WordPress Support & Maintenance
WordPress and WooCommerce maintenance from €300 a month: updates, backups, security, hacked-site cleanup and small changes, by an award-winning WordPress team.
What a month of maintenance covers
The retainer is for everything that keeps a live WordPress site safe, fast and current once the build is finished: updates, backups, security, and the small changes a business needs every few weeks. It runs from €300 to €1,000 a month. Where your site falls in that range depends on how big it is, how often it changes, and whether it takes payments, and the figure is agreed before anything starts.
Every month you get a short note, in plain language: what was updated, what we held back and why, and anything that needs a decision from you. If nothing needed doing, the note says that too.
WordPress is what we build
The team behind this has been building WordPress and WooCommerce sites since 2021. That work won the TechBehemoths Award for WordPress in Hungary in 2024 and again in 2025, and Clutch listed us among the top WordPress developers in Budapest in 2025. Maintenance is the other half of the same job: we know where a WordPress site tends to break because we have built the parts that break.
Hacked right now?
Do not wait for the monthly cycle. Contact us with the address of the site and what you are seeing: spam pages in Google, redirects to casinos, an admin user you did not create. We reply within one business day and tell you what it looks like before we quote. Cleanup is billed at our hourly rate of €25 to €45.
If you want to understand the infection first, we have written up three of the most common:
- The Japanese keyword hack, which fills Google with spam pages under your domain
- The casino redirect hack, which sends some of your visitors somewhere else
- Fake plugin malware, which hides a backdoor in something that looks legitimate
Where we are the wrong choice
If you need someone on call around the clock, a hosting company's managed WordPress plan will suit you better than a retainer with a small team. If your site has a few pages and never changes, automatic updates and a good host may be all it needs, and we will tell you that rather than sell you a contract. And if the site is beyond saving, we would rather say so and quote a rebuild than spend your money keeping it alive.
Working across Europe
We are based in Budapest and work remotely with clients across Europe, on Central European Time, so a problem reported in Prague, Berlin, Vienna or Amsterdam in the morning is being worked on the same day. Briefs and calls are in English or Hungarian. The pricing page has every rate in one place, and web design and development covers new builds.
How it works
- Updates that are tested, not just clicked
- Core, theme and plugin updates are where most WordPress sites break, and most of them break quietly: a form that stops sending, a checkout that fails on one payment method. We update on a staging copy first, check the pages and flows that make you money, then update the live site. When a plugin update is not safe yet, we hold it back and tell you why.
- Backups you have actually seen restored
- A backup nobody has restored is a hope, not a backup. We keep off-site copies on a schedule that fits how often your site changes, and we test a restore, so the day you need one is not the day you find out it does not work.
- Security as routine work
- Abandoned plugins removed, admin accounts reviewed, logins hardened, file changes watched. Most WordPress compromises come in through an outdated plugin or a reused password, and both are boring to prevent and expensive to clean up.
- Small changes without a new project
- New pages, copy and image changes, a form field, a plugin swap, a WooCommerce setting. The retainer covers the steady trickle of small jobs that otherwise sit in a queue because each one feels too small to brief an agency for.
- If it has already been hacked
- Japanese keyword spam, casino redirects and fake plugins are three of the most common infections. A cleanup is more than deleting files: the backdoor has to be found or it comes back, and the spam pages Google has indexed have to be removed from search, which most cleanups skip. That part can take weeks, and we tell you so at the start.
What is and is not included
Included
- WordPress core, theme and plugin updates, tested on staging first
- Scheduled off-site backups, with a tested restore
- Security hardening and monitoring for file changes
- Uptime checks, and a fix when something breaks
- Small content and layout changes within the agreed monthly hours
- A short monthly note: what was updated, what was held back, what needs a decision
Not included
- Redesigns and new features, which are quoted as projects
- Premium plugin and theme licences, which stay in your name
- Hosting fees, unless agreed separately
- Ongoing SEO and content work, which is its own service
What we build it with
- WordPress
- WooCommerce
How much does WordPress maintenance cost?
Can you take over a site someone else built?
My site has been hacked. Can you clean it up?
Do you maintain WooCommerce shops?
Do we have to host with you?
Can we stop the retainer?
Tell us what you are trying to ship.
Start a conversation ↗