MOST POPULAR
WP Care Plans
Monthly maintenance, updates, security and backups included.
From £79/mo
- No lock-in contracts
- White-label available
- Not sure?
Monthly maintenance, updates, security and backups included.
We take care of the updates, backups, security checks and small fixes that keep a WordPress site healthy, so you and your clients never have to think about them. Care plans start at £79 per site per month, work with your existing hosting and roll monthly with no minimum term.
Every plan covers the same core care. Higher plans add development time, content and faster response, but nothing below is held back as an upgrade.
WordPress core, plugins and themes are updated once a week on a staging copy first. We check the pages that matter, forms and checkout included, then push the update live. If something breaks, it breaks where nobody sees it.
A full backup every day, stored away from your server for 30 days. If an update, a hack or an accidental delete takes the site down, we restore it from the last clean copy.
Your site is checked around the clock. If it goes down, we get an alert straight away, rather than you hearing about it from a customer.
Files are scanned every day for malware, injected code and known vulnerabilities in the plugins you run. Problems are flagged early, usually before they turn into an incident.
We watch certificate expiry dates, so the padlock never quietly disappears and browsers never warn your visitors away.
Speed and stability are checked every month, with plain recommendations when something slips. Bigger performance work is handled by our speed optimisation service.
Every plan includes monthly time for small changes: text, images, forms, menus, plugin settings and minor styling. You send the request and we get it done.
A short report shows what was updated, what we found and what we fixed. Agencies receive it under their own brand, ready to forward to clients.
Most WordPress problems don’t begin with a dramatic hack. They begin with a plugin update nobody ran, a backup nobody tested or a certificate nobody renewed. Regular website maintenance is what stops those small gaps becoming expensive ones.
Plugins are where the risk sits. Every week, new vulnerabilities are published for plugins that thousands of sites rely on, and attackers scan for unpatched sites within days. A site that isn’t updated and watched every week is carrying risk it can’t see.
WordPress’s own guidance is to take a full backup before every update. On one site that’s a chore. Across twenty client sites it’s a full-time job, and it’s exactly the work our care plans take off your hands.
new WordPress vulnerabilities found in 2024
were not fixed in time for public disclosure
Source: Patchstack, State of WordPress Security in 2025, covering vulnerabilities reported in 2024.
of WP breaches from outdated plugins
£66 a month when paid annually
Weekly staged updates
Daily offsite backups, 30-day retention
24/7 uptime and daily security scanning
1 hour of WordPress edits a month
Monthly report
Support response within 8 hours
£124 a month when paid annually
Everything in Essentials
2 hours of development time a month
1 SEO blog post written and published a month
Active malware removal included
WooCommerce checks and monthly database tuning
Support within 4 hours, emergencies within 6
£207 a month when paid annually
Everything in Partner
4 hours of development time a month
2 SEO blog posts a month
AEO visibility report and page builder checks
Dedicated account manager and monthly strategy call
Support and emergencies within 2 hours
Everything each plan includes, in one place.
Managing four or more sites? Per-site pricing drops with volume, to as low as £45 per site on Essentials for 11 to 20 sites. See volume pricing.
Text and copy updates
Image and media swaps
Contact form changes
Minor CSS and styling tweaks
Plugin settings and configuration
Menu, button and link changes
Small layout adjustments to existing pages
New page or landing pages
New features or functionality
Redesigns and rebrands
WooCommerce store development
Custom plugin or theme development
Third-party integrations
SEO or performance projects, migrations and hosting changes
You don’t need to move hosting to use our WordPress maintenance services. We connect to your site where it already lives, whether that’s a managed WordPress host, a shared hosting account or a server your developer set up years ago. Your hosting contract, domain and email stay exactly as they are.
Some providers bundle hosting into their care plans. That can work, but it usually means a migration at the start and another one if you ever leave. Keeping maintenance separate from hosting means you can change either one without disturbing the other.
To get started we need WordPress admin access, plus hosting or SFTP access so we can restore backups when needed. Credentials are stored securely and covered by our NDA.
Plenty of UK agencies build great websites but don’t want their developers spending every Friday on plugin updates. We act as your behind-the-scenes WordPress team, so your people can stay on billable project work.
