Our WordPress Update Routine, Step by Step
How we apply WordPress updates: what happens before, during and after, how the routine changes by plan, what we do when an update goes wrong, and a one-page version you can print.
Jul 15, 2026 · 6 min read
A real team looks after your WordPress site: updates, security scans, off-site backups, uptime monitoring and a monthly report. A person replies by your next business morning, Eastern time. Month to month, with a 30-day money-back guarantee.
Is your site due for care?
Two or more of these and your site is likely overdue. It takes two minutes to see which basics you already have.
What is covered
Six jobs done for you, with a short note on how each one is done.
WordPress core, themes and plugins are kept current. We confirm a recent backup exists before each release, and from the Business plan updates are tested on a private staging copy first.
A firewall blocks hacking attempts and bad bots, and your files and database are scanned for malware. If something is found we clean it and close the way in.
Your files and database are copied to encrypted storage away from your hosting server, and we test a restore every month.
We are alerted if the site goes down or a form stops working, and we start on it right away.
We check how quickly your key pages load and fix what slows them, such as heavy images and unused plugins.
Text and image updates, new pages from an existing template, plugin setup, menu changes, mobile fixes. Raise as many requests as you like.
How we update
The same six steps every time. The plans differ in how much is tested on a staging copy and how quickly we move.
Your hours
Content, design and technical work all come from one monthly pool, so you decide what to spend it on.
Typical times, not promises
| Request | Typical time | Kind of work |
|---|---|---|
| Update opening hours, prices or contact details | 15 min | Content |
| Add a blog post or product you send us | 30 min | Content |
| Swap images or fix text across several pages | 30 min | Content |
| Menu, footer and widget changes | 15 to 30 min | Design |
| Adjust colors, spacing or fonts | 30 min | Design |
| Publish a new page from an existing template | 1 hr | Design |
| Install and set up a plugin, like a booking form | 1 hr | Technical |
| Connect analytics, email or your CRM | 1 to 2 hrs | Technical |
| Fix a mobile layout or browser bug | 30 min to 2 hrs | Technical |
| Fix a contact form that stopped sending | 30 min to 1 hr | On this platform |
| Update a page built with a page builder | 30 min to 1 hr | On this platform |
| Add a redirect after a page moves | 15 min | On this platform |
Every request is tracked in 15-minute blocks and comes out of your monthly hours: Essential 2, Business 6, Priority 12 hours a month.
Taking over a site
Within 2 to 5 days of getting access you receive an onboarding report that covers these eight checks, and what we fixed first.
Which are out of date, abandoned or unused.
Accounts that should not exist, and passwords that need changing.
Whether the site runs supported versions, and what stands in the way of updating.
Whether a backup exists, where it lives and whether it restores.
Whether contact and booking forms really deliver, and where the mail goes.
The certificate state and the basic headers browsers expect.
Items that slow the site or widen the attack surface.
Memory, PHP limits and anything on the server that affects updates.
Some updates need a conversation first. A plugin that its maker has not updated for a long time, or a heavily customised theme, can break when touched. In those cases we tell you what we found, what the risk is and what we suggest, and we wait for your yes before changing it.
Plans
Same team, same promise on every plan. The difference is how many hands-on hours you get and how fast we move.
| Compare | Essential | Business | Priority |
|---|---|---|---|
| Hands-on work included | 2 hrs / month | 6 hrs / month | 12 hrs / month |
| First response | Next business morning ET | Next business morning ET, priority queue | Next business morning ET, dedicated queue |
| Your contact | Support team | Named technical contact | Named account manager |
| Staging | - | ✓ | Included, with engineer check |
| Backup frequency | Files weekly, database daily | Daily | Daily |
| History kept | 45 days | 60 days | 60 days plus 1-year archive |
Updates, security, backups and monitoring in every plan. Month to month, a 30-day money-back guarantee, and two months free if you pay annually. See every plan feature.
Reviews
Reviews of Aarav Infotech, the company behind WebXSentry, from clients in United States, Singapore and United Kingdom. Each one says which service it is about, and where a public link exists you can read the original.
