A complete, editable website maintenance contract and plan template you can use today, with every clause that matters: scope, service levels, payment terms, backups, security, ownership and termination. Read the full template below, or download the Word and PDF versions and fill in the blanks.
Editable Word document and a print-ready PDF. Free to use for your own or your clients' sites, no signup.
A website maintenance contract is a written agreement that sets out the terms under which one party maintains another party's website. It answers the questions that otherwise cause disputes: what work is included, how fast problems get handled, what it costs, who owns what, and how either side can end the arrangement. Whether you are an agency taking on a client or a business owner hiring help, the contract is what turns a loose understanding into clear, enforceable expectations.
You will see the same document called a maintenance contract, a maintenance agreement, a service agreement, or a care plan agreement. The names are interchangeable. What matters is that the important terms are written down and signed. The template on this page works for all of these and for any platform, though the update and security clauses are written with WordPress in mind since that is where most of this work happens.
A contract protects both sides, and the protection runs in both directions more evenly than people expect. For the provider, it prevents scope creep, the slow drift where "just one small change" becomes hours of unpaid work, and it guarantees payment terms. For the client, it locks in what they are actually getting, sets response-time commitments in writing, and confirms they own their own website and data.
The three disputes a good contract heads off are almost always the same. First, scope: exactly which tasks are included and which are billed separately. Second, money: how much, how often, and what happens if an invoice is late. Third, exit: how either party ends the relationship, what notice is required, and who gets the backups and access on the way out. Handle those three clearly and the rest of the relationship tends to run smoothly. The template below covers all three, plus the security, ownership and liability clauses that protect you when something goes wrong.
The single most valuable clause is a clear scope of services paired with a line that says anything outside it is quoted separately. That one pairing prevents the majority of client-provider friction before it starts.
The template is built from the sections every solid maintenance contract needs. Here is what each one does.
| Section | What it covers |
|---|---|
| Parties | Who the agreement is between, and the website it covers |
| Scope of services | Exactly which maintenance tasks are included |
| Service levels (SLA) | Response and resolution times by issue severity |
| Support hours | When support is available, and emergency cover |
| Deliverables & reporting | What the client receives, including monthly reports |
| Updates, backups & security | How updates, backups and threats are handled |
| Responsibilities | What each party must do to hold up their end |
| Fees & payment | Amount, schedule, and late-payment terms |
| Term & termination | How long it runs and how to end it |
| Confidentiality & IP | Data protection and who owns the website |
| Liability | Sensible limits on the provider's exposure |
Here is the complete template. Replace every [BRACKETED] placeholder with your details. Copy it straight from here, or grab the Word version above to edit and sign.
WEBSITE MAINTENANCE AGREEMENT
Free template from WP Maintenance Packages · wpwebsitemaintenancepackages.com
This Website Maintenance Agreement (the "Agreement") is entered into on [CONTRACT DATE] by and between [PROVIDER / AGENCY NAME] of [PROVIDER ADDRESS] (the "Provider"), and [CLIENT NAME] of [CLIENT ADDRESS] (the "Client"), for the ongoing maintenance of the website at [WEBSITE URL] (the "Website").
The Provider will perform the following ongoing services during the term:
Any work outside this scope will be quoted and approved separately before it is performed.
The Provider will use commercially reasonable efforts to meet these targets during the support hours in Section 3:
Standard support is provided [Monday to Friday, 9am–5pm, your timezone], excluding public holidays. Emergency support outside these hours applies where the plan includes it, per Section 12.
Each month the Provider delivers a written report covering updates applied, security events, backup status, uptime, performance scores and fixes completed, by [email] within [5] business days of month end.
The Provider keeps core, themes and plugins current. Major or high-risk updates are, where practical, tested on a staging copy before going live. The Provider is not responsible for faults in third-party code it did not author, but will remediate resulting issues as part of the service.
The Provider maintains automated daily off-site backups retained for [30] days and will restore from the most recent working backup on request. The Client remains responsible for its own independent copy where longer retention is required.
