A known baseline
The website is stable enough to maintain, or has completed an agreed recovery, Audit or Delivery phase.
WordPress Maintenance & Support
Maintenance protects a known operating state. It is not the first step for an actively broken site or an unknown technical root cause.
The website is stable enough to maintain, or has completed an agreed recovery, Audit or Delivery phase.
The team needs controlled update cycles, verification, reporting and defined support—not an undefined development retainer.
Forms, booking, checkout, publishing, tracking or other named journeys need repeatable checks after change.
| Starting profile | One-time onboarding | Typical fit |
|---|---|---|
| Stable standard site | $500 USD | Ready access and backups, a standard dependency surface and a known stable baseline. |
| Stable complex site | $1,000 USD | Booking, commerce, integrations, custom code, several critical workflows or server coordination. |
| Stable high-complexity scope | $1,500 USD | Several environments, complex dependencies, incomplete documentation or a bounded multisite scope. |
Typical onboarding takes 2–3 working days after access readiness. It establishes an inventory, safety path and documented maintenance baseline. A small bounded readiness correction may be included; active instability, a broken critical workflow or material remediation receives a separate quote.
Compare the same recurring maintenance baseline at two levels of site complexity and operational responsibility.
| Dimension | Ongoing Maintenance — $300 USD per month | Broader-scope Ongoing Maintenance — $500 USD per month |
|---|---|---|
| Best fit | One accepted stable WordPress site with a standard stack, managed hosting, a small number of critical workflows, moderate update complexity and a low change frequency. | One accepted stable WordPress site with greater operational responsibility, such as booking, commerce, integrations, custom code, page-builder risk, several critical workflows, higher business criticality or regular provider coordination. |
| Shared recurring baseline | Monitoring and backup oversight, controlled updates, validation of agreed critical workflows, human triage and a human-readable monthly report. | The same recurring baseline. |
| Controlled cadence | One controlled human review, update and validation cycle each week, supported by the existing automated monitoring and detection layer. | The same weekly controlled cycle, with the deeper validation and coordination required by the more complex site. |
| Main difference | Standard testing and coordination appropriate to a known stable baseline. | Deeper staging-first validation, dependency awareness and coordination appropriate to the more complex site. |
| When Custom is needed | Route to Custom when the responsibility exceeds a stable single-site baseline. | Route to Custom for multiple sites, multisite or portfolio governance, significant Linux or server responsibility, high change frequency, custom-application responsibility, active third-party delivery teams or after-hours coverage. |
Both plans begin only after an accepted stable baseline. Critical security issues are assessed promptly within covered business hours, without a guaranteed resolution time. Continuous Improvement is separate from base Maintenance. Work that becomes Recovery, Audit or Delivery receives a separate scope. Custom Maintenance can include coordination with third-party teams and vendors.
Check available updates, compatibility information, public maintenance signals, recent incidents and planned business changes.
Confirm backup and recovery readiness, use staging where appropriate and define the workflows that must pass.
Apply agreed updates or small changes in controlled batches instead of treating every available update as automatically safe.
Check the named customer, editorial and measurement workflows affected by the cycle.
Record completed work, observations, residual risks and the next planned review.
Move recovery, redesign, migration or larger engineering work into a separately approved scope.
Core, theme, plugin and page-builder update review, compatibility checks and controlled releases.
Verification that agreed backups, staging and rollback paths remain usable before higher-risk change.
Repeatable checks for forms, booking, checkout, publishing, analytics or other agreed business journeys.
Public availability and maintenance-signal review, change records, observations and risk escalation.
Linux / Server Administration and hosting maintenance only when responsibility is explicitly included.
A clearly limited scope for small support or improvement work, with larger changes reviewed separately.
The two modes may coexist in one recurring agreement, but their scope, priorities and escalation boundary must remain visible.
Protect an accepted baseline through controlled updates, compatibility review, recovery readiness, critical-workflow checks, reporting and risk escalation.
Use a separately scoped and approved backlog for small purposeful enhancements. Larger features, redesign, refactoring or migration remain separate Delivery work.
A real proposal should include a coverage matrix showing sites, environments, dependencies, workflows, cadence and responsibilities, plus a representative report structure for completed work, observations, residual risk and next actions. Any example is prepared from verified operating practice rather than presented as a completed client report.
Maintenance does not require replacing a working theme, editor or page builder. The goal is to stabilize and improve the tools the team already understands, manage compatibility deliberately and recommend migration only when evidence justifies a separate decision.
| Route | Use it when | Primary outcome |
|---|---|---|
| Maintenance & Support | A known baseline needs controlled recurring care. | Update cycles, checks, reporting, defined support and escalation. |
| Update Recovery | A specific workflow is currently broken or unreliable. | Restore agreed critical workflows and establish a safer baseline. |
| Technical Audit | The cause, risk or remediation boundary is unclear. | Findings, likely root causes and a prioritized remediation backlog. |
| Modernization Delivery | A finite implementation outcome and acceptance boundary are clear. | Phased production change, validation, documentation and handover. |
The agreement should state what is checked, what is changed, when work is performed, how exceptions are escalated and which responsibilities remain with the client or third parties.
The published maintenance levels are selected or adjusted according to the number of sites, dependencies, workflows, environments, hosting responsibility and support boundary.
Redesign, new features, migration, major refactoring and other project work require separate evidence, scope and acceptance.
Round-the-clock incident response, guaranteed uptime or security, inherited defects, malware response and third-party fees are not included unless explicitly agreed.
Describe the current ownership model, critical workflows and recurring risk that support must control.
SunAuto is a custom continuous-improvement engagement with broader responsibilities than the two standard monthly plans; its scope and pricing are agreed separately.
WordPress project
Following consolidation, SunAuto continued as an ongoing engineering and continuous-improvement engagement covering content lifecycle, integrations, performance, imports, caching and governed releases.
Available service
PathToProject publishes controlled page-builder updates, compatibility work and ongoing improvement as a supported WordPress capability.
No. The site first needs an accepted, sufficiently stable baseline. When existing failures, unknown technical causes or a large change backlog make routine updates unsafe, start with Technical Audit, Update Recovery or a bounded Modernization Delivery phase.
The agreed cycle can include update and compatibility review, backup verification, staged changes where appropriate, critical-workflow checks, public monitoring, reporting and separately scoped small support or improvement work. The exact modules and cadence are defined during onboarding.
No by default. The offer does not imply round-the-clock incident response, unlimited change work, guaranteed uptime, guaranteed security or automatic responsibility for unknown inherited defects. Any response commitment or exceptional coverage must be explicitly scoped.
Yes, when it remains fit for purpose. Maintenance follows the preservation-first principle: stabilize and improve the tools the team already understands, then escalate replacement or migration only when evidence justifies a separate decision.
Ongoing Maintenance protects an accepted baseline through controlled updates, verification and reporting. Continuous Improvement uses a separately scoped and approved backlog to make small, purposeful changes. Larger features, redesign or migration remain separate Delivery work.
Yes. A proposal defines coverage for sites, environments, dependencies, workflows, cadence and responsibilities. A representative report structure can be reviewed during scoping.
Free public WordPress assessment
Start with the free WordPress Scan. It reviews publicly observable WordPress, response, delivery, maintenance and search signals, then gives you a bounded modernization assessment and a clearer next step. No admin access is required.
The Scan does not confirm private technical root causes. If the report surfaces a signal that matters and you are unsure what to do next, ask us to help interpret the evidence.