Monthly Website Care: 10 Jobs That Should Be Done Every Month

A website care subscription is unusual: when the work goes well, nothing is visible. No incidents, no news, no problems. Precisely because of that, many website owners quietly ask, “What am I actually paying for each month?”

That question is fair, and the answer should be easy to write down. This article details ten jobs a care provider should do every month, with ways to check them without technical skill. Use this list as a measuring stick, whether you are a subscriber or just comparing quotes.

Before the details: if you are still weighing the general shape of the service, the big picture is in our article on website maintenance services. The article you are reading now focuses on the monthly job details.

1. System, theme, and plugin updates

Website components release updates almost every week, and most carry security fixes. Postponing means leaving a known door open. But updating by clicking blindly is not the answer either, because some updates cause conflicts.

Proper care updates on schedule, starts with a backup first, and ideally tests in a separate environment before touching the live website. For WordPress users, the safe order is set out step by step in our guide to updating WordPress plugins safely.

2. Backup and its verification

An automatic backup running is the standard. What separates providers is the verification: whether the backup file is genuinely created, whether its size is sensible, and whether it can be restored. A backup that has been silently failing for three months is worth the same as no backup.

Monthly care should include periodic checks of this process, and occasional restore tests in a separate environment. The full reason this matters so much is in our article on the importance of website backups.

3. Security scanning

Every month the website is scanned for signs of infection: files changed when they should not be, foreign code inserted, or unknown admin accounts. Most small hacks are invisible from outside, and are only discovered months later when the damage has spread.

Routine scanning changes the scenario. A hack detected on day one is an hour of work. One detected in the fourth month is a major recovery.

4. Uptime and speed checks

A cared-for website is watched for availability all the time, and the results are summarised monthly. A healthy uptime figure is above 99.9 percent. Below that, there is a hosting or configuration problem to discuss.

Speed is also measured periodically, because websites tend to slow down gradually as updates and content accumulate, without any single change feeling like the cause. A declining trend caught in the monthly report can be corrected before visitors feel it.

5. Testing forms and critical features

The contact form is the lead intake channel, and it can break silently: changed email settings, an expired plugin, or a hosting provider changing sending rules. The result is fatal because it is invisible: a potential customer believes they have contacted you, while the message never arrived.

Monthly care should send a test message through the form and confirm it reaches the destination, including the cart and checkout process for online stores.

6. Broken-link and error-page checks

Pages not found, links pointing to old pages, and images that fail to load. Each looks minor, but in large numbers they damage the professional impression and lower website quality in the eyes of search engines. Periodic checks keep the count at zero.

7. Content updates within the allowance

A website whose content does not move for a year sends the wrong signal, both to visitors and to Google. Care plans generally include a content-update allowance: replacing information, updating service pages, uploading articles, or adding products.

This is the part you can most easily judge yourself. If three months pass with not a single content update, that allowance has gone somewhere.

8. Watching domain, hosting, and SSL expiry

All three have expiry dates, and missing just one takes the website down completely. Good care records all these deadlines and warns well before they fall due, or handles the renewals as well.

It sounds impossible to miss, yet it happens very often, usually because the reminder went to an email nobody opens any more. The story and the rescue steps are in the article on a domain and hosting whose term expired.

9. Small fixes and adjustments

Every month there is always something small: text that needs replacing, a new image, a layout that shifted after an update, a button that does not work on mobile. Care plans usually include an allowance for small work like this, and this is exactly where the value of a subscription is felt day to day.

What needs to be settled at the start is the boundary: how many small jobs per month, and what counts as small work versus a separate project.

10. The monthly report

The nine jobs above are summarised in one report you can read in five minutes. At minimum it contains: the list of updates installed, backup status and location, security scan results, uptime figures, and other work done.

This report is the answer to “what am I paying for each month”. A provider who cannot show a report is asking you to simply trust them, and trust without evidence is not the foundation of a long partnership.

What a month in the care cycle looks like

So the ten points above do not feel abstract, here is the working calendar in a normal month.

At the start of the month, all components awaiting updates are inventoried and ordered: security patches first, feature updates later. This work is usually spread over several sessions through the month rather than piled into one day, so that if a conflict appears, its cause is easy to trace.

Through the month, backup and monitoring run automatically in the background, and their results are verified periodically by a human, not only by the system. The middle of the month is usually used for visible work: publishing new content, updating pages, and working through the list of small adjustments you have sent.

Towards the end of the month, everything is closed out with the report: what was updated, scan results, uptime figures, and the work done. The next month starts again from the updated list. This cycle is what makes proper care feel boring — and boring is the goal.

Work that is not part of the monthly plan

So expectations line up, some work is not part of the monthly subscription and is reasonably billed separately:

• Redesign or a major visual overhaul, because that is project work with its own stages.
• Building new features such as payment integration or a booking system, billed hourly or per project.
• Recovery from major damage that existed before subscribing, such as a website already badly infected. This is dealt with first as a separate job, after which the monthly cycle maintains it.

A good provider states these boundaries upfront along with their prices, so you do not discover them through an invoice.

How to use this list as a measuring stick

If you are a subscriber, compare your last report with the ten points above. Points missing from the report are usually missing from the work too.

If you are comparing quotes, ask this list directly: which jobs are included, at what frequency, and does the result appear in the report. The answers to those ten questions also show how tidy the provider’s process is. Price details per scope can be compared against the article on monthly website maintenance costs.

One note on price: a plan covering all ten jobs will not be the cheapest quote you receive. But the cheapest plan usually reaches its price by trimming exactly these invisible jobs, until one day their absence is felt all at once.

Frequently asked questions

My website is quiet and rarely changes. Does monthly care still make sense? It is precisely a quiet website that is most at risk of becoming a nest of problems without anyone realising, because nobody opens it routinely. A small hack can run for months before being noticed. Even for a genuinely passive website, the first four jobs on this list — updates, backup, scanning, and monitoring — are still not optional.

If this month’s content-update allowance goes unused, is it lost? Policies differ between providers, and this is worth asking upfront. What matters is this: an unused allowance is not a reason to let content die, because the greatest benefit lies in consistency, not in any one month’s quantity.

What if I want to stop midway? On a healthy monthly plan, you stop with short notice, and all access and data copies are handed over. Be careful with cheap plans that can only be cancelled after a year, because that is usually where the price is paid back.

How long before the benefits show? Security and backup benefits apply from the first month. Speed benefits usually appear within one to two months after the initial tidy-up. Content and SEO benefits need more patience, generally three to six months of consistency before the graph moves.

Do all monthly plans definitely cover these ten jobs? No — and this is exactly where price comparisons often deceive. Two plans with the same name can contain very different things: one tests before updating, one deploys directly; one stores copies off-site, one piles them on the same server. This list of ten jobs is what makes the comparison fair, because you compare contents, not plan names. Ask for written answers on each point before subscribing; written answers are far harder to take back later, especially when you need them most.

Next step

Want to know where these ten jobs stand for your website right now? Request a free website health audit. We check backup condition, update status, security, and speed, then report the results in language you can use immediately to make decisions.

If afterwards you want to see the plan shape covering all the points above, the list is published openly on the plans and pricing page, complete with the scope of each tier.