Web design7 min
How much does a website cost in the UK?
What UK small businesses pay for a website in 2026, from a DIY builder to an agency, with sources; the yearly costs after launch, VAT, and how to compare quotes.
Plugins update, forms stop sending, a certificate expires on a Sunday. We look after your WordPress site every month, so you find out from us, not from a customer.
Updates are installed on a copy first, then on the live site, so a plugin update doesn't take you offline. Backups are kept off your server and tested, and alerts tell us when the site goes down or a form stops sending.
You get small changes done without chasing anyone, and a monthly note on your tracking page of what was updated, checked and fixed.
Platform, theme and plugins updated on a copy first, with a backup before and a check after.
staging site
Downtime, broken forms and Google's warnings watched, and fixed before they cost you enquiries.
uptime and Search Console monitoring
What we updated, what we fixed and anything you need to decide, on your tracking page.
Platform, plugins, backups, security, logins and Search Console reviewed.
Pending updates, broken pieces, old admin users and missing backups fixed first, before any monthly fee.
Tested updates, off-site backups, monitoring and a test message through your forms.
You text or email us a change; we confirm what and when, and send the before and after once it's live.


Carles builds your site, and he's the one who reviews it in the audit. Òscar makes sure Google understands it. Who we are
audit · willowbankyoga.co.uk
sample document
1 · What we found
Your class booking form hasn't sent an email since August; 19 plugins are out of date and the only backup is on the same server.
2 · The monthly routine
3 · Fixed quote
With us: updates tested before they go live, off-site backups, security monitoring, uptime alerts, monthly form checks, small content changes and a note on your tracking page of what was done. The detail and price go in your proposal.
Maintenance and updates cost UK businesses £25-£100/month, according to Whito. Ours depends on how your site is built, how many plugins it has and how often you change it. You get a monthly price in your proposal, with no set-up fee and no minimum term.
Yes, if it's WordPress. We start with a check-up and bring it up to date, and if anything is fragile we tell you before taking it on. The first monthly fee comes once that's done and you've checked it.
We take it offline if needed, restore a clean backup, close the hole that let the attacker in and tell you what happened. If personal data may have been exposed, we give you what you need to decide on reporting it to the ICO.
Yes. It's rolling monthly with 30 days' notice. The site, domain, backups and logins are yours, and we hand everything over in order to whoever you choose.
Website maintenance is the monthly care a site needs to stay safe and working: updates tested before they go live, backups stored away from the server, security monitoring, uptime alerts, form checks and small content changes. We look after WordPress sites, whoever built them.
Most WordPress security problems come through plugins and themes that weren't updated. Each month without updates adds known holes, and each update skipped makes the next one riskier.
In the free audit we check how up to date your site is, where its backups are and whether anything needs attention now.
Your contact form collects personal data, so a hacked site can be a data breach as well as a nuisance. Under UK GDPR, a breach that risks people's rights must usually be reported to the ICO within 72 hours of finding out (ICO on reporting a breach). Monitoring, updates and tested backups make that much less likely, and if it happens, we tell you straight away with what we know.
We keep the boring paperwork in order too: who has admin access, which plugins are installed and why, and where the backups live, so whoever looks after the site after us gets it in order.
WordPress has three layers that update separately (WordPress itself, the theme and each plugin), often from different authors, and they don't always get along. An abandoned plugin or a premium theme with an expired licence stops getting security fixes even if the site keeps working.
The websites we build in web design are custom WordPress with only the plugins they need, so maintaining them is lighter. If your WordPress is so out of date that every fix breaks something else, we tell you, and sometimes a website redesign is what pays off.
Four things we look for when we take over a site someone else built:
Everything updated on the live site, with no backup and no test. If something clashes, the site is blank all weekend.
why we test on a copy first
A security plugin, a cache plugin and a backup plugin each doing the same thing their own way, slowing or breaking the site.
If the server fails or the site gets infected, the backup goes with it. And a backup nobody has tried to restore can fail on the day you need it.
off-site backups
Logins from whoever built the site years ago, a former employee or a previous agency, all able to change anything.
user review and two-factor login
Keeping a site running has several costs, and it helps to separate them because they're paid to different people. The domain, the hosting and any premium licenses stay in your name and you pay them directly; the maintenance is the work. Ours has no published price: it depends on how your site is built, how many plugins it has and how often you change it.
When you compare quotes, ask where the backups are stored and whether anyone has tried restoring one, whether updates are tested first, what counts as a small change and how many are included, what happens if the site goes down on a Sunday, and whose name the domain and hosting are in. What other providers charge, with sources, is in how much a website costs.
Platform, theme and plugins updated on a copy, with a backup before and a check after.
WordPress core, theme and plugins
Stored off your server and test-restored, so they work the day you need them.
off-site backups
Monitoring, hardening, old admin users removed and cleanup if something gets in.
SSL, firewall, malware scans and two-factor login
Test messages through your forms and checks on your call and text buttons.
Errors and warnings in Search Console checked and fixed.
indexing, Core Web Vitals and HTTPS
Hours, photos, prices and copy updated when you ask, as set in your proposal.
Web design7 min
What UK small businesses pay for a website in 2026, from a DIY builder to an agency, with sources; the yearly costs after launch, VAT, and how to compare quotes.
Send us your web address and in under a week we'll tell you what's out of date, what's at risk and what we'd do first.
Check my website for free