The Provider monitors for malware and unauthorised changes and applies reasonable hardening. On a compromise, the Provider will clean the infection, restore a clean version where necessary, and close the vulnerability. No provider can guarantee a site is un-hackable, but the Provider will act promptly to remediate.
The Client pays the Provider [MONTHLY FEE] per month, billed [monthly in advance]. Invoices are due within [7] days. Late payment may lead to suspension after [written notice]. Fees exclude applicable taxes.
This Agreement runs on a [month-to-month] basis from the date above. Either party may terminate with [30] days' written notice. On termination, the Provider hands over relevant access and a current backup, and the Client pays for services rendered to the termination date.
Where the plan includes emergency support, the Provider responds to critical incidents within the Section 2 response time, including outside standard hours. Emergency work beyond the plan's scope may be billed at [EMERGENCY RATE] per hour with prior approval.
Each party keeps the other's non-public information confidential, including credentials, business data and the commercial terms of this Agreement, and uses it only to perform the Agreement. This survives termination.
The Client retains ownership of the Website, its content and its data. Original materials the Provider creates specifically for the Client transfer to the Client on full payment, except the Provider's pre-existing tools, libraries and know-how, which remain the Provider's.
Services are provided with reasonable skill and care but without further warranty. To the maximum extent permitted by law, the Provider's total liability is limited to the fees paid in the [three] months before the claim, and the Provider is not liable for indirect or consequential loss except through gross negligence or wilful misconduct.
This Agreement is governed by the laws of [GOVERNING STATE / COUNTRY], and the parties submit to the exclusive jurisdiction of its courts.
This is the entire agreement on its subject matter and supersedes prior discussions. Amendments must be in writing and signed by both parties.
Signed by the Parties:
Provider: __________________________ [PROVIDER NAME] Date: __________
Client: __________________________ [CLIENT NAME] Date: __________
This template is a practical starting point, not legal advice, and laws vary by country and state. Have a qualified lawyer review it before you rely on it, especially the liability, ownership and governing-law sections.
A template is more useful when you understand why each clause is there, so you can adjust it with confidence instead of copying blindly. Here are the clauses that carry the most weight, and what to watch for in each.
This is the heart of the contract and the clause that prevents the most arguments. It should list the specific tasks that are included and, just as importantly, state that anything outside the list is quoted separately. Vague wording like "general upkeep" is where scope creep lives. Be concrete: updates, backups, security, monitoring, and a defined number of support hours.
An SLA turns "we offer fast support" into a measurable promise. Define severity levels, critical, high, normal, low, and a target response time for each. This protects the client (who knows help is coming) and the provider (who is not held to an unrealistic standard for a minor request). Tie the times to your stated support hours so a Friday-evening ticket is not judged against a four-hour clock.
State the amount, the billing frequency, when invoices are due, and what happens if payment is late. Billing monthly in advance is standard and protects the provider from doing a month of work unpaid. A short suspension clause after written notice is fair and rarely needs to be used, but its presence encourages timely payment.
Month-to-month with a notice period, commonly 30 days, is the fairest structure for both sides. The clause should also cover the exit: the provider hands over access and a current backup, and the client settles for work done up to the termination date. Avoid long lock-ins; they signal a provider who expects you to want to leave.
The client should always own its website, content and data, and the contract should say so explicitly. Original work the provider creates for the client should transfer on full payment, while the provider keeps its own pre-existing tools and know-how. This clause matters most at the exit, when unclear ownership becomes a real problem.
No competent provider will accept unlimited liability, and no client should expect them to. A standard, fair cap limits the provider's total liability to the fees paid over a recent period (three months is common) and excludes indirect losses. It is not a loophole; it is what makes it viable for a provider to work on a valuable site at a modest monthly fee.
Confidentiality protects the credentials and business data each side sees. The backup and security clauses set expectations honestly: daily off-site backups, prompt malware remediation, and a clear statement that no provider can guarantee a site is un-hackable, only that they will act fast if it happens. Honesty here builds more trust than an over-promise.
