Website Maintenance Service

Six things, every month, without you asking:

1. Daily backups — full site and database, retained 30 days, stored off-server
2. Weekly updates — WordPress core, plugins, and themes, tested before they go live
3. Security monitoring — firewall, malware scanning, and instant removal if anything gets through
4. Uptime monitoring — we’re alerted before you are, and we fix it
5. Speed optimisation — caching, image compression, and Core Web Vitals tuning
6. Content edits — send us the text or images, we make the changes

At month end you get a report showing what was done, what was blocked, and how your site is performing.

Included as an edit: changing text, swapping images, adding a blog post, updating a team member, adding a page using your existing design, updating a PDF or form field.

Not included (quoted separately): new page designs, custom functionality, e-commerce builds, integrations with your CRM or ERP, and full redesigns.

Rule of thumb: if it uses your existing design system, it’s an edit. If it needs new design or code, it’s a project. When in doubt, ask — we’ll tell you before we start, not after.

Each plan has a monthly hour allocation:

Basic Care (RM199/mo) — for sites under 20 pages with few changes, 1 hour
Super Care (RM649/mo) — 20–50 pages, roughly 8–10 changes per month
Advanced Care (RM1499/mo) — fully hands-off, complete webmaster outsourcing

Unused hours don’t roll over. If you consistently exceed your allocation, we’ll recommend moving you up a plan rather than quietly billing you for overages.

No — hosting is separate, and that’s deliberate. You keep ownership and control of your hosting account. We work with whatever host you’re on, and if your host is the reason your site is slow, we’ll tell you and recommend alternatives. Hosting is available as an add-on if you’d rather we handle it.

Yes — we need administrator access to maintain WordPress. What that means in practice:

• Each of our team members gets their own named account, so every change is traceable in the activity log
• Access is revoked immediately when you cancel
• We can sign an NDA before we start
• If your organisation has security policies or requires access through a specific process, tell us during onboarding and we’ll work within it

If your HQ controls website access and can’t delegate it, WebCare isn’t a good fit — we say so plainly on this page.

Every plan includes daily backups with 30-day retention. If an update breaks something, we restore from the last working backup — usually within 1 hour — and then fix the underlying conflict properly.

We also test updates before applying them rather than clicking “update all” and hoping. That’s the difference between maintenance and gambling.

Firstly, don’t panic. Every website is bound to get attacks, and some succeed.

Malware removal and site recovery are included at no extra charge on all plans. We’ll clean the infection, restore from a clean backup, patch the entry point, and send you a written incident report explaining what happened and what we changed to prevent a repeat.

We run NinjaFirewall and Defender on managed sites, plus DNS-level protection where the setup allows.

Site down or hacked: within 1 hours, including weekends
Something broken but site is up: within 4 business hours
Routine content edits: within 1 business days

Our working hours are Monday–Friday, 9am–6pm GMT+8. Emergencies are handled outside those hours.

They probably can. The question is whether they will.

WordPress maintenance is nobody’s top priority until the site is down. Your IT team is maintaining systems that stop the business if they fail — the website isn’t one of them until it is. So updates get deferred, backups go untested, and the first time anyone looks closely is after something breaks.

We’re not competing with your IT team’s ability. We’re competing with their calendar.

WebCare is built specifically for WordPress, and that focus is why we’re good at it. If you’re on Webflow, Framer, Shopify, or a custom build, we can’t offer WebCare — but we can talk about a redesign onto WordPress, or point you to someone who specialises in your platform.

Not necessarily. Many of our clients keep their developer for projects and use WebCare for the ongoing upkeep — the weekly work that developers find tedious and clients find invisible. We’re happy to coordinate with your existing team.