{"id":6806,"date":"2026-10-15T00:00:45","date_gmt":"2026-10-14T22:00:45","guid":{"rendered":"https:\/\/tulipemedia.com\/?p=6806"},"modified":"2026-10-15T00:02:41","modified_gmt":"2026-10-14T22:02:41","slug":"maintenance-site-wordpress-prix","status":"publish","type":"post","link":"https:\/\/tulipemedia.com\/en\/maintenance-site-wordpress-prix\/","title":{"rendered":"WordPress website maintenance: what does it cover, and how much does it cost?"},"content":{"rendered":"<div class=\"wlx-intro\">A WordPress site isn&#039;t a printed brochure you just tuck away in a drawer. It&#039;s software, with dozens of components that evolve every week. Maintenance is what keeps it secure, fast, and functional. Expect to pay between \u20ac50 and \u20ac150 (excluding VAT) per month with a freelancer, more with an agency, or one to two hours per month if you do it yourself. Here&#039;s what that covers, what you don&#039;t need, and how to choose the right option.<\/div>\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">What proper maintenance covers<\/h2>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Updates<\/strong> of WordPress, extensions and theme. Not by blindly clicking &quot;update all&quot;: by checking that nothing breaks afterwards.<\/li>\r\n\r\n\r\n\r\n<li><strong>Backups<\/strong>, Automatic backups, stored somewhere other than the website&#039;s server, and above all, tested. A backup that has never been restored is a gamble.<\/li>\r\n\r\n\r\n\r\n<li><strong>Security<\/strong> : monitoring for known vulnerabilities, firewalls, passwords and administrator accounts up to date.<\/li>\r\n\r\n\r\n\r\n<li><strong>Surveillance<\/strong> : be alerted if the site goes down, if the security certificate expires, if the contact form stops sending anything.<\/li>\r\n\r\n\r\n\r\n<li><strong>The performance<\/strong> : a website that slows down loses visitors and rankings on Google.<\/li>\r\n\r\n\r\n\r\n<li><strong>The household<\/strong> : unnecessary extensions, forgotten accounts, old tracking codes lying around.<\/li>\r\n\r\n\r\n\r\n<li><strong>A little time for small modifications<\/strong> : change a schedule, add a page, correct a text.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">What happens when you do without it<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The most well-known scenario is hacking. And this isn&#039;t science fiction: according to Patchstack, a WordPress security specialist, <a href=\"https:\/\/www.lyntonweb.com\/library\/wordpress-security-debt\" target=\"_blank\" rel=\"noopener\">11,334 new vulnerabilities were discovered in the WordPress ecosystem in 2025<\/a>, up 42 % year over year, and 91 % of them concerned extensions, not WordPress itself.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">I also see the other side of the coin: as an author of plugins published on the official WordPress plugin directory, I know that a reported vulnerability is generally patched quickly. However, this assumes the update is actually installed. A site that is never updated remains exposed to vulnerabilities that were fixed months ago, and these are the ones that hackers&#039; bots target first.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">But hacking isn&#039;t the only risk, and not necessarily the most frequent. Silent failures are more insidious:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>the contact form that hasn&#039;t sent anything for three weeks, and nobody seems to notice;<\/li>\r\n\r\n\r\n\r\n<li>an automatic update that breaks the layout of a key page;<\/li>\r\n\r\n\r\n\r\n<li>online payment that no longer works on a store;<\/li>\r\n\r\n\r\n\r\n<li>an extension abandoned by its author, which will never be corrected again;<\/li>\r\n\r\n\r\n\r\n<li>a site that slowly slows down, month after month, until it drops out of Google.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">While auditing my own site, I actually found an old tracking code that had been forgotten for years in a plugin setting, and a broken link to a client&#039;s site. Nothing serious, but it&#039;s exactly the kind of detail that accumulates when no one is paying attention.<\/p>\r\n\r\n\r\n<div class=\"wlx-warning\">\r\n        <div class=\"wlx-warning-label\">Attention<\/div>\r\n        Repairing a hacked site generally costs much more than a year of maintenance: cleaning, restoration, sometimes data loss, and weeks to regain its place in Google if the site has been flagged as dangerous.\r\n    <\/div>\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">How much does WordPress maintenance cost?<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Prices vary considerably depending on what&#039;s included. Here are the price ranges I&#039;ve observed on the market for a showcase website:<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-table is-style-stripes\">\r\n<table class=\"has-fixed-layout\">\r\n<thead>\r\n<tr>\r\n<th>Formula<\/th>\r\n<th>Indicative price<\/th>\r\n<th>What we obtain<\/th>\r\n<\/tr>\r\n<\/thead>\r\n<tbody>\r\n<tr>\r\n<td>Do it yourself<\/td>\r\n<td>Your time, one to two hours per month<\/td>\r\n<td>What you put in there, with the risk of not knowing how to fix it<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>Basic package<\/td>\r\n<td>\u20ac20 to \u20ac50 excluding VAT \/ month<\/td>\r\n<td>Automated updates and backups, rarely more<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>Independent, full package<\/td>\r\n<td>\u20ac50 to \u20ac150 excluding VAT \/ month<\/td>\r\n<td>Updates tested, backups, security, monitoring, a little time for modifications<\/td>\r\n<\/tr>\r\n<tr>\r\n<td>Agency<\/td>\r\n<td>\u20ac100 to \u20ac300 excluding VAT per month and more<\/td>\r\n<td>Same scope, often with intervention times guaranteed by contract.<\/td>\r\n<\/tr>\r\n<\/tbody>\r\n<\/table>\r\n<\/figure>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">For an online store, plan for more: there are more extensions, payments, orders, and a breakdown directly costs revenue.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">If you&#039;d rather not have to worry about it, I&#039;ll take care of it: hosting, updates, backups, monitoring, and a little time each month for your changes or questions, with no commitment. The included hosting means you don&#039;t have to deal with two people if something goes wrong. Everything is detailed on my <a href=\"\/en\/services\/\">Services page<\/a>.