Maintenance
Website maintenance and security services
Sites rarely break all at once. A plug-in update stops the form, a certificate expires, a tracking tag goes quiet, and nobody notices until the phone stops ringing. Maintenance is the work of noticing first.
The failures that cost leads
The expensive failures are the quiet ones. A site that is down gets noticed within the hour. A contact form that stopped sending emails three weeks ago does not. Neither does a booking calendar that lost its connection, a WhatsApp button pointing at an old number, or a pixel that stopped firing after an update. Your ads then optimise blind.
So our maintenance tests the parts that bring money in, as well as the parts that make noise when they break. On WordPress sites it starts with updates. On every site it ends with the forms.
Each month we submit each form, book a test slot, check that the lead reaches Napexy CRM with the right source, and confirm that tracking events arrive where they should.
What our maintenance covers
- Core, theme, plug-in or dependency updates, tested on staging before they go live
- Automatic backups stored away from the server, with test restores on a schedule
- Uptime monitoring, with alerts to a named person
- Security header and SSL certificate checks
- Malware and file-change scans on WordPress sites
- Test submissions of every form and booking flow, checked in the CRM
- Tracking checks: analytics, Meta pixel and Conversions API events
- Domain and certificate renewal dates watched
- Broken links and 404 errors reported by Search Console fixed
- A short monthly report of what was done and found
The security work
Access control
A named account for each person, two-factor login, and former staff and agencies removed the day they leave.
Security headers
Content-Security-Policy, HSTS and the rest scanned each month, because a new script or plug-in can quietly weaken them.
Updates without surprises
Updates go to a staging copy first, so a broken plug-in never reaches your visitors.
Form protection
Spam and bot filtering on forms that does not block real people or ask them to solve puzzles.
Clean backups
Backups kept long enough to go back to a version from before an infection, even one found late.
If your site is hacked
Limit the damage
We take the site offline or into maintenance mode if it is serving malware or redirecting visitors.
Restore
A clean backup goes back online, or the infected files are cleaned if no clean backup exists.
Close the way in
We find how the attacker got in (an outdated plug-in, a stolen password) and fix it, or the infection comes back.
Reset access
Every password, key and admin account is changed or removed.
Clear search warnings
We check the security issues report in Search Console and request a review once the site is clean.
Report
You get a written account of what happened. If personal data was exposed, the GDPR may require you to notify the authority within 72 hours, and our report gives you the facts for that decision.
Static site or WordPress: what maintenance means
| Static site (Astro, Next.js) | WordPress | |
|---|---|---|
| Updates | Framework and dependencies, a few times a year | Core, theme and plug-ins, every week |
| Main risks | Expired domain or certificate, broken integrations | Outdated plug-ins, weak passwords, malware |
| Most of the work | Checking forms, tracking and integrations | Updates, security scans and the same checks on forms and tracking |
Frequently asked questions
Can you maintain a site you did not build?
Yes. We start with an audit: software versions, plug-ins, access, backups, forms and tracking. You get a list of what needs fixing before regular maintenance begins.
What happens if the site goes down?
Monitoring alerts us and we start on it. Response times are written into the maintenance agreement, so you know what to expect before anything breaks.
Do you look after hosting and domains?
We can manage them or work with your current host. Either way, we make sure the domain is registered in your company’s name.
Does a static site need maintenance?
Less, but yes. There is no plug-in to update, but domains expire, certificates renew, integrations change their APIs and forms still need testing. On a static site, maintenance is mostly those checks.
Are content changes included?
Small edits can be part of the plan. We agree the scope up front, so a monthly fee never hides a surprise invoice.
Does maintenance affect search rankings?
Indirectly. Broken pages, slow loading and security warnings all hurt. We fix 404s and crawl errors as part of the plan; deeper technical SEO work is separate.
Last updated · By the Napexy team
Keep reading
Tell us where you want to grow.
A 30-minute call with a strategist. You get a plan in plain words and a fixed quote, whether or not you work with us.