Clear responsibilities prevent most disputes. Here is the split the template assumes, which you can adjust to your situation.
| Area | Client provides | Provider provides |
|---|---|---|
| Access | Secure admin & hosting access | Safe handling, removal on exit |
| Licences | Valid premium plugin/theme licences | Keeping them applied & updated |
| Updates | Timely approvals where needed | Weekly tested updates |
| Content | Its own content & legality | Technical upkeep of the site |
| Payment | Fees on time | Services as scoped |
| Communication | Reasonable response times | Prompt alerts on critical issues |
A contract is the binding agreement; a plan or proposal is the friendlier one-page summary an agency sends a client to explain what they will get and what it costs. Use this alongside the contract, or as a lightweight starting point for smaller engagements.
WEBSITE MAINTENANCE PLAN
Prepared for [CLIENT NAME] by [PROVIDER NAME] · [DATE]
[WEBSITE URL] · Platform: [WordPress]
What's included each month:
Response times: critical [4 hrs], standard [1–2 business days]. Support hours: [Mon–Fri, 9–5].
Month-to-month, no lock-in. [30] days' notice to cancel. Billed monthly in advance. Full terms in the accompanying Website Maintenance Agreement.
Approve this plan and we begin within [24 hours] of receiving access. Questions? [CONTACT].
If you want your service levels as a standalone document rather than a contract section, here is a clean SLA example you can lift directly. An SLA is only useful when it is specific, so keep the numbers realistic enough that you can actually hit them every time.
| Severity | Example | Response | Resolution target |
|---|---|---|---|
| Critical | Site down, hacked, checkout broken | Within 4 hours | Same business day |
| High | Key feature or form broken | 1 business day | 2 business days |
| Normal | Minor bug, small edit | 2 business days | 5 business days |
| Low | General question, advice | 2 business days | n/a |
Pair the table with two lines of context: the support hours the times are measured against, and a note that delays caused by the client, the host or a third-party plugin vendor pause the clock. An uptime target (for example, 99.9% excluding scheduled maintenance) is a common addition for higher-value plans.
Many agencies attach a checklist to the contract so both sides know exactly what "maintenance" means. Here is a ready-made schedule you can reference in your scope of services.
| Frequency | Tasks |
|---|---|
| Weekly | Review & apply core/theme/plugin updates, back up first, test after, confirm backups ran |
| Continuous | Uptime monitoring, firewall & login protection, malware scanning, alerts |
| Monthly | Speed & Core Web Vitals check, database cleanup, broken-link review, client report |
| Quarterly | Deep security audit, remove unused plugins/themes, licence & SSL checks, backup review |
| Annually | Full site audit, domain renewal check, hosting review, accessibility review |
For a fuller explanation of what each of these tasks involves and what it should cost, see our website maintenance cost guide and our WordPress care plans.
The contract does not set the price; you do, based on the site and the scope. But the [MONTHLY FEE] placeholder is where most people hesitate, so here is a sensible way to land on a number. Start from what the work actually takes each month, then price the risk and the responsiveness on top.
As a rough guide for 2026, a simple brochure or small business site runs $60 to $300 a month, a content site with regular updates $100 to $400, and an ecommerce store $300 to $3,000 depending on complexity and traffic. Hourly work, for anything outside the plan, typically sits at $75 to $200. If you are the provider, price for the response time you are promising: a same-day critical SLA means holding capacity in reserve, and that is worth charging for. If you are the client, remember the cheapest quote often excludes the things that matter most when something breaks.
For a full breakdown of what to charge and what the market pays, our website maintenance cost guide lays out real 2026 pricing by site type, provider and model, and our maintenance plans show how we structure our own tiers.
These terms get used loosely and it causes confusion, so here is how they actually relate. A contract and an agreement are the same thing: the binding document both parties sign. A proposal or plan is the friendly summary you send before the contract, explaining what is included and what it costs; it becomes binding once it is folded into a signed agreement. An SLA (service level agreement) is the part, whether a clause or a companion document, that defines response times, resolution targets and uptime. And a care plan is simply a branded name for an ongoing maintenance service, which is delivered under a maintenance agreement.
In short: you send a proposal, you sign an agreement (also called a contract), the SLA lives inside it, and the ongoing service you are buying is often marketed as a care plan. The template on this page gives you the contract with the SLA built in, plus a proposal template to send first. If you would rather buy the service than draft the paperwork, our WordPress care plans package all of this together.
