The retainer that pays for how the site was built.
A website maintenance retainer runs anywhere from $50 to a few thousand dollars a month, and most small-business sites sit in the low-to-mid part of that range for a fairly predictable list of chores: apply updates, patch security holes, run backups, chase down the plugin conflict that broke the contact form, and try to claw back the speed the site lost along the way. Here's the part most buying guides skip: a large share of that bill exists because of how the site was built, not because upkeep is inherently expensive. On a managed, database-free platform like Devani Hosting, most of that retainer work never becomes a line item, because there's no plugin stack to patch and nothing to query. A retainer still earns its keep in places, and I'll be straight about where.
What a maintenance service actually does all month.
Strip away the sales language and every reputable maintenance plan is doing some subset of the same jobs. This is the full list, so you can price a quote against real work instead of a vague monthly number.
- Software, CMS, and plugin updates. Core platform, theme, and every plugin get reviewed and applied on a cadence. On a plugin CMS this is the single biggest recurring task, because a dozen independently maintained pieces all ship updates on their own schedule and any one of them can break the others.
- Security monitoring and patching. Malware scans, an SSL certificate kept valid, a firewall or web application firewall on the heavier plans, and a response plan for when something gets in. Most break-ins trace to an out-of-date plugin or theme, not the core software.
- Backups and disaster recovery. Regular off-site backups, and, the part people forget to check, a tested restore. A backup you've never restored is a hope, not a safety net.
- Performance and Core Web Vitals. Load-speed reviews, image compression, caching configuration, and the ongoing work of keeping largest contentful paint and layout shift inside Google's thresholds as content and plugins pile up.
- Uptime monitoring. Automated checks that the site is actually responding, with an alert when it isn't, so an outage gets caught before a customer emails you about it.
- Broken links and bug fixes. Dead links, a form that stopped submitting, a layout that broke in a browser update. Small individually, steady in aggregate.
- Content updates. Text edits, image swaps, a new page, a product change. This is the work owners most often want and the one part that is genuinely about the site rather than the software running it.
- Reporting, SEO, and accessibility checks. Analytics reviews for odd traffic dips, rank tracking, and periodic accessibility passes for alt text, contrast, and keyboard navigation. Often billed as optional extras on top of the base plan.
What a managed platform absorbs before it can become a bill.
Devani Hosting is the managed side of Devani, a free, open-source, database-free CMS. The point of a managed platform is that the routine items above are handled at the platform level, so they never land on your plate as a monthly task or a retainer line.
Updates stay current
The platform is kept up to date for you on the managed tier. And because there's no plugin marketplace and no plugin stack, the update surface is a fraction of a typical WordPress install: nothing bolted on to go stale, conflict, or need version-juggling every month.
Security surface is smaller
The most common WordPress break-in is an outdated plugin nobody patched. With no plugins to leave stale, that whole class of vulnerability doesn't exist here. Managed servers and automatic SSL cover the rest, so certificate expiry never becomes a 2am scramble.
Backups and rollback built in
Every change snapshots automatically with one-click rollback, and the managed platform keeps automatic backups. Undoing a bad edit is a single click rather than a support ticket and a restore fee.
Fast without tuning
Because the whole site is plain files with no database to query, served statically from a CDN with images auto-compressed to WebP, it is fast by default. Around 100/100 Lighthouse and sub-second largest contentful paint out of the box, with no caching plugin to configure or re-configure after the next update.
Uptime and SSL managed
Managed servers, automatic SSL renewal, custom domains, and a global media CDN are part of the platform, not a checklist you own. The infrastructure layer of a maintenance plan is simply included.
You still edit it yourself
Content changes are the one job that should stay with you, and here they're easy. Edit in the visual builder, or connect your own ChatGPT or Claude account and have it make the change for you. A free subdomain goes live in under a minute on the free tier.
Most of a maintenance retainer isn't paying for care of your website. It's paying for the upkeep of the plugins holding it together.
Two different jobs sold under one word.
The buying guides blur this, and it costs people money. "Maintenance" is the technical upkeep: updates, patches, backups, performance, uptime. "Management" is the creative and strategic work: writing content, planning campaigns, redesigning a page, improving conversion. They get bundled into one monthly figure, so an owner who really just needs someone to publish a monthly blog post ends up paying for a full technical retainer they wouldn't need if the underlying platform didn't demand constant tending.
The useful question before you buy anything is which half you actually need. If the honest answer is "I want to change my own content and never think about servers, plugins, or security patches again," then most of a maintenance retainer is solving a problem you can avoid rather than one you have to pay down every month. That's the case for a managed, database-free platform. It removes the maintenance half so the only recurring work left is the management half, the part that was ever really about your business.
A maintenance retainer, or no maintenance to retain.
Not a fair fight to pretend one option has zero tradeoffs, so here is the real one. A WordPress site on a maintenance plan against a Devani-built site on the managed platform.
WordPress on a retainer
Endlessly capable, and it needs the retainer to stay that way.
- ✓ Deepest plugin ecosystem, so almost any niche function has an off-the-shelf answer
- ✓ A huge market of agencies and freelancers competing for the maintenance work
- × The retainer exists because updates, security, backups, and plugin conflicts are genuinely ongoing work
- × Speed is a range, and holding it takes continuous tuning against the platform's defaults
Devani Hosting
The maintenance half handled at the platform, not billed monthly.
