What maintenance actually is, and is not
Plenty of owners around DC pay a monthly website fee and could not tell you what it buys. Maintenance is not hosting, and it is not a retainer for someday redesigning things. It is the routine work that keeps the site fast, secure, and recoverable: software updates, backups that have actually been restored at least once, someone noticing when the site goes down, and a short report proving it all happened.
If your site is WordPress, this work is not optional — its plugins are patched constantly, and unpatched plugins are how most small-business sites get hacked. If your site is custom-built or on a modern managed platform, there is less to patch, and the plan should cost less accordingly. A good vendor will tell you which situation you are in instead of charging everyone the same.
The four things every real plan covers
- Updates. Core software, themes, and plugins applied on a schedule, ideally tested on a staging copy first so an update cannot take down your live site.
- Tested backups. A backup you have never restored is a hope, not a backup. Ask when they last performed a test restore for any client and how long it took.
- Monitoring. Uptime checks that page a human when the site goes down, plus malware and blacklist scanning so you are not learning about a hack from a customer.
- Reporting. A monthly note in plain English: what was updated, what broke, backup status, uptime, and anything that needs a decision from you. If a vendor resists reporting, it is usually because there is nothing to report.
Questions that expose a hollow plan
A few questions separate real plans from hollow ones fast.
- When did you last restore a backup, and how long did the site stay down? Vague answers mean it has never happened.
- What exactly happens when my site goes down at 9pm on a Saturday? You want a monitoring alert and a defined response time, not whenever someone checks email.
- If the site gets hacked, is cleanup included or billed separately? Either answer is acceptable — not knowing is not.
- What did you do for a client like me last month? A real operation can describe last month specifically.
- Do small content changes count against my plan, and how many? Unlimited usually means undefined, and undefined arguments come later.
You are not testing their expertise with these questions. You are testing whether the service exists.
What fair pricing looks like in the DC area
Prices vary, but around the DC area the shapes are consistent enough to give honest ranges.
Basic care for a simple brochure site — updates, backups, monitoring, no content work — commonly runs 50 to 150 dollars a month. Plans that include a set amount of content edits and support time usually land between 150 and 400 dollars. E-commerce or high-traffic sites, where downtime costs real revenue and there are payment systems to look after, justify 400 to 1,000 or more.
Two pricing smells worth trusting: a plan far below these ranges usually means automated updates with no human ever looking at your site, and a plan far above them should come with an itemized list of what you are getting that a 300 dollar plan lacks. Also ask what is billed hourly beyond the plan and at what rate, so surprises have a price tag in advance.
Ownership guarantees to require
Before signing anything, get ownership in writing. I have been called in to help owners whose vendor relationship went sour, and the damage always comes from the same missing clauses.
- The domain name is registered to you, in a registrar account you control. Not to the agency.
- You have admin access to your own hosting, CMS, and analytics from day one. A vendor who resists this is holding your keys hostage.
- The contract states that site files, content, and design are your property, and that on termination they hand over a complete copy within a defined number of days.
- No long lock-in. Month to month, or annual with a 30-day out, is standard for maintenance.
A good vendor agrees to all four without flinching, because good vendors keep clients through service, not hostage-taking.
How to hire one, step by step
- Write down what your site runs on — WordPress, Shopify, custom — and what your last outage or hack cost you, even roughly. That sets your budget logic.
- Get two or three proposals and put the five questions from above to each vendor, in writing, so the answers are on record.
- Check the ownership clauses before price. A cheap plan that owns your domain is expensive.
- Start with month to month, and judge the first quarter by the reports: did they arrive, and could you understand them?
- Once a year, ask for a test restore of your own site and a note of how long it took.
HashWhales offers maintenance for sites we build and sites we did not, and either way the checklist above is exactly what we would tell you to hold us to.