Hosting, Updates and Backups: What a Managed Website Actually Means
Hosting, SSL, backups, updates, security, monitoring, small changes and fair use, explained one job at a time: what each one does, what goes wrong when nobody is doing it, and the questions to ask any managed service.
“Fully managed” appears on a lot of web design pages and means a lot of different things. Sometimes it means a company will host the site and answer the phone. Sometimes it means considerably less. Because you cannot see hosting, updates or backups, it is easy to pay for a management service and never know whether it is happening.
So here is what the words actually cover, one job at a time, written for a business owner rather than a developer. If you already have a website, use it as a checklist for whoever looks after it. If you are choosing a service, use it to ask better questions.
Hosting: the building the website lives in
Every website lives on a computer somewhere, permanently connected to the internet, called a server. Hosting is renting space on one. When a customer types your address, their phone asks the server for the page and the server sends it back.
Hosting quality is invisible until it isn’t. Poor hosting is slow, which costs you visitors who give up, and it goes down, which costs you the visitors who arrive while it is off. Good hosting is fast, stable and monitored, and someone is alerted when it stops responding.
What goes wrong when nobody manages it: the renewal lapses and the site vanishes; the hosting company sends a notice about a server move that nobody reads; the site sits on an old, slow server because nobody ever compared it with anything.
The domain: the address on the door
The domain is the address itself, yourbusiness.co.uk. It is registered separately from the hosting and renews on its own schedule, usually every year or two. It should be registered in your business’s name, and the renewal reminders should reach an inbox someone reads. A managed service normally handles the renewal and points the domain at the right server; you should still know it is yours. We cover that in who owns your website?.
SSL: the padlock
SSL is the certificate that makes your site load over https rather than http and shows the padlock in the browser. It encrypts what passes between the visitor and your site, which matters most for contact forms, and browsers now flag sites without it as “not secure” in a way customers notice.
Certificates expire, typically every few months for the free ones most sites use. On a managed site they renew automatically and somebody checks they did. On an unmanaged one, the day it lapses every visitor is greeted with a full-screen warning, and a business can lose a week of enquiries before anyone tells them.
Backups: the copy you hope never to need
A backup is a copy of the whole site, files and database, taken regularly and stored somewhere other than the server it came from. If the site is broken by an update, damaged by an attack, or simply edited badly, the backup is what gets it back.
Three things separate a real backup from a tick on a sales page. It has to run automatically, on a schedule, not “when someone remembers”. It has to be stored off the server, because a backup on the same machine as the site goes down with it. And somebody has to have restored from it at least once, because a backup that has never been tested is a hope, not a plan.
What goes wrong: the most common story is a site that had “daily backups” in its hosting plan, which turned out to be disabled, seven days old, or unrestorable when the moment came.
Updates: the boring job that prevents most disasters
A WordPress site is made of software: the WordPress core, a theme that controls the design, and plugins that add abilities like forms or galleries. Each of these releases updates, some for new features, many to close security holes that have been found. A site that is not updated is running known vulnerabilities, and because WordPress is so common, those vulnerabilities are widely scanned for.
Updates need judgement, not just clicking “update all”. An update can conflict with another plugin and break the contact form, or the layout, or the site. Managed properly, updates are applied regularly, checked afterwards, and rolled back from a backup if something breaks. Managed badly, they are either never applied, which is a security problem, or applied blindly, which is a breakage problem.
What goes wrong: an out-of-date plugin is the usual route in when a small business site is compromised. The result is usually spam pages injected into your site, a warning in Google results, or your domain being used to send junk email, and it can take days to clean up.
Security: more than a plugin
Security on a small business site is mostly unglamorous discipline: updates applied, strong passwords, no forgotten admin accounts, sensible hosting that blocks the obvious attacks, and a firewall or monitoring layer that notices unusual activity. It is not a single product you buy and forget.
