Hacked, redirecting or showing a blank page? We clean and restore WordPress sites in 24 hours.

Get emergency help
WP Site Kept.
All guides

Maintenance

Managed WordPress hosting vs a maintenance plan: what each covers

21 August 2026 · 6 min read

On this page

"I'm on managed hosting, so I don't need maintenance" is a reasonable assumption and usually wrong — but not for the reason most providers claim. The overlap is real. It is just narrower than the name suggests.

What managed hosting genuinely covers

Good managed hosts do a lot, and it is worth paying for:

  • Server-level performance — caching, PHP versions, CDN, resource allocation
  • Server security — firewall, DDoS mitigation, intrusion detection
  • Automatic core updates, often plugin updates too
  • Daily backups, kept on their infrastructure
  • Uptime monitoring of the server
  • Staging environments
  • Malware scanning, and on some hosts a cleanup guarantee

That is a genuinely substantial list. If your host does all of it, you are in better shape than most sites.

Where the gap is

The gap is not in the tasks. It is in whether anyone looks at your site afterwards.

A managed host updates your plugins automatically. Nobody loads your homepage afterwards. Nobody submits your contact form. Nobody notices that the update changed your checkout layout, or that a form has stopped sending, or that your page builder now renders the hero section wrong on mobile.

Hosts monitor the server. They do not monitor your business.

Concretely, here is what is typically nobody's job on managed hosting:

  • Checking the site still works after an update
  • Deciding whether a plugin with a disclosed vulnerability should be deactivated rather than waited on
  • Rolling back when an update breaks something
  • Removing abandoned plugins
  • Fixing the broken form
  • Making the content change you wanted
  • Telling you what state the site is in

Where they genuinely overlap

Backups. If your host takes daily off-site backups with decent retention, that is a real duplication. Worth knowing: many host backups live on the same infrastructure and are kept for only a few days — which matters more than it sounds.

Core updates. Automatic core security updates are a WordPress feature anyway. Genuine overlap.

Server-level security. A maintenance provider cannot replace a host firewall, and should not claim to.

So do you need both?

Host only is defensible if: your host updates plugins, your site is simple, it does not earn you money directly, and you are willing to be the person who notices when something breaks.

Both is right if: the site earns you money, you run WooCommerce, you want someone to answer when something is wrong, or you want the small changes done without learning to do them.

Maintenance only, on cheap hosting is the worst combination, and surprisingly common. No amount of maintenance compensates for a server that is slow and insecure. If your hosting is $3 a month, fix that before buying anything else — it is usually the largest single performance factor.

The honest recommendation

If you are on good managed hosting and your site is simple and static, you may well not need a maintenance plan. We would rather say that than sell you one you do not use.

What we would suggest instead: install our free plugin, which will tell you whether your host is actually keeping things current. Plenty of "managed" hosting turns out to update core and nothing else.

And if the plugin shows five outdated plugins and an unsupported PHP version — which happens often — then the managed hosting is not covering what you assumed it was. That is the moment a plan starts making sense, and not before.

One thing we deliberately do not do: bundle hosting. You keep your host, in your name, and can leave us without moving anything. A provider who bundles both is more convenient and harder to leave, and you should choose that trade-off knowingly.

Share this

Would rather not do it yourself?

We keep WordPress sites updated, backed up and fixed.

Weekly updates with a backup taken first and the site checked afterwards, daily off-site backups, malware monitoring with free cleanup, and engineers who answer. From $79 a month, covered within 24 hours.