Website maintenance: what it includes and why your site needs it
A website is not a brochure you print and forget. It runs on a server, a PHP version, a content management system and a good number of plugins or modules that change constantly. If nobody looks after it, one day the contact form stops working, a security warning appears in the browser or, in the worst case, someone uses it to send spam. Website maintenance is the unglamorous but continuous work that prevents those situations.
We explain what a good maintenance service should include, what is usually left out and how to tell whether the one you have is enough for your website.
Why a website needs maintenance
- Security. From time to time, security flaws turn up in content management systems, plugins and modules. WordPress and PrestaShop are widely used, so attacks against their vulnerable versions are automated: they are not looking for your website in particular, they are looking for any website that has not been updated.
- Compatibility. PHP versions stop being supported, browsers change and payment gateways update their integrations. What worked a while ago can stop working without you having touched anything.
- Performance. The database grows, files and plugins that are no longer used pile up, and the website gradually becomes slow.
- Business. If the website generates enquiries or sells, every hour of downtime or every form that does not arrive is a lost opportunity that often nobody notices.
What a good website maintenance service includes
Controlled updates
Updating the WordPress or PrestaShop core, plugins, modules and themes, and also the server's PHP version. The key is the word "controlled": before updating, a backup is made, where possible the update is tested in a staging environment (a copy of the website that customers do not see) and afterwards everything is checked to confirm it still works.
In PrestaShop this matters even more: many modules come from third parties, and a change of shop version can force you to update or replace modules that are no longer compatible. In WordPress, the risk is usually in plugins their author has stopped maintaining.
Security
- Regular scans for malware and modified files.
- Application firewall and blocking of mass login attempts.
- User control: removing old accounts, requiring strong passwords and enabling two-step verification.
- SSL certificate active and renewed on time.
Backups
Automatic backups of files and database, stored outside the server itself and with several versions available. And, above all, tests that they can be restored: a backup that has never been tested is only an assumption.
Monitoring
Checking that the website responds, receiving alerts if it goes down, keeping track of the certificate and domain expiry dates, and checking that forms and order emails are still reaching whoever they should reach.
Performance, support and small changes
Optimising the database, reviewing the cache, removing surplus plugins or modules and making sure speed does not worsen over time. Many plans also include an allowance for minor changes, such as updating a text, changing an image or fixing a one-off fault. It is worth having in writing what counts as a "small change".
What is usually left out of maintenance
To avoid misunderstandings, be clear that maintenance looks after what already exists, but normally does not include:
- Redesigns or new sections.
- New features or integrations with other software.
- Content creation or ongoing SEO work.
- Platform migrations or large version jumps, which are projects in themselves.
What each maintenance task prevents
| Task | What it prevents |
|---|---|
| Updates | Being attacked through a flaw that is already known and fixed. |
| Backups | Losing the website or orders after an error, an attack or a server failure. |
| Monitoring | Going days without a website or without receiving enquiries and not noticing. |
| Security review | Your website distributing malware or sending spam and browsers flagging it as dangerous. |
| Optimisation | A website that gets slower and slower, losing visits and Google rankings. |
Signs your website has gone without maintenance for a while
Some symptoms are easy to recognise even without technical knowledge:
- The admin panel has shown pending update notices for months.
- Nobody knows who has the passwords for the hosting, the domain or the panel.
- You do not know when the last backup was made or where it is stored.
- The browser or Google shows security warnings when you visit the website.
- Some forms do not arrive, or order emails end up in the spam folder.
- The website is getting slower and nobody can explain why.
If you recognise several of these situations, it is worth carrying out a review before the problem shows up at the worst possible moment.
Can I maintain my website myself?
If you have a simple website, some time and a degree of technical confidence, you can take care of part of the work. The usual mistake is to click "update all" directly on the live website, without a prior backup, on a Friday afternoon. If something breaks, the website stays down until someone fixes it.
If your website is an online shop, has integrations with other software or is an important part of your revenue, professional maintenance pays off: preventing usually costs far less than recovering an attacked website. If you want to understand the risks better, our article on critical vulnerabilities in web development explains them in more detail.
How to choose a website maintenance service
Before signing up, ask these questions and have the answers put in writing:
- How often is the website updated and backed up? Where are the backups stored?
- Are updates tested before they are applied to the live website?
- What happens if the website goes down or is attacked? Is recovery included?
- How long does it take to deal with an incident, and through which channel are you notified?
- Will I receive a regular report of what has been done?
- Which changes are included and which are quoted separately?
A good supplier answers all of this straightforwardly. If the answers are vague, the service is probably vague too.
At Cloutions we offer hosting and website maintenance for WordPress and PrestaShop websites and custom developments. If you are not sure what state yours is in, ask us for a review of your website and we will tell you what we see.
Frequently asked questions
How often do WordPress or PrestaShop need updating?
There is no single schedule: security updates should be applied as soon as possible and the rest periodically. Always with a prior backup and a check afterwards.
Does website maintenance include hosting?
It depends on the provider. Some offer them together and others separately; what matters is that someone takes charge of both and that it is clear who is responsible if there is a problem.
What happens if I do not maintain my website?
It may work for a while with no apparent problems, but it builds up outdated versions that increase the risk of attacks, errors and slowness. And the longer you wait, the more work it takes to bring it up to date.
