Something broke.
Maybe you clicked a link on your own website and got a white screen. Maybe a client texted you saying your contact form isn't working. Maybe you Googled your business name and noticed your site is loading with a security warning. Maybe nothing dramatic happened — you just looked at your website for the first time in a while and felt a quiet sense of dread.
Whatever the scenario, you're now in the situation most small business owners end up in eventually: your website needs attention, and you're not sure where to start or who to call.
This post is for you. We'll walk through what's actually wrong (probably), what it costs to fix, what it costs to prevent, and how to find someone trustworthy to help — whether that's us or anyone else.
There's a difference, and it matters.
Broken means something has stopped working that used to work. A page throws an error. The contact form doesn't send. The checkout process crashes. Images aren't loading. The site won't open at all.
Neglected means the site still technically works, but it hasn't been touched in years. The content is out of date. There are security vulnerabilities quietly accumulating. The plugins or software underneath it are years behind. It loads slowly. It looks embarrassingly dated on a phone.
Both are problems. But they're different kinds of problems, and they usually have different fixes.
If your site is built on WordPress (and a huge number of small business sites are), it runs on a stack of plugins — small pieces of software that handle things like contact forms, galleries, SEO settings, and shopping carts. WordPress itself also releases updates regularly.
When those updates happen in the wrong order, or when a plugin update conflicts with your theme or another plugin, things break. Sometimes spectacularly.
This is the most common cause of "my website suddenly stopped working" calls we get. And it's almost entirely preventable with a managed update process — meaning someone reviews and tests updates rather than letting them run automatically in the background.
Shared hosting — the cheap kind most small businesses start with — puts your site on a server with hundreds of other sites. When that server has a problem, or when one of those other sites causes trouble, yours goes down too.
Hosting issues can look like: your site is completely unreachable, loading very slowly, or returning odd errors even though nothing about the site itself changed.
If you don't know where your site is hosted or who manages it, that's useful information to track down (we can help you find it).
Your domain name (the address people type to find you) has to be renewed every year. Your SSL certificate (the thing that makes your site show "https://" and the padlock) also expires on a schedule.
When either of those lapses, visitors get scary warning messages. Some browsers will outright refuse to open your site. This looks catastrophic but is usually fixable in an afternoon once you locate the right login credentials.
If someone recently made changes to your site — even small ones — they may have introduced an error. A missing quotation mark in a template file, a deleted database table, a file permission change. These are often quick fixes if you know where to look, but impossible to diagnose without access.
It happens. A site that hasn't been updated in a while has known vulnerabilities, and automated bots are constantly scanning for them. If your site is serving spam, redirecting visitors to strange URLs, or showing content you didn't put there, a compromise is likely.
This is fixable. It takes more work than a simple update, but it's not the end of the world. The bigger concern is what it does to your Google ranking in the meantime — search engines penalize sites serving malware or spam, and recovering that takes time.
Even if your site seems fine on the surface, here's what might be quietly accumulating if it hasn't had regular attention:
Outdated software. WordPress releases security patches regularly. So do most plugins. If your site is running software from 2021, there are likely known vulnerabilities that haven't been patched.
No recent backups. If something goes wrong — a bad update, a hack, an accidental deletion — and there's no backup, the recovery options get expensive and slow quickly. A good backup from yesterday turns a disaster into a 20-minute restore.
Broken links. Pages get moved or deleted. Products get discontinued. Blog posts reference other pages that no longer exist. Broken links frustrate visitors and quietly hurt your SEO.
Images that no longer load. Images get orphaned from their files. This usually happens after a migration or a partial rebuild.
A contact form that stopped working. Email delivery is finicky. SMTP settings change. Spam filters get stricter. A form that looks like it works might be silently discarding every submission.
A site that's slow. Over time, databases accumulate junk: post revisions, spam comments, orphaned data. Hosting gets crowded. Images that were never optimized get slower as connection speeds improve and user expectations rise. Slow sites lose visitors — and lose ranking.
Google has published guidance on this. Their Core Web Vitals benchmarks flag sites that take more than about 2.5 seconds to show meaningful content on mobile as "needs improvement." Beyond 4 seconds, you're in territory where most visitors have already left.
The practical test: open your site on your phone, on mobile data, not connected to your office wifi. How does that feel? That's what most of your visitors experience.
A slow site isn't just an annoyance. It's a conversion killer. Studies consistently show that a one-second delay in page load reduces conversions by roughly 7%. If your site takes 6 seconds to load and you're running ads to it, you're losing money directly to load time.
Sometimes, yes. Here's what's usually safe to try on your own:
- Check if it's a caching issue. Open your site in a private/incognito browser window. If it loads fine there, it's likely a cached version of the old site on your device. Clear your cache and reload.
- Check if it's just you. Try opening the site from your phone on mobile data, or ask a colleague to try. If everyone else sees it fine, the problem is on your end.
- Check your domain. Go to your domain registrar (GoDaddy, Namecheap, wherever you bought it) and make sure it hasn't expired and still points to the right place.
- Check your hosting panel. Log in to cPanel, Plesk, or wherever your hosting is managed. Is there a notice about the account? Is the server showing normal status?
What's not safe to try yourself (unless you're comfortable with PHP and databases):
- Editing template files or plugin code
- Manually restoring from a backup
- Attempting to clean a hacked site
- Changing DNS settings without understanding what you're changing
When in doubt, don't poke at things hoping something fixes itself. That usually makes the recovery harder.
Honestly? It depends almost entirely on what's wrong and how long it's been left alone.
