A Bergen County manufacturing client came to us last spring after their site went down for 14 hours on a Tuesday morning. They’d been paying a “WordPress care plan” for three years — $59 a month, autopay, no questions. When we asked the provider what their monthly check found on the last report, the provider couldn’t produce one. Three years, $2,124 paid, zero reports, zero proof anything had ever been checked.
That’s the entire industry in one anecdote. Most “care plans” sold to small businesses are subscription billing with a Cron job behind it. The site gets a plugin update on Tuesday at 3am, the bill renews on the 1st, nobody looks at anything in between. Whether you work with us or not, here’s what real WordPress care includes — and what you should be demanding from whoever you’re already paying.
What $50/Month “Care Plans” Actually Do
Almost universally, three automated tasks: nightly backups to the provider’s cloud (which you can’t easily retrieve), weekly plugin updates (auto-applied, never tested), and a “security scan” running a free Wordfence rule list. No human ever opens the admin. No human verifies the backup restores. At $50/month that’s a 96% margin product, which is why so many agencies sell it.
Where Theater Becomes Real Damage
Auto-applied plugin updates break sites constantly. We see it monthly. Elementor pushes a 3.x update, a third-party widget pack lags behind, your homepage layout collapses at 6am on a Saturday, nobody notices until Monday morning when sales asks why the lead form stopped working. Your “care plan” cheerfully sent a “successful update” email. Nobody opened the site. The backup from Friday night exists somewhere on a Backblaze bucket the provider controls, and restoring it requires emailing support and waiting six hours.
We’ve inherited eight clients this year who’d had a major incident — ransomware, deface, plugin-driven outage — and in every case the provider’s response was “your plan doesn’t include incident response, that’s $185/hour.” Care, until it counts.
The 5-Point Monthly Checklist You Should Demand
If you pay for a care plan, you should receive a monthly report (with screenshots, not just a green checkmark) covering all five of these. If the report doesn’t exist or arrives blank, you’re paying for theater.
- Backup restore test. Not just “a backup ran.” Actual restore to a staging URL, confirmed it boots, admin login works. Quarterly minimum. Most care plans never do this — backups exist that don’t restore, and you find out during a disaster.
- Update review with rollback log. What updated, what broke (with screenshots), what was rolled back. If “nothing broke” is the answer every month, somebody isn’t checking.
- Performance on the three most important pages. Homepage, top landing page, contact page. PageSpeed + LCP, month-over-month delta. If LCP has crept from 1.8s to 3.4s, conversions are leaking.
- Uptime + slowest-response report. Not just “99.9% uptime” — also “site was slower than 3 seconds 47 times this month, here’s when, here’s why.”
- Security state with action items. User audit, plugin vuln check against current CVEs, file integrity, failed login attempts. If anything’s outstanding, what the human is doing about it this month.
What Real Care Costs vs. Theater Care
The honest range: real care with human eyes runs $150-$400/month, depending on complexity. Anything under $80 is almost guaranteed to be the automated bundle. A tech can’t spend 90 minutes a month on your site for $50 unless they’re skipping the work. The question isn’t whether you should pay more — it’s whether what you’re paying now does anything at all.
What to Do This Week
Email your current care plan provider three questions: “Can you send me the last three monthly reports?” “When was the last backup restore test performed, and what was the result?” “What’s our process if the site goes down at 2am on a Sunday?” Their answers — or the silence — will tell you everything. If they can’t produce reports or can’t describe a Sunday-night incident process, you’re paying for theater, and that’s the moment to decide whether to upgrade or switch.
How AJD Handles This
Every AJD care client gets a monthly report covering all five checklist items, with screenshots, change logs, and outstanding action items. We restore-test backups every quarter against a real staging URL. Updates are staged and tested before they go to production — never auto-applied to live. Incident response is included in the retainer at no extra hourly rate, and we answer on weekends and after-hours because that’s when sites break. If you want to see what one of those reports looks like for your own site, the audit is free.
Want a free 30-minute audit of your current care plan — what’s actually being done, what’s missing, and what you should be paying? You keep the audit whether you hire us or not.
