Paying for WordPress maintenance and actually receiving it are not always the same thing.

Many business owners have a care plan in place, get a monthly email of some kind, and assume the site is being looked after. Sometimes it is. Sometimes the arrangement is far thinner than it appears, and the only way that becomes clear is when something goes wrong.

Here is how to check for yourself.

Check When Your Plugins Were Last Updated

Log in to your WordPress dashboard and go to the plugins list. WordPress shows the version number for each active plugin. Cross-reference a few of them against the current version available on the plugin’s page.

If several plugins are running versions that are months behind, the site is not being updated on a meaningful schedule. A well-maintained site should have plugins that are current or close to it, with the exception of plugins where an update was deliberately held back for a specific reason.

This check takes five minutes and tells you quite a lot.

Look at Your WordPress Core Version

Go to Dashboard and then Updates. The current WordPress core version is shown there. If the site is running a version that is multiple releases behind the current stable release, core updates are not being applied either.

Core updates matter for security and compatibility. A site running an outdated WordPress version is carrying unnecessary exposure, and it is a clear sign that the maintenance process is not functioning as it should.

Ask for a Recent Activity Report

A provider doing real maintenance should be able to show you a record of what was done and when. This does not need to be elaborate. A simple log showing update dates, what was updated, and any issues encountered is sufficient.

If the monthly report you receive is a generic automated email saying your site is healthy with no specifics attached to it, that is not a report. It is a placeholder. Ask for actual activity logs and see what comes back.

Ask What Happens When an Update Breaks Something

This question separates providers with a real process from those running automated scripts.

A maintenance provider with a genuine workflow will be able to explain how updates are applied, whether staging is used for higher-risk changes, and what the response process looks like if something breaks after an update. They should be able to answer this without hesitation.

If the answer is vague, or if it becomes clear that updates are applied automatically with no one actively monitoring the outcome, you are not getting managed maintenance. You are getting an automation task dressed up as a service.

Check Whether Backups Are Actually Running

Ask your provider where backups are stored, how often they run, and how long they are retained. Then ask whether restores have ever been tested.

If backups are stored on the same server as the site, that is a problem worth addressing. If the retention window is shorter than thirty days, that is another gap worth knowing about. And if no one can confirm whether a restore has ever been tested, the backup system is untested infrastructure that you are relying on without evidence it works.

Check Whether Anyone Is Watching the Site

A maintained site should have uptime monitoring in place. If the site goes down at two in the morning, someone or something should be notified quickly. Ask whether monitoring is active and what triggers a response.

Some providers include monitoring in name but in practice only review alerts during business hours. That is worth knowing if your site serves customers outside of those hours.

Trust the Pattern, Not the Reassurance

A provider who is doing the work will have clear answers to these questions. Specific update logs, a defined process, off-site backups with a sensible retention window, and a clear support escalation path.

Vague answers, difficulty producing records, or reassurances without supporting detail are not signs of a bad relationship necessarily, but they are worth taking seriously. The maintenance of a business website should be transparent and verifiable.

If your current arrangement cannot be verified this way, it is reasonable to ask for more clarity, or to look at what a more structured option would involve.

If you want to understand what a properly documented maintenance process looks like, the WordPress Care Plans page explains how WPFellow approaches this.