In Pay monthly vs upfront website: which is right for you? I made the case that the monthly model covers "everything" without actually listing what "everything" means. That's a fair thing to push back on. If you're paying a recurring fee for your website indefinitely, you deserve to know exactly what jobs that fee is doing, not just take "it's all included" on trust.
So here's the itemised version. This is what Ongoing Website Management actually covers, and why each piece matters more than it sounds like it should.
Hosting and infrastructure
Your site has to live somewhere, on a server that stays fast and available. Someone has to manage that server-side setup, apply platform updates, and keep performance from degrading over time. This is the least visible part of the fee, and it's also the part you'd notice fastest if it stopped happening. A slow, unreliable host shows up as a slow, unreliable website.
The SSL certificate
The padlock next to your web address is a trust signal for visitors, but it's also a signal Google uses when ranking sites. An SSL certificate needs renewing on a schedule, and if it lapses, visitors get a "not secure" warning before they've read a word of your site. That's the kind of thing that costs you a phone call without you ever finding out why. Renewal is handled automatically as part of management, so it's one date you never have to track.
Domain registration
Your domain, the actual web address people type in or find through search, has to stay registered and pointed correctly at your site, and it has to be renewed before it expires. This is unglamorous admin, but it's the kind that's catastrophic if missed: an expired domain can mean your website and your email address stop working with no warning. Domain renewal is tracked and handled as part of the monthly fee.
Security and software updates
Websites run on software, and that software gets security patches on an ongoing basis. Outdated software is the single most common way websites get hacked. Applying updates sounds simple, but it isn't just clicking "update". It means testing that nothing breaks before pushing a change live, because an update that closes a security hole and also breaks your contact form isn't a fix. This is recurring work that happens whether or not you ever hear about it.
Content updates
This is the part most tradespeople actually use, month to month. Changed your phone number? Added a new service? Got a decent photo from a job last week? Had a customer leave you a testimonial worth putting on the site? These are small on their own, but they stack up over the life of a website: services added, old ones retired, prices changed, new areas covered. Send a message and it gets done, usually within a business day, with no separate invoice for the work.
Uptime monitoring
Your site gets checked around the clock, not just when someone happens to notice something's wrong. If it goes down, whether that's a hosting fault, a failed update, or anything else, it gets caught and dealt with before it turns into three days of a customer telling you your website's broken, rather than the other way round.
What the commitment actually is
Pay monthly runs on a 24-month initial period. After that it rolls on, and you can leave with 30 days' notice. Paid upfront, there's no ongoing commitment beyond the monthly hosting fee. Either way, if you go, everything gets exported and handed over to you.
I'd rather set that out than claim there's no commitment at all. There is one, it's two years on the monthly plan, and it's on the pricing page in the same words. What it buys is a site built and supported without a large bill at the start; what it costs is that you're committed for the first two years. After that the fee has to keep earning its place on the quality of the work, not on how hard it is to leave.
Your domain, and who holds it
Worth being straight about this one, because plenty of providers are vague on it and I've seen the claim made the other way round. I register client domains in my own account. That's deliberate: keeping the domain, DNS, email and SSL together makes the whole thing far easier to run, and it avoids the fortnight lost to hunting for a registrar login nobody has used since 2019.
It is not a hold over you. Ask and I'll transfer the domain into your name, whenever you ask. If you move your website to someone else, the domain is transferred at the same time, as part of going. Your content is yours throughout — it gets exported and handed over either way. The arrangement is meant to be convenient, not sticky.
Why bother listing all this
None of these jobs are exciting, and most of them are invisible when they're done properly, which is exactly the problem with taking "everything's included" at face value. The value here is a long list of unglamorous, easy-to-forget tasks getting handled before they turn into a problem, rather than after. Skip the management and the same list of jobs lands on your desk one at a time, usually at the worst possible moment, like the afternoon a customer mentions your site's been down since Tuesday.
If you want to know exactly what this would look like for your own site, get in touch and I'll talk you through it.