How much it costs to maintain a website (and what breaks when nobody does)

Cloud & Servidores

The conversation repeats itself. Someone writes to us because their website stopped loading, or because the browser is warning their customers that the site is not secure. We ask who maintains it and the answer is almost always the same: it was built two years ago, it was paid for, it looked good, and nobody has touched it since.

It isn't neglect. It's that nobody explained at the start that a website isn't a painting you hang on a wall and forget. It's a service running twenty-four hours a day, and everything that runs consumes, expires and needs updating.

The four things that expire

When a website «goes down on its own», it almost never went down on its own: something expired. And it's usually four things, always the same ones.

  • The domain. It's the rent on your address. If it isn't renewed, the site disappears from the internet and, in the worst case, the name is free for someone else to register.
  • The hosting. The server where the files live. If it lapses, the site stops responding even though the domain is still yours.
  • The SSL certificate. It's what puts the padlock in the browser. When it expires, your customers meet a full-screen warning telling them your site isn't safe.
  • The software. The platform it's built on and its plugins. Left un-updated, it becomes the most common way in to a hacked site.

All four expire on different dates, the reminder doesn't reach the business owner but the inbox of whoever registered them —sometimes an agency that no longer works with you— and it only takes one to fail for the other three to be useless.

What each piece costs on its own

If you only add up the invoices, maintaining a simple website is cheap. These are the orders of magnitude; they vary by country and provider, but not by much:

  • Domain: from around 10 dollars a year for a .com up to 30 or 40 for country extensions like .es or .co.uk.
  • Hosting: from a few dollars a month on a shared plan to several tens if the site needs dedicated resources.
  • SSL certificate: it can cost nothing. Free, auto-renewing certificates exist, provided someone set that automation up and checked that it still works.
  • Updates, backups and monitoring: there's no list price here, because it isn't a product. It's someone's time.

That last line is the one that derails almost everyone's budget. The first three can be put on autopay and forgotten. The fourth doesn't automate itself, and it's precisely the one that prevents disasters.

The invoice that never shows up anywhere

The real cost of maintaining a website isn't the sum of those pieces. It's what happens the day one of them fails.

A site down on a Tuesday morning is an annoyance. The same site down on a Friday afternoon, mid-campaign, with the phone ringing and the developer who built it not answering for six months, is something else. At that point the cost is no longer measured in hosting fees: it's measured in calls that never came, quotes nobody requested, and customers who arrived, read «not secure» and went to a competitor.

And there's a worse cost because it's silent: the site that has been throwing an error for three weeks and nobody inside has noticed. The people who notice are outside, and they don't call to tell you.

Why one-off payment rarely works out

The dominant model is still «I'll build your website for a fixed price and hand it over». On paper it's clean. In practice it carries an incentive problem: the day the project is delivered, the relationship ends. Whoever built it has already been paid and their attention moves to the next client. Your website, still running, is left without a technical owner.

It usually isn't bad faith. It's that nobody is paying for the hours of watching that everything stays standing, so nobody spends them. When something breaks, the repair is quoted as new work, and the business owner discovers that having a website came with fine print nobody ever read to them.

What maintenance worth paying for should include

If you're going to pay for this, it's worth knowing what you're buying. Serious maintenance covers at least:

  • Domain renewal and monitoring, with a warning before it expires.
  • Hosting with enough resources for what the site actually does, not for what it did the day it launched.
  • An SSL certificate renewed automatically, not by hand once a year.
  • Security updates applied preventively, not after there's already been an incident.
  • Daily backups and, above all, a proven ability to restore them. A backup that has never been restored isn't a backup, it's an assumption.
  • Monitoring that alerts whoever maintains the site before the customer finds out.
  • A set number of content changes per month, written down and bounded, so asking to change a price isn't a negotiation.
  • A contact channel with a person who answers.

That last point looks like the softest one and it's the most often broken. Maintenance where nobody answers isn't a service: it's a monthly charge.

The right question

The question isn't how much it costs to maintain a website. It's how much not maintaining it costs you, and that figure depends on what your business has riding on the internet. If your site is a business card almost nobody looks at, the risk is low and you can live with it. If it's where your customers come from, leaving it without a technical owner is the most expensive decision you can make to save yourself a few monthly fees.

A website isn't finished the day it's published. That's the day it starts working.

Keep reading

  • Cybersecurity for SMBs: the bare minimum
  • Showing up on Google is no longer enough