WordPress is safe and fast as long as it is maintained. Here is the monthly checklist we apply.
The checklist
- Backups: daily, off-site, restore tested quarterly
- Updates: core, plugins and theme on staging first, key pages and checkout tested, then production; PHP version checked
- Security: remove unused plugins and themes, replace abandoned ones, review admin accounts, check logs, HTTPS expiry, file scans — see hacked website: the first 24 hours
- Performance: Core Web Vitals, cache, database clean-up, image weight
- SEO: crawl errors, 404s, broken links, accidental noindex, sitemap
- Forms and features: test every form, CRM delivery, integrations
- Report: updates, incidents, performance, recommendations
Effective WordPress maintenance is boring: nothing happens, and that is the point.
Short on time? See maintenance contracts and maintenance cost.
WordPress maintenance: FAQ
How often should WordPress be updated?
Security fixes immediately, the rest at least monthly, after a backup and a staging test.
Are automatic updates enough?
For minor core fixes; untested plugin and major updates can break the site.
Hand over your WordPress maintenance
Our website maintenance in Paris applies this checklist every month. Request a proposal.