What is a website care plan?
It’s a monthly service: someone keeps a finished site updated, backed up, monitored and secure, and keeps a few hours free each month for small changes. You’ll also hear it called a website maintenance plan or a support plan. Whatever the name, the service is the same.
A website is software. The platform, the theme and the plugins or apps all release new versions, and some of those releases fix security problems, so a site that nobody updates falls behind. A care plan makes one party responsible for keeping it current, and for noticing when something breaks.
For an agency, a care plan is also a reason to stay in touch after launch. The client hears from you every month, with a report that shows the work done, and when they need a new page or a redesign, you’re the one they ask.
People often mix it up with two other things. Hosting is the server the site runs on. A retainer buys hours for new design and development. A care plan keeps what already exists working, with a small allowance for edits.
A care plan, next to the things it gets confused with
| What it covers | How it is paid | Who provides it | |
|---|---|---|---|
| Care plan | Updates, backups, monitoring, security and a few edit hours on a live site | A fixed fee per site, per month | The agency, or a white label partner under the agency’s name |
| Hosting | The server, the domain connection and the server software | Monthly or yearly, to the host | A hosting company |
| Warranty | Defects in the build, for a set period after launch | Included in the build price | Whoever built the site |
| Development retainer | New pages, new features and design work | A block of hours each month | The agency or its partner |
Look hard at the warranty row before handover. A warranty fixes what was built wrong; it doesn’t cover an update that arrives six months later, and that gap is exactly what a care plan is for. There’s a launch list with the care conversation on it in the website launch checklist.
What should a website care plan include?
Six things: software updates, backups you can restore from, uptime monitoring, security checks with a plan for a hacked site, a set number of hours for content edits, and a monthly report. Say how often each one happens and how fast you respond. Anything that isn’t on the list is outside the plan.
| Part | What it is | Decide before you sell it |
|---|---|---|
| Updates | New versions of the platform, the theme and the plugins or apps, applied on a schedule | How often. Whether updates are tried on a staging copy first. What happens when one breaks the site |
| Backups | Copies of the files and the database, kept away from the live server | How often, how long they are kept, where they are stored, and who can ask for a restore |
| Uptime monitoring | An automatic check that the site loads, with an alert when it doesn’t | How often it checks. Who gets the alert, and during which hours someone acts on it |
| Security | A firewall, login protection and malware scans, and a clean-up if the site is hacked | Whether clean-up is inside the fee or billed. Be careful not to promise a site can’t be hacked |
| Content edits | A set number of hours a month for text, images and small fixes | How many hours. Whether unused hours roll over. What counts as an edit and what is a project |
| The report | A monthly summary of updates, backups, uptime, scans and edits | Whose branding is on it. Whether the client gets it automatically or you present it |
Extras for higher tiers
- Staging and visual checks. Updates are tried on a copy of the site, and key pages are compared before and after.
- A performance and SEO health check. Page speed, indexing and broken links, looked at on a schedule (every quarter, say).
- Checkout tests on stores. A test order after every update, because a broken checkout loses sales before anyone reports it.
- Faster response. A shorter target for the first reply. State it as a target in business hours unless you can staff a guarantee.
- More edit hours. The simplest lever, and the one clients understand best.
What to leave out, and say so
- Hosting and domains. Keep them in the client’s name, paid by the client. If you resell hosting, price it as its own line.
- Licences. Premium plugins, themes and apps renew every year, so say who pays.
- New pages, features and redesigns. Quote them as projects. Edit hours are for small changes.
- Copywriting and SEO campaigns. They’re separate services, with their own prices.
- “Unlimited” anything. A plan with no limit has no price you can stand behind.
Two cautions from WordPress’s own documentation apply to any platform. On backups: “There are two parts to backing up your WordPress site: Database and Files. You need both” (WordPress backups). On security, it describes the aim as “risk reduction, not risk elimination” (Hardening WordPress). Write your plan in the same spirit: say what you’ll do, and make no promises about what will never happen.
What do WordPress website care plans cover?
