Complete WordPress maintenance, built for Quebec SMBs
A WordPress site that runs smoothly, stays secure and keeps improving month after month — without you having to think about it. That’s what our clients have trusted our team with since 2008.
What's included every month
The plan covers 11 systematic components, plus an optional LLM citation tracking component. Monthly work time is adjustable to your needs, starting at 30 minutes.
Weekly updates
WordPress, themes and plugins updated every week. Compatibility testing after each update. Immediate notice if a conflict occurs.
Secure backups
Database backed up daily, files weekly, on a secure external server. Fast restoration in case of an incident.
Uptime monitoring
Site availability checked every 5 minutes: server outages, white screen, database errors, hijacked redirects. Immediate alerts, so we can act before your visitors notice.
Broken link detection
Continuous detection of internal and external 404 errors. Prioritized fixes to protect user experience and SEO.
Continuous technical analysis
176 automated checkpoints: performance, security, SEO, errors, backups, reputation. The complete breakdown is listed below.
Statistics and SEO tracking
Visitor statistics and Google rankings recorded monthly. Detection of fluctuations that call for concrete action.
Automatic monthly report
A report sent every month with the state of your site, the actions taken and upcoming recommendations.
Flexible work time
You choose how much time you want to invest each month (minimum 30 minutes) for your adjustments and improvements.
Law 25 compliance monitored
Continuous verification of Law 25 compliance: privacy policy, cookie management, user rights.
Priority technical support
Priority access to our team when a problem arises. For longer interventions, you receive an estimate before we commit any time.
Continuous performance
Monitoring of Core Web Vitals and loading speed. Targeted adjustments when a threshold is exceeded, not cosmetic optimizations.
Security monitoring
Monitoring of intrusion attempts, vulnerable plugins and potential leaks. Fast intervention when an alert is raised.
LLM citation tracking (optional)
For plans that want it: monthly monitoring of your visibility in ChatGPT, Perplexity and Google AI Overviews. Detection of position changes and of competitors taking your place. Learn more about AI SEO and GEO
Under the hood: 176 automated checkpoints
Our maintenance system — the same one that powers the free site analysis — continuously monitors 17 areas. Here, in full transparency, are the 176 checks it actually performs.
Availability, checked every 5 minutes
- Server response (5xx outages)
- Cloudflare errors (1xxx and 52x codes)
- White screen
- Fatal PHP error visible on the page
- Database connection error
- WordPress maintenance mode left on
- Exposed directory listing
- Hijacked redirect away from your domain
- Server response latency
- Daily automated functional tests (real journeys in a browser)
Performance
- Lighthouse score — performance
- Lighthouse score — accessibility
- Lighthouse score — best practices
- Lighthouse score — SEO
- Lighthouse score — security
- Overall score per page, mobile and desktop
- Monthly score history
- Real Core Web Vitals — LCP (loading)
- Real Core Web Vitals — CLS (visual stability)
- Real Core Web Vitals — INP (responsiveness)
- Server response time of recent page loads
- Full load time on the visitor's side
- Cache hit rate
- 30-day performance averages
- Heavy requests: execution time
- Heavy requests: memory used
- Heavy requests: number of SQL queries
- Requests stuck in the server (orphaned)
- Recurring problem pages (top offenders)
- Automatic benchmark: is optimization actually helping
Security — accounts and access
- Presence of a generic "admin" account
- Number of administrator accounts
- Administrators inactive for more than 6 months
- Display name identical to the login username
- Two-factor authentication and administrator coverage
- Age of administrator passwords
- Compromised passwords (known data breaches)
- Expired login sessions
- Date of administrators' last login
- Login page protected against brute force
Security — firewall and hardening
- Application firewall installed and active
- Recent malware scan
- Lockout of repeated login attempts
- File editing disabled in the admin
- Debug error display disabled
- Non-generic WordPress security keys
- XML-RPC disabled
- HTTPS enforced across the entire site
- PHP execution blocked in uploads
- allow_url_fopen disabled
- Exposed configuration files (php.ini, wp-config…)
- Hidden files and forgotten archives publicly accessible
- Server path disclosure
- Outbound request filtering against data exfiltration
