Website Maintenance Cost: What to Expect in Australia
Monthly maintenance plans in Australia run from about $49 to $350 excluding GST, and what sits inside them varies wildly. Here is what each tier buys, what gets billed as an extra, and what one skipped update can end up costing.
Most Australian website maintenance plans cost between $49 and $350 a month excluding GST. A standard small business site lands at $79 to $150, and that should cover core and plugin updates, offsite backups with tested restores, uptime monitoring, security scanning and a small block of content change time each month. E-commerce and booking-heavy sites start around $350.
What do the different price tiers actually get you?
Price tracks two things: how often a human being looks at your site, and how much of their time you get when something needs changing. At the cheap end you are buying automation and nothing else. Somewhere above $150 a month you start buying a person who notices when the automation goes wrong, which is the part that actually saves you money.
Here is what the Australian market looks like in practice. These are ex GST monthly figures for WordPress sites, which is what most Australian small businesses are running.
| Tier | Monthly price (ex GST) | What it typically includes | Who it suits |
|---|---|---|---|
| Automated basic | $29 to $59 | Plugin and core updates applied automatically, automated backups to the same server, a basic uptime ping. Nobody checks the site after an update runs. | Small brochure sites of five to ten pages where an outage for a day is annoying rather than expensive. |
| Standard small business | $79 to $150 | Weekly updates with a human visual check afterwards, daily offsite backups with restores actually tested, uptime monitoring with alerts, malware scanning, 30 to 60 minutes of content changes. | Tradies, consultants, accountants, allied health, most professional services sites. |
| Lead-critical | $180 to $350 | Everything above plus updates tested on a staging copy first, monthly speed and Core Web Vitals checks, forms and booking flows tested, one to two hours of changes, priority response times. | Sites producing enquiries every day, and regulated fields like legal, finance and healthcare where a broken form is a compliance problem too. |
| E-commerce or complex | $350 to $900+ | WooCommerce and payment gateway updates, checkout testing after every change, more frequent backups, database maintenance, longer support hours, sometimes a named contact. | Online shops, membership sites, multi-location booking systems, anything where an hour of downtime has a dollar figure attached. |
Anything advertised under about $25 a month is either a loss leader attached to a hosting contract or it is a cron job with a nice invoice. Both are fine if you know that is what you are buying. The problem starts when an owner assumes someone is watching, and nobody is.
Is hosting the same thing as website maintenance?
No. Hosting is the server space your site sits on. Maintenance is the ongoing work done to the software running on that space. People conflate them constantly, and a fair number of hosting companies are happy to let the confusion sit there.
Your host keeps the server up, patches the operating system, provides PHP and a database, and usually keeps some rolling backups for their own disaster recovery. That is where their duty of care ends. If your booking plugin ships an update that breaks the enquiry form, the host will tell you truthfully that the server is fine. And it is. Your site is the part that is broken.
The lines blur with managed WordPress hosting, which bundles some maintenance work into the hosting fee. Our Australian web hosting plans include the server-side security, backups and updates you would otherwise pay a separate maintenance provider to run. Whichever way you buy it, the question to ask a supplier is blunt: if a plugin update breaks a page at 2pm on a Tuesday, who fixes it and is that included?
Quick test. Ask your current provider for the date of the last successful test restore of your website, not the date of the last backup. If they cannot answer, you are paying for backups that have never been proven to work. We have opened plenty of backup archives over the years that turned out to contain a database and no uploads folder.
What should every maintenance plan include?
Five things are non-negotiable. If a quote is missing any of them, it is not a maintenance plan, it is a subscription.
- WordPress core, theme and plugin updates, applied on a schedule and followed by a human load of the homepage and at least one form. Automated updates without a check are how sites end up with a fatal PHP error sitting on the front page for a fortnight.
- Backups stored somewhere other than the web server, retained for at least 30 days, with restores tested periodically. A backup on the same server as the site is not a backup once that server gets compromised.
- Uptime monitoring at five minute intervals with an alert going to the provider, not just to you. Being told your own site is down is not a service.
- Malware and file integrity scanning, plus a firewall or security plugin that is actually configured rather than installed and forgotten.
- A stated amount of content change time. Thirty minutes a month is common at the lower tiers and it is enough for price updates, new staff photos, changing trading hours over Christmas. Vague promises of “small changes included” cause arguments later. Get a number.
An SSL certificate, PHP version management and a monthly report are usually thrown in. Worth having, not worth paying a premium for.
What gets charged as an extra?
Plenty, and reputable providers are upfront about it. The line is generally drawn between keeping the site working (included) and changing what the site does (billable).
- New pages, new sections, or restructuring the navigation.
- Design changes beyond swapping text and images.
- Premium plugin and theme licences, typically $50 to $300 a year each. Elementor Pro, a decent forms plugin and a booking system add up quickly.
- SEO work, content writing, Google Ads management. Maintenance keeps the lights on; it does not grow traffic.
- Migrations, domain and DNS work beyond routine changes, and email troubleshooting on third party mail systems.
- Recovery from a hack, if you were not on a plan when it happened.
The one to watch is the plugin licence question. A site can easily carry $400 a year in licences, and if your provider holds those licences under their own agency account you need to know what happens to them if you leave. We hand ours over. Not everybody does, and that is a lock-in mechanism dressed up as convenience.
What are ad hoc hourly rates for website work in Australia?
Expect $110 to $190 an hour excluding GST from an established Australian agency, and $70 to $120 from a competent freelancer. Emergency or after hours work is commonly billed at 1.5 times the standard rate. Most shops bill in 15 or 30 minute increments with a minimum charge per job.