WordPress website care plans cover the parts of a WordPress site that don’t look after themselves: plugin and theme updates, major core updates, the PHP version on the server, backups of both files and database, and security checks. WordPress applies some updates automatically. The rest need a person, a backup and a test.
| Area | What the documentation says | What a care plan does |
|---|---|---|
| Core updates | Automatic background updates arrived in WordPress 3.7. Since 5.6, new installations have them on by default for minor and major core releases; before that, minor releases only (Updating WordPress) | Checks which setting each site has, applies what isn’t automatic and tests the site after a major release |
| Plugins and themes | “By default, automatic background updates only happen for plugins and themes in special cases”, decided by the WordPress security team (Updating WordPress) | Applies plugin and theme updates on a schedule, after a backup, and checks the key pages afterwards |
| Old versions | “Older versions of WordPress are not maintained with security updates” (Hardening WordPress) | Keeps the site on the current version, and reports any plugin that has stopped being updated |
| PHP | WordPress recommends PHP 8.3 or greater, and says older versions past End Of Life “may expose your site to security vulnerabilities” (WordPress requirements). Each PHP branch gets two years of full support, then two of security fixes only (PHP supported versions) | Records the PHP version on each site, tests the site on the next one and asks the host to switch |
| Backups | For smaller sites “backups should be made once a week”, and for high-activity sites “daily”. Keep at least three to five recent backups, in more than one place (WordPress backups) | Runs backups on a schedule, stores them away from the host and takes an extra one before every update |
| Before an update | “Before you get started, it’s a good idea to back up your website” (Updating WordPress) | Makes the backup a fixed step, so a failed update is rolled back in minutes |
This is why “WordPress updates itself” is only half true. Core releases can arrive on their own. Most plugin and theme updates don’t, and nothing automatic checks that the contact form still sends after one.
The same plan shape works on other platforms, with different tasks. On a hosted platform there may be no plugins to update, and the work moves to content edits, form checks and app updates; our own plans by platform are below as an example. If you’re still choosing a platform for a client, the upkeep is part of that choice, and we compare it in Shopify vs WordPress.
One example: how our plans differ by platform
| Platform | Plan | What care covers there |
|---|---|---|
| WordPress | Care or Care Plus | Core, theme and plugin updates every week, and on Care Plus on a staging copy first with a visual check. Premium plugin licences stay in your client’s name. |
| Webflow | Care or Care Plus | There are no plugins to update. Care covers content and CMS edits, form checks, backups where the platform allows, and uptime, and Care Plus adds the quarterly performance and SEO health check. |
| Shopify | Commerce Care | Theme and app updates on a duplicate theme first, a test order after each one, and product and collection edits within your hours. |
| WooCommerce | Commerce Care | WordPress, WooCommerce and extension updates on a staging copy first, then a test order. For checkout problems, we aim to respond the same business day. |
How do you tier a website care plan?
Use two or three tiers, and change only a few things between them: how updates are tested, how long backups are kept, how often the site is checked, how many edit hours are included and how fast you respond. Keep the core the same on every tier, so that no client is ever left without backups or security.
What to vary, and what to keep the same
| Part | Lowest tier | Higher tiers | Why |
|---|---|---|---|
| Updates | Applied to the live site after a backup | Tried on a staging copy first, with a visual check | Testing takes time, so it’s a fair thing to charge for |
| Backups | On every tier | Kept for longer | Never sell a tier without backups. Retention is the lever |
| Monitoring | Checked every few minutes | Checked more often | The alert is cheap. Acting on it is the cost |
| Security | The same on every tier | The same | A hacked site on your cheapest tier still has your name on it |
| Edit hours | A small allowance | More hours | The lever clients understand, and the one that changes your cost most |
| Response time | A target of a business day | A target of a few business hours | Faster replies need more people on hand |
| Health checks | Not included | Speed and SEO health on a schedule | It gives the higher tier something to show each quarter |
- Name each tier after who it’s for: a brochure site, a site that brings in leads, a store. Clients choose faster when they recognise themselves.
- Give stores a tier of their own. A store has a checkout to test and money at risk when it fails, so it costs more to look after.
- Don’t build a tier you can’t deliver. A four-hour response target needs someone available every working day, including the days you’re on holiday.
A worked example: our three plans
These are our care plans as they appear on our pricing page. The prices are what an agency pays us, per site; what you charge your client is up to you.
| Care | Care Plus | Commerce Care | |
|---|---|---|---|
| Our price, per site, per month | $50 | $100 | $150 |
| Platforms | WordPress, Webflow | WordPress, Webflow | Shopify, WooCommerce |
| Updates | Weekly | Weekly, on staging first, visual regression check | Weekly, on staging first, checkout tested |
| Backups, where the platform allows | Daily, 30-day retention | Daily, 90-day retention | Daily, 90-day retention |
| Uptime monitoring | 5-minute checks | 1-minute checks | 1-minute checks |
| Security | Firewall, malware scans, hack cleanup | Same | Same |
| Content edits | 1 hour a month | 3 hours a month | 4 hours a month |
| Core Web Vitals + SEO check | Not included | Quarterly report | Quarterly report |
| Response time, your hours | 1 business day | 4 business hours | 4 business hours, same day for checkout |
| Monthly report | White label, your branding | Same | Same |
| Getting started | Onboarding check within 3 business days | Onboarding check within 3 business days | Onboarding check within 3 business days |
How do you price a website care plan for clients?