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">If you do it yourself: the monthly routine<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">It&#039;s perfectly possible if you&#039;re comfortable with it. Here&#039;s the minimum routine, once a month:<\/p>\r\n\r\n\r\n\r\n<ol class=\"wp-block-list\">\r\n<li>Verify that a recent backup exists, and that it is stored off the server.<\/li>\r\n\r\n\r\n\r\n<li>Update the extensions, theme and WordPress, then browse the main pages of the site.<\/li>\r\n\r\n\r\n\r\n<li>Send a test message from the contact form, and place a test order if you sell online.<\/li>\r\n\r\n\r\n\r\n<li>Open the WordPress &quot;Site Health&quot; tool (in Tools) and read the alerts.<\/li>\r\n\r\n\r\n\r\n<li>Remove disabled extensions and administrator accounts that are no longer in use.<\/li>\r\n<\/ol>\r\n\r\n\r\n<div class=\"wlx-info\">\r\n        <div class=\"wlx-info-label\">Namely<\/div>\r\n        WordPress&#039;s automatic updates are useful for security patches, but they don&#039;t replace a check. An update can install correctly and break a page at the same time.\r\n    <\/div>\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">The right questions to ask before signing a contract<\/h2>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li><strong>Are the updates verified?<\/strong> after installation, or simply launched?<\/li>\r\n\r\n\r\n\r\n<li><strong>Where are the backups stored?<\/strong>, How long are they preserved, and has restoration been tested before?<\/li>\r\n\r\n\r\n\r\n<li><strong>What happens in case of hacking?<\/strong> Is cleaning included, and within what timeframe?<\/li>\r\n\r\n\r\n\r\n<li><strong>How long will the modifications take?<\/strong> is included each month, and what is the cost of an additional hour?<\/li>\r\n\r\n\r\n\r\n<li><strong>Is there a commitment?<\/strong>, And can you leave with your access, your domain name and your website at any time?<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">If the service provider hesitates over one of these answers, that&#039;s a red flag. Maintenance should be offered, not imposed, and always cancellable. I also discuss this in my article on <a href=\"\/en\/prix-site-vitrine-wordpress\/\">the price of a WordPress showcase website<\/a>.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">In short, maintenance is like car servicing: you can do without it for a while, you always pay for it one day, and it&#039;s always more expensive when you wait for it to break down.<\/p>\r\n\r\n\r\n<div class=\"wlx-tip\">\r\n        <div class=\"wlx-tip-label\">What I would do in your place<\/div>\r\n        Open &quot;Tools, then Site Health&quot; in your WordPress admin panel today and run a test submission from your contact form. In two minutes, you&#039;ll know if your site is healthy. If you&#039;d rather not worry about it anymore, I can take care of it: we can discuss it in 30 minutes.\r\n    <\/div>\n\r\n\r\n\r\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\r\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/en\/contact\/\">Book a 30-minute call<\/a><\/div>\r\n<\/div>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\r\n\r\n\r\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\">\r\n<summary>My hosting provider already makes backups, is that sufficient?<\/summary>\r\n\r\n<p class=\"wp-block-paragraph\">It&#039;s a good start, but not maintenance. Hosting providers&#039; backups are often stored in the same location as the website and are kept for only a short time. And they don&#039;t update anything, monitor anything, or fix anything.<\/p>\r\n<\/details>\r\n\r\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\">\r\n<summary>Are automatic updates enough?<\/summary>\r\n\r\n<p class=\"wp-block-paragraph\">They address part of the problem, especially for security patches. But no one checks that the site still works afterward. On a site that brings you customers or sales, human verification remains essential.<\/p>\r\n<\/details>\r\n\r\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\">\r\n<summary>What should I do if my website is hacked?<\/summary>\r\n\r\n<p class=\"wp-block-paragraph\">Don&#039;t delete anything hastily. Change your passwords (administration, hosting, database), notify your hosting provider, and hire a professional to clean the site and restore a clean backup. Only then should you investigate how the hackers gained access and plug the hole.<\/p>\r\n<\/details>\r\n\r\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\">\r\n<summary>Is maintenance mandatory after a website is created?<\/summary>\r\n\r\n<p class=\"wp-block-paragraph\">No, and be wary of any service provider who insists on it. But if you don&#039;t entrust it to anyone, you have to do it yourself. A neglected WordPress site will always end up causing problems.<\/p>\r\n<\/details>","protected":false},"excerpt":{"rendered":"<p>Ce que couvre vraiment une maintenance WordPress, ce qui arrive quand on s&rsquo;en passe, combien \u00e7a co\u00fbte selon la formule, et les bonnes questions \u00e0 poser avant de signer.<\/p>","protected":false},"author":17,"featured_media":6813,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[160],"class_list":["post-6806","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress","tag-gestion-site-wordpress"],"_links":{"self":[{"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/posts\/6806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/comments?post=6806"}],"version-history":[{"count":2,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/posts\/6806\/revisions"}],"predecessor-version":[{"id":6814,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/posts\/6806\/revisions\/6814"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/media\/6813"}],"wp:attachment":[{"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/media?parent=6806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/categories?post=6806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tulipemedia.com\/en\/wp-json\/wp\/v2\/tags?post=6806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}