Here's a rough guide from our own experience:
A single broken plugin or configuration error: Usually 1–2 hours of diagnostic and fix time. Straightforward for anyone who knows what they're doing.
An expired SSL certificate: Usually fast to fix if you have access to the right accounts. The scramble to find those accounts is often what takes time.
A hacked or compromised site: 3–8+ hours depending on the severity. Cleaning a compromised site means finding every injected file or database entry, patching the vulnerability that let it in, and doing a post-clean audit. Rushed cleanups leave things behind.
A major update failure that took down the site: 1–4 hours. Usually reversible if there's a backup. Without one, you're rebuilding whatever broke.
A site that hasn't been touched in 3+ years: This often tips into "is it worth repairing or rebuilding?" territory. If the site is on an ancient version of a platform with dozens of abandoned plugins, bringing it up to current and secure can cost more than a fresh build. We'll always give you an honest answer on which makes sense.
The other cost is the business impact while your site is down. If your site is your main lead generation channel and it's been broken for a week, that's real money. Getting things fixed fast matters.
This is where the honest pitch happens: regular maintenance is almost always cheaper than emergency repair.
Here's the math, roughly:
A basic website care plan from an agency like ours runs around $99–$199/month. That typically covers:
- Reliable, managed hosting
- Daily automated backups stored offsite
- Monthly core and plugin updates (tested, not just clicked)
- Security monitoring
- A small allowance for content edits
- A real human you can email when something looks off
An emergency repair call — same-day, urgent, no backup to restore from — runs $150–$300/hour at most agencies, and realistically takes 3–6 hours minimum for anything meaningful.
One emergency in a year erases most of the cost of an annual care plan. Two emergencies and the math isn't even close.
Beyond the cost: a site on a care plan rarely has emergencies. Updates are managed. Backups exist. Problems get caught before they become visible.
Whether you work with us or someone else, here's what a good care plan arrangement should include:
Backups that actually get tested. A backup you've never restored from is a backup that might not work when you need it. Ask how often they verify backups.
Updates done by a person, not a cron job. Automated updates are how things break. A good provider runs updates in a staging environment or at least checks the site immediately after.
Monitoring. They should know your site is down before you do. Uptime monitoring pings the site every few minutes and alerts the team if it goes offline.
A clear scope. What's included and what isn't? How many hours of content edits per month? What happens if something breaks? These should be spelled out.
A real person on the other end. When something goes wrong, you want to reach a human, not a ticketing system. Ask how they handle urgent issues.
No surprise invoices. Monthly fee should be flat and predictable. Any out-of-scope work should be quoted before it starts.
If you're managing your own site or working with someone and want to know what "good" looks like, here's what should be happening regularly:
Weekly:
- Uptime monitoring (automated)
- Security scanning (automated)
- Backup verification
Monthly:
- Plugin, theme, and core updates (reviewed and tested)
- Database cleanup (remove revisions, spam, orphaned data)
- Broken link check
- Form testing (make sure contact forms are actually delivering)
- Page speed check (catch regressions before they compound)
- Review any 404 errors in Google Search Console
Quarterly:
- Full site audit — broken pages, outdated content, missing meta tags
- SSL certificate check (flag before it expires)
- Review server resource usage (is the hosting keeping up with traffic?)
- Content freshness review (are any key pages embarrassingly out of date?)
Annually:
- Domain renewal confirmation
- Review of all third-party integrations (booking tools, payment processors, embedded apps)
- Performance baseline comparison year-over-year
- Security audit
That's not an overwhelming list. But it's a lot to remember to do consistently, month after month, for a site that mostly just sits there quietly. Which is why most business owners don't do it — until something breaks.
Sometimes it does. Signs that maintenance isn't enough:
- The site is on an abandoned or unsupported platform
- It takes longer than 5 seconds to load on mobile no matter what you do
- It looks genuinely embarrassing on a phone
- The design is more than 5 years old and it shows
- You've lost admin access and nobody knows the credentials
- It was built by someone in a hurry and the code underneath is a mess
In those cases, the honest conversation is whether repair money is well spent. Sometimes a new build is cheaper in the long run than propping up an old one.
We build sites starting around $4,000 for straightforward small business sites. We can usually tell within a short conversation whether a repair or a rebuild makes more sense for your situation — and we'll give you a straight answer either way.
We're based in London, Ontario and most of our maintenance clients are local businesses — contractors, healthcare practices, service companies, small retailers. The advantage of a local provider isn't just that we can meet for coffee (though we can). It's that we're reachable, we know the local market, and we're not a faceless platform that doesn't know who you are.
If you're a London, Ontario business with a website that's broken, slow, or just quietly worrying you — we're easy to get in touch with. We offer a free 20-minute call where we'll look at your situation and tell you honestly what we think you need.
No pitch, no pressure. Sometimes the answer is "you're actually fine, here's what to do yourself." We're good with that.
- Websites break for predictable reasons, and most of them are fixable.
- Neglected sites are more expensive to fix than maintained ones.
- Regular maintenance costs a fraction of what emergency repair costs.
- A good care plan includes backups, managed updates, monitoring, and a human you can reach.
- If your site needs a rebuild rather than a repair, we'll tell you that too.
If something is broken right now, get in touch — we'll try to help you figure out what's going on, even if you don't end up working with us.
If things are fine but you've realized you're flying without a safety net, take a look at our care plans. They start at $99/month and include the kind of quiet, dependable maintenance that most agencies forget to do.