WordPress service agreement: why it pays off
WordPress requires maintenance. Plugins need updating, security holes need patching, and backups need to be taken. If you don't do it, it's only a matter of time before something goes wrong.
A service agreement is the cheapest insurance your website can get. Here's what it should include, what it costs, and when you actually need one.
What happens without maintenance?
WordPress releases security updates several times a month. Plugins update even more often. Every delay is an open door for hackers.
The reality:
- 30,000+ WordPress sites are hacked daily according to Sucuri
- 60% of hacks are caused by outdated plugins or themes
- A hacked site has to be cleaned, and the price depends on how deep the attack goes. With me, malware removal costs from 3,000 DKK, and the site is often down in the meantime
What should a service agreement include?
Basic (minimum)
- WordPress core updates
- Plugin and theme updates
- Weekly backup (offsite)
- Security monitoring
- Uptime monitoring
Professional
Everything from basic, plus:
- Daily backup
- Monthly performance check
- Fast support (response within 24 hours)
- Small content changes included
- Security scanning and malware removal
Premium
Everything from professional, plus:
- Priority support (response within 4 hours)
- Monthly report with status and recommendations
- SEO monitoring
- Larger changes and optimization included
- Quarterly security audit
What does it cost?
The price of a service agreement mostly depends on two things: how quickly an error has to be picked up, and how much work is included in the fixed price. An agreement that only runs updates automatically is cheap. An agreement where a person tests the updates, checks that the backup can be restored and reacts when the site goes down costs more.
I call it operations responsibility, and my prices are:
| Package | Price | Suitable for |
|---|---|---|
| Micro | 2,500 DKK/mo | A simple website that needs to stay healthy and updated. Errors are started within 2 working days |
| Light | 5,000 DKK/mo | Businesses where downtime and errors cost real money. Critical errors are started the same working day |
| Drift+ | 10,000 DKK/mo | Those who want to see the site get measurably better, with 3 hours of improvements a month |
All prices exclude VAT, with no commitment, and extra hours cost 900 DKK per hour. See WordPress operations and all my prices.
There are much cheaper service agreements. If you consider one, ask whether anyone tests that the backup can be restored, and what happens when the site goes down outside office hours. Compared to the price of a hacked site (emergency repair, lost revenue, warnings in Google), those two answers decide whether the agreement is worth the money.
When do you need one?
You need a service agreement if:
- Your website generates leads or sales
- You don't update WordPress regularly yourself
- You have a webshop with customer data
- You don't have time to monitor security and uptime
You can manage without if:
- It's a personal blog with no business value
- You're technically skilled and update consistently
- You have a static site without WordPress
5 things to check in the contract
- Who owns the backups? You should have access to your own backups.
- What is the response time? "Fast support" isn't enough — get hours/minutes in writing.
- What's included in "small changes"? Get a defined number of hours or task types.
- What does it NOT cover? New development, redesign and third-party integrations are typically extra.
- What is the cancellation period? Avoid long lock-in periods.
