Ongoing Maintenance

You built a website.Now what?

Most organisations spend budget on building a website and treat maintenance as optional. But digital infrastructure decays silently, security vulnerabilities accumulate unnoticed, content goes stale without anyone seeing, systems fail slowly with no one watching. You don't need just a website. You need a digital foundation that keeps working.

The reality

Do any of these sound familiar?

1

WordPress hasn't been updated in months, a known target

WordPress core, plugins, and themes receive regular security updates. Every unupdated version is a known vulnerability, and attackers have automated tools scanning millions of sites daily. NGO and church donation forms are common targets for carding attacks: attackers use your form to test stolen credit cards, and when your payment processor detects it, they may shut down your account.

Known security vulnerabilities in unpatched versions
Donation forms are prime targets for carding attacks
Payment processor may shut down your account
32% of nonprofit websites have no website security in place.
2

No backup, a hack means permanent loss

A hack, an accidental deletion, a hosting server failure, any of these can make your website disappear in minutes. Without backups, disappearance is permanent. Years of event records, service case studies, donation pages, congregation data, all gone. Some organisations spend months rebuilding. Some give up on having a website at all.

Website can be permanently lost with no recovery path
Years of content and data gone in minutes
Rebuilding takes months and disrupts operations
3

Content is outdated, visitors think you've closed

Your website was accurate when it launched. Six months later, service times changed but the website didn't. A year later, three new staff members joined but aren't on the staff page. Two years later, the homepage banner is still promoting an event that ended. Visitors arrive and see an organisation that appears to have stopped operating.

Stale content implies inactivity or closure
New visitors make immediate negative judgements
SEO suffers without regular fresh content signals
4

No data, every decision is a guess

You don't know how many people visit your website each month. You don't know which page has the highest exit rate. You don't know whether most visitors arrive from search or from Facebook. Without this data, every decision about redesigns, content, and advertising is a guess.

Budget spent on redesigns without knowing what's broken
Content created without knowing what visitors actually read
Advertising spend without understanding traffic sources
5

Staff transitions leave digital knowledge gaps

The staff member responsible for the website has left. She took with her all the institutional knowledge: the WordPress admin password, how to upload images, the steps to add an event page. The new staff member doesn't know where to start. The website enters a 'nobody dares touch it' state.

Website frozen because nobody knows how to update it
Knowledge lost permanently with each staff departure
Dependency on one person creates single point of failure

The solution

How Re:focus fixes this

Monthly security updates and plugin management

We perform monthly security updates for WordPress core, all plugins, and themes, with functional testing after each update to confirm nothing broke. We run continuous malware scanning and firewall monitoring. You don't need to remember anything or worry about an update breaking your site, we're watching, and if something goes wrong, we fix it.

Daily automated backups with 30-day version retention

Daily automated backups, cloud-stored, with 30-day version retention. If anything goes wrong, hack, accidental deletion, hosting failure, we can restore your site to its last clean state within hours. Backups are stored off-site to prevent a hosting failure from taking down both the site and the backup simultaneously.

Quarterly content audit

Every quarter we run our seven-point content audit: service times, staff information, recency of news content, CTA functionality, form submission testing, notification routing verification, and footer updates. Content updates beyond this scope are handled through our emergency response service (48hr turnaround).

Quarterly Analytics report and SEO health check

A clear quarterly report: visitor trends, top pages, traffic sources, exit pages, keyword rankings, Core Web Vitals status. Not a technical document, actionable information you can make decisions with.

Digital governance and staff transition management

We maintain your organisation's Digital Asset Register and execute the digital handover protocol with every staff transition: relevant password updates, access permission reassignment, and departing account closure. The health of your digital infrastructure no longer depends on any one person remaining in post.

Deliverables

What you receive

Monthly security update report

All updates listed, functional testing results

Daily backup confirmation

Automated backup with timestamp notification

Quarterly content audit report

Seven-point checklist execution results

Quarterly Analytics report

Visitors, traffic, SEO, Core Web Vitals

Annual Digital Asset Register update

All accounts, renewal dates, responsible persons

Staff transition digital handover execution

Standard account handover procedure

Emergency response service

48hr turnaround for urgent content updates

Ready to re:focus?

Find out how exposed your site is right now