Hosting Plans
Every plan includes managed infrastructure, security basics, and routine maintenance. Pick the platform your site runs on, then choose the level of care you need.
Essential
Fully managed WordPress with automated monitoring, alerts, and delivery infrastructure.
- Hosting & Infrastructure
- Managed WordPress hosting with staging environment
- Cloudflare CDN with global caching and DDoS protection
- Cloudflare DNS management and Turnstile spam protection
- Advanced caching (Redis Object Cache Pro, W3TC, NGINX Accelerator)
- Auto Scaling for temporary traffic surges (+10 PHP workers)
- Mailgun transactional email + Gravity SMTP install & config (2,500 msgs/mo included)
- Security
- SolidWP Security Pro — continuous scanning, hardening & vulnerability alerts
- Automated OS-level security patching & server-side vulnerability mitigation
- Automated daily backups with 30-day retention
- Monitoring
- SSL certificate provisioning, renewal & continuous monitoring
- NewRelic uptime monitoring for proactive issue detection
- Uptime incident response — we investigate and escalate within 2 business hours
- Updates
- Automated monthly core, plugin & theme updates with visual regression testing on staging and rollback capability
- Performance
- Routine database optimization & cleanup
- Discoverability
- XML sitemap · robots.txt · llms.txt (includes bot & AI crawler blocking)
- Support
- 2 small content edits per month included (up to 15 minutes each)
- Best-effort response, typically next business day
- Reporting
- Monthly maintenance report (updates log, uptime & security summary)
- Plugins & Tools
- Access to premium WordPress plugins (Gravity Forms, LearnDash, WPBakery, Slider Revolution, BackupBuddy, and more)
- Access to Beaver Builder, Divi, and Elementor for custom theme development
Concierge
Enterprise-grade reliability with a dedicated team, failover infrastructure, and a guaranteed same-business-day response.
- Everything in Essential
- Dedicated Team
- Dedicated account manager
- Dedicated developer — 2 incidents/month included (an incident = up to 2 dev hours on a single issue; no rollover)
- Guaranteed same-business-day response (~4 business hours) — 10% monthly-fee credit, issued on request, if missed
- Priority emergency response
- Infrastructure
- Off-site failover server with automated content replication
- Cloudflare DNS-based automatic failover or managed load balancer
- Recovery time objective (RTO): site restored within 4 business hours
- 10,000 Mailgun transactional messages/mo included
- Security
- Manual malware scans (MalDet) with remediation on detection
- Baseline security headers (HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
- Monitoring
- Domain expiration monitoring & renewal alerts
- Broken link and redirect monitoring — proactively monitored and adjusted
- security.txt — we manage security disclosures, bug bounties, and beg bounties on your behalf
- Backups
- Daily off-site disaster recovery backups with 90-day retention and on-demand restore
- Performance
- Monthly GTMetrix performance scans with automated reports
- NewRelic application performance monitoring (APM)
- Traditional CDN for media assets (images, video, downloads)
- Updates & Oversight
- Manual WordPress core, theme & plugin updates for complex or multi-plugin sites
- Monthly inspection and coordinated update review for WordPress core and plugins
- Testing
- Regular contact form and cart integration testing (e.g., Selenium) after plugin and theme updates
- Annual BrowserStack cross-browser and device compatibility testing
- Plugin conflict or white-screen rollback within 4 business hours
- Analytics & Reporting
- Google Analytics integration with monthly behavior & conversion reports
- Google Search Console integration with monthly performance & index coverage reports
- Newsletter platform integration (Brevo, ConvertKit, or Mailchimp)
- Compliance & SEO
- Quarterly ADA accessibility audit + remediation report
- Quarterly on-page SEO audit and annual full SEO audit
- Annual inspection of WordPress theme and PHP version
- Proactively fix issues found in SEO, ADA, or security-header audits
- Advertising & Analytics
- PPC campaign integration & audit
- Session replay / behavior analytics setup (Inspectlet or Microsoft Clarity)
- Reporting & Intelligence
- Monthly infrastructure health & performance report
- Network and web security reports (SecurityScorecard)
Response expectations: Essential support is best-effort — typically next business day, no guarantee. Concierge is the guaranteed tier, with same-business-day response (~4 business hours) and a 10% monthly-fee credit, issued on request, if missed.
Per-site pricing: Pricing is per website. WordPress multisite networks are Concierge-only and custom-quoted.
Transactional email: Transactional email (Mailgun) allowance: Essential includes 2,500 messages/mo and Concierge 10,000/mo; beyond that, $2 per 1,000 messages. Reviewed periodically rather than metered in real time.
Concierge failover: The Concierge plan includes a failover server at a different vendor with automated replication from your primary host. If your primary host goes down, traffic is automatically rerouted — no manual intervention required. Automatic failover requires Cloudflare DNS delegation. If you manage your own DNS, we configure a load balancer so you can point your domain to the backup host at any time.