- Regular testing of the outbound filter (canary)
Security — plugins
- Known vulnerabilities (CVE) in active plugins
- Plugins without an update for more than 6 months
- Plugins abandoned by their author (24 months or more)
HTTP security headers
- Strict-Transport-Security (HSTS)
- Content-Security-Policy (CSP)
- X-Frame-Options
- X-Content-Type-Options
- Permissions-Policy
- Referrer-Policy
- X-XSS-Protection
- Overall header score out of 100
SSL certificate
- Expiry date, with alerts at 30 then 7 days
- Certificate issuer
- Domains covered (SAN)
- Self-signed certificate detection
- TLS connection errors
Encrypted backups
- Scheduled full backups
- Incremental backups (modified and deleted files)
- Automatic backup before every update
- AES-256 encryption and off-site storage
- Age of the last backup (alert beyond 7 days)
- Integrity of every archive (SHA-256 fingerprint)
- Number of database tables and rows copied
- Pseudonymization of personal information (Law 25)
- Smart backup rotation (daily, weekly, monthly, yearly)
- Audit log of all operations
Updates
- WordPress version and available update
- Version of every plugin and available updates
- Version of every theme and available updates
- Complete inventory of plugins and themes, active and inactive
- Snapshot of the healthy state before every update
- Integrity validation after every update
- Automatic recovery if an update goes wrong
- Screenshot of the site after each update
Errors and logs
- Fatal PHP errors
- PHP warnings and deprecations
- Visitor-side JavaScript errors
- Admin-side JavaScript errors
- Deduplication and occurrence counting (file, line, frequency)
- Detection of all log files on the site
- Log size and growth (alert on oversized files)
- Severity of recent entries in each log
- Publicly accessible logs (leak risk)
- Overdue WordPress scheduled tasks (WP-Cron)
- Stuck task lock, with automatic repair
Technical SEO, page by page
- Missing page title
- Title too long or too short
- Duplicate titles across pages
- Missing meta description
- Meta description too long or duplicated
- H1 missing, duplicated or too long
- Thin content (fewer than 300 words)
- Images without alt text
- Oversized images
- Missing canonical tag
- Page set to noindex by mistake
- Redirect chains that are too long
- Redirect loops
- URLs with double slashes
- Orphan pages (no incoming internal links)
- Duplicate content across pages
- Valid robots.txt and blocked pages
- XML sitemap present and consistent with the site
- hreflang tags (format and bidirectionality)
- Slow-loading pages
- Pages below Core Web Vitals thresholds
- Meta / content / technical / performance / mobile score, plus an overall score
Broken links and crawling
- Full site crawl, page by page
- Breakdown of HTTP codes (2xx, 3xx, 4xx, 5xx)
- Internal broken links
- Dead outbound links
- Redirect suggestions for every broken link
Google rankings
- Monthly organic clicks (Search Console)
- Monthly impressions
- Click-through rate (CTR)
- Average position
- Data quality control (missing months, suspicious values)
- Weekly position of every tracked keyword
- Position changes and drop alerts
- Visibility share against your competitors (Share of Voice)
- Cannibalization between your own pages
- Content traffic decline (30 and 90 days)
- Search intent of every keyword
- Content quality score (readability, structure, length)
- Search trends and Google suggestions
- Internal linking and pages to connect
- Page indexing status verified with Google
- Backlinks: referring domains and anchor texts
- Competitive monitoring: technologies and rankings
- Structured data (JSON-LD) present and valid
Visibility in AI engines (optional)
- Your brand cited by ChatGPT
- Your brand cited by Claude
- Your brand cited by Perplexity
- Your brand cited by Gemini
- Your brand's position in AI answers
- Competitors cited in your place
- 30-day mention rate
Domain and email reputation
- Spamhaus ZEN (mail servers)
- Spamhaus DBL (domain)
- SpamCop
- Barracuda
- CBL
- SORBS
- UCEPROTECT
- PSBL
- SpamRATS (two lists)
- URIBL (domain)
- Google Safe Browsing
- SPF record
- DKIM signatures
- DMARC policy
Local presence
- Completeness of the Google Business Profile listing
- Name-address-phone consistency across more than 40 directories
Server and disk space
- Disk usage, alerts at 80 and 95%
- Actual hosting account quota (not just the physical disk)
- Space breakdown: uploads, plugins, themes
- PHP version (alert below 8.0)
- MySQL/MariaDB version
- Server limits: memory, execution time, upload size
- Debug flags left enabled
- Presence and version of the monitoring plugin itself
How it works
Three simple steps to activate maintenance, with no surprises.
