Why "launch and forget" fails
A website is a stack of dozens of components: the OS, runtime, dependency libraries, certificates, DNS. Every layer expires or accrues vulnerabilities over time. Unmaintained sites typically hit trouble within 6–18 months: an expired certificate, an unsupported runtime that gets hacked, or dependencies so old that upgrading means rebuilding.
Maintenance is small, continuous spending that prevents large, sudden losses.
What a professional maintenance contract covers
A qualified agreement should include:
- Security: OS and dependency patching, vulnerability monitoring, firewall configuration.
- Availability: 24×7 uptime monitoring and incident response with a committed SLA (e.g. within 4 hours).
- Data: daily automatic backups plus periodic restore drills — untested backups don't exist.
- Content: a monthly quota of copy, image and product updates.
- Iteration: small feature tweaks and page improvements, hourly or bundled.
- Reporting: a monthly traffic and incident summary so you know what you're paying for.
Market rates (2026)
Brochure sites: ¥1,000–3,000/year (~$140–420) for monitoring, patches and backups. Sites with a CMS or mini programs: ¥3,000–10,000/year. Business systems: monthly retainer packages from ¥2,000/month.
To judge fairness, compare the fee against the cost of one incident — a hack, malware injection or data loss each costs far more than a year of maintenance.
Self-maintaining? The minimum viable checklist
For companies with in-house technical staff:
- Automated backups: daily full snapshots, 30-day retention, stored off-site (different cloud account or on-premise).
- Uptime alerts: a free monitoring service (UptimeRobot etc.) so downtime reaches you immediately.
- Quarterly updates: OS patches and dependency upgrades — don't accumulate them into a crisis.
- Handover docs: deployment steps, account inventory, known-issue playbook — so departures don't turn into emergencies.
Three questions before signing any maintenance contract
"Is the response SLA written into the contract?" "Can I get a copy of the backups?" "Are the source code and accounts under my name?" — three yeses make the contract pass. Every project I deliver includes a one-year free bug-fix period, with post-term scope and pricing stated in the contract; no vague clauses.
Want to discuss a real project?
Articles carry general experience; your situation may need different trade-offs. Send a short description and get a tailored initial plan and itemized quote.
Free Consultation