Skip to content

WordPress maintenance · from $1,500 a month

WordPress, maintained by people who actually look.

Automated update plugins do not notice a broken form, a bot eating your bandwidth or a host that quietly stopped patching. We do, because a person opens every site on a fixed routine and checks it — with AI doing the tedious part.

0 Maintained sites hacked since 2021
Every 2 days Every form on the site tested, by hand
Daily Traffic and bot review, by a person
Before, not after Every update rehearsed on staging first
How we work

Six habits. Most of them are unfashionable.

01 It starts with a checklist, not a login. Before we touch anything we run a 120-point review: core, theme and every plugin, users and roles, hosting, DNS and email, backups, forms, tracking, speed, indexing. You get it as a document. Most of the first month is working through it.
02 Checked by hand, helped by AI. Scanners tell you the site is up. They do not tell you the enquiry form fails silently on Safari. We open every site on a schedule and go through it. AI assistants read the logs, diff plugin changelogs and flag anomalies, so our time goes on judgement, not scrolling.
03 Hosting chosen for security, not price. No site we maintain has been hacked. Part of that is discipline; part is refusing shared boxes with unknown neighbours. Sites go on hosts with server-level firewalls, isolated accounts, automatic patching and staging built in — and we move you if yours cannot do that.
04 Traffic and bots, watched daily. A third of WordPress traffic is bots. Some are Google. Some are scraping your content, hammering your login or inflating your analytics. We review who is hitting the site, block what should not be there and keep the numbers you decide on honest.
05 Updates rehearsed on staging. Core, theme and plugin updates run on a copy first. Every form and template is checked before the same change goes live. A plugin that has been abandoned gets replaced, not updated.
06 Backups you can actually restore. Daily off-site backups kept for thirty days, and a restore test every quarter. A backup nobody has restored is a hope, not a plan.

The day-one checklist

A hundred and twenty things, before we change one.

The review is the product of five years of finding the same problems on sites that looked fine. It comes back to you as a written document, whether or not you continue with us.

Security & access

  • —Admin users and roles audited
  • —Two-factor on every admin account
  • —Login protected against brute force
  • —File permissions and wp-config hardened
  • —Malware scan and file-integrity baseline

Hosting & infrastructure

  • —PHP and database versions
  • —Server firewall and account isolation
  • —SSL and HSTS
  • —DNS, SPF, DKIM and DMARC
  • —Staging environment in place

Plugins & code

  • —Every plugin: last update, author, alternative
  • —Duplicates and abandonware removed
  • —Theme and child-theme status
  • —Custom code found and documented
  • —Cron jobs listed and understood

Forms, email & tracking

  • —Every form submitted and received
  • —Transactional email deliverability
  • —Analytics and consent mode
  • —Conversion events firing correctly
  • —Error and 404 logs reviewed

Speed & search

  • —Core Web Vitals baseline
  • —Image and script weight
  • —Caching and CDN configuration
  • —Sitemap, robots and indexing status
  • —Redirects and broken links
The routine

What a month looks like.

Daily Uptime, traffic and bot review, security log. Anything unusual gets looked at the same day, not at the next scheduled visit.
Every two days Every form on the site submitted by hand and checked at the receiving end. This one habit has caught more lost revenue than any plugin.
Weekly Core, theme and plugin updates on staging, checked, then live. Backups verified as complete and restorable.
Monthly Speed and search review, a short written note on what changed and what we blocked, and one suggested improvement with a reason.
Quarterly Full restore test from backup, and the day-one checklist run again from the top. Sites drift; this is how we catch it.

All of this is inside the retainer, from $1,500 a month depending on the size of the site and how much attention it needs. See maintenance pricing.

“Firstly, thank you for everything you do. You have been instrumental in our journey.”

Founder and CEO · US standards body · five years on retainer

Keep reading

Let’s look at your site together.

Thirty minutes with Ali. He will ask about the business first, then go through the site with you on the call.

Book a call with Ali
Ali Demirci
Ali Demirci
Founder
What we would fix first
The handful of things actually holding it back.
What we would leave alone
Usually more than you expect.
Whether we are a fit
And we will tell you if we are not.

Common questions

Do you use an automated maintenance service behind the scenes?+

No. We use tools for monitoring and AI for reading logs and changelogs, but a person opens your site and checks it on a schedule. That is the whole point.

Has a site you maintain ever been hacked?+

No. Since 2021, none. Hardening, hosting choice and removing abandoned plugins account for most of that; reading the logs daily accounts for the rest.

What if our host is not good enough?+

We will say so in the day-one review, with a recommendation and the reasons. If you decide to move, the migration is included in the first month.

Do you handle content updates?+

Yes. Text, images and new pages on existing templates are inside the retainer. Larger design or structural work is quoted separately.

How do we know what you did?+

A short monthly note: what changed, what we blocked, what we recommend next. No dashboard you have to log into.