Website maintenance services are ongoing support that backs up your site on a schedule, applies software and dependency updates in a controlled way, monitors uptime and security, and reports back every month. We work on WordPress, custom PHP, Node.js / Next.js and static HTML sites, either on a monthly plan or as one-off fixes. We also take over sites built by other developers.
We measure a slow site, find the bottleneck and write the target score into the quote before we optimise.
02Website not loading, 500 errors, blank pages, SSL or form problems: we trace the root cause in the logs and fix it.
03We clean hacked sites, close the entry point and hand over a root-cause report.
04We move your site and email to a new server with backups in place and switch DNS at a low-traffic hour.
05We move an ageing site to a new design and platform while protecting its content and search visibility.
Website maintenance is for businesses whose site brings in sales, bookings or enquiries but who have no one in-house to look after the technical side. Being online is only half the job: software components age every month, SSL certificates and domain registrations expire, and without a backup a single error can wipe out months of work. If any of the following sounds familiar, you are in the right place.
If something is broken right now rather than ageing, go straight to Website Troubleshooting & Repair.
Monthly maintenance is a continuous service made up of backups, updates, monitoring, security and a monthly report; a one-off fix solves one specific problem and then closes. The table below shows, line by line, what each model covers. We list the exclusions up front so there are no surprises at the quote stage.
| Task | Monthly maintenance | One-off fix |
|---|---|---|
| Weekly backup (off-server, encrypted) | Included | Not included |
| Monthly test restore from backup | Included | Not included |
| Software, plugin and library updates (tested on staging first) | Included | Not included |
| Uptime, SSL and domain expiry monitoring | Included | Not included |
| Security scanning and login protection | Included | Not included |
| Monthly report | Included | Not included |
| Small content changes (2 hours per month) | Included | Not included |
| Diagnosing and fixing a specific fault | Included | Included |
| First response within 4 hours in an emergency | Included | Included |
| New features and page design | Quoted separately | Quoted separately |
| Hosting, domain and licence fees | Not included | Not included |
When a critical security update is released, we apply it within 24 hours rather than waiting for the monthly cycle, and we let you know. Our security scanning is based on the common vulnerability classes in the OWASP Top 10. There is no minimum term: you can stop with one month's notice, and all backups and the latest report are handed over to you.
We maintain WordPress / WooCommerce, custom PHP applications, Node.js / Next.js applications and static HTML sites, and each can be on a monthly plan or one-off fixes. What changes from platform to platform is what gets updated and what gets monitored.
On closed platforms such as Wix, Shopify or Squarespace there is no server or code access, so what we can do is limited. We can work on the settings the platform allows, content, the domain and integrations, and we say so plainly in the initial review.
Yes. Website takeover is a five-step process in which we map out where everything is before changing anything on a site built by another agency or freelancer.
A takeover is still possible if the previous developer cannot be reached; it simply takes longer. If the domain or hosting account is in your name, access is recovered through the registrar or host after identity checks; if it sits in the previous agency's account, a transfer is started. For domains such as .com or .co.uk you can check the registrar and expiry date yourself with ICANN Lookup.
If the server only holds compiled output (for example a built Next.js application) rather than source code, changes become harder. We say so in the report and, where it makes sense, compare the cost of repair against a Website Redesign.
A site with no backup and no record of who holds the logins does not belong to the business; it belongs to the last developer.
Maintenance starts in four steps and settles into a routine by the end of the first month. We begin setup within the first week after sign-off, and clearing the backlog of updates in month one costs nothing extra. Every change is tested on a copy of the site (staging), a backup is taken beforehand, and changes go live at a low-traffic hour.