Grab the Word version so you can edit, or the PDF to read and print.
Replace every bracketed placeholder with your names, dates, fee and terms.
Ask a lawyer to check the liability, IP and governing-law clauses for your area.
Both parties sign, each keeps a copy, and you have a clear working agreement.
If you are the client and you just want your WordPress site looked after without managing a contract and doing the work, that is exactly what we do. Our maintenance plans and done-for-you services come with a clear agreement built in, from $59/mo, no lock-in.
A website maintenance contract is a written agreement between a client and a provider that defines what maintenance work will be done, how fast problems will be handled, what it costs, and each side\u2019s responsibilities. It protects both parties by putting the scope, the service levels and the payment terms in writing instead of leaving them to memory.
If money is changing hands, yes. A contract prevents the two most common disputes: scope creep ("I thought that was included") and payment gaps. It also sets clear expectations on response times and ownership, which protects the client as much as the provider. Even for a friendly, ongoing arrangement, a one-page agreement is worth having.
At minimum: the parties, scope of services, service levels and response times, support hours, fees and payment terms, term and termination, backups and security policy, confidentiality, intellectual property and ownership, and a limitation of liability. The template on this page covers all of these with editable placeholders.
A contract becomes binding when both parties sign it and exchange value (the service for the fee). This template gives you the structure and standard clauses, but it is not legal advice, and laws vary by country and state. Have a qualified lawyer review it before you rely on it, especially the liability, IP and governing-law sections.
Yes, that is the point. Download the Word version, replace every bracketed placeholder ([CLIENT NAME], [MONTHLY FEE], [WEBSITE URL], and so on) with your details, adjust any clause to fit your situation, and sign. The PDF is there if you just want a clean copy to read or print.
In practice, "contract" and "agreement" mean the same thing, a binding document between two parties. An SLA (service level agreement) is usually a section inside that contract, or a companion document, that specifically defines response times, uptime targets and what happens if they are missed. Our template includes the SLA as a built-in section.
That depends on the site and the scope, not the contract itself. Typical monthly maintenance runs $20 to $500 for most sites and more for ecommerce. Put the agreed figure in the fees section as [MONTHLY FEE]. For help pricing it, see our website maintenance cost guide.
A service level agreement defines the standards the provider commits to: how quickly they respond to a critical issue versus a minor one, target resolution times, support hours, and often an uptime target. It turns vague promises like "fast support" into specific, measurable commitments. Section 2 of the template is a ready-to-use SLA.
The client should always retain ownership of the website, its content and its data. A good contract states this explicitly and confirms that any original work the provider creates transfers to the client on full payment, while the provider keeps its own pre-existing tools and know-how. The template handles this in the intellectual property section.
Yes. Clear termination terms protect both sides: a notice period (30 days is common), what happens to access and backups on exit, and payment for work up to the termination date. Month-to-month with a notice period is the fairest structure and the one we recommend and use.
Yes, completely free, for your own or your clients\u2019 websites. You do not need to credit us or ask permission. We built it because a clear contract makes the whole industry work better, and because it is a genuinely useful first touch with people who may later want maintenance handled for them.
Founder, ThinkFlow Media & Linkflow.agency · 8+ years in WordPress & SEO
Bhupesh Rathore is the founder of ThinkFlow Media and Linkflow.agency, with 8+ years in WordPress, SEO and website operations. He has built, scaled and maintained WordPress sites across business, ecommerce, SaaS and content niches, and speaks on SEO, most recently at the Chiang Mai SEO Conference 2025. He writes here to share practical, no-nonsense guidance on keeping WordPress sites secure, fast and profitable.
Full profile LinkedIn XSend us your URL for a free site audit. We'll tell you what your site needs and set you up on a plan with a clear agreement, from $59/mo.
Get a free site auditDisclaimer: This website maintenance contract template is provided free for general informational purposes and does not constitute legal advice. Contract law varies by jurisdiction. You are responsible for ensuring any agreement you use is appropriate for your situation, and should consult a qualified attorney before relying on it.