The realistic threat for a plumber or a salon is not a targeted attack. It is automated scanning, thousands of bots trying known weaknesses on every WordPress site they can find. Keeping the software current defeats most of it. Monitoring catches the rest early, while it is still a nuisance rather than a rebuild.
Monitoring: knowing it is up
A site can be down for days without the owner knowing, because owners rarely visit their own websites. Uptime monitoring is a service that checks the site every few minutes and alerts someone when it fails to respond. It is inexpensive and it is the difference between fixing an outage in an hour and finding out from a customer a week later.
Good management also includes watching the things that degrade slowly: the site getting slower as images pile up, a form that has stopped sending, a broken link on the homepage. None of these takes the site down. All of them cost enquiries.
Small changes and fair use
The part of management a business owner actually sees is changes. A new service, a different phone number, a price update, a new photograph of a finished job, a team member who has left. These arrive every few weeks for as long as the business trades, and a site that cannot absorb them quietly falls out of date.
Most managed plans include “reasonable small changes, subject to fair use”, and it is worth understanding what both halves of that mean. Reasonable small changes are exactly those: swapping a photo, updating wording, adding a service to a list, changing a price. Fair use means there is a limit, judged sensibly, so that a plan for looking after a website does not quietly become a plan for rebuilding it every month. A new page, a redesign or a new feature is a piece of work in its own right and is quoted separately.
The practical value is that asking costs nothing and takes an email, so the changes actually get made and the site stays current. On PrimeStart’s Website, small changes under fair use are part of the £49.99 a month, alongside everything above. How it works sets out the process, including how changes are requested after launch.
Support: a person who answers
The last piece is the least technical. When something is wrong, or you simply have a question, is there a person to email or call who knows your site and will reply? Managed services stand or fall on this. A hosting company’s ticket queue is not the same thing as someone responsible for your website.
What “managed” should cost, and what it replaces
Priced separately, the jobs above are hosting, a domain, an SSL certificate, a backup service, uptime monitoring, and either a maintenance retainer or occasional developer hours for updates and changes. Individually none is expensive; together, and with your own time added, they are a real cost that an upfront web design quote rarely mentions.
A managed monthly plan rolls them into one number and, more importantly, one responsibility. With PrimeStart the Website is £49.99 a month with a £0 upfront website design fee and an 18-month minimum term, £899.82 in total, covering the design and build as well as everything on this page. At the end of the term the website is yours: stay at £49.99 a month on a rolling basis with no new minimum, or move it to hosting of your own, subject to the third-party licences every website relies on. The Website page lists exactly what is and is not included.
A checklist for any managed service
- Where is the site hosted, and who is monitoring that it is up?
- Is the domain registered in my business’s name?
- Does the SSL certificate renew automatically, and who checks?
- How often are backups taken, where are they stored, and when was one last restored?
- Who applies WordPress and plugin updates, how often, and what happens if one breaks the site?
- What counts as a small change, and what does fair use mean in practice?
- Who do I email when something is wrong, and how quickly do they reply?
A service that can answer all seven clearly is managing your website. One that can’t is hosting it and hoping.
Questions people ask
Isn’t hosting all I need?
Hosting keeps the site online. It does not update the software, test the backups, renew the certificate or make changes. Plenty of hosted sites are unmanaged, which is why so many end up broken or out of date while still technically “up”.
How often should a WordPress site be updated?
Security updates as soon as they are released, and routine updates at least monthly, each followed by a check that the site still works. A site last updated a year ago should be treated as at risk.
What does fair use actually mean for changes?
Reasonable, occasional small edits: photographs, wording, a phone number, a price, a service added to a list. It is judged sensibly rather than counted. New pages, redesigns and new features are separate pieces of work and are quoted as such.
Do I need to do anything myself on a managed plan?
Tell the company when something about the business changes, and keep the details they hold for you current. Everything technical, from updates to backups to the certificate, is their job.
Management is the difference between a website that quietly works for years and one that quietly stops. If you would rather not think about any of the above, that is exactly what a managed plan is for. If you would rather handle it yourself, the checklist tells you what the job involves.