- ✓ No plugin stack to patch, so the biggest recurring maintenance task simply doesn't exist
- ✓ Automatic SSL, automatic backups, one-click rollback, and updates kept current on the managed tier
- ✓ Database-free and CDN-served, so it is fast out of the box with a free tier live in under a minute
- × The managed platform hosts Devani-built sites, not an existing WordPress install you point DNS at; that is a rebuild, not a lift-and-shift
That last point is the real limit, and worth sitting with. If you already run a mature WordPress site with a load-bearing plugin, a membership system, deep commerce, or a custom integration with no equivalent here, none of this is a one-click move, and for genuinely complex builds staying on WordPress with a good maintenance partner is the right call. Where this changes the math is the very large middle of the market: brochure sites, service businesses, portfolios, small stores, the sites that are paying a retainer mostly to keep the machinery running rather than because the machinery does anything unusual.
Reading a quote line by line.
Maintenance pricing spans a wide band: rough figures I see are $50 to $200 a month for a basic plan, $200 to $500 for a comprehensive one, and agency retainers running well past that for a dedicated team. Here is what each recurring task is actually for, and whether it survives a move to a managed platform.
| Recurring task | On a plugin CMS retainer | On a managed database-free platform |
|---|---|---|
| Core, theme, plugin updates | The largest monthly line, and the one that breaks things | No plugin stack to patch; platform kept current for you |
| Security scans and patching | Ongoing, priced by how much is bolted on | Smaller surface, no stale-plugin attack vector |
| Backups and restore testing | Billed, sometimes with a fee to actually restore | Automatic backups plus one-click rollback, included |
| Performance and caching | Continuous tuning to hold a decent speed score | Fast by default; nothing to tune |
| SSL and uptime | Monitored, sometimes an add-on | Automatic SSL and managed servers, included |
| Content edits | Billed hourly or by request on most plans | You do them yourself in the builder, or via your own AI |
If you want the full arithmetic rather than the shape of it, our breakdown of website maintenance cost works through the numbers for each site size. The pattern that falls out of it is consistent: the recurring items that dominate a WordPress retainer are the ones a database-free platform removes rather than manages, and content editing, the one job worth keeping, is the one you were probably going to want control over anyway.
Two of those line items deserve their own reading, because they're where retainers quietly balloon. The update-and-conflict treadmill is covered honestly in our look at WordPress maintenance, and the security half, the outdated-plugin break-ins that a scan is meant to catch, in the rundown of common WordPress security issues you inherit with any install. If your current pain is speed rather than security, the reasons a WordPress site gets slow explain why performance keeps reappearing on the invoice. And if you're on managed WordPress hosting already and the renewal or overage bill is what pushed you to read this, the practical path of migrating off WP Engine is a useful next step.
What is included in website maintenance services?
Typically: software and plugin updates, security monitoring and patching, an SSL certificate, regular backups with a tested restore, performance and Core Web Vitals reviews, uptime monitoring, broken-link and bug fixes, and content edits. Reporting, SEO, and accessibility work are usually optional extras on top. The exact mix varies by plan, which is why getting the scope in writing matters more than the headline price.
How much do website maintenance services cost per month?
Roughly $50 to $200 a month for a basic plan covering updates, backups, and security, and $200 to $500 for a comprehensive plan that adds performance work and content edits. Agency retainers with a dedicated team run well past that. DIY can be under $100 in tooling, at the cost of your time and the risk of an expensive emergency fix when something breaks after an update.
How often should a website be maintained?
Security scans and backups should run daily or weekly, ideally automated. Updates, broken-link checks, and performance reviews are a monthly job at minimum. SEO and accessibility reviews fit a quarterly cadence. The automatable parts really should be automated; the manual review is where a person's judgment earns its place. On a managed platform the automated layer is simply built in.
Can I maintain my own website?
You can, and for a small site it is a reasonable way to save money, but it takes real time and some technical comfort, and the downside is lumpy: a botched update or a security breach can cost more to fix than a year of maintenance would have. The honest split is that content edits are very doable yourself, while server-level updates and security patching are the parts most owners would rather not own. Choosing a platform where that second half is handled for you is how you keep the first half without the second.
What happens if you don't maintain your website?
It degrades quietly, then loudly. Unpatched software becomes the door an attacker walks through, an expired SSL certificate throws browser warnings that scare off visitors, plugins drift out of sync until something breaks, and speed and search rankings slide. I have seen sites go two years untouched, and the eventual fix was a full day of triage rather than the ten minutes it would have taken along the way. Neglect isn't free; it just defers the bill and adds interest.
Do I still need maintenance on a managed platform?
Much less of it. The technical upkeep, updates, security patching, backups, SSL, and performance, is handled at the platform level, and with no plugin stack the largest recurring task is gone entirely. What remains is content: keeping your pages current, which you do yourself. You aren't eliminating all care of the site, you're removing the half that only existed to keep the software running.
Website maintenance services are legitimate work, and for a complex site with load-bearing plugins or deep commerce, a good maintenance partner is money well spent. But a lot of the market is paying a monthly retainer to hold together a machine that didn't need to be that complicated for what the site actually does. If your site is closer to that end, the cheapest maintenance is the maintenance you never have to buy, because the platform absorbed it before it became a line item.
Stop maintaining the machinery, keep the website.
Spin up a free site on the managed platform, live in under a minute, and see what a month looks like with nothing to patch. No card, no retainer.