Transparent · Scalable · GDPR-Compliant
WordPress maintenance
plans & pricing
Choose the WordPress maintenance plan that fits your website. Professional tools, fixed pricing, and an EU-based privacy-first stack, all included, with hosting included from Essential upward.
Do it yourself versus Yuvo
Handling hosting yourself is cheaper on paper, until you count the time and risk it costs you.
- Find and pay for your own hosting
- Keep up with updates and backups yourself
- Figure out what broke when the site goes down
- No fixed point of contact when something goes wrong
- Risk of hacks, no protection in place
- Slow load times, no optimisation
- No insight into what’s happening on your site
- GDPR risk, no privacy safeguards
- Hosting included, no separate bill
- We handle updates and backups
- We fix it when the site goes down
- One point of contact, always
- Imunify360 blocks attacks, 24/7
- Performance optimised for fast load times
- Monthly reporting on every action taken
- Privacy-first management, GDPR-compliant stack
Maintenance Plans
Fixed monthly rates for complete WordPress management
Essential
For small businesses and freelancers with a standard website
Hosting included
Core plan
The essentials for every site: daily backups, firewall, monitoring and updates
Monitoring & core
- WP Umbrella integration
- Vulnerability scanning
- Site monitoring: pagespeed, broken links, PHP errors, SSL & domain expiry
- WP core & plugin updates
Hosting & backups
- Up to 5 GB hosting storage
- Up to 3 mailboxes
- Daily backups, 50-day retention
- Encrypted backup storage (EU servers)
Security
- Firewall security
- Malware scanning (on-demand)
- Patchstack +€4 (optional)
- Two-factor authentication
Extras & support
- FluentSMTP delivery
- Fluent Forms
- LiteSpeed Cache or WP Rocket
- Detailed monthly report
- 48-hour support response
Growth
For businesses that depend on their website every day
Hosting included
✦ Extra vs. Essential
2× storage & mailboxes, scheduled malware scan, GDPR setup, 24h support
Monitoring & core
- WP Umbrella integration
- Vulnerability scanning
- Site monitoring: pagespeed, broken links, PHP errors, SSL & domain expiry
- WP core & plugin updates
Hosting & backups
- Up to 10 GB hosting storage
- Up to 10 mailboxes
- Daily backups, 50-day retention
- Encrypted backup storage (EU servers)
Security
- Firewall security
- Scheduled malware scanning
- Cookie compliance & GDPR setup
- Patchstack +€4 (optional)
- Two-factor authentication
Extras & support
- FluentSMTP delivery
- Fluent Forms Pro +€4 (optional)
- LiteSpeed Cache or WP Rocket
- Detailed monthly report
- Minor PHP version updates
- 24-hour support response
- Up to 50 plugins
ProCare
For e-commerce or business-critical environments
Hosting included
✦ Extra vs. Growth
2× storage, unlimited mailboxes, hourly restore points, premium security, priority support
Monitoring & core
- WP Umbrella integration
- Vulnerability scanning
- Site monitoring: pagespeed, broken links, PHP errors, SSL & domain expiry
- WP core & plugin updates
Hosting & backups
- Up to 20 GB hosting storage
- Unlimited mailboxes
- Daily backups, 50-day retention
- Hourly backup restore points
- Encrypted backup storage (EU servers)
Security
- Premium firewall
- Scheduled malware scanning
- Cookie compliance & GDPR setup
- Patchstack included
- Premium 2FA & Identity Protection
Extras & support
- FluentSMTP delivery
- Fluent Forms Pro included
- LiteSpeed Cache or WP Rocket
- Detailed monthly report
- Full PHP version updates
- Same-day priority support
- Plugin count reviewed case-by-case
Just need the basics?
Starter
For those who just want the basics: backups, updates, and security
Hosting not included
Hosting-independent
For those who already have hosting sorted and just need technical upkeep
- WP Umbrella integration
- Site monitoring: pagespeed, broken links, PHP errors, SSL & domain expiry (WP Umbrella)
- Encrypted backup storage (EU servers)
- Firewall security (NinjaFirewall)
- Patchstack vulnerability protection (optional, +€4/month)
- 72-hour support response
- Vulnerability scanning (WP Umbrella)
- Daily backups, 50-day retention
- WP core & plugin updates
- Malware scanning, on-demand (NinjaScanner)
- Monthly report
Work outside the
maintenance plans
For work that falls outside regular WordPress
maintenance,
we charge a transparent hourly rate.
