Website Maintenance for Small Businesses
Website maintenance for a small business is the routine work that keeps the website secure, accurate and working after launch, from software updates and backups to renewing the security certificate and changing the opening hours. Most owners only think about it when a contact form stops sending enquiries or a browser warns visitors away, which is why it helps to know what the work involves before deciding who does it. Some owners do it themselves, some pay a developer when something breaks and others choose managed websites for small businesses where the provider looks after all of it.
The sections below cover what maintenance includes, how often each job needs doing and the details owners most often forget to update. They finish with what drives the cost and the questions worth asking any provider before you hand over the logins.
What Website Maintenance Means for a Small Business
For a small business, website maintenance means keeping four things in good order, which are the software the website runs on, the security around it, the content on its pages and the accounts that control it. None of them stay fixed after launch, because software gets updated, certificates expire, prices change and staff come and go.
A neglected website rarely fails all at once. It drifts over months, with an old phone number on the contact page, a form that quietly stopped sending and software nobody has updated in a year, until a customer notices the problem before the owner does.
The Jobs That Keep a Small Business Website Running
Most maintenance work falls into four jobs and each one protects something different. Missing any one of them can take the website offline, put visitors off or lose enquiries without anyone noticing.
Updates and Security Fixes
A website built on a content management system needs regular updates to its core software and any extensions. Each update closes security gaps and keeps features working in current browsers.
Backups You Can Restore
The NCSC includes your website in the data a business should back up and know how to restore. Its advice is to check that each backup can be restored and contains all your important data.
Domain and Security Certificate
The domain name and the SSL certificate behind the padlock in the browser expire if nobody renews them. A lapsed domain can take the website and the business email offline with it.
Uptime and Form Checks
Monitoring tells you when the website goes offline, ideally before a customer notices. Test the contact form as well, since a broken form looks fine to visitors while enquiries disappear.
Hosting is related to maintenance but it is not the same service. A hosting company keeps the server running, while maintenance covers what happens on the website itself, so check which of the four jobs your hosting plan includes before assuming any of them are covered.
Websites that run on WordPress carry more of this work, because the core software, the theme and each plugin update separately. For those websites, WordPress maintenance and security support handles those updates on a schedule for businesses that publish often or edit the website themselves.
How Often Each Job Needs Doing
Most small business websites need a short check every month, with renewals handled before their expiry dates and a fuller content review every quarter. The table below sets out a simple routine that covers the jobs above.
| Job | How often | What goes wrong if it is missed |
|---|---|---|
| Test the contact form | Every month and after any change | Enquiries go missing without anyone noticing |
| Apply software updates | When updates are released, checked every month | Known security gaps stay open |
| Take and test a backup | On a regular schedule and before every change | Nothing to restore after a fault or an attack |
| Renew the domain and certificate | Before each expiry date | Browser warnings or the website going offline |
| Review prices, hours and contact details | Every quarter and whenever the business changes | Customers act on information that is out of date |
| Check Search Console | Around once a month | Pages dropping out of Google go unnoticed |
Google’s guidance on getting started with Search Console says there is no need to sign in every day, because the tool emails you when it finds new issues. It suggests checking the account around once a month or after you change the website’s content. If the reports show pages falling out of Google, that is a job for search engine optimisation rather than routine maintenance.
A website that never changes still needs the security and renewal jobs, because they are driven by the calendar rather than by what is on the page. The content review is the job most often skipped, since it relies on someone in the business setting aside time for it.
Keeping Your Details and Content Accurate
Keeping content accurate is the part of maintenance only the business owner can do well, because nobody else knows when prices, opening hours or the team have changed. Wrong details lose enquiries quietly, since a customer who rings a disconnected number or turns up on a closed day rarely tries again.
The same details usually appear in more than one place, so update them together. Google’s help on editing your Business Profile explains how to change your address, hours, contact details and photos, which keeps your listing on Google Search and Maps in line with the website.
Limited companies have extra details to keep current. GOV.UK guidance on company signs, stationery and promotional material says a company website must show the registered number, the registered office address, where the company is registered and that it is a limited company, so a move of registered office means a change to the website too.
Privacy, Cookies and Account Security
Privacy and security maintenance means keeping the cookie notice accurate and making sure only the right people can log in to the website and the accounts behind it. The ICO’s guidance on cookies and similar technologies says you must tell people if you set cookies, explain what they do and get their consent, with an exception for cookies that are strictly needed for a service the visitor has asked for. Adding a booking tool, a chat box or visitor tracking often adds new cookies, so the notice needs checking whenever something new goes on the website.
