Website Maintenance Packages

Every plan includes the same careful maintenance: monthly updates, prompt security patches, backups and monitoring. What changes is how much developer attention your site gets each month. Pick the amount that fits today. It can change whenever your needs do.

Flat Monthly Pricing –
know the number before you sign. No surprise invoices.
Real Developers –
the same senior team that builds and takes over sites, not a ticket queue or an update bot.
Flexible Plans –
move up or down a plan as your needs change. Month to month once the site is settled in.

Three Plans. One That Fits.

Same maintenance baseline on every plan. The tiers are about attention: whether a block of developer hours comes with the maintenance, and how proactively we use it. Packages are the easy way to start; most clients end up somewhere custom.

Care

$250per month

Just keep it maintained. The full baseline, no developer hours.

Maintenancedeveloper time billed hourly

  • The baseline: monthly updates, prompt security patches, backups, monitoring
  • No developer hours included; work billed hourly as agreed
  • Email support, response within two business days
  • Hack recovery billed hourly if ever needed
Choose Care

Support

$500per month

The baseline, plus a couple of hours for the edits and fixes you ask for.

Maintenance + 2 hrsof developer time a month

  • Everything in the baseline
  • Hours go to content edits, fixes and questions
  • Small requests: you ask, they get done
  • Hack and malware recovery included
  • Email and phone, next-business-day response, dedicated lead developer
Choose Support

Partner

$1,000per month

For an active marketing site. We watch it and fix what we see without waiting to be asked.

Maintenance + 6 hrsof developer time a month

  • Everything in the baseline
  • Hours go to features, landing pages, design tweaks and cleanup
  • Proactive performance, accessibility and SEO polish, fixed before you notice
  • Hack and malware recovery included
  • Same-business-day response, emergency line, shared Basecamp project
Choose Partner

All prices are per month. Hours are a monthly budget we manage for you: small requests just get done, and we only stop to talk when something is clearly bigger than the month. Hosting and paid plugin licenses stay in your name: you pay the vendor directly and own them outright, so nothing is tied to us. If onboarding turns up a larger cleanup, we estimate it as a project before any work starts.

Compare What’s Included

The baseline is identical on every plan. Below it, the rows that actually differ: hours, proactivity and response time.

Swipe sideways to see every plan.

FeatureCare$250Support$500Partner$1,000CustomLet’s talk
Included in every plan
WordPress core, theme and plugin updates, monthly, tested on staging firstIncludedIncludedIncluded
Security patches applied within a business day or two of releaseIncludedIncludedIncluded
Abandoned-plugin check: plugins that stopped shipping updates get flagged and replacedIncludedIncludedIncluded
PHP and hosting-stack upgradesIncludedIncludedIncluded
Daily backups through your host, confirmed at onboardingIncludedIncludedIncluded
Uptime monitoring with alertsIncludedIncludedIncluded
Malware scanning and login hardeningIncludedIncludedIncluded
Access recovery and baseline audit at onboardingIncludedIncludedIncluded
Developer attention
Discretionary developer hours each monthNone26
Typically used forMaintenance onlyContent edits, fixes, questionsFeatures, landing pages, cleanup
How proactive we areWe keep it currentYou ask, we doWe fix what we see
Small requestsBilled hourlyYou ask, they get doneYou ask, they get done
Performance score monitoringNot includedNot includedIncluded
Plugin audit and cleanupNot includedFlaggedDone from your hours
Accessibility and SEO hygiene checkNot includedQuarterlyMonthly
Additional hours$175 / hr$150 / hr$125 / hr
Support
Hack and malware recoveryBilled hourly if neededIncludedIncluded
Response time2 business daysNext business daySame business day
ChannelsEmail and BasecampEmail, phone and BasecampEmail, phone and Basecamp
Emergency lineNot includedNot includedIncluded
Dedicated lead developerNot includedIncludedIncluded

Which One Is Right for You?

Think of it as how much attention you want the site to get. Care keeps it maintained, full stop. Support adds a couple of hours a month for the edits and fixes you ask for. Partner is a developer who watches the site and fixes what needs doing before you notice.

To be honest, most clients don’t stay in a box. They start on a package, ramp up for a redesign or a campaign, ramp down when things are quiet, and end up on a plan shaped around them. The packages are the simplest way to get started and build the relationship. The plan can change whenever your needs do.

Care

A site that just needs to stay current, backed up and watched. Nothing changes month to month, and when something does come up, it is billed hourly as agreed.

Support

A brochure or informational site with a steady trickle of edits and fixes: a couple of hours a month, done as soon as you ask.

Partner

An active marketing site: regular content, campaigns, forms that have to work. A developer who keeps an eye on performance and fixes what they see, same-business-day answers, and a shared Basecamp project.