Price it from your costs up. Start with what delivery costs you per site each month, whether that’s your own team’s time and tools or a white label fee. Add your time on the account (the report, the questions, the invoice), then your profit. Charge it as a fixed monthly fee per site, paid in advance.
- Delivery cost. In-house, it’s the hours each site takes a month, at what those hours cost you, plus a share of the tools. White label, it’s the partner’s fee per site.
- Your account time. Reading and sending the report, answering the client, passing on requests and invoicing. It’s small per site, and it’s never zero.
- Risk. An old site with thirty plugins takes more looking after than a new one you built yourself. Price the tier, or the site, to match.
- Profit. What’s left is the reason to sell the plan at all. Recurring income only helps if each plan earns something.
Markup and margin on a monthly plan
Markup is your profit as a share of what you pay; margin is your profit as a share of what you charge. The table below is just the arithmetic, at four multiples.
| You charge | Markup on cost | Margin on price | Of each 100 the client pays, you keep |
|---|---|---|---|
| 1.5 times your delivery cost | 50% | 33% | 33 |
| 2 times | 100% | 50% | 50 |
| 2.5 times | 150% | 60% | 60 |
| 3 times | 200% | 67% | 67 |
A worked example, with our prices
Here are our three plans at the multiples our reseller page uses, to show the maths with real numbers. We’re not suggesting you charge any of these.
| Plan | Our price | Client price at 1.5× | Client price at 2× | Client price at 2.5× |
|---|---|---|---|---|
| Care | $50 | $75 | $100 | $125 |
| Care Plus | $100 | $150 | $200 | $250 |
| Commerce Care | $150 | $225 | $300 | $375 |
Care plans bill monthly per site, so what you keep on this line repeats every month, on every site you put on the plan.
Four pricing habits
- Price per site. A client with three sites has three sets of updates and three backups to pay for.
- Bill monthly, in advance, because you’re paying for tools and people before the month starts. If your client would rather have one invoice, annual billing with a discount works too.
- Put a notice period in writing. Thirty days each way is simple to explain and gives both sides time.
- Publish what an hour costs beyond the allowance, and quote before you start. Then “can you just” has an answer.
The same maths for whole websites is on the web design reseller program page.
How much does website maintenance cost?
Website maintenance cost is the sum of several separate bills: hosting, the domain, licences for premium plugins, themes or apps, the care plan itself, and any work beyond it. The care plan is just one line. We don’t put a market figure on the total, but the lines are the same everywhere.
| Cost | Paid to | How it is billed | Note |
|---|---|---|---|
| Hosting | The hosting company | Monthly or yearly | Varies with traffic and the kind of server. Best held in the client’s own account |
| Domain name | The registrar | Yearly | Small, and serious if it lapses. Put the renewal date in the report |
| Licences | Plugin, theme and app makers | Yearly or monthly, per site | Add them up before you quote. A site can carry several |
| Platform fee | The platform, on hosted platforms | Monthly | On a hosted platform this replaces separate hosting |
| Care plan | The agency | Monthly, per site | Updates, backups, monitoring, security, edits and the report |
| Edits beyond the plan | The agency | Hourly, quoted first | Depends on how often the client changes things |
| Fixes and new features | The agency | Per project | Clients count it as maintenance, so show it on its own line |
One example of the care plan line
For reference, the prices an agency pays StudioPartner per site, per month: $50 for Care, $100 for Care Plus and $150 for Commerce Care. Edits beyond the plan’s hours are $40 an hour, and a new page on an existing template is $50. Hosting and licences aren’t in those figures; your client pays for them directly.
When a client asks what maintenance will cost, give them this list with their own figures filled in. The hosting invoice and the licence renewals already exist, and seeing every line in one place makes the care plan fee easier to judge.
If a client is deciding whether to pay at all, compare it with the cost of doing nothing: a site that’s down, a store that can’t take orders, or a rebuild after a hack with no usable backup.
How do you sell a website care plan at handover?
Start well before handover. Put the care plan in the proposal as its own line, explain at kickoff that a site needs looking after, and offer the tiers again before launch, with a start date. By launch day the client is expecting it, and it never lands on them after the final invoice.
