WordPress runs more websites than anything else, which makes it the first thing attackers try. I keep classic WordPress sites safe and current, and I build and care for headless ones: WordPress for your content, a fast Astro front end for your visitors.
I care for WordPress two ways. On a classic site, WordPress does everything: it stores the content, draws every page and answers every visitor. That's where plugins, themes and updates need the most attention, because every one of them is a moving part that each visit runs through.
On a headless site, WordPress stays where you write and edit, at an address of its own, and visitors never touch it. The pages they see are built ahead of time with Astro and served from Cloudflare, so they carry a fraction of the weight and leave far less to attack. You publish the way you always have, and the site rebuilds itself a few minutes later.
Classic or headless, I self-host WordPress with GridPane (opens in a new tab), on servers I manage and control, so the hosting stays my responsibility, not a company I pass you off to. On a headless site, the Astro front end is deployed with Cloudflare Pages, straight from the project's GitHub repository.
Joel Bomgar's site works this way: 571 posts carried over behind a new Astro front end, and post pages 72% lighter. I'm building more of these now, including sites for hospitals and medical clinics. Keep an eye on the case studies page for samples of that work.
Everything in the Website Care Plan, applied to WordPress. The price follows the same rule: the site sets it, not the service. A brochure site with forms starts at $225 a month, and a site with eCommerce, courses or memberships at $500, whether WordPress draws its pages or Astro does. Billed monthly, quarterly or annually, with no minimum term.
From $225
A month to care for a brochure site with forms
From $500
A month to care for an eCommerce, course or membership site
+$500
Add-on: a month for your first simple email funnel; extra ones cost less
+$750
Add-on: a month for your first ad campaign, plus 20% of ad spend
Managed WordPress hostingI self-host WordPress with GridPane (opens in a new tab), on servers I manage, scoped to what the site needs and provisioned with room to spare. On a headless site, the Astro front end is served by Cloudflare Pages and rebuilt from the project's GitHub repository.
Security, in layersProtected at the network, server and application levels, like every plan. Every WordPress site I care for sits behind Cloudflare, with locked-down logins. Suspicious traffic, junk bots and form spam are stopped before they ever reach the server, and IP addresses that keep trying get banned. Mission-critical builds also run Fortress (opens in a new tab), the security plugin GridPane (opens in a new tab) recommends, for two-factor logins and brute-force protection. On a headless site, visitors never reach WordPress at all.
Core, plugin and theme updates, when they're safeWordPress core, plugins and themes are updated as needed and when it's safe to do so. If an update misbehaves, it's rolled back from the hourly backups before it costs you anything.
Backups hourly, daily and weeklyRolling backups of the files and the database, kept on the server and in at least two remote locations, so you never lose more than an hour of work.
Uptime monitoring every two minutesThe site and, on a headless build, the WordPress behind it. If something goes down, I'm notified within minutes and usually on the fix before you know there's a problem.
Form, booking and deployment checksForms and booking links are tested regularly. On a headless site I also monitor the deployment that turns a published post into a live page, so a failed publish never sits unnoticed.
30 minutes of my time, every monthThe minimum on every plan. Small changes, fixes and copy updates that fit inside it cost nothing extra; beyond it, a discounted hourly rate agreed up front. Sites that need more of my time each month reserve more, and that is what moves a plan toward $1,000.
Urgent response within 4 hoursOn every plan. Mission-critical sites can add a service-level agreement for faster response and remediation.
04What happens each monthUpdates · Checks · Ongoing
01 — Updates
Patched as needed
WordPress core, plugins and themes are updated when it's safe, so a bad update or a plugin conflict never breaks the site. Anything that misbehaves is rolled back from the hourly backups.
02 — Checks
Forms, deployments, backups
The forms and the booking link are tested end to end, the backups are confirmed, and on a headless site the deployments are monitored.
03 — Ongoing
Monitor, improve, check in
Uptime and performance are monitored around the clock, the included time goes where the numbers point, and you get a short note each month on what changed. If you'd like a monthly or quarterly call to plan the next phase of growth, that's built in; if you'd rather go unbothered while nothing is wrong, that works too.
05Who it's forFor · Not for
Who it's forFour each way
This is for you if
Your site runs on WordPress, and I built it or it passed an audit first
You want WordPress's editor without its weight on every page
You run more than one WordPress site and want one person responsible for all of them
You'd rather never think about plugin updates again
This isn't for you if
You want to manage WordPress updates yourself
The site was built elsewhere and hasn't been audited yet
You need a full-time WordPress developer on staff
You want funnels or ads without a care plan (the add-ons sit on top of one)
Most of my clients do. I audit what's working, preserve what converts, and rebuild the parts that don't. You don't start from zero — you start from better.
Q.02What platforms do you build on?
I do not predetermine the tool for the job until I meet with you and understand exactly what your needs will be. As the saying goes, 'If the only tool you have is a hammer, everything looks like a nail.' Once I complete the discovery process, I determine what technology will be used to build your website. For the majority of projects I'm regularly using React, Next.js, Astro or WordPress, or a combination of them, but your specific use case will determine which gets utilized.
Q.03Do you require a long-term retainer?
My core deliverable is the Client Acquisition System, which is a fixed-price project with a very affordable monthly retainer to maintain the systems, security, software updates, and functionality. If anything ever breaks or needs a tweak and the issue is on my end, you don't pay anything for it to be edited. If you need changes from month to month, anything that fits inside the 30 minutes included in your plan costs nothing extra, and time beyond that gets a discounted hourly rate.
However, many serious clients retain me post-launch for ongoing conversion rate optimization (CRO), SEO, and scaling. These retainers are completely optional and run month-to-month after a 3-month minimum commitment to test baseline performance and assess iterations needed for future success and continued growth.
Clients who opt for a growth retainer see the best results over time.
Q.04Who owns the code and assets?
You do. 100% of the intellectual property, code repositories, design files, and operational assets belong to you. For as long as I am maintaining the project post-launch, I host the website and manage the codebase on your behalf to ensure maximum security, performance, and uptime.
However, should you ever decide it's in your best interest to part ways, there are no hostage situations. I include a "Heaven Forbid It Break-Up Plan" directly in my contract. If you and I need to go separate ways, there are no hard feelings. I execute a seamless transfer of all assets and codebase control back to you, setting you up for success to manage things internally or with another vendor.
08Related systemsOne engine, five parts
Care Plan
The Website Care Plan
A website is a machine with moving parts. The care plan is who keeps them moving after launch.
Your website shouldn't just be an information hub. It needs to be an active participant in your sales process, and it needs to catch traffic before it leaves.
