done for you but with limited hand-holding. At the higher end, $200 to $500, you get faster response times, a real human who answers when something breaks, security monitoring with actual remediation rather than a scan report emailed to you, and a modest allowance of small content edits each month.
Freelancers doing the same work typically bill $35 to $150 an hour rather than a flat retainer, which can be cheaper if your site rarely needs attention and more expensive if something goes wrong and eats billable hours. Agencies running maintenance for ecommerce sites, high-traffic sites, or anything with custom development charge more, often $500 to $2,500 a month or beyond, because the stakes are higher: a checkout outage costs real revenue every hour it is down, so the retainer reflects that risk, not just the labor. What you are buying at this price point is predictability. You know roughly what you will spend each month, and noticing that a security patch shipped last Tuesday is no longer your job. The honest limitation is that a retainer does not make the underlying work disappear, it moves the labor from you to someone else, and you are paying for their time on top of a hosting bill you carry separately. If your maintenance company also resells hosting, ask directly what part of the invoice is hosting and what part is labor.
Path 3: a platform where most of the work does not exist
The third path is not "the same maintenance, but automated." It is a genuinely different starting point: a CMS and its hosting built as one system, with no separate marketplace of third-party plugins each running on its own update cycle. If there is no plugin stack to begin with, most of what a retainer bills for, patching plugins, resolving plugin conflicts, watching for the security holes those plugins introduce, is not a recurring task anymore, because there is nothing separate to patch. It removes the plugin-patching treadmill, the "which of forty plugins broke the site" debugging, and the need to shop for backup, security, and CDN tools and wire them together. It does not remove the need for someone to write your content, choose your design, or do the marketing and SEO your business needs. Maintenance in the traditional sense shrinks; the work of actually running a business online does not.
I will say upfront this is a Devani product, so weigh it accordingly. What changes the math here is the free tier: Devani Hosting puts a live site on a free yoursite.devani.io subdomain in under a minute, no card, no trial clock, before any of the numbers above come into play. Servers, SSL, a CDN, backups, and updates are handled as part of that free tier, not gated behind a paid plan. Paid tiers only add what a bigger operation actually needs: custom domains, more sites, more CDN storage, and agency or white-label tooling for anyone running several client sites from one dashboard instead of paying per site as a roster grows. Native AI editing comes at no extra cost too: connect your own ChatGPT or Claude account, no separate plugin or MCP server to configure, and ask it to edit content or layout directly, with every change snapshotted so it can be rolled back.
Here is the honest limit, and it matters more than the price: Devani Hosting hosts sites built on Devani. It is not a place to point an existing WordPress install's DNS and expect it to just work. If you have a WordPress site today with years of content, moving to Devani means rebuilding on it, not migrating the install. That rebuild is realistic, export your WordPress content and have a connected ChatGPT or Claude account recreate the pages and posts through Devani's native AI editing, but it is a rebuild, and it belongs in the decision the same way switching from a retainer to DIY factors in hours, a tradeoff covered in more depth in what actually happens when you leave WordPress. This fits people starting a new site, or willing to rebuild an existing one, not everyone who just wants a cheaper host for the WordPress site they already have. The CMS itself is also free and open-source if you would rather run your own server on ordinary $5-a-month hosting with opt-in updates; Devani Hosting is the optional, managed version of that same system.
What actually moves the price on every one of them.
A few factors push maintenance cost up no matter which path you land on.
Ecommerce and checkout
Payment processing, inventory sync, and cart tooling all add moving parts that need watching, and a broken checkout costs revenue by the hour. That is why ecommerce maintenance is priced higher on every path.
Custom code
A theme built from a template with a handful of plugins is cheap to maintain. Custom PHP, a bespoke integration, or a heavily modified theme needs someone who understands that specific code, which usually means a developer rate.
Plugin count
Every plugin is another update cycle and another potential conflict. A ten-plugin site is meaningfully cheaper to maintain than a forty-plugin one, even if they look identical to a visitor.
Traffic and hosting tier
Higher traffic needs a hosting plan that can handle it, and that cost sits next to, not inside, the maintenance bill, though the two get bundled in a lot of agency invoices.
Response-time expectations
A retainer that promises same-day fixes costs more than one promising "within a week," for the obvious reason that guaranteed fast turnaround means someone is on call for you.