Seven steps, from the proposal to the first report.
Put it in the proposal.
One line under the build price: the care plan, per month, starting at launch. The client sees the full cost of owning the site before they sign.
Explain it at kickoff.
Two minutes: the site is software, software gets updates, someone has to apply them and check nothing broke. The client onboarding template has a place for it.
Say what the warranty covers, and what it doesn’t.
The warranty fixes defects in the build for a set period. It doesn’t cover updates released later, or changes the client makes. The care plan starts where the warranty stops.
Offer the tiers before launch.
Send a one-page comparison a week or two before the site goes live. Recommend one tier for this client and say why.
Make “no” a decision, in writing.
If the client declines, record who will apply updates and take backups from launch day. Give them the handover document and the logins. It protects you both.
Start on launch day.
Switch on monitoring and backups the day the site goes live, so there’s no gap. The first care invoice goes out on the plan’s own schedule, separate from the build.
Send the first report on time.
The report is the part of the product the client sees. A first report that arrives when promised, with your logo on it, is their first proof that the plan is being delivered.
Three objections, and how we’d answer each
- “Our host does backups.” Ask how long they’re kept, and whether anyone has ever tried a restore. A backup on the same server as the site shares its problems.
- “WordPress updates itself.” Core releases can. Most plugin and theme updates don’t, and nothing automatic tests the site afterwards. See the WordPress section.
- “We’ll call you if something breaks.” That works, at an hourly rate, when someone notices. A care plan is for noticing first.
Your existing clients are the other place to sell. Any site you built in the last few years that nobody is updating is a conversation worth having, and a short audit of its plugins and backups is a fair way to open it.
What does a care plan cost to deliver, in-house or white label?
In-house, the cost is your team’s time on every site each month, the tools for backups, monitoring and security, and cover when the person who does it is away. White label, it’s a fixed fee per site plus your own time managing the account. The first is mostly a fixed cost; the second scales with the number of sites.
| In-house | White label partner | |
|---|---|---|
| What you pay for | Staff time, tool subscriptions and someone to cover absence | A fee per site, per month |
| How the cost behaves | Mostly fixed. Five sites or fifty, the tools and the person are there | Rises and falls with the number of sites |
| Where the time goes | Updates, checks, edits, reports and the occasional emergency | Passing on requests, reading the report and sending it |
| Cover | You arrange it. Updates don’t stop for holidays | The partner’s team |
| Knowledge of the site | In your team, especially for sites you built | With the partner, documented in your tools |
| Margin | Higher per site once you have enough sites to fill the time | Known per site from the first one |
| What your client sees | Your agency | Your agency, if the partner works under your name and brands the report |
| Check first | How many sites one person can look after properly, with everything else they do | Response targets, who holds the backups, and what happens when the plan ends |
Here’s a rough test we’d use: count the sites you could put on a plan this year. With a handful, the tools and the interruptions are spread over very few plans, and a fee per site keeps your cost in step with your income. With enough sites to fill a role, the sums can favour your own team.
You can also split it: keep the sites you built on your core platform in-house, and send stores or other platforms to a partner. What to ask a partner before you hand over client sites is in the partner vetting checklist.
What goes wrong with website care plans?
Care plans tend to fail in the same few ways: an update that breaks the site, a backup that can’t be restored, a plan with no limits, a report nobody sends, and a client who thinks the plan covers everything. Each one comes from something left unsaid when the plan was sold, and each has a simple fix.
| What goes wrong | Why it happens | How to prevent it |
|---|---|---|
| An update breaks the live site | It was applied without a backup or a test | A backup before every update. On higher tiers, a staging copy first. Roll back first, find the cause after |
| The backup can’t be restored | Nobody ever tried | Test a restore when a site joins the plan, and again on a schedule. Store backups away from the host |
| The plan eats your month | Edit hours had no limit, or “small changes” was never defined | A stated number of hours, logged in the report. Anything larger is quoted first |
| The client expects a redesign | The plan was sold as “we look after everything” | A written list of what is in and what is out, on the page the client signs |
| A hack, and the question of who pays | Clean-up was never mentioned | Say in the plan whether clean-up is included. Don’t promise the site can’t be hacked |
| No report goes out | It was manual, and a busy month came | Build the report from the tools, on a date. A plan with no report looks like a charge for nothing |
| A licence lapses and updates stop | Nobody tracked the renewal | List every licence and its renewal date when the site joins. Say who pays |
| You can’t get in | The client changed a password or the host | Named accounts for your team, and a rule that changes to access are told to you first |
| The person who does it is away | One person, no cover | A second person who knows the process, or a partner |
You can settle several of these on day one. An onboarding check (a plugin and theme audit, a first backup, a scan and a review of access) tells you what you’re taking on before you’re responsible for it.