Account security matters as much as the website itself. The NCSC’s advice on securing your important online accounts names your company website and any separate domain hosting account among the logins to protect with a strong password that is not used anywhere else and two step verification.
Keep the domain, hosting and website logins registered to the business rather than to a former employee or a web designer’s personal account. When someone with access leaves, change the passwords they knew on the same day.
Ask whoever built the website for a written list of every account the website relies on, with the renewal date for each one. That list makes a change of provider straightforward and stops a renewal notice going to an inbox nobody reads.
Doing It Yourself or Having It Done
Doing maintenance yourself works when the website is simple, you are comfortable with the editing screens and you will make time for it every month. Having it done suits owners who would rather spend that time running the business, or whose website has enough moving parts that a failed update could take it offline.
The risk with doing it yourself is rarely the skill involved. It is the job that slips because a busy week came along, such as the update that was postponed or the backup that was never tested. Those gaps tend to show up only when something has already gone wrong.
Website builders sit between the two, since the platform handles the software updates and the owner handles the content. Moving away from a builder later can mean rebuilding every page, so check what you can export before committing to one.
Paying a developer for each fix is the third route. It keeps regular costs down but leaves nobody watching the website between jobs, so problems tend to be found by customers rather than by the person responsible for the website.
What Drives the Cost of Website Maintenance
The cost of website maintenance for a small business is driven by how much of the work the provider takes on and how complicated the website is to look after, rather than by the number of pages alone. The points below account for most of the difference between one quote and another.
- How the website is built, since one with a content management system, extensions and a database needs more updating than a simpler one
- Whether hosting, the domain and the security certificate are included or billed separately
- How many content changes are included and how they are requested
- Whether monitoring and backups run automatically or rely on someone checking by hand
- Extra features such as online booking, payments or a shop, which add more to test after every update
Compare quotes by listing what each one includes against those points, rather than by the headline price. A plan that looks smaller often leaves out the renewals or the content changes, which then come back as separate bills.
Small changes add up over a year as well. A provider that charges for every edit can cost more than one that includes routine updates, so estimate how often your prices, team or opening hours change before choosing a plan.
Questions to Ask a Website Maintenance Provider
The right questions show what a provider will do without being asked and what you will have to chase. Ask each of these before signing up and compare the answers side by side.
- Which updates, backups and security checks are included and how often each one runs
- How you will hear about a problem and who fixes it
- Whether the domain and security certificate renewals are handled for you
- How content changes are requested and which ones are included
- Who owns the domain, the content and the website files if you leave
- Whether you get a written list of every account and login the website depends on
Ownership is the answer that matters most if the relationship ends. A provider that holds the domain or the files in its own name can make leaving slow, so get ownership confirmed in writing at the start.
Our guide to choosing a WordPress support and maintenance provider covers contracts and response times in more detail. It is written for websites that run on WordPress, where the update work is heavier than on a simple small business website.
How Rapid Websites Handle Maintenance
A Rapid Website removes most of the maintenance jobs from the owner’s list, because the provider looks after the website once it is live. Rapid Websites from Priority Pixels are set up so the owner has nothing to maintain and no system to learn. When something needs changing, the owner says what it is and the team makes the change.
Each Rapid Website is hosted on Priority Pixels servers and monitored, with a free SSL certificate that renews automatically. The owner does not have to track a certificate expiry date or watch for the website going offline.
Changes after launch can be covered by a monthly support option or paid for as they are needed. The build and the monthly hosting are agreed up front and the domain, the content and the website files belong to the business.
For an owner who would rather not manage updates, renewals and backups at all, that arrangement takes most of the jobs in the table above off the list. Whoever looks after your website, ask for the account list, the ownership terms and the support arrangement in writing before you sign.
FAQs
How often does a small business website need maintenance?
Security updates, backups and a test of the contact form are worth doing every month, while domain and certificate renewals follow their own expiry dates. Content such as prices, opening hours and team details should be reviewed whenever the business changes and at least once a quarter.
How much does website maintenance cost for a small business?
The cost is driven by how the website is built, how many content changes are included and whether hosting, renewals and backups are part of the plan. Compare quotes on what each one includes rather than on the headline price, because plans that leave out renewals or changes tend to cost more once those bills arrive.
Can you maintain a small business website yourself?
A simple website can be maintained by its owner, as long as someone sets aside time each month for updates, backups and content checks. The jobs that slip are usually the ones without a deadline, such as testing the contact form or restoring a backup to check it works.
Is website hosting the same as website maintenance?
Hosting keeps the server that runs the website online, while maintenance covers the updates, backups, renewals and content changes on the website itself. Some providers bundle the two, so check exactly which jobs a hosting plan includes before assuming the website is being looked after.