Initial audit of your site
We review the state of your current WordPress site: version, plugins, existing backups, performance, compliance. If certain fixes are needed before activation, we let you know and provide an estimate.
Activation of monthly monitoring
We set up backups, monitoring and analysis tools. You choose your desired monthly work time (minimum 30 minutes) based on your needs. Service starts the following month.
Monthly report and adjustments
Every month, you receive a clear report: what was done, what was detected, and what we recommend for the month ahead. You set the priorities.
Who this service is designed for
We support SMBs from 5 to over 100 employees, nonprofits and public organizations across Quebec from our Drummondville office. Your website maintenance is designed for organizations whose WordPress site matters to their business, but who don’t have an internal team dedicated to its technical management.
Maintenance pairs naturally with our web hosting; and if your site needs more than maintenance, our redesign and optimization service takes over. To assess your site's condition yourself, our security checklists and Law 25 are free.
You keep control of the decisions; we handle the technical execution and continuous monitoring. You know what's happening on your site without having to think about it every day.
- Established SMBs with 5 to 100+ employees
- Nonprofits and organizations with a site that must stay Law 25 compliant
- Early childhood centers and coordinating offices that communicate with parents
- WooCommerce online stores that need to stay open 24/7
- Custom management platforms built by us or elsewhere
- Creative and marketing agencies that want to hand off the technical layer
Ce que disent nos clients
Nous sommes fiers de la confiance accordée par nos clients et déterminés à maintenir un haut niveau de qualité sur tous nos services.
De loin l'une de mes meilleures découvertes de l'année. Elefen mérite d'être recommandé à plusieurs. William offre un service impeccable, c'est un expert dans son domaine.
Super service offert par William. Il apporte de bonnes solutions pour résoudre les problèmes et son travail est efficace et rapide.
Excellente expérience avec Elefen. L'équipe est rapide, disponible et toujours prête à nous aider avec la gestion de notre site web. Service professionnel et très efficace.
Let's talk about your site and your needs
A free initial audit, no strings attached. Together, we'll see whether maintenance is what you need.
Questions fréquentes
How much does monthly WordPress maintenance cost?
The monthly plan includes 11 systematic components (updates, backups, monitoring, etc.) plus a block of work time adjustable to your needs, starting at 30 minutes. The total cost depends on the number of hours chosen. Contact us for a precise estimate.
What happens if I exceed my monthly work time?
Work beyond the plan gets an estimate first. You decide whether to go ahead or carry it over to the following month.
Does maintenance include hosting?
No, hosting and maintenance are two distinct services that complement each other. Hosting is the server infrastructure; maintenance is the application upkeep. You can take one or both.
Can I leave the service at any time?
Yes. No term commitment. You remain the owner of your credentials, your site and your backups.
How do I get started?
With a free initial audit of your current WordPress site. We tell you whether fixes are needed before activation, then propose a plan suited to your needs.