What should a care plan agreement say?
One or two pages your client can follow without a lawyer: what’s included and how often, what’s outside the plan and how it’s priced, how fast you aim to respond and in which hours, how the plan is billed, how either side ends it, and who owns the site, the accounts and the backups.
- What is included. Each part, with its frequency: updates weekly, backups daily, kept for so many days.
- What is outside, and its price. Hosting, licences, new pages, redesigns, and the hourly rate for extra edits.
- Edit hours. How many, what counts, and whether unused hours roll over.
- Response. A target for the first reply, in business hours, in a named time zone. Call it a target unless you really mean a guarantee.
- No promise of outcomes. You commit to the work. You don’t promise uptime, or that the site will never be hacked.
- Billing. Per site, monthly in advance, and what happens if an invoice is late.
- Price changes. How much notice you give before a price changes.
- Ending the plan. The notice period, and what you hand over at the end: logins, the latest backup, a list of what was in place.
- Ownership. The site, the hosting account and the domain are the client’s, and they can switch off your access at any time.
- Subcontracting. If a partner delivers the plan, your client contract should allow it. The white label agreement template has a clause.
Use it as a checklist of points to cover, and have a lawyer review the agreement you send.
Where StudioPartner fits
We deliver care plans white label at StudioPartner: we look after your clients’ sites under your agency’s name, and you sell the plan at your own price. We work only for agencies and people who resell. The three plans and their prices are in the worked example above; below are the terms around them, as they appear on our care plan page.
| Point | What we do | In writing |
|---|---|---|
| Under your name | We work from an account you create on your domain and inside your tools. The monthly report carries your logo and agency name, and nothing of ours. | Working inside your agency |
| Your clients | We never contact, pitch, quote or work for your clients, with no end date. If one of them contacts us, we decline and tell you within 1 business day. | Zero-Poach Guarantee |
| One contact | An assigned Project Manager who knows the site and works your business day. | Hours by region |
| The full plan page | What each plan includes, how an update is handled, what the report holds and how a site is onboarded. | White label WordPress maintenance |
The terms of our plans
- The site. Your client’s, on their own hosting. We work on it through accounts you create and can switch off at any time.
- Access. Named accounts only, each with two-factor sign-in, and credentials shared through a password manager. We never use a shared login.
- Backups. Daily and off-site where the platform allows, for as long as the plan runs.
- Billing. Monthly in advance, per site, by card or bank transfer. Care plans are never paid through escrow. Volume discounts are shown in your quote.
- Prices. Fixed per site, per month. If we ever change a plan’s price, you get 30 days’ written notice and can end the plan before it applies.
- Ending a plan. Month to month, with 30 days’ written notice from either side. We then confirm everything is in your systems and list any keys to rotate, and you remove our access.
Outside every plan, and how it’s priced
- Hosting and domains. Your client keeps their own hosting and registrar accounts and pays them directly. We don’t sell hosting, so we’ve nothing to gain from moving them.
- Licences. Premium plugins, themes and apps are paid by your client, or bought by us at cost with no markup, with your approval first.
- Edits beyond your hours. Billed at $40 an hour in 30-minute blocks, and always quoted before we start.
- New pages. $50 a page on an existing template, with QA.
- New features and redesigns. Quoted as a fixed-price project. A project has a delivery date, so it’s covered by “on time, or a full refund”; plans aren’t.
- Page copy. Not included in a plan. We place the copy you or your client supply, and flag any gaps. If you’d like us to write it, we can, for an extra fee quoted before we start. Blog posts are a separate service, at {content-post} a post.
Response: we aim to respond within 1 business day on Care, and within 4 business hours on Care Plus and Commerce Care, counted in your business hours. They’re targets we work to, and we don’t guarantee them.
Care plans are billed monthly in advance and are never paid through escrow. A first fixed-price project with us is paid through escrow and released as you approve the work. How escrow works.
- White label WordPress maintenance The service page: plans, the update process and the report.
- Care plan prices Three plans, per site, per month.
- Reseller program The margin maths, with our prices.
- How a project runs From the first call to handover: who does what.
Related: What is white label web design? · What is white label SEO? · In-house SEO vs outsourcing · Website launch checklist · Bricks vs Elementor · For web agencies · For freelancers · Guarantees and policies