WordPress maintenance that tests before it touches production.

Not hackers, mostly. Updates. A plugin update changes a hook, the theme expected the old one, and the checkout button disappears on a Friday evening. The second cause is neglect: a site nobody updated for eight months, running a plugin with a known vulnerability, until it isn't yours anymore.

Maintenance is the boring, scheduled work that prevents both. It sits behind our WooCommerce webshops across the Netherlands and Belgium — and it works just as well on a site someone else built.

Updates — the right way

• WordPress core, plugins and theme updated on staging first
• Automated visual check of key pages before and after (home, product, cart, checkout, account)
• Then production, in a low-traffic window, with a fresh backup taken seconds before
• Rollback within minutes if anything regresses
• Plugin changelogs read; major-version updates scheduled and tested separately

Security

• Hardened configuration: renamed login, two-factor for admins, rate-limited login attempts, XML-RPC off, file editing disabled, security headers
• Web application firewall at the host or Cloudflare level
• Daily malware scan; vulnerability feed matched against your installed plugins
• Immediate patching when a critical vulnerability is published for something you run
• Quarterly review of users, roles and API keys

Backups

• Daily off-site backups (files + database), 30-day retention
• Monthly restore test to a staging environment — a backup you've never restored is a hope, not a backup
• Pre-update snapshots kept for 7 days

Monitoring

• Uptime checks every minute from three regions; alerting to us and, if you want, to you
• SSL expiry, domain expiry, DNS change alerts
• Performance check monthly (Core Web Vitals), with a note if something drifted
• For shops: a daily synthetic test order through to the payment page so a broken checkout is caught before a customer finds it

Small changes

Two hours a month (one hour on the €50 plan) for text edits, new banners, a plugin setting, a new form field, a product template tweak. Unused hours don't roll over; larger work is quoted separately and you'll always know before we start.

Reporting

A short monthly email: what was updated, what was blocked, uptime, backup status, hours used. Not a dashboard you'll never open.

No setup fee for sites we built; €150 onboarding for others, which covers a full audit, hardening and the first staging environment. See how pricing works → or read how we work →.