Custom

Where most clients land. A quiet site that only needs the maintenance baseline, a WooCommerce, LMS or membership system, a portfolio of sites, a Rails, Node or PHP app, or simply a plan that ramps up and down with you. We shape it around what you actually need.

What You’re Actually Paying For

Anyone can click Update. What you get with DD9 is everything around that click: a person who tests it first, understands the whole system, and has kept sites like yours out of trouble for fifteen years.

QA on every change

Updates are tested on staging and checked by a person before they go live: key pages, forms, checkout, the things that quietly break. We don’t click Update All and hope.

Stale plugins, caught

A plugin whose author walked away never asks for an update, so it looks fine right up to the day a vulnerability lands. We check what has gone stale, not just what is pending, and replace it first.

We read the code

The developer maintaining your site is the kind who builds them: we build and take over WordPress, Rails and Node systems. When something misbehaves we read the code instead of swapping plugins until the symptom fades.

A record that holds up

No site under our active maintenance has been compromised in fifteen years. That is not luck: current software, hardened logins, monitoring, and a person who actually watches the logs.

Not on WordPress?

The same three plans apply to Rails, Node, PHP and static sites. Updates become dependency and framework upgrades; backups, monitoring, support and developer hours work exactly the same way.

Questions, Answered

The things people ask before they pick a plan.

Is there a contract?

A one-page agreement. New plans start with an initial term that covers onboarding and the first stretch of maintenance; after that, plans run month to month and you can change or cancel with 30 days’ notice. Prefer to skip the term? We can estimate onboarding as a project up front and run month to month from the start. Most clients change plans at some point, up for a campaign, down for a quiet stretch. That’s expected, not a renegotiation.

What counts as developer time?

Anything beyond the baseline maintenance: content changes, bug fixes, small features, design tweaks, landing pages, integrations, performance polish, and consulting on what to do next. It’s a monthly budget of attention; you direct it, and on the higher tiers we also spend it proactively.

Why don’t the higher tiers get more maintenance?

Because the site doesn’t need it. Monthly updates with security patches applied within a business day or two is the right cadence for nearly every WordPress site; more churn adds risk, not safety. The higher tiers buy attention: more developer hours, and a developer who looks for problems instead of waiting to hear about them.

The dirty secret about maintenance

Most of the time, an update really is as simple as hitting the button. The difference is what happens around it. When DD9 runs updates, they go onto a local and a staging copy of the site first. We QA them there, deploy precisely the same updates we just tested, then QA again on the live site.

You can probably hit the buttons yourself for a while without anyone watching. Eventually one of them brings the site down, or worse, quietly breaks something critical: a form that stops sending, a checkout that stops charging, and nobody notices for weeks. And the update screen only tells you about plugins that still ship updates. The abandoned ones look fine right up until a vulnerability lands.

So the secret is: you can do it yourself for a while, and you will very likely get into trouble at some point. The plans exist so that point never comes.

Do I have to approve every small request?

No. That’s the point of a monthly budget. Send the request, we do it, and you can see where the hours went any time you ask. We only stop to talk when something is clearly bigger than the month, and then you get a straight answer: add hours, estimate it as a project, or move up a tier.

What happens if the site gets hacked?

On Support and above, recovery is included for any site that has been in our maintenance routine. We take it seriously and we take it personally. In fifteen years no site under our active maintenance has been compromised, which is the real reason the baseline looks the way it does: current software, hardened logins, monitoring, and someone actually watching.

What if a task is bigger than my hours?

We tell you before starting. You can add hours at your plan’s rate, have us estimate it as a small project, or move up a tier if it keeps happening.

Do I need to move hosting?

No. We work with the site wherever it is hosted. We do have preferred environments that integrate tightly with our Git-based workflow, so we are more efficient on some hosts than others, but we never force a move. If hosting is part of the problem we’ll say so.

My previous developer disappeared. Can you still help?

Yes. Access and account recovery is part of onboarding on every plan, including registrars, DNS, hosting and WordPress admin.

Do you work with WooCommerce, LMS or membership sites?

Yes, on a Custom plan. Those systems have more moving parts than a marketing site, so we scope the plan around them rather than squeezing them into a flat tier. Our WordPress development page covers the kinds of systems we build.

Who does the work?

DD9’s own developers in Boulder, Colorado. The same team that builds our client sites handles maintenance, so there is no hand-off to a separate support tier.

Can you also redesign the site?

Yes. Maintenance clients get priority scheduling on larger projects, and the audit from onboarding usually tells us exactly where a redesign would pay off.

Ready to hand off the maintenance?

Pick a plan above or just tell us about your site. We confirm the fit, send a one-page agreement, and start onboarding within a week.

Pick a plan above or just tell us about your site. We confirm the fit, send a one-page agreement, and start onboarding within a week.