What breaks when nobody maintains a website

People reasonably assume a website is like a sign: you put it up and it stays up. It is closer to a van. Left alone it keeps going for a while, then it does not, and the repair is more expensive than the servicing would have been.

Months one to six: nothing visible

Updates start queuing. Security patches are released for the software the site runs on, plugin developers push fixes, the theme updates. None of it is urgent yet, and nothing looks different from the outside. This is the stage where people conclude maintenance is unnecessary.

Around six to twelve months: small breakages

Something stops matching. A plugin updates itself and no longer plays well with the theme, so a layout goes crooked on one page nobody visits often. The contact form quietly stops delivering because a mail setting changed and nothing tests it.

That last one is worth dwelling on. A silently broken contact form is the single most expensive fault a small business site can have, because there is no error message. The enquiries simply stop, and you assume business is quiet.

Twelve to twenty-four months: security

This is where it gets serious. The overwhelming majority of hacked small business sites are not deliberately targeted. Automated scripts crawl the web looking for known vulnerabilities in out-of-date plugins and walk in through whatever they find.

The result is usually not dramatic. It is spam pages quietly added to your site to sell things you have never heard of, invisible to you and very visible to Google. By the time you notice, your rankings are gone and you are dealing with a security warning in front of your homepage.

Beyond that: the point of no return

Once a site is far enough behind, updating stops being safe. Jump three major versions at once and things break in ways that are hard to unpick. At that point the honest advice is often a rebuild rather than a rescue, which costs considerably more than two years of maintenance would have.

The actual work involved

It is not glamorous. Updates applied and checked rather than applied and hoped for. Backups taken and, importantly, occasionally tested by restoring one. Someone confirming the contact form still delivers. Security patches applied when they appear rather than at the next annual review.

If you do nothing else

Send yourself a test enquiry through your own contact form once a month. It takes thirty seconds and it is the single highest-value check available to a business owner who is not going to do anything else on this list.

Our monthly maintenance covers all of the above.