Neting Guides & insights Websites & compliance

Website maintenance: what should a good contract include?

Websites & compliance Updated 25 September 2026 · 4 min read
The short answer

A good maintenance contract covers 8 points: core and plugin updates, tested backups, uptime monitoring, HTTPS, security patches, small changes included, a guaranteed response time and reversibility. Without upkeep, a website decays within months. At Neting, hosting with maintenance included starts at 29 €/month.

Key takeaways
  • 8 points to check in writing, from tested backups to the reversibility clause
  • A personal data breach can trigger GDPR fines of up to 20 M€ or 4% of worldwide turnover
  • Your assets (domain, hosting, code) must stay registered in your name, not the agency's
  • Demand a written response time for outages: a verbal promise is worth nothing
  • Neting: hosting with maintenance included from 29 €/month, free quote, reply within 24 hours

Why does a website decay without maintenance?

A website decays without maintenance because everything around it keeps moving: the CMS ships security updates, plugins evolve, PHP versions and browsers change. A frozen site steadily accumulates known vulnerabilities and compatibility issues. The concrete result: a contact form that silently stops sending, a booking module that crashes, an expired HTTPS certificate that greets visitors with a security warning.

Performance follows the same slope. Outdated plugins, a bloated database and unoptimised images drag down the scores measured by PageSpeed Insights. And Google uses Core Web Vitals (LCP, INP, CLS) as a ranking signal: a slow site loses positions, then visitors, then customers.

What are the real risks of an abandoned website?

The three major risks are hacking, data loss and legal exposure. A hacked site can be blacklisted by Google, send spam or redirect your visitors to fraudulent pages. Without a recent, tested backup, a server failure or a simple human error can wipe out years of content in seconds.

On the legal side, a personal data breach engages your liability under the GDPR, in force since May 2018: the French regulator CNIL can issue fines of up to 20 M€ or 4% of worldwide turnover. An abandoned website is not a technical detail, it is a business risk.

What should a good maintenance contract include? The 8-point checklist

A good maintenance contract covers 8 specific points, all set out in writing. If one of them is missing, ask why before you sign.

Contract pointWhat to demand
1. Core and plugin updatesWritten frequency, at least monthly
2. Automatic, tested backupsDaily or weekly, with regular restore tests
3. Uptime monitoringContinuous monitoring with alerts on outage
4. HTTPS certificateAutomatic renewal, never allowed to expire
5. Security patchesApplied within a defined delay after release
6. Small changes includedMonthly quota of edits (text, images, sections)
7. Response time on outageA number written into the contract, not a verbal promise
8. ReversibilityYour access credentials and data remain your property

Why is reversibility the most important clause?

Because without reversibility, you are locked in with your provider. Check three things: the domain name is registered in your name, you hold admin access to both hosting and website, and the contract guarantees a full export of your data at any time. The day you decide to switch agencies or plan a redesign without losing your SEO, these three guarantees make the difference between a transition in a few days and months of deadlock.

What are the classic traps in maintenance contracts?

The two most common traps are phantom maintenance and hostage hosting. Phantom maintenance is a monthly fee billed with no real work behind it: demand a report listing the updates applied and the backups performed. Hostage hosting is a domain or server registered in the agency's name: the day you leave, handover drags on for months or comes at a steep price.

Also watch out for vague packages (maintenance included with no defined scope), 24 or 36 month commitments with no exit clause, and contracts that exclude precisely the most likely failures.

How much does website maintenance cost?

Market prices vary widely: from a few dozen euros per month for a simple showcase site to several hundred euros for a complex e-commerce store, depending on the scope covered. The right reflex is not to hunt for the lowest price, but to compare what is actually included, point by point.

At Neting, hosting with maintenance included starts at 29 €/month: updates, backups, monitoring, HTTPS and security patches are all covered. For a complete project, Neting websites start at 490 €, with go-live 5 days after the specifications are approved.

Which questions should you ask before signing?

Ask these 6 questions and insist on written answers:

  • How often are updates applied?
  • Where are backups stored and when were they last tested?
  • What is the guaranteed response time in case of outage?
  • Are the domain name and hosting registered in my name?
  • If I cancel, what do I get back and how quickly?
  • Will I receive a regular report of the work performed?

A serious provider answers without hedging. Neting offers a free quote with a reply within 24 hours via the website form: a good way to test responsiveness before you even sign.

Frequently asked questions

What happens to a website with no maintenance at all?
Hacks through known vulnerabilities, an expired HTTPS certificate, broken forms and a gradual drop in Google rankings. In case of a personal data breach, the GDPR provides for fines of up to 20 M€ or 4% of worldwide turnover. The decay is invisible at first, then brutal: preventing is far cheaper than rebuilding.
What is the difference between hosting and maintenance?
Hosting is the server that keeps your site online. Maintenance is its upkeep: updates, backups, security patches, monitoring. Hosting alone does not protect your website. Some offers combine both, such as Neting hosting with maintenance included from 29 €/month.
Can I handle my website maintenance myself?
Yes, for a small showcase site and if you are disciplined: regular updates, offsite tested backups, uptime monitoring. Plan a few hours per month. The risk: an update that breaks the site with no restore skills at hand. As soon as the site generates revenue, delegating becomes the more profitable option.
How do I get my website back if I switch providers?
Request a full export: files, database, access to the domain name and hosting. If the contract includes a reversibility clause, the migration is usually settled within a few days. Without a written clause, it can take months: check this point before signing, not on the day you leave.
Want an opinion on your specific case?

Describe your project in the form: honest reply within 24h, free and with no strings attached.

Let's talk

Related guides

Web accessibility: is your site compliant with the 2025 law?

The European Accessibility Act has applied since 28 June 2025. Who is covered, the 8 priority fixes and how to test your site in 15 minutes, without panic.

Read the guide

Website quotes: how to compare two proposals that have nothing in common

An 800 € quote versus a 6,000 € quote: an 8-line reading grid, the extras hiding between the lines, and the one question that settles it before you sign.

Read the guide

GDPR compliance for your website: the complete checklist

Make your website GDPR compliant with this 8-point checklist: cookies, privacy policy, secure forms. Fines can reach 20 million euros or 4% of turnover.

Read the guide

All guides