Website maintenance: what it includes and what it costs in 2026.

What is website maintenance?

Website maintenance is the set of regular tasks that keep a site secure, fast, functional and up to date after launch: updating software, verifying backups, monitoring security, fixing what breaks and keeping content fresh. It is the equivalent of a car service: nobody argues that a car needs oil; with websites, for some reason, many people seem surprised.

The reason is simple: a website is software running on a server, surrounded by other programs (CMS, plugins, libraries) that receive security updates every month. Every month without updates is a month of unlocked doors.

What a maintenance plan should include

These are the six components of complete professional maintenance. If your current plan does not cover most of them, it is not a maintenance plan; it is a decorative monthly fee:

1. Software updates. CMS, plugins, theme and libraries, with testing after each update, because that is where many sites break.
2. Automatic backups. Regular copies, stored off-server, tested occasionally. A backup that has never been restored is a hope, not a backup.
3. Security and monitoring. Firewall, malware detection and surveillance of access attempts. Most hacks are not cinematic, they are one forgotten plugin.
4. Uptime and performance. Knowing whether the site is up and loading fast, before the client has to tell you.
5. Content updates. Swapping texts, images, opening hours, prices; publishing blog articles. The living site is the one Google rewards.
6. Support with an SLA. An email with a defined response time (24h is the standard), not a phone number nobody answers.

How much does website maintenance cost?

In Portugal, there are three ways to pay for maintenance, and three orders of magnitude:

Swipe the table sideways →

Reference ranges for the Portuguese market in 2026. Nuno Costa’s subscription plans (Starter €49 · Growth €99 · Commerce €199) include hosting, backups and monthly time for changes.

What happens without maintenance

This is not a sales scare; it is the normal lifecycle of any software. After a year without maintenance, the typical scenario looks like this:

• Security: outdated software is the most common cause of hacked websites. A compromised site can distribute malware, get blocked by Google and destroy trust built over years.
• Speed: bloated databases, misconfigured cache and old code make the site slow, and a slow site loses visitors and rankings.
• SEO: Google favours fast, stable, updated websites. Abandoned sites slide down, slowly but surely, as active competitors overtake them.
• Silent failures: forms that stop sending, pages that stop opening on new phones, the site "seems" to work but has stopped working for those who arrive.

And the recovery cost? Cleaning up a hacked site costs orders of magnitude more than a year of maintenance, not counting the days offline and the customers who never come back.

Do it yourself or hire someone?

Doing it yourself is legitimate, if you have the technical knowledge and the discipline. The work itself takes 1–3 hours a month on a small site: update, test, verify backups. The problem is not doing it once; it is never missing one, for years, while running the rest of the business. The update that fails is precisely the one that takes the site down.

Hiring makes sense when the site has real commercial value: it generates requests, sales or brand. In that case, the monthly fee does not buy "updates", it buys a website that stays up, secure and converting, without you having to think about it.