Website Maintenance for Small Businesses: What a Care Plan Covers

What website maintenance should include (hosting, updates, backups, uptime, small edits), what it should not, and how to judge a care plan before you sign.

By the Mecverse team · 7 Oct 2026 · 6 min read

Illustration of a website in a browser with settings, backup and uptime cards

Key takeaways

  • A care plan should cover hosting, SSL, domain renewal, software updates, daily backups, uptime monitoring and a fixed number of small edits.
  • Backups only count if they are stored away from the server and someone has tested a restore.
  • The domain, hosting account and site files should be in your name, or easy to hand over on exit.
  • A good plan lists what is excluded as clearly as what is included, so new pages and redesigns are quoted before work starts.

Why small business websites quietly break

Most small business websites do not fail in a dramatic way. The SSL certificate expires and visitors see a browser warning. The domain lapses because the renewal email went to a developer who left two years ago. A plugin update breaks the contact form, and nobody notices until a customer mentions it on the phone.

A dental clinic in Pune or a CA firm in Ahmedabad does not have someone whose job is to watch the website. That is the gap a website maintenance plan (often sold in India as a website AMC) is meant to fill. The trouble is that "maintenance" means different things to different agencies. One plan includes hosting and daily backups. Another is a phone number you can call, billed monthly.

This guide sets out what a care plan should include, what it reasonably leaves out, and the questions that separate a real plan from a vague retainer.

What website maintenance should include

Think of maintenance as everything required to keep the site you already have online, secure and accurate. Seven items cover most of it.

1. Hosting and SSL

The server your site runs on, plus the HTTPS certificate. Certificates expire on a schedule and should renew automatically. If your provider ever asks you to "renew the SSL" by hand, ask why that is not automated.

2. Domain renewal

A lapsed domain takes the website and usually the business email down with it. A care plan should either renew the domain for you or alert you well before expiry. Either way, the domain must be registered in your business's name.

3. Software and security updates

If the site runs on WordPress or another CMS, the core, theme and plugins all need regular updates. Outdated plugins are a common way small sites get compromised. Updates should be applied by someone who checks the site still works afterwards, not switched on blindly.

4. Backups

Daily backups with a stated retention period (how many days you can go back). Retention matters because a hacked or broken site is often discovered days later, by which point last night's backup is already broken too.

5. Uptime monitoring

An automated check that pings the site every few minutes and alerts the provider when it stops responding. Without it, you find out your site is down when a customer tells you.

6. Small content edits

New prices, updated timings, a changed phone number, a festival notice. A plan should state how many of these it covers each month and how fast they get done.

7. Support

A named channel (email, WhatsApp, ticket) and a response time. "We are always available" is not a response time.

What maintenance should not include (and why that is fine)

A care plan at a small monthly fee cannot include unlimited development work. When a plan claims to, the usual result is that requests sit in a queue for weeks. Clear exclusions are a good sign, not a bad one.

These are normally quoted separately:

  • New pages or new sections
  • A redesign or a change of template
  • E-commerce, payments and booking systems
  • Custom development and integrations with other software
  • Content writing, photography and ongoing SEO campaigns

The line to draw: maintenance keeps what exists working and accurate. Anything that adds new capability is a project with its own quote.

RequestMaintenance or project?
Change the consultation fee on the services pageMaintenance (small edit)
Contact form stopped sending emailsMaintenance (something broke)
Add a page for a new branchProject (new page)
Let patients book slots onlineProject (booking system)
Site loads a browser security warningMaintenance (SSL)

Backups and uptime: the two items worth checking hardest

Almost every plan claims backups and monitoring. Few buyers check what that means in practice. Here is what to ask.

Backups

  1. Where are they stored? A backup on the same server as the site disappears with the server. Copies should live somewhere separate.
  2. What is in them? Files and the database. A WordPress backup without the database is missing every page and post.
  3. How far back can you go? Thirty days of daily backups is a sensible baseline for a small business site.
  4. When was a restore last tested? An untested backup is a hope, not a backup. Ask the provider how long a full restore takes.

Uptime

Uptime is usually quoted as a percentage. It helps to turn the percentage into minutes. In a 30-day month, 99.9% uptime still allows about 43 minutes of downtime, and 99% allows about 7 hours.

More useful than the percentage is the answer to: "When the monitor alerts you at 11pm on a Saturday, what happens?" You want a specific answer about who gets the alert and what they do.

Ownership and exit: settle this before you sign

The most expensive website problems in small businesses are not technical. They are about access. The previous developer registered the domain in their own name, or holds the only admin login, or will not hand over the files.

Before signing any care plan, confirm in writing:

  • The domain is registered in your business's name.
  • The content, images and text are yours.
  • At the end of the term you get the site files and a database export if you leave.
  • You know who holds the DNS settings, since moving email or the site later depends on them.

A provider who is confident in their service has no reason to make leaving hard. Lock-in clauses around the domain are a red flag.

What website maintenance costs in India

Prices vary a lot because scope varies a lot. Indian agencies commonly quote anywhere from ₹1,500 to ₹15,000 a month for website maintenance, and many charge for the original build on top. Compare plans by what they include, not by the monthly number.

For reference, here is how our own Mecverse website care plan is set up, since it shows the kind of detail you should expect any provider to put in writing:

  • Included: hosting and SSL, renewal of one .in or .com domain, security patching and plugin updates, daily backups with 30-day retention, uptime monitoring, up to 2 content updates a month, and email support.
  • Quoted separately: new pages, redesigns, e-commerce and booking, custom development, AI assistant setup and usage, content writing, photography and SEO campaigns.
  • Price: a launch rate of ₹499 a month, billed ₹5,999 for the first year, open to our first 10 website clients. The standard rate after the first year is ₹24,999 a year. Prices exclude GST.
  • Build or migration: on a 12-month plan the website build (valued at ₹15,000) is waived, or an existing site is migrated at no charge after a technical audit.

Whichever provider you choose, ask for the same three things: an included list, an excluded list and the price after the first year.

A checklist for judging any website care plan

Take this list into your next conversation with a provider. A good plan gives a clear answer to every line.

  1. Is hosting included, and where is the site hosted?
  2. Does the SSL certificate renew automatically?
  3. Who renews the domain, and whose name is it registered in?
  4. How often are the CMS, theme and plugins updated, and who tests the site afterwards?
  5. How often are backups taken, where are they stored, and how many days are kept?
  6. When was a restore last tested, and how long does it take?
  7. Is uptime monitored, and who responds to an alert outside office hours?
  8. How many small edits are included each month, and what is the turnaround?
  9. What is the support channel and the response time?
  10. What is explicitly excluded, and how are those requests priced?
  11. What is the price after the first year, and is GST extra?
  12. If you leave, what exactly do you get back?

If you already have a site and are not sure what state it is in, run it through a free check such as the Mecverse SEO checker. It flags expired or missing HTTPS, mixed content, slow server response and missing tags, which tells you how much attention the site has had so far.

Frequently asked questions

Want someone to look after your website?

Mecverse builds your site free or migrates your current one on an annual plan, then handles hosting, updates, backups and small edits.

Keep reading