“I have no hesitation in recommending their services, for any of the services they offer, they are very prompt responsive and professional.”
Dr D V Giri
Scientist, Pro-Tech
United States · Website development and maintenance
“Aarav Infotech was able to resolve the tech problems that we faced on Google Workspace (SPF, DKIM, DMARC) and resolve it to our satsifaction. Jitendra was patient and Ritika was prompt in addressing the query. Since all of the processes are automated, made things very easy.”
Sriram Iyer
IKIGAI ENABLERS PTE. LTD.
Singapore · Google Workspace support
Read on Google
“They are highly experienced, creative, reliable and professional in their approach from the creation of the concept to designing and development; I knew I could rely on their technical skills and initiative to deliver superb results on time.”
Kevin Barrance
Director, Horizon Specialities
United Kingdom · Website design and development
Some of the businesses whose websites our team looks after
New Zealand
Ireland
United States
Australia
United Arab Emirates
United States
Canada
United KingdomScores from our scans of this site between 7 May 2026 and 1 Oct 2026: speed 75 to 83; security 78 to 96; WordPress 71 to 82.
Speed score 75 → 83 +8 Read the case studyScores from our scans of this site between 7 May 2026 and 30 Sep 2026: speed 58 to 67; security 78 to 96; WordPress 65 to 76.
Speed score 58 → 67 +9 Read the case studyStart in two minutes
A real person replies by your next business morning, Eastern time, with how we would handle it and which plan fits. No sales call needed.
Guides
How we apply WordPress updates: what happens before, during and after, how the routine changes by plan, what we do when an update goes wrong, and a one-page version you can print.
Jul 15, 2026 · 6 min read
WordPress maintenance prices range widely. This guide explains what drives the price, what a good plan includes at each level, and how to compare offers on hours, not just cost.
Aug 12, 2026 · 4 min read
What runs automatically, what needs a person, how long everyday requests take, and how many hours a small site, a busy site and a store usually use.
Sep 2, 2026 · 7 min read
Related
Your store runs on WordPress, WooCommerce, a payment gateway and a stack of plugins.
Read moreYour files and database are copied to encrypted storage completely separate from your hosting server.
Read moreIf your site has been hacked, we clean your files and database, request removal from blacklists, harden the site and send a written report on what happened a...
Read moreAdd-ons
Extra fixes you can buy on top of your plan, each with a fixed price.
Security
One-time deep security hardening for your WordPress or WooCommerce website
Security
One-time WAF setup on Cloudflare Pro that blocks attacks before they reach your website
Speed and search
Faster pages on mobile and desktop: caching, image, database and render-blocking fixes, with a before and after PageSpee...
Straight answers
Yes. We take over sites built by anyone. We start with an onboarding report on how the site stands today, then look after it from there.
We need access to your WordPress admin and, for backups and server-level work, your hosting account. You add them to the secure vault in your client area, and we return every login and confirm removal in writing if you leave.
Updates carry a small risk on any site. On Business and Priority we test them on a staging copy first, and on Priority an engineer checks each one before it goes live. On every plan we confirm a recent backup exists first, so there is a way back.
Staging is part of Business and Priority. On Essential we update the live site after taking a backup.
We tell you, explain the risk and suggest a replacement. We do not leave it quietly out of date, and we do not swap it without your agreement.
Yes. Requests are unlimited and are scheduled against your monthly hours. If a request would take you past your hours, we tell you and quote the extra work first.
Yes. Malware removal is included in every plan. If you do not have a plan, Emergency Recovery is a one-time $399 with no contract.
We tell you before we start and quote the extra work first. Nothing chargeable begins without your yes.
Yes, and migration is free. We find out what you own, get the keys into your name and take over with no gap in cover.
No. Hours reset each month and do not carry forward. Routine maintenance, monitoring and reporting never use them, so your hours go only on the work you ask for.
This service is the same wherever you are. Pick your country to see how it works with your time zone.
Tell us what your website needs. A real person replies by your next business morning, Eastern time, with how we would handle it and which plan fits.