The short answer
Website maintenance means weekly tested updates, daily off-site backups, uptime and malware checks, small edits and renewals watched.
In Malaysia a basic plan usually costs RM 100 – 300 a month. CST care plans are RM 100, RM 250 or RM 400 a month, with no lock-in.
Before switching maintainers, collect every login, confirm the domain is in your name and take a fresh backup.
What website maintenance covers
Maintenance is the work that keeps a live website safe, working and current after launch. A proper plan covers six things.
Software updates
WordPress, the theme and every plugin, updated weekly — and tested, because an update can break a form or a checkout.
Off-site backups
A daily copy of the files and database, kept somewhere other than your hosting, so a hack or a failed update can be undone.
Security and uptime checks
Someone is told within minutes when the site goes down, and it is scanned for malware before Google finds it first.
Small edits
New prices, opening hours, staff photos, a holiday notice — changed for you without a separate quote each time.
Speed
Old images, unused plugins and a growing database slow a site down. A tune-up every few months keeps pages fast on a phone.
Renewals
Domain, SSL and hosting renewal dates watched, so the site never goes offline because a card expired.
What it costs in Malaysia
Typical monthly prices from Malaysian freelancers and agencies, next to CST’s care plans. Hosting is billed separately, yearly, in your name.
What each CST plan includes
Essential (RM 100): weekly tested updates, daily off-site backups, downtime and virus checks, 30 minutes of edits. Growth (RM 250) adds store and checkout cover, a quarterly speed tune-up and 60 minutes of edits. Priority (RM 400) adds same-day response, 2 hours of edits, one hack clean-up a year and up to 2 sites.
No lock-in
Month to month, with 30 days’ notice to stop. Many agencies ask for 12 months up front.
On the hosting you already have
You don’t have to move hosts to join a plan. Logins stay in your name.
Do it yourself or hire someone?
Doing it yourself is possible. The question is whether the hour a week is better spent on your business.
DIY works when
The site is small, has few plugins, and someone on your team is comfortable logging into WordPress every week and restoring a backup if an update goes wrong.
What DIY takes
Weekly: run updates and check the forms and checkout still work. Monthly: confirm a backup actually restores, and remove plugins you no longer use.
Hire when
The site takes bookings, payments or enquiries you depend on, nobody in-house knows WordPress, or the last update broke something.
The middle option
Keep the updates yourself and pay for one-off fixes when something breaks — RM 150 for the first hour, then RM 75 per extra half hour.
What happens when nobody maintains it
Most problems CST is called in to fix started months earlier with a site nobody was looking after.
Hacked through an old plugin
Out-of-date plugins are the most common way into a WordPress site. Spam pages, redirects to scam sites and a Google “This site may be hacked” warning follow.
Forms that stop sending
An email setting changes or a plugin breaks, and enquiries go nowhere. No one notices until a customer phones to ask why you never replied.
Domain or SSL expires
The site disappears, or browsers show a “Not secure” warning, because a renewal went to an old email address or card.
Slow, then slower
Pages that take more than a few seconds on mobile data lose visitors and slip in Google results.
Checking or switching your maintainer
If you already pay someone, ask these questions. If the answers are vague, it may be time to move.
Where are the backups?
They should be off-site, daily, and tested. Ask when a backup was last restored.
Who holds the logins?
The domain, hosting and WordPress admin should be in your name, with your own login to each.
What happens when the site goes down?
Ask how fast they reply, on which days, and whether you are told or have to find out yourself.
Switching safely
Collect every login first, confirm the domain is in your name, take a fresh full backup, then give notice. If the old maintainer won’t hand over access, moving and rescue starts from RM 600.
Quick answers.
01Is website maintenance the same as hosting?
No. Hosting is the server space the site lives on, billed yearly. Maintenance is the work of keeping the site updated, backed up and working on that hosting.
02How often should a WordPress site be updated?
Weekly. Security fixes for plugins are released all the time, and attackers scan for sites that haven’t installed them.
03Do I need a plan if my site rarely changes?
Yes, if it is on WordPress. The content may not change, but the software underneath it needs updates whether you edit the site or not.
04Can you maintain a site someone else built?
Yes. CST starts with a check of the site, plugins and logins, and tells you about any problems before the plan begins.
05What if I only need help now and then?
Skip the plan and pay for one-off fixes: RM 150 for the first hour, then RM 75 per extra half hour. Urgent same-day work is RM 100 extra.
Related guides
“He explains things in plain language. No jargon, no upselling. I always know what I am paying for.”