You asked your web person about backups last year, they said “we have UpdraftPlus running,” you nodded, and that was the end of the conversation. You feel covered. You’re probably not. We’ve been called in to fix this exact situation seven times in the last 18 months — and in five of those, the “backup” couldn’t actually restore the site.
This isn’t a knock on UpdraftPlus. The problem is having a backup plugin installed isn’t the same as having a backup strategy. The difference, when your site goes down at 2am before a Monday launch, is $15,000-$50,000 in lost revenue and emergency recovery.
What “We Have UpdraftPlus” Actually Means
In 90% of the WordPress audits we run on Bergen County sites, “we have UpdraftPlus” decomposes into one or more of these:
- Backups stored on the same server as the site. When the server dies or gets hacked, the backups die with it. We saw this destroy a $4M services company’s 6-year archive in 2024.
- Backups haven’t completed in 3+ months. Silent plugin error, nobody monitoring, everyone assumes it’s working. The cron job has been dead since the last PHP update.
- Database-only backups, no files. You recover posts and settings, but every uploaded image, custom theme file, and plugin config is gone forever.
- Backups exist but were never tested. When you actually need to restore, the file is corrupted, the format changed between plugin versions, or the cloud credentials expired six months ago.
The 3-2-1 Rule, Translated for WordPress
The 3-2-1 backup rule is decades old, came out of enterprise IT, and applies word-for-word to WordPress. Three copies of your data, on two different media types, with one copy off-site. Here’s what that looks like in practice:
- Copy 1 — the live site. Your production WordPress install on your host. That’s one.
- Copy 2 — daily host backups. Most decent managed hosts (Kinsta, WP Engine, Cloudways, SiteGround GoGeek+) take daily backups stored on their infrastructure. Verify it’s actually on. Verify retention is at least 14 days, ideally 30. That’s two.
- Copy 3 — independent off-site backup. UpdraftPlus or BlogVault pushing weekly full backups to a cloud destination you control (your own Google Drive, your own Dropbox, your own S3). NOT the same place your host stores its backups. That’s three, and that’s the one that saves you when your host has an incident.
Two media types = the host’s infrastructure + a different cloud provider. One off-site = the cloud copy in an account you own, separate from your host. That’s the whole rule.
The Real Test (Which Most Sites Fail)
Here’s the test we run on every WP maintenance audit, and almost nobody does it themselves: pick a backup from the last 30 days, restore it to staging, confirm the site loads and the database is intact. Not “the backup file exists.” Not “the plugin says success.” A real restore to a real environment.
In our last 12 audits, 8 of 12 sites failed this test — corrupted SQL, missing wp-content, mismatched plugin versions, file size limits exceeded during download. The owners had no idea until we tried.
What a Real Backup Strategy Costs
A proper 3-2-1 setup runs about $15-$45/month total — usually $10-$30 for managed hosting with daily backups, plus $5-$15 for off-site cloud storage (or free if you already have business Google Workspace). Compare that to the $5,000-$25,000 it costs to rebuild a site from scratch when there’s no working backup, and the math is so lopsided it shouldn’t even be a conversation.
The 4 Questions to Ask Your Web Person Today
- Where are our backups stored, and is it on the same server as the live site?
- When was the last successful backup, and how do we verify it completed?
- Have you ever tested a restore? When?
- If our host went offline permanently tonight, walk me through how we’d be back up by Monday.
If you get hesitation, vague answers, or “we’d figure it out” — you don’t have a backup strategy. You have hope.
How AJD handles this
Every AJD WordPress maintenance plan includes 3-2-1 backups by default, monthly restore tests on a staging environment, and a documented recovery runbook so any developer can rebuild the site in under 4 hours. Pricing starts at $150/month for sites under $500K revenue, $350/month for sites doing $1M+ where downtime costs real money. Whether you work with us or not, run the 4-question audit on your current setup this week, and run a test restore before the end of the month. Don’t find out your backups are broken on the day you need them.
Want us to audit your WordPress backup setup and run a test restore for free? Book Free Discovery Call →