Reports go out under your logo, colours and domain
We never contact your clients; everything goes through you
A dedicated Slack channel across your client sites on Partner and Studio
Volume pricing from four sites upwards
If you run your own WordPress site, you get the same care and day-to-day WordPress support, with a direct line to the people doing the work. There’s no ticket queue and no new account manager every few months. You message us, a WordPress developer picks it up, and you see the result in your next report.
It suits business owners who would rather spend their time on the business than in wp-admin, and in-house marketers who need a reliable developer on hand without hiring one.
Wondering what maintenance should cost? Our UK WordPress maintenance cost guide breaks down typical prices and what each level includes.
Some sites carry more risk than others. Here’s how we handle the ones where a bad update costs real money.
A broken checkout costs sales by the minute. Partner and Studio include WooCommerce compatibility checks, and we test the cart and checkout on staging before any update goes live. Store builds and new features are handled by our WooCommerce development team.
Logged-in areas, payment gateways and booking plugins are tested after every update round, not just the homepage.
Most of the sites we look after were built by another developer or agency. We start with an audit, document what's installed and flag any risks before we take responsibility for it.
We work with Elementor, Bricks, Divi, Oxygen and the block editor. Studio adds builder-specific checks after every update.
Daily scanning means most infections are caught early. If one does get through, this is what we do:
Isolate the site so the damage can't spread.
Remove malicious code, backdoors and rogue admin users.
Close the hole that let the attacker in and harden the site.
Restore from a clean backup where needed, and check that Google sees a clean site.
Send you a plain-English report of what happened and what we changed.
Active malware removal is included on Partner and Studio. Essentials includes daily scanning with instant alerts, and cleanup is available through our emergency malware rescue service. For ongoing hardening beyond a care plan, see managed WordPress security.
See it in practice: a hacked site with no backup, recovered the same day.
We review security, plugin health, backups and performance, then tell you what we would fix first. No obligation.
Monitoring, backups, security scanning and staging are in place within 24 hours of signing up.
We run the first staged update, fix anything urgent from the audit and confirm everything works.
Your first report arrives, showing where the site started and the work done. From then on, it's routine.
A 12-person marketing agency in London was losing every Friday to plugin updates, security patches and client site fixes. At an average billing rate of £80 an hour, that was around £3,200 of billable time each month.
After handing WordPress maintenance to us, they won back 40 hours in the first month, with no site incidents during that period.
Saved monthly
Margin recovered
Incidents
Cancel anytime
Most plans look alike on a pricing page. These questions separate them when something actually goes wrong:
Are updates tested on a staging copy, or applied straight to the live site?
How often are backups taken, where are they stored, and when was a restore last tested?
How much developer time is included each month, and what does extra time cost?
Is malware cleanup included, or billed as an emergency?
Do you have to move to their hosting?
Are response times written down, and when does the team actually work?
Is there a minimum contract or a cancellation fee?
The National Cyber Security Centre’s guide to choosing a managed service provider is a useful extra checklist for any small business making this decision.
Honest answers before you decide.
Our WordPress maintenance care plans include weekly staged updates to WordPress core, plugins and themes, daily offsite backups with 30-day retention, 24/7 uptime monitoring, daily security scanning, SSL monitoring, Core Web Vitals checks and a monthly white-label performance report. Higher plans include development time and SEO blog content.
Our care plans cost £79, £149 or £249 per site per month, or the equivalent of £66, £124 or £207 a month if you pay annually. Across the UK market, prices run from basic update-only services to managed plans with bundled hosting at several hundred pounds a month. Our UK WordPress maintenance cost guide breaks down what you should expect at each level.
A staged update means we apply the update to a copy of your site first and test it before touching the live version. If anything breaks, we catch it on staging and fix it before your visitors ever see a problem. Standard updates go straight to the live site with no safety net.
Our Essentials plan includes daily malware scanning with alerts. Partner and Studio plans include active malware removal as standard. If you need emergency malware removal outside a plan, we offer that as a standalone service.
No. All plans are monthly rolling with no minimum term. Cancel anytime with 30 days notice. We earn your business every month.
WordPress Specialist, WP Miracle
Dewang is the founder of WP Miracle. He leads WordPress builds, maintenance and support for agencies and businesses across the UK, Australia and Hong Kong, and oversees every care plan we run.