Available Add-Ons
Extend your plan with additional coverage for specific needs. Add-ons buy our ongoing care of that component — they are not a license fee, and we don't gatekeep installs. You may install what you like on a managed plan; without the add-on, issues specific to that component simply bill at standard rates.
WooCommerce Care Add-On
Extended care coverage for WooCommerce stores — update testing, order flow validation, and payment gateway monitoring.
- WooCommerce core & extension updates with dedicated staging test run
- Checkout and cart user-flow regression testing before every update
- Payment gateway connectivity monitoring (Stripe, PayPal, etc.)
- Order notification email deliverability checks
- WooCommerce-specific security hardening (order data, customer PII)
- Monthly WooCommerce performance report (store speed, conversion baseline)
LearnDash / Membership Add-On
Extended care for LMS and membership sites with login, enrollment, and protected-content testing.
- LearnDash / membership plugin updates with dedicated staging test run
- Login, registration, enrollment, and protected-content regression testing
- Transactional email checks for password reset and course/member notifications
- Dynamic cache exclusion review for logged-in users and checkout/member flows
- Monthly LMS / membership performance and delivery review
Strict CSP & Advanced Security Headers Add-On
Custom Content Security Policy rollout with report-only tuning, allowlist maintenance, and ongoing monitoring.
- Report-only / learning-mode CSP rollout
- Site-specific allowlist tuning for plugins, analytics, fonts, and embeds
- Ongoing CSP violation review and policy adjustments
- Advanced header review and deployment strategy
- Post-update policy validation after major plugin/theme changes
ADA Remediation Retainer
Ongoing manual remediation for accessibility issues beyond the included audits.
- Manual remediation of accessibility findings
- Alt-text and structural issue cleanup
- Keyboard navigation and form usability fixes
- Accessibility statement and compliance follow-up updates
- Monthly remediation summary
Multilingual Care Add-On
Additional regression coverage for WPML, Polylang, and other multilingual WordPress setups.
- Multilingual plugin update testing on staging
- Cross-language layout and navigation regression checks
- Translated SEO metadata and redirect spot checks
- Translation string and language-switcher issue review
Content Publishing Support Add-On
Monthly content entry and formatting support for clients who need webmaster help.
- Upload and format up to 4 client-provided posts or pages per month
- Featured image optimization and placement
- Basic on-page SEO field entry
- Internal link and publish QA review
Always included with every plan
- SSL certificate provisioned and renewed
- DNS configuration assistance
- Uptime monitoring with alert notifications
- Bot and AI crawler blocking (robots.txt + middleware)
- XML sitemap, robots.txt, security.txt, llms.txt
- Plausible Analytics (privacy-friendly, no cookie banner required)
- Mailgun contact form with Cloudflare Turnstile spam protection
Out-of-Scope Development
Work outside your plan's routine maintenance is quoted per project or billed time-and-materials. No prepaid hours required — each request is scoped and invoiced. After the minimum, time bills in 15-minute increments. If work will exceed an estimate by more than 20%, we pause and confirm before continuing.
Content Updates
per hour · 30-minute minimum ($40)
Text, image, and link changes, minor copy edits, and similar content work beyond the 2 small edits per month included with every plan.
Request a QuoteDevelopment Work
per hour · 1-hour minimum
Custom code, new functionality, pages, third-party integrations, architecture changes, plugin/theme troubleshooting, and complex technical work. Anything touching a template file, embed code, or tracking script is development.
Request a QuotePriority / Rush Scheduling
Billable work is typically scheduled 2–3 weeks out. Rush fees buy earlier scheduling and stack on top of the hourly rates — a queue-jump fee, not a labor rate. Rush fees are a flat scheduling charge — separate from and in addition to the applicable out-of-scope development rate. All rush work still happens during business hours. Rush fees are non-refundable once scheduling has been rearranged.
1-Week Rush
flat fee · non-refundable once scheduled
Work delivered within 1 week of request, scheduled ahead of the standard queue.
Request Rush3-Day Rush
flat fee · non-refundable once scheduled
Work delivered within 3 business days. Other scheduled work is displaced to accommodate your request.
Request RushSame / Next Day
flat fee · non-refundable once scheduled
Work begins same or next business day. Existing work is rescheduled immediately to move your request to the front.
Request RushEmergency Support
For work performed outside business hours (Mon–Fri, 11am–7pm ET) — nights, weekends, and holidays. Time of request is the only trigger; no surcharge applies during business hours.
After-Hours Emergency
per hour / 1-hour minimum
Any work performed outside business hours (Mon–Fri, 11am–7pm ET) — including nights, weekends, and holidays. Timing is the only trigger; no surcharge applies during business hours. Included support is delivered during business hours — after-hours response on any issue, including things a plan covers, is available at this rate, on request.
- Immediate after-hours triage and assessment
- Emergency site restoration and damage control
- Direct communication channel during resolution
- Post-incident root cause analysis report