Ad hoc suits businesses that genuinely change nothing for months at a time. It stops making sense at around one hour of work per month, because at $150 an hour you have already spent more than a $150 plan and you got none of the monitoring, backups or security scanning that came with it. Run the numbers on your last twelve months of invoices before you decide you are the low maintenance type. Most people underestimate.
What does skipping maintenance actually cost?
One bad incident wipes out several years of savings. That is the whole argument, and it is not hypothetical: outdated plugins are the single most common way Australian small business WordPress sites get compromised, and the cleanup bill does not care that you were trying to save $79 a month.
Below is a realistic comparison. The business is a Sydney plumber getting around 12 web enquiries a week, average job value $450, converting about 40 per cent of enquiries. The incident is a common one: an unpatched plugin vulnerability leading to injected spam pages, followed by a Google Safe Browsing warning.
| Line item | On a $79 per month plan | No plan, one incident in year two |
|---|---|---|
| Two years of fees | $1,896 ex GST | $0 |
| Malware removal and hardening | Included | $600 to $1,800 |
| Rebuilding pages with no clean backup | Not needed, restore from last night | $1,500 to $6,000 if the only backup is also infected |
| Time offline | Usually under two hours | 3 to 10 days |
| Lost enquiries during downtime | Close to zero | Roughly 5 to 17 enquiries, about $900 to $3,060 in lost work |
| Google Safe Browsing warning | Rarely triggered | Another 3 to 14 days of suppressed traffic after the cleanup, plus a review request |
| Two year total | $1,896 | $3,000 to $10,800 plus the lost jobs |
The rebuild-after-a-broken-update version of this is less dramatic but more common. A theme update conflicts with an old page builder version, the layout collapses, and because nobody has a working copy from before the update, the fix becomes a rebuild at $150 an hour. Ten hours is not unusual. That is eighteen months of maintenance fees to undo four minutes of clicking Update All.
There is a slower cost too. Sites that go untouched for two or three years drift on speed, break on new phone screen sizes, and quietly stop sending form notifications after a mail provider change. Nobody notices because nobody is looking. The enquiries just stop, and the owner concludes the website does not work. If you are working through the numbers on a whole web budget, the rest of our costs and pricing guides break down builds, hosting and SEO the same way.
How do you tell if a maintenance plan is fair value?
Compare the included hours against the hourly rate, then look at what is being monitored. A $99 plan with 45 minutes of changes is charging you roughly $60 for the technical work, which is fair for a small site. A $99 plan with no included time and no monitoring is expensive.
Ask these before signing:
- What is the response time for a site that is completely down, and is that in writing?
- Where are backups stored, how long are they kept, and when was a restore last tested?
- Are updates tested on a staging copy, or applied straight to the live site?
- If the site gets hacked while I am on this plan, is the cleanup included or billable?
- Is there a lock-in period, and do I own the plugin licences and hosting account?
That fourth question separates the market fast. A provider confident in their own security process will include cleanup. One that will not include it is telling you something about how much attention your site actually gets.
A reasonable budget rule: annual maintenance usually runs 10 to 20 per cent of what the site cost to build. A $6,000 site justifies roughly $50 to $100 a month. A $25,000 site with integrations and a booking engine justifies considerably more, because there is more that can break. If you would rather have the server-side work and the maintenance under one bill, that is what our managed hosting and care plans are built to do, and there is no lock-in contract on any of them.
Careful with “unlimited changes”. Unlimited nearly always means unlimited small text edits, queued, at the provider’s discretion. Ask for the definition in writing before it becomes the reason your new services page has been sitting in a queue for three weeks. Under Australian Consumer Law the claim has to match what is actually delivered, so a supplier should have no problem putting the boundaries on paper.
Common questions
Is website maintenance tax deductible in Australia?
Ongoing maintenance and hosting fees are generally treated as a deductible business expense in the year they are incurred, while a new website build is often treated differently as a capital cost. The distinction matters more than most owners expect, especially around a redesign. Talk to your accountant about your specific situation rather than relying on a general rule from a web agency.
Can I just do website maintenance myself?
You can, and for a simple five page site it is realistic. Budget an hour a month: run updates on a staging copy or after taking a fresh backup, load the key pages, submit your own contact form, and check the email actually arrives. The part people skip is testing a restore. If you are not willing to do that once every six months, pay someone.
How often should WordPress plugins be updated?
Security releases should go on within a day or two. Everything else is fine on a weekly or fortnightly cycle, applied in batches so a problem is easy to trace. Avoid updating a dozen plugins at once on a live site with no backup, which is the exact sequence behind most of the emergency calls we get on a Monday morning.
Do Wix and Squarespace sites need a maintenance plan?
Not in the same way. Those platforms handle their own software updates and security, which is a genuine advantage of the closed model. You still need someone updating content, checking forms, watching page speed and keeping the Google Business Profile in step with the site. That work is usually bought hourly or as a smaller content retainer, often $50 to $120 a month.
What happens to my site if I cancel a maintenance plan?
With a decent provider, nothing immediate. The site keeps running, you get a full backup, and any plugin licences and account logins are transferred to you. Watch for two traps: agency-held premium licences that expire and leave plugins unpatched, and plans where the hosting is bundled so cancelling maintenance also cancels the hosting. Get the exit terms confirmed in writing before you sign.
Does a maintenance plan include SEO?
No, and be suspicious of anyone bundling meaningful SEO into a $99 care plan. Maintenance protects the technical foundation that SEO depends on, so a fast, secure, uncrawlable-error-free site helps. But keyword research, content, and link building are separate work with separate hours. Nobody can guarantee rankings either, whatever the plan is called.
Want your site looked after properly?
We have been maintaining Australian business websites since 2004, with no lock-in contracts and support based here. Tell us what you are running and we will tell you honestly what it needs.