A WordPress website is not a one-time project. It is software that keeps running, keeps changing, and keeps needing attention. This page describes my ongoing WordPress management service — controlled updates with backups and post-update checks, security and malware protection, speed optimization, accessibility and SEO fixes, analytics setup, and the day-to-day site changes that any live website needs.
WordPress Updates and Checks
WordPress websites need good care constantly. WordPress core and its plugins update very often, because new features, bug fixes, and most importantly new security patches that close security holes are released frequently by the developer community. Skipping updates is how sites end up with known, publicly documented vulnerabilities sitting on a live server.
But updating is only half the job. After every update the site must be checked in its most important sections and functionalities — forms, checkout, login, sliders, custom fields, layouts, anything that depends on a plugin that just changed. An update that goes through without errors in the dashboard can still break a template or a script on the front end.
I have long experience with WordPress and know how many of the most used plugins usually behave and update — which ones are safe to run in a batch, which ones need a staging test first, and which ones tend to change markup or settings between versions. My advice is to run controlled updates at least once in a while, on a regular schedule, rather than clicking “update all” whenever the dashboard turns red.
Backups and Restore
Controlled updates and proper backups belong together. Before any update round, and on a regular schedule in between, the site gets a full backup — files and database — stored off the server, so a hosting failure does not take your backup down with your website. A backup that has never been restored is only a promise, so the restore procedure gets tested too. That way, if an update or a plugin conflict does break something, the answer is a rollback measured in minutes, not a rebuild measured in days.
Security, Hardening and Malware
Most WordPress hacks do not target you personally — they are automated scans looking for an outdated plugin or a weak login. Ongoing WordPress management includes login hardening and brute-force protection with a security plugin such as WP Cerber Security, regular malware scanning, file permission and user role checks, and cleanup if something does get through. Together with a current backup, this is what keeps a small incident from becoming a blacklisted domain and a lost week.
WordPress Speed Optimization, Best Practices, Accessibility Checks and Fixes
PageSpeed Insights by Google is a good tool to check a site’s parameters the way Google sees them — performance, Core Web Vitals, accessibility, best practices and SEO. When I work with a site I check these parameters constantly, apply fixes, and rework areas of the site so it complies with accessibility rules, SEO needs and general best practices.
Speed
The initial PageSpeed improvement usually takes the most time, because it requires an actual plan: changing different settings, building a better script loading setup, deciding what gets deferred, cached, preloaded or removed. It also depends heavily on your hosting.
Some hosting services provide their own plugins and caching layers, and all of them have to be configured properly to get the best speed. For example, Hostinger runs a very fast LiteSpeed server with its own LiteSpeed Cache plugin, while Cloudways gives you the Breeze plugin with a completely different set of settings. WP Engine includes its advanced/edge network at no extra cost. Many hosts also bundle Cloudflare with an image optimization module for free. Other hosting services require a separate optimization plugin, and those can work well too once they are tuned.
Depending on your needs I can advise a hosting switch — but keep in mind that big sites are hard to move, so this decision is better made early than late. It is also important that your hosting service offers a staging site, so that large changes can be tested before they reach visitors.
Part of the speed work happens in the database, which nobody sees and everybody neglects. Years of post revisions, expired transients, spam comments, and tables left behind by plugins that were removed long ago all make every page request heavier than it needs to be. Cleaning and optimizing the database is a routine part of ongoing management, and on an older site the difference is immediately visible in the admin area as well as on the front end.
Serious speed optimization sometimes points to a site rebuild. Short of that, we can still optimize the plugins in use, run the latest server software, and take advantage of everything else the hosting platform makes available.
Accessibility
Accessibility is usually an easy fix. After a relatively fast round of fixes on the site’s main frame — header, menus, footer, forms, colors, focus states — most of the remaining work is in the textual content itself: headings order, link text, image alt attributes, table structure.
If your site publishes content regularly, for example if you run a blog, I will teach you a few simple accessibility rules for content management. Any editor can learn them, and once they are part of the routine, new content stops creating new accessibility problems.
For Israeli clients this is not only good practice — websites here are expected to meet the Israeli accessibility standard IS 5568 (תקנות נגישות), which is based on WCAG. The same round of fixes covers both, and the accessibility statement page is set up as part of the work.
SEO
First we resolve all the technical SEO problems found on the site’s pages and main sections. After that we move to the content: updating it, and explaining to the site’s content editors what the principles are and how to improve SEO by writing and editing content with search in mind. A SEO plugin such as Yoast SEO will be set up and explained, so your team can use it without guessing what the colored indicators mean.
This also includes adjustments for the newer AI agents, answer engines and editors that now read and train on your content, not just classic search engine crawlers.
Analytics Setup
I provide help with analytics and tag management setup — Google Analytics and Google Tag Manager — and with various other marketing services on the site. I have experience with tools such as HubSpot and Hotjar. Consent mode can be configured according to the jurisdiction you need to comply with, together with the cookie banner and the privacy policy pages that GDPR and the Israeli privacy amendment expect. All of these things are related and work better when they are planned together.
Ongoing WordPress Site Management and Additions
Beyond maintenance, I handle ongoing website changes and additions: new sections and pages, content management, WooCommerce product management, and whatever else is needed by the requesting authority — a project manager, a site manager or the site owner.
On top of that, I have experience creating email templates for services such as SendGrid, Mailchimp, OneSignal and other similar mailing and messaging platforms.
Usually, when I do a task on a site I also perform all pending updates at the same time — while I am already working inside the site, I can test the results of those updates far better than in an isolated maintenance session.
Renewals are part of this too. Domain registration, SSL certificates and premium plugin and theme licenses all expire quietly, and an expired license means a plugin that silently stops receiving security updates. I keep an eye on these dates and let you know before they arrive, instead of after.
Not Only WordPress
Most of my work is WordPress, but the same ongoing service applies to other platforms as well. If your site runs on Joomla, or on a hosted builder such as Squarespace or Webflow, the maintenance work looks different in the details — there is less to update on a hosted platform — but the content management, speed and accessibility checks, SEO, analytics and ongoing changes are the same job.
How We Start
The first step is a short audit: I look at the current state of the site, its hosting, its plugins, its PageSpeed and accessibility results, and come back with a list of what is worth doing and in what order. Nothing has to be done all at once. We usually begin with the quick wins — updates, backups, the obvious speed and accessibility fixes — and handle the larger items over the following weeks, according to your priorities and budget. From there the routine simply continues.
Availability and Payments
My clients are often surprised by my availability and by how fast I react to their requests. I am reachable through task management software as well as Slack, Microsoft Teams and WhatsApp. I check a task quickly and look for ways to implement it, then present the available options to the client before starting.
Existing clients usually pay on a monthly basis, according to the number of hours actually worked. There is no package to choose and no monthly minimum — it is pay as you go, so a quiet month costs less than a busy one. I share an online sheet with a live record of work hours, so nothing is a surprise at the end of the month.
Rates: 150 NIS + VAT per hour for Israeli customers, or $50 per hour for clients outside Israel.