5 Ongoing Website Costs Almost No Agency Tells You About.
The number on your website quote is the cheapest part of owning a website. Everything after launch is where the real money is spent, and almost none of it was on the page you signed.
That’s not a scam. It’s a gap in how most companies quote. We’ve compiled a list of the five ongoing costs every website has and what’s normal to pay for each. You’ll also see how to get the real number before you ever sign.
Why the quote stops at launch
A website quote covers building the thing. Design, copywriting, setup, launch. That’s the project, so that’s what gets priced. The upkeep is a separate bill in itself and it’s easy for a designer to just leave it off, especially if they don’t plan on handling it themselves.
A lot of year-one prices are intro prices designed to attract customers. Your domain, your hosting, and your plugins were probably bought on a first-year deal. When they renew, they generally renew at a higher rate.
The better way to think about it: a website is a five-year purchase, not a one-time one. Most small business sites run three to five years before a redesign. Budget for the whole run and most of the surprises go away.
5 costs that show up after launch
1. Hosting and SSL
Hosting is the server your site lives on. SSL is the certificate that puts the padlock in the browser bar and keeps Chrome from calling your site “Not Secure.”
For a simple business site, hosting built for WordPress runs about $10 to $30 a month on intro pricing and $15 to $50 once it renews. Cheap shared plans start lower. They tend to charge extra for the things you’ll need anyway, like backups, restores, and security.
SSL is often free now. The catch is that free certificates expire every few months and have to renew automatically. When that breaks, your site shows visitors a warning page, damaging trust and driving away traffic.
2. Domain and email
Your domain is your address online, and you rent it by the year. A .com usually runs $10 to $20 the first year. Renewals can jump to $25 or more, and add-ons like privacy protection stack on top.
Email is the one that catches people. An address like you@yourbusiness.com doesn’t come with the website. It’s a separate service, usually billed per person per month. Five employees means five mailboxes. Most owners find this out when the first invoice hits their account.
3. Software updates and plugin licenses
A WordPress site has three layers that need updating: WordPress itself, the theme, and the plugins. Updates patch security holes and keep everything working together. Someone has to run them, check that nothing broke, and fix it when something did.
Then there are premium plugins. Form builders, page builders, and SEO tools often come with a yearly license. A typical business site with five to eight of them spends $300 to $800 a year on renewals. They tend to come due around the same date, one year after launch. That’s the year-two surprise.
4. Security and backups
Security means malware scanning plus a firewall that blocks bad traffic before it reaches your site. Backups mean a copy of your whole site stored somewhere other than your server. It should be saved frequently, so the most you’d ever lose is a marginal amount of data.
Here’s the part people skip: a backup nobody has ever restored is a guess. Ask whoever handles yours when they last tested one. If they can’t answer, you don’t really know if you have a backup.
5. Edits and changes
Your hours change. You add a service. You hire someone and want their photo on the about page. Every one of those is a change to the site, and somebody has to make it.
Some plans include a set amount of edit time each month. Most bill by the hour, usually somewhere between $75 and $200. Neither setup is wrong. Just know the rate before you need the change, not after.
What skipping upkeep costs you
Skipping upkeep feels like saving money. It isn’t. It just moves the bill to a worse day.
Here’s what that bill looks like. An emergency fix after a plugin update breaks your site runs $50 to $300 per incident. Malware cleanup on a small business WordPress site usually costs $300 to $1,800. If you sell online, it can run $1,800 to $6,500 or more. And if a cheap host turns out to be the problem, moving to a better one and cleaning up the mess costs $700 to $6,000.
None of that counts the days your site was down or showing spam to your customers. For a business that gets most of its calls from Google, a few days offline can cost more than the repair.
Now the five-year view. Upkeep usually runs 15 to 30 percent of the build cost every year. On a $5,000 site, that’s $750 to $1,500 a year. Over five years, that’s $3,750 to $7,500, anywhere from most of what you paid to build the site to well past it. That’s normal. What’s not normal is finding out after you sign.
Quick answers to the questions people ask
1. How much does it cost to maintain a website per month?
For a simple small business site, expect $150 to $200 a month for hosting, updates, security, and backups. Sites with online booking or a store run higher, often $200 to $500. Domain renewal and business email are sometimes billed separately, so ask whether they’re included.
2. Is hosting the same as website maintenance?
No. Hosting is the server your site runs on. Maintenance is the work of keeping the site updated, secure, and backed up. Many managed hosts handle the server but not plugin updates, fixes, or security checks. You usually need both, whether that’s one plan or two.
3. What happens if I don’t update my website?
Outdated plugins and themes are the most common way small business sites get hacked. Skip updates long enough and something eventually breaks, gets infected, or stops working with the rest of the site. The fix almost always costs more than the updates would have.
4. Do I have to pay for website maintenance?
You can do it yourself if you have the time and know WordPress. Most owners don’t want to. Skipping it entirely doesn’t save the money. It’s a bet that you’ll never need an emergency fix, and that’s not a bet worth making on a site that brings in customers.
5. How to get the real number before you sign
Ask for two monthly numbers in writing: what the site costs to run in year one, and what it costs in year two. Have both broken out against the five costs above. Anything missing from the list is coming out of your pocket later.
Here’s how that looks at Kept…
The base maintenance plan ranges between $150-$250 a month based on build. It covers hosting, SSL, domain renewal, WordPress and plugin updates, backups, malware scans, and fixing WordPress errors and plugin conflicts. If your site needs premium plugins, those licenses show up as their own line in your quote. You see that number before the site launches, not when it renews.
A low monthly price isn’t a good deal until you know what it leaves out. The five costs don’t disappear because a quote skipped them. They show up later, either on your card or as an emergency.
Not sure what your current plan covers? Send me what you’re paying and who you’re paying it to. I’ll tell you what’s covered, what isn’t, and whether you’re overpaying. No charge, no pitch.