Examples of hourly rate work:
- Website recovery after a hack or malware infection
- Custom plugin configuration or troubleshooting
- Database optimisation and repair
For migration, performance audits, or a cleanup, we charge fixed prices instead, see our one-time services.
Transparent billing per quarter-hour. We discuss scope first, then act, no surprises.
Premium WordPress
Maintenance Tools
We use the best software for professional WordPress management, the tools included in your plan are always covered, with no extra costs
WP Umbrella
Central WordPress Management & Backups
WP Umbrella is our central WordPress management platform, letting us monitor, maintain, and back up all client websites from a single EU-based dashboard.
| Feature | Benefit |
|---|---|
| Central monitoring | Real-time overview of all WordPress websites in one dashboard |
| Bulk updates | Update WordPress core, plugins, and themes with a single click |
| Automated backups | Daily, weekly, or monthly backups, fully automatic |
| One-click restore | Restore your complete WordPress site within minutes |
| Uptime monitoring | Instant notification on downtime for rapid response |
| Client reports | Automated monthly reports with all changes documented |
| Vulnerability monitoring | Checks the Patchstack vulnerability database every 6 hours and alerts you if an installed plugin or theme has a known issue, separate from the optional Patchstack protection add-on |
| Pagespeed monitoring | Tracks your website’s load time and flags it if performance drops |
| Broken link & image checking | Finds broken links and missing images before visitors run into them |
| PHP error monitoring | Flags PHP errors on your site so technical issues get noticed early |
| SSL & domain expiry monitoring | Warns well in advance before an SSL certificate or domain registration expires |
Why this matters
WP Umbrella replaces multiple separate tools in one consolidated EU platform, management, monitoring, backups, and reporting. Backups are encrypted and stored on WP Umbrella’s own servers within the EU, outside AWS or Google Cloud. For you, that means faster response times, less downtime, and a privacy-first approach with no dependency on US cloud providers.
Why this matters
JetBackup runs independently of WP Umbrella, directly on the server. If anything ever goes wrong with a backup, you always have a second, local backup from that same day as a safety net.
JetBackup
An Extra Backup Layer on the Server
JetBackup runs on the server itself, on our hosting, and automatically creates a daily local backup of your website, an extra layer of protection alongside WP Umbrella.
| Feature | Benefit |
|---|---|
| Daily backup | Automatic, at server level, independent of WP Umbrella |
| Local storage | Fast recovery directly from the server, no external dependency |
| Extra protection layer | Double backup coverage alongside WP Umbrella |
| Yuvo Hosting only | Included by default, no configuration needed |
Imunify360
Server-level Security
Imunify360 runs at server level, entirely outside WordPress. Six integrated security layers work continuously in the background, included as standard with every plan on Yuvo Hosting.
| Layer | What it does |
|---|---|
| WAF & virtual patching | Blocks known vulnerabilities in plugins and themes, even before an official patch exists |
| Malware scanner with auto clean-up | Scans continuously and automatically removes infected code, no manual work |
| Proactive Defense | Detects suspicious PHP behaviour in real time, including unknown zero-day attacks |
| WebShield & bot protection | Filters out bots and DDoS traffic before it reaches your website |
| IDS/IPS | Monitors login attempts on SSH, FTP, mail, and the control panel |
| Network firewall & threat intelligence | Global threat data, country and IP blocking included |
Why this matters
Imunify360 operates outside WordPress, on the server itself. Even if WordPress or a plugin is compromised, this layer stays active and can’t be bypassed, something a WordPress plugin can never guarantee.
Why this matters
Using your own hosting? We install and manage NinjaFirewall and NinjaScanner for you, two independent security layers at WordPress level that complement each other.
