Website Maintenance & Retainers: What Should a Business Pay Monthly?

Website maintenance is the part of web development pricing nobody explains properly. The build gets a detailed quote; the "€99/month maintenance plan" gets one vague line, and half the businesses paying it couldn't tell you what they get for the money. Some are overpaying for nothing. Others are paying nothing and one plugin update away from an outage.

I sell maintenance retainers myself - mine start at €200 a month - so here's the breakdown I wish clients arrived with: what maintenance actually includes, what the price tiers look like in 2026, when a retainer genuinely beats paying ad-hoc, and the red flags that tell you a plan is a subscription to nothing.

What maintenance actually includes

Real maintenance is five distinct jobs. When you evaluate a plan, check which of these are explicitly in it:

Updates. Framework versions, dependencies, plugins, PHP or Node versions. On WordPress this is the big one - plugins ship security patches constantly, and updating them can break things, which is exactly why it needs a professional doing it with a way to roll back. On a modern statically-built site there's dramatically less of this, but "less" isn't "none": dependencies still age, and an unmaintained codebase becomes unupgradeable within a couple of years.

Security. Monitoring for vulnerabilities, SSL certificate renewal, firewall and spam configuration, and - the part everyone skips - actually responding when something is flagged. A plan that "includes security" but has no stated response time includes an email folder.

Backups. Automated, off-site, and tested. An untested backup is a hope, not a backup. Ask any provider when they last actually restored one.

Monitoring. Uptime checks, error tracking, performance monitoring. The difference between "we found out the checkout was broken from a customer three days later" and "it was fixed before anyone noticed."

Small changes. Text edits, new photos, a new section, a price change, a new team member on the about page. This is the part clients actually feel month to month, and it's where plans differ most - some include an hour or two of change work, some charge every request separately.

Hosting, domain, and email are usually billed alongside but they're infrastructure, not maintenance. A plan that's mostly reselling you €10 hosting at €80/month is the oldest trick in this industry.

What it costs in 2026

Realistic monthly ranges, from freelancers and small studios:

€0 to €50/month - self-service. You're on a template builder (Wix, Squarespace) where updates and security are the platform's problem, or you have a static site and a technical person in-house. Legitimate for very simple sites. Your risk is the day you need something the platform can't do.

€50 to €150/month - keep-alive. Updates, backups, uptime monitoring, maybe one small change a month. This is the honest floor for a professionally maintained WordPress site. Below this price for WordPress, be suspicious - the economics don't work unless the work isn't happening.

€200 to €500/month - proper retainer. Everything above plus real response times, a few hours of development each month for changes and improvements, performance and SEO upkeep, and a monthly report showing what was actually done. This is my lane: my retainers start at €200/month, and I'd rather have fewer clients at a price where I can genuinely look after the site than a hundred sites on autopilot.

€500 to €2,000+/month - growth retainer. For sites that are core revenue infrastructure: e-commerce, web apps, sites shipping new features continuously. At this tier you're buying a fractional developer, not maintenance. Sensible when the site makes you meaningfully more than the retainer costs.

For comparison: agencies typically charge 1.5 to 2x these numbers for equivalent scope, mostly for the same reason agency builds cost more - process and people between you and the work.

Retainer vs ad-hoc: the honest math

Ad-hoc means you pay someone hourly when something breaks or needs changing. It's cheaper on paper if you genuinely touch the site twice a year. Here's when the retainer actually wins:

You make changes monthly or more. Ad-hoc rates run €60 to €120/hour, plus the overhead of finding someone, explaining context, and waiting your turn in their queue. A €200 retainer with two included hours beats that on price and on speed, because you already have priority with someone who knows your codebase.

Downtime costs you real money. Ad-hoc means when your site breaks on Saturday, you're cold-emailing developers. A retainer means someone is already monitoring and already responsible. You're partly buying insurance, and like insurance, it looks like a waste until the one month it isn't.

Your site is on WordPress or similar. The update treadmill doesn't pause because you didn't have requests this month. Skipping six months of updates doesn't save the work - it compounds it into a riskier, more expensive catch-up job.

And when ad-hoc honestly wins: a simple static brochure site, rarely changed, nothing mission-critical. My own builds are deliberately low-maintenance - statically generated, minimal moving parts - and I tell clients with simple sites that a light plan or even ad-hoc is fine. Selling everyone the big retainer is exactly the behaviour I'm about to flag.

Red flags

No monthly report. If you can't see what was done, assume nothing was. A real provider can show you: updates applied, backups verified, uptime, hours used.

No stated response time. "We'll get to it" is not a service level. Even a modest promise - respond within one business day, critical outages same-day - separates professionals from subscription collectors.

Hosting markup dressed as maintenance. Ask what the plan costs excluding hosting. If the answer is nearly nothing, that's what the maintenance is worth.

You don't own your own site. Some plans hold the domain, hosting account, or code hostage so leaving is painful. You should own the domain and have access to everything, full stop. I set every client up with ownership of all of it - the retainer should keep clients because it's useful, not because it's a lock.

Unused hours vanish with no flexibility. Fine within reason, but a plan where you've paid for 24 hours across a year and received two text edits deserves a hard conversation.

The short version

A professionally maintained business site in 2026 costs €50 to €150/month to keep alive, €200 to €500/month for a real retainer with development hours and response times, and more only when the site is genuine revenue infrastructure. Pay less than that for a WordPress site and you're probably paying for nothing; pay ad-hoc only if your site is simple and static.

If you're not sure what your current site actually needs - or what you're actually getting for what you pay now - describe your setup to me and I'll tell you straight, including if the answer is "your current plan is fine." What my retainers include is on the maintenance page, and all my prices are published on the pricing page.