Must-haves
- Updates, tested. Software, plugins and themes updated on a schedule, with a check that nothing broke.
- Off-site backups. Stored somewhere other than your web server, with a tested restore.
- Uptime monitoring. Someone gets an alert when your site goes down.
- Security scanning and a plan if something is found.
- Renewal checks for your domain and SSL certificate.
- A monthly report in plain English.
Nice to have
- Time each month for small content changes.
- Speed checks.
- Form and email delivery tests.
Red flags
- You do not get admin access to your own site.
- Your domain is registered in the provider’s name.
- Long contracts with no way out.
- Vague promises like "fully secure".
See our care plans.




