Website monitoring and security monitoring are not the same thing
One tells you the site is unreachable. The other tells you it has changed. Businesses often buy one and assume they have the other.
Maintenance / Nov 2026
A website can keep returning a 200 response long after parts of it have quietly stopped working. Maintenance is the work that notices.
A website can keep returning a 200 response long after parts of it have quietly stopped working. Maintenance is the work that notices.
A business website can look unchanged for years while the environment around it moves on. The design still renders. The homepage still loads. Underneath, the PHP version has been upgraded by the host, a certificate is close to expiry, a form has stopped sending email and nobody has checked whether the backups can actually be restored.
This is the ordinary condition of an unmaintained site. It is not usually a dramatic failure. It is a collection of small, deferred problems that eventually meet a change they cannot survive.
The work is rarely glamorous, but it is specific. It includes keeping the runtime and any content management system on supported versions, checking that forms and transactional email still work, renewing certificates, reviewing access, confirming backups and testing that the site behaves after an update.
An expired certificate produces a browser warning that many visitors will not report. A contact form can return a success page while the message goes nowhere. A PHP upgrade can break a single page that nobody visits until a customer does. A disk can fill with logs, and a scheduled task can stop running without an alert.
Each problem is small on its own. The danger is that they accumulate while the site still appears to work. By the time the failure is visible, the cause may be several changes old and the original developer may no longer be available.
Maintenance is not the same as installing every update as soon as it appears. Updates need to be assessed, applied in a controlled way and checked afterwards. When something breaks, someone needs the access, the context and the authority to investigate rather than open a support ticket with the hosting provider and wait.
That ownership is the part most businesses are missing. It is not a monthly plugin click. It is a named technical route for the site, with a clear boundary between what the hosting provider manages and what the business or its technical partner manages.
A useful maintenance arrangement starts with an inventory: what runs the site, where it is hosted, who has access, what is backed up and what depends on what. From there, the routine can be scheduled and the exceptions can be handled.
A website does not need to be new to be well run. It needs someone who knows what it depends on and notices when that changes.
If nobody owns the site, the first symptom is usually not an outage. It is a slow loss of confidence: forms that may or may not work, a plugin nobody dares update, and a growing list of things to check before making a change. Maintenance is how that uncertainty is removed.