Platform, versions, access and current backup status are reviewed free of charge; the monthly fee is fixed after this review
Off-server backups, a staging environment, uptime and SSL monitoring are put in place
The update backlog is tested on staging and deployed, and issues found in the review are closed
Weekly backups, a monthly update round, a test restore and an end-of-month report
Four variables set the price: the platform, the size of the site and number of components, whether there is a revenue-critical flow such as checkout or bookings, and the response time you need. A static brochure site and a Node.js application that takes payments do not carry the same monthly workload, so we quote after a review rather than from a fixed price list.
The initial review is free; the monthly fee is fixed after it and does not go up later. For a takeover, the access inventory and risk report are quoted as a separate one-off job, and whether you move on to maintenance afterwards is up to you. Several sites belonging to the same business can be combined in one plan.
We build the same platforms we maintain, so we know from the inside which parts of a site need regular attention. The sites below were developed by Zep Bilişim and represent different types of platform.
Maintenance is led by Caner Zep Çelik, founder of Zep Bilişim. As Founder & Technical Consultant he has worked on web platforms, server configuration and security since 2020 and has been involved in more than 100 projects across Turkey, the United Kingdom and Germany, from our head office in Abingdon and our branch in Turkey. He makes the diagnosis and the update decisions himself and does not subcontract the work.
On a static site that changes a few times a year and has nothing dynamic apart from a form, monthly maintenance may be unnecessary; a one-off check every three months costs less, and we say so in the initial review. And if the code is too old to update safely, we recommend rebuilding rather than patching it every month.
Some of the sites we have built on different platforms. You can see them all on our references page.
Custom Software · News Portal · Media
Custom-built digital news portal for the shopping mall, retail and commercial real estate sector: categories, headline slider, search, subscriptions and KVKK-compliant cookie consent.
$ visit_site →
WordPress · Agency · Digital Marketing
Modern, animated WordPress corporate website for a digital marketing, SEO, social media and brand consulting agency.
$ visit_site →
Web Design · Multilingual · Esthetics
Premium trilingual (TR/EN/DE) corporate website for a cosmetic surgery clinic specializing in face, breast and body aesthetics.
$ visit_site →Website maintenance covers weekly backups, software and plugin updates, uptime and SSL monitoring, security scanning and a monthly report. Updates are tested on a copy of the site first and go live at a low-traffic hour. Two hours of small content changes a month and fixing a specific fault are also included; new features are quoted separately.
It is not compulsory, but a site that is never updated builds up security holes, and a site with no backup can be lost to a single error. For sites that take sales, appointments or bookings we recommend monthly maintenance. For a static brochure site that changes a few times a year, a one-off check every three months is usually enough, and we tell you which fits.
Yes. We start with an access inventory, take a full backup before touching anything, review the code and security, document the setup and report the risks we find in order of urgency. We take over WordPress, custom PHP, Node.js / Next.js and static HTML sites. Whether you then move on to maintenance is your decision, and the report stays with you either way.
First find out whose name the domain and hosting account are registered in. If they are in your name, access can be recovered through the registrar or host after identity checks; if they are in the previous agency's account, a transfer is started. Meanwhile, avoid changing anything on the site or server and do not reset passwords at random; we begin every takeover with a full backup.
Software components should be updated in a controlled round once a month, while critical security updates should be applied without waiting, within 24 hours of release. Every update should be tested on a copy of the site first, with a backup taken beforehand. Applying months of pending updates in one go raises the chance of something breaking and makes it harder to find which change caused it.
No. You can stop maintenance at any time with one month's notice, with no exit fee. When you leave, all backups, the latest monthly report and any documentation prepared during the takeover are handed over, and our server and admin access is removed. The monthly fee is fixed after the free initial review and does not go up later; if the scope changes, you see a new quote first.
Maintenance, speed, security, backups and migration for WordPress and WooCommerce sites.
View details → Software DevelopmentCustom PHP and Node.js web applications: booking systems, portals and admin panels.
View details → SEOWe find and fix crawling, indexing, redirect and site speed issues through a technical audit.
View details →Written by: Caner Zep Çelik, Founder & Technical Consultant · Last updated: