What's included, every month

Updates, tested — WordPress core, plugins and themes updated weekly; checkout, forms and login checked after each round, rolled back if anything breaks.
Daily off-site backups — kept for 30 days, with a restore test every month.
Security patching — PHP and plugin vulnerabilities patched as they're disclosed (PHP2Shell / CVE-2026-109618 included), plus a malware scan.
Uptime and SSL monitoring — checked every 5 minutes; you're told if the site goes down or the certificate is about to expire.
A short monthly report — what was updated, patched and checked.

Not included

New features, redesigns and bug fixes beyond the update checks. Those are a $99 starter task or the monthly development plan.

Subscribe — $49/month in USD through PayPal.
Share access — a WordPress admin login and hosting or SFTP access, through your client portal.
First check within 48 hours — a baseline backup, an update round and a security scan, then the monthly routine.

Not sure your site needs it? Run a free speed and security audit first.