When a Site Breaks, the Expensive Part Is Finding Out What Moved
The fix is rarely the problem. Something stops working on a Tuesday, and the first two days go on establishing what changed — a plugin, a PHP version, a DNS record, a setting somebody adjusted in a hurry three weeks ago. With a record of every change, that is an hour’s work. Without one it is archaeology, and it is billed by the day.
No credit card required · 30-minute call · No obligation to sign up
Six things that change without anybody deciding to
None of these is dramatic. Each one is the kind of small movement that breaks a site quietly, and each is invisible unless somebody is writing it down.
- The host upgrades PHPAnnounced by email · nobody read it
- A plugin updates itself overnightAnd changes something it did not mention
- A certificate expiresOn a Saturday, reliably
- The form stops sendingSilently · nobody notices for weeks
- Somebody edits a settingReasonably, in a hurry, and forgets
- An unpatched thing is foundNot by you
The fourth row is the one that costs money without ever looking like a fault. A contact form that fails quietly does not show up in any monitoring, does not appear in analytics, and does not throw an error — it simply stops producing enquiries, and everyone assumes it has been a slow month. Testing that a form still arrives is a two-minute job that nobody schedules.
This domain was compromised, and the residue is still in Google
Before this site was rebuilt, it was hacked. Pages were injected under paths that had nothing to do with the business, and Google indexed them. Sixteen months of Search Console data still shows roughly forty of those URLs sitting in the index, and the correct fix is slow and boring: serve a plain 404 and wait, because Googlebot has to reach the 404 to drop them. Redirecting them or blocking them in robots.txt would stop it reaching them at all, and they would stay.
We put that here rather than in a case study because it is the most honest argument we have for maintenance. It was not an exotic attack and there was nothing clever about it. It was an unpatched thing on a site nobody was actively watching, which is the ordinary way this happens, and the cleanup outlasted the incident by more than a year.
What we do differently now is unglamorous. Every change is recorded — what, when, by whom, and what it was before. Updates are applied on a staging copy first, and where a plugin changes behaviour rather than fixing a bug, that gets written down too. Backups are restored on a schedule, not merely taken, because a backup nobody has restored is a belief rather than a backup.
And monitoring is aimed at the things that fail silently. Uptime checks are the easy part and catch the least interesting failures; a site that is up and returning 200 while its contact form quietly discards submissions looks perfectly healthy from the outside. So the checks include submitting the form and confirming the message actually arrives.
- ✓Every change is recorded — What, when, by whom, and what it was before. This is the product.
- ✓Updates run on staging first — Especially the ones that change behaviour rather than fixing a bug.
- ✓Backups get restored, not just taken — An untested backup is a belief. Restoring on a schedule makes it a fact.
- ✓Monitoring aims at silent failures — A site can return 200 all day while the contact form discards everything.
- ✓Patching is the boring answer — Our own compromise was an unpatched thing on a site nobody was watching.
A backup nobody has ever restored is not a backup. It is a belief about a backup.
What the retainer actually does each month
Six things, and the first one is what makes the other five cheap.
The Change Log
What changed, when, by whom, and what it was before. Readable by you, not just by us. It is the difference between an hour of repair and two days of archaeology.
Updates on Staging First
Core, plugins, dependencies and the platform underneath, applied to a copy and checked before they reach the live site. Behaviour changes get written down, not just version numbers.
Backups That Get Restored
Taken on a schedule and restored on a schedule, because an untested backup is a belief. The restore test is the part that is usually missing.
Monitoring for Silent Failures
Uptime, certificates and speed — plus actually submitting the contact form and confirming the message arrives. The failures that never throw an error are the ones that cost you.
Patching, Unglamorously
The known-vulnerable thing, patched before somebody else finds it. Our own compromise was exactly this and nothing more interesting, and the cleanup ran longer than a year.
A Named Person and a Response Time
Someone who knows your site rather than a queue, with a stated time to first response. Small content edits are included; new pages and new features are quoted.
What clients say
Real clients, quoted in their own words — published with their permission.
“It was a pleasure working with Ghalib and his team.”
“We’re very thankful to Ghalib and his team for building a fully-functioning website for our business.”
“Ghalib’s clear guidance has helped improve our website’s SEO performance.”
More of them, in full, on our reviews page.
— Our Proprietary Methodology —
The Visibility Framework™, applied in Website Maintenance
The method doesn’t change by market. What it’s pointed at does.
Audit & Discovery
What the current site earns, where it leaks, what your competitors do better, and what the new one must achieve. Ends in a written scope and a fixed price — not an estimate that grows.
Structure & Design
Sitemap, wireframes and user journeys agreed before decoration, then a design system applied consistently. You approve the shape before we make it beautiful.
Build & Test
Front end, back end, CMS and integrations, on a staging site you can see from day one. Tested on real devices, real screen readers and real slow connections.
Launch & Improve
Redirects verified, analytics connected, handover recorded — then we look at what real visitors actually do and fix what the design assumed wrongly.
Honest, No-Nonsense Commitment
The price we quote after discovery is the price you pay — if we underestimated the work, that is our problem, not a change request. And on any rebuild, if organic traffic drops because of something we did at migration, we fix it at our cost, however long it takes.
Website Development pricing for Website Maintenance, in USD
Monthly, and cancellable with a month’s notice — a maintenance contract that is hard to leave is a warning sign about the maintenance. Content edits are included up to the stated time; new pages and new features are quoted separately so the retainer does not quietly become a build budget.
Essential
Small sites that must simply keep working.
- Change log, updates on staging, backups
- Uptime, certificate and form-delivery checks
- 1 hour of content edits
Standard
The usual one. Sites that earn enquiries.
- Everything in Essential
- Monthly restore test, not just backups
- 4 hours of edits and a named contact
- Optional: bundle in SEO or Social Media
Managed
E-commerce and business-critical sites.
- Everything in Standard, at higher frequency
- Priority response and out-of-hours cover
- 10 hours of development time
- Optional: combine all 4 services for full-funnel growth
Every plan is scoped around your market — get a free audit and we’ll recommend what fits, priced in USD.
What you’re actually committing to
Most agencies keep this in a contract you only see after the sales call. We would rather you knew now, because it is the question everyone asks second — right after the price.
- A fixed price, agreed before we startQuoted after discovery, not estimated on a call. If the work takes longer than we thought, that is our risk — the price does not move unless you change the scope.
- 50% to begin, 50% at launchNo large upfront payment held for months, and nothing owed until the site is live and you have seen it working.
- You own everythingDomain, hosting, code repository, design files and content — all in your name from day one, and still yours if we never work together again.
- No proprietary lock-inStandard, widely-used technology only. Any competent developer can take the site over, and nothing stops working because you stopped paying us.
- Two rounds of revisions per stageIncluded at wireframe and design stage, where changes are cheap. Beyond that, or after sign-off, changes are quoted before any work starts.
- 30 days of support after launchBugs and small tweaks included as standard. A care plan afterwards is optional, never automatic, and cancellable with 30 days’ notice.
These are the terms as they appear in the agreement itself — nothing here is softened for the website. The full wording lives in our terms and conditions, and you get the agreement to read before anything is signed or invoiced.
Website Maintenance Website Development questions, answered
Related Website Development pages
Same service, different angle — by market, by discipline and by platform.
Want a record instead of an archaeology bill?
Free 30-minute audit · No obligation · Response within 24 hours
Get in touch with Ghalib Ashrafi HQ
Ghalib Ashrafi takes on work for brands in six markets — the UK, USA, UAE, Saudi Arabia, Australia and Pakistan. Every enquiry gets a reply within 24 hours.