Every web agency in Australia offers a maintenance plan. Every plan reads slightly differently. Most include between 12 and 30 line items, and most of those line items are padding designed to make the monthly fee feel justified. For a business owner trying to compare two or three quotes side by side, sorting the must-haves from the filler is genuinely difficult.
After twelve years running maintenance plans for Australian businesses, here is the honest version. The five things that absolutely have to be there, the four that are nice to have, and the three that are pure padding designed to inflate the line count.
The five must-haves
1. Core, theme, and plugin updates. WordPress core gets patched roughly every six weeks. Major plugins like security tools, SEO plugins, and form plugins ship updates more often. A maintenance plan that does not actively apply these (and test that nothing breaks afterwards) is not actually maintaining the site, it is just billing for an inbox.
2. Daily offsite backups with tested restore. Daily is the floor, not the ceiling. The critical word is “tested”. A backup that has never been restored is not a backup, it is a hope. A genuine maintenance plan tests a restore at least quarterly to confirm the data actually comes back when needed.
3. Uptime monitoring with response. Every plan claims uptime monitoring. Few define what happens when the monitor fires. A useful plan specifies a response time (15 minutes, 30 minutes, an hour) and what gets investigated. Without that, monitoring is just a graph nobody looks at.
4. Security scanning and remediation. Plugin vulnerabilities get disclosed weekly. A real plan includes vulnerability scanning, patches the affected plugins quickly, and remediates if the site has been compromised. The remediation part is what costs real money on an ad-hoc basis (often $1,500 to $8,000), and is the part most maintenance plans quietly exclude unless you upgrade.
5. A real human you can contact. Not a help desk ticket queue. A named account person who knows your site, who can answer a Slack message or a phone call within business hours, and who follows up. Maintenance is mostly invisible. The human is the part that proves it is happening. Defyn’s maintenance plans are built around exactly that model.
The four nice-to-haves
1. Monthly performance review. A short look at speed scores, Core Web Vitals, and broken links once a month. This catches drift before it becomes a customer complaint. Not life-or-death, but quietly useful.
2. Small content updates included. Most plans include 30 minutes to 2 hours per month of “included content edits”. This is genuinely useful for businesses where the in-house team would rather not learn the page builder. Be aware that it is a soft limit. Most months you will not use it, and the agency will not bank it.
3. SSL renewal and DNS health. Most modern hosting handles this automatically now. It is still useful to have an agency that watches for the rare case where it does not, but it is no longer the dramatic value-add it was in 2018.
4. Quarterly health report. A short PDF or dashboard showing what was done that quarter. Useful for accountability and useful when explaining to a boss or board why the maintenance budget exists. Not a deal-breaker, but a sign of agency maturity.
The three padding items
1. “Cache management”. This usually means “we will hit the clear-cache button if you ask”. On managed hosting, caching is automatic. Including this as a line item makes a plan look bigger than it is.
2. “Database optimisation”. WordPress databases on properly hosted sites do not need monthly optimisation. They self-clean. This is a line item that survives in plans because it sounds technical, not because anyone actually does it more than once a year.
3. “Quarterly SEO check”. Genuine SEO work takes hours per month, not a 15-minute glance. If SEO is included for free in a $99-per-month maintenance plan, it is almost certainly not real SEO. It is somebody looking at Google Search Console for five minutes and shrugging.
What to ask before signing
Three questions cut through most of the padding. Ask the agency: how often is a restore actually tested? Who specifically will answer my emails, and how quickly? What is the process if the site goes down at 9pm on a Saturday?
The answers tell you whether the maintenance plan is genuinely covering you, or whether it is a recurring invoice that nothing meaningful happens against. If you are not sure whether your current plan is doing real work or just billing, Defyn will review your existing arrangement and tell you in plain terms whether you are getting value for the spend, or quietly paying for very little.