Hidden costs that rarely make the initial pitch.
- Emergency fixes outside scope. Most retainers cover routine maintenance, not "the site got hacked and needs a full cleanup," which is often billed separately and can run several hundred dollars on its own.
- Premium plugin and theme license renewals. These are usually your cost, not the maintenance company's, and a handful of premium plugins can run $200 to $600 a year on top of whatever you are paying for labor.
- The abandoned freelancer. One who goes quiet leaves you scrambling to find someone new, who then spends billable hours just learning your site before they can fix anything.
- Migration costs if you switch providers. Moving a site between hosts or maintenance providers is not always included, and a rushed migration is where a lot of avoidable downtime happens.
The annual number, and how to choose against it.
Monthly figures are easier to compare on paper, but the real decision shows up clearer over a year, because that is when the unpredictable months average out. A simple DIY site lands around $200 to $600 a year all in, plus your own time, which does not show up on an invoice but is real. A small business on a $50 to $500 a month retainer is looking at roughly $600 to $6,000 a year, and most straightforward brochure and small-catalog sites land in the lower half of that band. Ecommerce or corporate sites on agency retainers of $500 to $2,500 a month can run $6,000 to $30,000 a year, which sounds steep until you weigh it against an hour of checkout downtime on a site doing real revenue. Looking at it this way also sizes up the platform path honestly: it does not erase the annual number, it changes what is inside it, less spent on patching a plugin stack, more of the budget going toward content, design, and marketing instead of keeping the lights on.
If your site is simple, you are comfortable in a CMS, and you do not mind the occasional lost afternoon, DIY is genuinely fine and the cheapest option in dollars. If the site supports real revenue and needs to stay on WordPress as it is, a retainer in the $50 to $500 range buys a human on call for most small businesses, and ecommerce or high-traffic sites should expect to pay more for the same reason insurance costs more on a bigger asset. But if the actual goal is never thinking about plugin updates again, a retainer only moves that labor onto someone else's invoice; the platform path removes the plugin stack itself, and if you are starting fresh, or open to rebuilding, it is worth a serious look specifically because it deletes a category of recurring cost rather than outsourcing it. None of these paths is wrong. The mistake is picking one without knowing what you are actually paying for, in dollars or in hours, and being surprised later by which one it turned out to be.
How much does website maintenance cost per month?
For a straightforward small business WordPress site, a maintenance service or retainer typically runs $50 to $500 a month depending on scope and response time. Ecommerce and high-traffic sites on agency retainers run $500 to $2,500 a month or beyond. Doing it yourself is cheaper in dollars, roughly $50 to $150 a year in direct costs, but you pay in unpredictable hours instead. A managed platform where hosting and the CMS are one system removes most of the recurring plugin work, so a large part of that monthly bill never forms in the first place.
What is included in website maintenance?
Core, plugin, and theme updates; tested backups; security monitoring and cleanup; uptime monitoring and the 2am response; performance tuning as content and plugins pile up; small content edits; and compatibility testing after every update, because a routine-looking update can break a theme, a form, or checkout without warning. It is not one task, it is a recurring set of small jobs that never fully stops while the site is live.
How much should I pay someone to maintain my website?
For a straightforward small business site, $50 to $500 a month is the normal range, with the low end covering updates, backups, and basic monitoring, and the higher end adding faster response, real remediation, and a few content edits a month. Freelancers often bill $35 to $150 an hour instead, cheaper if the site rarely needs attention. Before signing, ask what portion of the invoice is hosting versus labor, because the two get bundled more often than they should.
Can you avoid website maintenance costs?
You cannot avoid the work of running a site, someone still writes content and does the marketing, but you can remove a whole category of it. On a managed platform with no third-party plugin marketplace, there is no plugin stack to patch, no plugin conflicts to debug, and no separate backup, security, and CDN tools to wire together. Devani Hosting handles servers, SSL, backups, and updates on a free tier, so the plugin-patching part of maintenance stops being a recurring bill. The tradeoff is that it hosts sites built on Devani, not an existing WordPress install you point DNS at.
See the maintenance load before you sign another renewal.
If the platform path sounds like it fits, Devani Hosting has a free tier, so you can put a real site on it and see what the upkeep actually looks like before spending anything. No pressure to move the site you already have, just worth knowing the option exists.