What Happens After Your Website Launches? Hosting, Maintenance and Security Explained
Launch day feels like the finish line. The site's live, it looks right, and it's tempting to close the laptop and move on to the next thing on your list.
But a website isn't a brochure you print once and forget about — it's more like a shop front. The till still needs to work, the locks still need to work, and the paint still needs the odd touch-up. Nobody expects a physical shop to run itself once the sign goes up, but plenty of business owners expect exactly that from a website.
This isn't really anyone's fault. Most conversations about building a website focus entirely on the build — cost, timeline, design — and stop the moment it goes live. What happens next rarely comes up until something breaks. Here's what's actually involved, what it tends to cost in the UK, and what's worth asking before you sign off a build.
The bill doesn't stop at launch
Three things need paying for, on an ongoing basis, whether anyone touches the site or not:
Your domain name (the digitalhand.co.uk part) is a yearly renewal, typically £10-£20. Miss it and someone else can register it the day it lapses.
Hosting is what keeps the site physically online and accessible. Costs vary hugely depending on what the site does — a simple brochure site might run on a few pounds a month, while a busier site or web app with a database needs more robust (and pricier) hosting.
An SSL certificate is what gives you the padlock icon and the "https" in your browser bar. Most hosting providers now bundle this in and renew it automatically, but it's worth checking — a certificate that quietly expires will show visitors a "not secure" warning, which is a fast way to lose their trust.
None of these are expensive individually, but they're easy to lose track of if nobody owns the task. It's worth knowing upfront who's responsible for renewing what.
Software needs updating too
If your website runs on a content management system like WordPress — which powers a very large share of small business sites — it isn't a finished product. It's built from a core platform plus a stack of plugins and themes, and all of them get updated regularly, often for security reasons.
Skip these updates for long enough and two things tend to happen. First, the site can start to look and feel dated as browsers and devices move on. Second, and more seriously, it becomes a target. Out-of-date plugins are one of the most common ways small business websites actually get compromised — not through some sophisticated attack, but because a known, published vulnerability in an old plugin version was never patched.
This is where the numbers get worth paying attention to. According to the UK government's official Cyber Security Breaches Survey 2025/26, 43% of UK businesses reported experiencing a cyber attack or breach in the past 12 months, and small businesses weren't far behind medium-sized ones at 46%. Extrapolated across the UK business population, that's roughly 612,000 businesses. For the small businesses affected, the costliest 5% of incidents ran to around £4,000 — not catastrophic for most, but a genuinely unwelcome surprise for a business that assumed "we're too small to be a target."
The uncomfortable truth is that small businesses aren't usually targeted individually. Automated tools scan the internet constantly for known vulnerabilities, and an unpatched plugin gets caught in that net regardless of how big or small the business behind it is.
Backups: the insurance you don't think about until you need it
A regular, tested backup is the difference between a bad afternoon and a genuinely bad week. If a plugin update breaks something, a payment gets mishandled by a badly configured form, or the site is compromised despite everyone's best efforts, a recent backup means restoring the site is a straightforward job rather than a rebuild from scratch.
The word "tested" matters here. A backup that's never been restored is a hope, not a plan. Ask whether backups are actually verified periodically, not just taken and left untouched on a server somewhere.
What it actually costs
Based on typical UK web agency pricing, fully managed website maintenance — covering hosting, backups, security monitoring, CMS and plugin updates, and some level of support — generally falls somewhere between £30 and £100+ a month, depending on the size and complexity of the site. That works out to roughly £350-£1,200 a year. A simple site with light traffic sits at the lower end; a busier site, an online shop, or a custom web app with ongoing feature work sits higher.
It's worth weighing that against the DIY alternative. Handling updates, monitoring and backups yourself typically takes a few hours a month once you factor in troubleshooting when something inevitably doesn't update cleanly. At a reasonable hourly rate for your own time, that "free" option often costs more than it looks like on paper — and that's before anything goes wrong.
What to ask before you sign off a build
A handful of questions upfront save a lot of confusion later:
Who owns the hosting and domain? It should be you, in your name, even if an agency manages it day to day. Ownership shouldn't be tangled up with the agency relationship.
What's included in "maintenance," specifically? Ask for the list — updates, backups, uptime monitoring, security patching, support response times — rather than accepting the word on its own.
What happens if something breaks outside a support window? Worth knowing before it's urgent, not during.
Is there a get-out if the relationship doesn't work? You should always be able to take your site and its content elsewhere.
None of this needs to be complicated, but it does need to be agreed before launch, not worked out reactively the first time something goes wrong.
The short version
A website is a working part of the business, not a one-off purchase. Budgeting for hosting, updates, security and backups from day one — and knowing exactly who's responsible for each — is what keeps a good launch from quietly turning into a liability twelve months down the line.
At Digital Hand, we build sites and web apps as long-term partners rather than one-off projects, which means maintenance and security are part of the conversation from the start, not an afterthought once something's gone wrong. If you'd like a second opinion on what your current setup does and doesn't cover, book a free 15-minute consultation and we'll talk it through.