Security
Updates and monitoring for security holes.
Website design · 2026 edition
A website is not something you set up and forget. But not every website needs the same level of care. Here is what maintenance covers, how often, and how to tell whether you need it.
Updated October 2026Rules checkedNo jargon
In short
Maintenance covers security updates, backups, monitoring, renewing the domain name and the HTTPS certificate, and small fixes. A website with a content management system and plugins must be updated often, otherwise it becomes a way in for hackers. A static website, with no database, needs far less attention. Maintenance is not a legal requirement, but keeping the data you collect secure is.
Updates and monitoring for security holes.
Regular, stored off the server, tested.
Domain name, certificate, hosting.
Opening hours, prices, photos, text.
A typical schedule for a business website with a content management system. A static website mainly lightens the updates row.
| Task | Frequency | Why |
|---|---|---|
| Security updates | As soon as they are released, at least weekly | Known security holes are exploited quickly |
| Full backup | Daily or weekly | Roll back after an outage or a hack |
| Restore test | Every quarter | A backup that has never been tested may be unusable |
| Form checks | Every month | A lost enquiry is a lost customer |
| Broken links and error pages | Every month | Visitor experience and SEO |
| HTTPS certificate | Automatic, checked monthly | Maximum lifetime of 200 days since March 2026, 100 days in 2027 |
| Domain name and hosting | Every year | Forgetting can take down the website and your emails |
| Legal notice and privacy policy | Every year or whenever something changes | Stay compliant |
HTTPS certificate lifetimes are being reduced in stages, down to 47 days in 2029. Renewal therefore has to be automatic.
Typical prices vary a lot depending on the website and what is included. Indicative ranges for 2026.
Few technical updates: often a few hours a year, paid per job or as a small package.
Packages of a few tens of euros a month are common, depending on frequency and the changes included.
More care needed: payments, stock, plugins, security. Considerably higher budgets.
Response time, number of changes, backups, restores, and the option to stop at no cost.
Answer these questions in order.
Choose the package that fits your business. The price is fixed in advance.
A one-page website, simple and professional, to be present online.
For a small business that wants a serious website, fast.
To reach customers in several languages.
For a website that works for you, day and night.
Everything you need to exist on Google, set up for you.
Options, for every offer
The website and the domain name are in your name. Simple Website: text and logo supplied by you, going live as an option. Indicative prices.
Our websites belong to you, and maintenance is optional. Several checks can run on their own.
You hear about it before your customers do.
Domain name and hosting dates go into your calendar.
Every enquiry is recorded, so nothing is lost if your email has a problem.
A contact channel that keeps working even during maintenance.
It is not a legal requirement. However, if the website collects data, the GDPR requires you to keep it secure, which means keeping it updated.
From a few hours a year for a static website to a few tens of euros a month for a business website with a content management system, and more for an online shop. Compare what is included.
Usually: updates, backups, monitoring, renewals and a set amount of small changes. Check the response time and how restores work.
Known security holes stay open. The website can be hacked, display fraudulent content or be flagged as dangerous by browsers.
Yes, for a simple website, with a clear routine: updates, backups, checking the form. For an online shop, a professional is the safer choice.
Yes, if you have the login details, the domain name in your name and a copy of the website. Plan for this in the original build contract.
Sources: GDPR, Articles 32 to 34 (security and personal data breaches) · guidance from your data protection authority and your national cybersecurity agency · certificate lifetime reduction schedule adopted by the CA/Browser Forum (2025).
General information, up to date as of October 2026. It does not replace advice from a professional.
Tell us about your project. We study it in detail, then you receive a personalised study and a clear quote in writing, within 24 business hours. No meeting, no obligation.
What happens after your request
Or by email: contact@growthsystemexperts.com