A WordPress care plan run by operators.
Updates, off-site backups, malware monitoring, uptime checks, performance tuning, and a human you can reach. Run by Seahawk Media, the agency behind 5,000+ WordPress sites in twelve years. Every plan covers the things that actually break WordPress sites in production. Plans start at $79 per month per site, with Pro at $199 and Enterprise quoted on the call. Cancel any time, keep your backups, walk away with a clean handover.
Six pillars. Same on every plan.
WordPress core, themes, and every plugin updated on a weekly cadence. Updates tested on a staging clone before production. We roll back automatically if anything regresses.
Daily incremental, weekly full. Stored off the hosting account so a compromised server cannot also take the backups. 30-day retention on every plan, 90-day on Pro and above.
File integrity scans, malware checks, brute-force protection, two-factor authentication for admins. If a known WordPress CVE drops, every site we manage is patched inside the same business day.
One-minute uptime checks from four global regions. Core Web Vitals monitored continuously. We tune cache layers, image delivery, and database queries when numbers slip.
You submit a ticket, a real engineer opens it. Average first-response time across the last 90 days is 47 minutes during business hours, under 4 hours after hours.
Pro and Enterprise plans get a direct line. The person who picks up has access to your site and the authority to fix things, not transfer the call to someone who does.
Three tiers. No hidden line items.
Brochure sites, low-traffic content blogs
- Weekly core + plugin updates
- Daily incremental backups, 30-day retention
- Malware + uptime monitoring
- Up to 30 minutes of dev time per month
- Email support, next-business-day response
Lead-gen sites, content sites with revenue
- Everything in Starter, plus
- Daily full backups, 90-day retention
- Core Web Vitals tuning every quarter
- Up to 2 hours of dev time per month
- Priority support, 4-hour response, direct phone line
WooCommerce, membership, mission-critical sites
- Everything in Pro, plus
- Hourly backups, 365-day retention
- Dedicated staging + production environments
- Up to 8 hours of dev time per month
- SLA with 1-hour business-hour response, named engineer
Fifteen things covered on every plan
- WordPress core updates with regression testing
- Plugin updates including paid licenses
- Theme updates including paid licenses
- PHP version upgrades when hosts deprecate older versions
- SSL certificate renewals
- Database optimisation and cleanup
- Spam comment cleanup
- Broken link monitoring
- Sitemap regeneration after content changes
- Search Console error monitoring
- CDN cache management
- Image optimisation and WebP conversion
- Form spam mitigation
- Two-factor auth setup for admin users
- Quarterly Core Web Vitals report
Six things quoted separately
- New page or post content writing (separate scope)
- Major redesigns or rebrand projects
- Custom plugin or theme development from scratch
- New feature builds that exceed the included dev hours
- Hosting plan fees (we recommend, you pay the host directly)
- Domain and email DNS work (we will advise, you keep ownership)
Most of these are available under Website Development.
Maintenance questions, answered.
What happens when a plugin update breaks something?
Updates run on a staging clone first. If anything regresses, we roll back automatically and open a triage ticket inside the same hour. Production sites do not see an update until staging passes. If a plugin proves repeatedly unsafe to update, we research a replacement and propose it as part of the next quarterly review.
Where are backups stored?
Off the hosting account, on object storage we control (currently Amazon S3 with object lock enabled). A compromised server cannot reach into the backup store. Restore can target any retained point inside the plan window. Test restores happen once a quarter on a random site as part of the audit.
Is malware monitoring proactive or reactive?
Both. File integrity scans run daily and flag any modified core or plugin file outside an authorised update window. The Wordfence and MalCare definition feeds run continuously. If a CVE is published for a plugin we manage on any client, every affected site is patched the same business day.
Can I pause a plan and come back?
Yes, with 30 days notice. Backups are retained for the plan retention window. If you cancel outright, we deliver a final full backup and a clean handover document so another team or your own developer can pick up without friction. We do not hold WordPress access hostage.
Do you maintain non-WordPress sites?
No. WordPress only. We are deep on it, not wide across every stack. If your site is on a different platform, see the migration service. If you want to stay on the current platform, this is not the right plan.
What is included in the dev time allowance?
Small site edits and updates that do not require a separate scope: copy changes, image swaps, new section in an existing page, small CSS fixes, form field changes, redirects, taxonomy tweaks. Unused time does not roll over. Work that exceeds the included hours is quoted hourly at $120 per hour, or wrapped into a Custom Development scope if it is larger.
Tell us about the site.
We onboard most sites inside 48 hours, sooner if a site is in incident. Share the URL, pick a plan, and we will send a checklist for granting access. Sites in active malware or outage skip the queue.