NinjaFirewall & NinjaScanner
For Clients on Their Own Hosting
Prefer to keep your own hosting provider? Then we deploy NinjaFirewall and NinjaScanner as WordPress-level security: a firewall that filters requests before WordPress loads, backed by a malware scanner.
| Feature | Benefit |
|---|---|
| Pre-WordPress filtering | NinjaFirewall blocks attacks before WordPress even loads |
| Zero-day protection | Guards against unknown and emerging threats through behaviour analysis |
| Malware scanning & signatures | NinjaScanner checks file integrity using a ClamAV-based database |
| Login security | Brute-force prevention and protection of the WordPress login page |
| Premium (Growth & ProCare) | Real-time firewall rule updates and scheduled NinjaScanner scans |
Patchstack
Virtual Patching Against Vulnerabilities
Patchstack is virtual patching built specifically for WordPress. Where a WAF filters traffic in general, Patchstack neutralises known vulnerabilities in the exact plugins and themes your site runs, often before an official update even exists. Optional on Essential and Growth, included with ProCare.
| Feature | Benefit |
|---|---|
| Automatic vulnerability detection | Detects vulnerabilities based on the exact plugin and theme versions your site runs |
| Real-time virtual patches | Closes the security gap before an official update exists, no plugin update required |
| Targeted attack protection | Blocks file access probes, wp-config access attempts, and proxy comment spam |
| Works alongside your existing WAF | Complements Imunify360 or NinjaFirewall, no conflicts, layered defence |
Why this matters
A WAF like Imunify360 or NinjaFirewall filters suspicious traffic in general. Patchstack works on top of that layer, patching specific, known vulnerabilities in the plugins and themes you actually run, without waiting for an official update. Together, the two layers form a layered defence, and Patchstack is built not to conflict with your existing WAF. On Essential and Growth it’s an optional add-on for €4 per site per month, on ProCare it’s already included.
ProCare Extra: Premium Identity Protection
ProCare clients get the Premium Identity Protection suite included: hardware security key support (YubiKey), a branded login portal, and trusted device management. This is a standard part of your ProCare plan, not a paid add-on.
WP 2FA
Two-Factor Authentication for Admin Accounts
A password alone is the weakest link in any WordPress security setup. WP 2FA adds a mandatory second verification step to every admin account, via authenticator app, passkey, or email code, so a leaked password alone is no longer enough to get in.
| Feature | Benefit |
|---|---|
| Mandatory 2FA for admin accounts | We install and configure WP 2FA for every client on Essential, Growth, and ProCare |
| Multiple verification methods | Authenticator app, passkey, or email code, you choose what fits best |
| Role-based enforcement | 2FA is enforced per user role, mandatory for admins, without disrupting other roles |
| Works alongside your existing security | Complements Imunify360/NinjaFirewall and Patchstack, an extra security layer at the login level |
Complianz
Cookie Compliance & GDPR Setup
We handle the technical configuration of your cookie consent banner, so your website is technically GDPR-compliant.
| Feature | Benefit |
|---|---|
| We install and configure Complianz technically. | Your cookie banner works correctly from day one, no separate setup needed. |
| Script-blocking until consent | Scripts like Google Analytics only load after the visitor has given consent. |
| Reliable, compliant data | Your analytics and tracking data is technically GDPR-compliant. |
Legal Liability
We handle only the technical setup and correct functioning of the cookie blocker. The content, legal accuracy of the privacy policy, and compliance with the law remain, at all times, the responsibility of you as the website owner.
Fluent Forms
Contact, Request & Newsletter Forms
Fluent Forms is the form builder behind your contact form, request forms, and newsletter sign-up. The free version sets up a solid standard form; Fluent Forms Pro adds advanced functionality such as multi-step forms and a direct Brevo integration.
| Feature | Benefit |
|---|---|
| Drag-and-drop form builder | A professional form set up quickly, without custom code |
| Conditional logic & multi-step forms (Pro) | Smarter, shorter forms that adapt to what a visitor enters |
| Direct Brevo integration & double opt-in (Pro) | Newsletter sign-ups flow automatically and GDPR-safely into your email marketing |
| Built-in entry management | Every submission stays visible in your own WordPress admin too, never held only by a third party |
What you get per plan
On Essential, every form runs on the free version of Fluent Forms, ideal for a standard contact form. From Growth onward, Fluent Forms Pro is an optional add-on at €4 per month for advanced features like multi-step forms and the direct Brevo integration. On ProCare, Fluent Forms Pro is already included.
FluentSMTP
Reliable Email Delivery
WordPress sends email by default through the unreliable PHP mail() function, which means contact form notifications, password resets, and confirmation emails can silently land in spam or never arrive at all. FluentSMTP sends all your transactional email through a verified provider, so messages arrive provably.
| Feature | Benefit |
|---|---|
| Verified sending via SMTP or API | Prevents emails from being flagged as spam or silently disappearing |
| Connects to Brevo, SendGrid, Amazon SES and more | Works seamlessly with the Brevo integration we already use for your newsletter |
| Full email log | Every email sent can be found and checked in your WordPress admin |
| Automatic failure alerts | You hear about it immediately if an email doesn’t arrive, instead of finding out by accident |
Always Included
FluentSMTP is a free plugin and comes standard with Essential, Growth, and ProCare, at no extra cost. Reliable email delivery is a baseline for us, not an upsell.
WordPress Maintenance
FAQ
Everything you need to know about WordPress maintenance plans
What exactly is included in the maintenance plans?
Essential, Growth, and ProCare include the same core pieces, the difference is in frequency and speed:
- WordPress core, plugin, and theme updates
- Encrypted backups via WP Umbrella on their own EU servers
- JetBackup, an extra daily backup at server level (on Yuvo hosting)
- Imunify360 security (on our hosting) or NinjaFirewall (own hosting)
- WP 2FA two-factor authentication for admin accounts
- LiteSpeed Cache or WP Rocket performance optimisation
- Monthly reports and support
On Yuvo hosting, Imunify360 is included with automatic malware clean-up, no separate scan frequency to think about. On your own hosting: NinjaScanner on-demand for Essential, NinjaScanner Premium scheduled scans for Growth and ProCare. All plans back up daily as standard, ProCare adds hourly restore points on top. Beyond that, the difference between plans lies in plugin count, PHP update scope, and support response time. Patchstack, virtual patching against specific plugin and theme vulnerabilities, is available as an optional add-on on Starter, Essential, and Growth (+€4/site/month), and included with ProCare.
What exactly does the hosting include?
Our hosting is included with Essential, Growth, and ProCare, use it or keep your current host, that’s your call. Everything technical is handled, you don’t need to understand any of it to benefit from it.
Hosting
- Dutch LiteSpeed servers
- DirectAdmin control panel
- Free SSL certificate
- SpamExperts spam filtering
- DNS records and domain settings handled by us
- PHP version management, always kept current
- Automatic server-level malware scanning
- Mailboxes: Essential up to 3, Growth up to 10, ProCare unlimited
- SpamExperts premium spam filtering
- Webmail access
- IMAP/POP3, calendars, aliases, catch-all, and auto-responder
Is hosting included?
With Essential, Growth and ProCare, yes, and that’s true whether you use our hosting or keep your own host, the price stays the same. Starter is the exception: it’s deliberately our lightest plan, covering just the technical basics, without hosting, email, or the other extras the other plans include.
Can I keep my current host?
Yes, that’s fine on Essential, Growth and ProCare. Our hosting is included at no separate cost, but you don’t have to switch right away. Many clients wait until their current hosting contract runs out, or simply stay with their own host, that works fine with most providers too, and the price stays the same. Looking for a lighter plan with just the technical basics? Take a look at Starter (€15/month), though you’ll miss the extras the other plans include.
Is email included with hosting?
Yes, email is included with the hosting.
What about backups?
WP Umbrella provides encrypted offsite backups, part of your Maintenance plan regardless of who hosts your site.
What if I want to migrate later?
You can migrate to our hosting anytime, no extra cost.
How can I cancel my subscription?
After the first contract year, you can cancel at any time with 30 days’ notice. We make it straightforward, no hassle, no hidden fees. Upgrading is always possible mid-contract. Downgrading is possible after the current contract period (1 year) with 30 days’ notice.
When does the hourly rate apply?
The hourly rate of €85/hour applies to work outside regular maintenance with unpredictable scope, such as website recovery after a hack, custom plugin troubleshooting, or database repair. For migration, performance audits, and cleanups, we charge fixed prices instead, see our one-time services. Regular updates, backups, and monitoring are always included in your fixed monthly plan.
Can I upgrade or downgrade between plans?
Yes, upgrading is always possible, you only pay the difference for the remaining days of your current billing period. Downgrading is possible after your contract period (1 year) with 30 days’ notice. We always advise the plan that best matches your website’s needs.
Why are your backups safer than other providers?
We use WP Umbrella for encrypted backups stored on their own servers within the EU, no AWS, no Google Cloud. The backups are encrypted, fully within the EU, and GDPR-compliant. Many hosting providers store unencrypted backups on the same server, if that gets hacked, you lose everything. Our backups are always offsite and separate from your hosting environment.
How does security work per plan?
On Yuvo hosting (most clients)
Every plan runs on top of Imunify360, our server-wide security layer that operates entirely outside WordPress, so even a compromised WordPress install or PHP script can’t bypass it. Imunify360 has six layers: a firewall with virtual patching that blocks known vulnerabilities before an official patch even exists; a real-time malware scanner that automatically cleans up infected files; behavioural analysis (Proactive Defense) that catches suspicious PHP activity, including unknown zero-day attacks; WebShield with bot and DDoS protection; intrusion detection across SSH, FTP, mail, and the control panel; and a network firewall backed by global threat intelligence. JetBackup also creates an extra local backup on the server every day, independent of WP Umbrella. This is included as standard from Essential onward, in Growth and ProCare we actively monitor alerts and respond faster.
On your own hosting
Starter, which always runs on your own hosting, uses the free tier of NinjaFirewall with on-demand NinjaScanner, the same setup Essential clients on their own hosting already get. Patchstack is available there too, as the same optional +€4/month add-on offered on Essential and Growth. Using a different hosting provider? We install and manage NinjaFirewall as a WordPress firewall (the Premium edition, with virtual patching, on Growth and ProCare). NinjaScanner scans your site for malware, on-demand on Essential, on a fixed schedule on Growth and ProCare. This covers WordPress-level security; server-level protection remains the responsibility of your hosting provider’s own measures.
Patchstack: available on every plan
On top of the WAF described above, we optionally deploy Patchstack, virtual patching aimed specifically at the plugins and themes your site actually runs. Where a WAF filters traffic in general, Patchstack neutralises known vulnerabilities in those exact plugins and themes, often before an official update even exists, without needing to update the plugin itself. Patchstack doesn’t conflict with Imunify360 or NinjaFirewall, it runs alongside either as an extra layer. On Starter, Essential, and Growth it’s optional for €4 per site per month, on ProCare it’s already included.
We also install and configure WP 2FA for clients on Essential, Growth, and ProCare, with role-based enforcement: mandatory for admin accounts, with backup codes and a grace period, without disrupting other users’ workflow. ProCare clients get the Premium Identity Protection suite on top: hardware security keys (YubiKey), a branded login portal, and trusted device management, included as standard, not a paid add-on.
Which plan do I need for my WordPress site?
Starter: For those who just want the technical basics, backups, updates, and security, without the extras the other plans include. Essential: For personal blogs or small sites without customer data. Growth: For business websites, online shops, or sites with regular traffic. ProCare: For business-critical sites or large online shops. Not sure? Get in touch for personalised advice.
Do you also fix hacked WordPress sites?
Yes, website recovery after a hack falls under our hourly rate (€85/hour). On Yuvo hosting, Imunify360 typically detects and removes malware automatically, if something slips through, we dig into the code manually. If your site is hosted elsewhere, we use NinjaScanner to locate the infection and clean it up. If you then sign up for a maintenance plan, we significantly reduce the chance of it happening again through Imunify360 (on our hosting) or NinjaFirewall (own hosting) and proactive management.
Are content updates included?
No, maintenance plans focus on technical management (updates, security, backups, performance). Content changes such as editing text, uploading images, or adding new pages fall under the hourly rate. For larger design work or a new website entirely, see our Webdesign service.
Ready for professional
WordPress maintenance?
Choose the plan that suits your website and start worry-free WordPress management today