Your site works. Who looks after it once it is live?

by APV Studio

Your site works. Who looks after it once it is live?

A WordPress or WooCommerce site is not finished on launch day. From then on the plugins change, the server changes, the threats change and so does the content. If nobody looks after it, problems do not show up straight away. They pile up.

Below is what we actually do when we look after a site, and how you can tell whether yours is getting that care.

Updates: on a schedule, not when someone remembers

WordPress, your theme and your plugins release new versions all the time. Some add features, others close security holes that are already public. The further a site falls behind, the easier a target it becomes and the harder the update is when it finally happens.

Care here means three things:

  • Updates at regular intervals, with a faster response when a security fix is involved.
  • Reading the changelog before any major version change.
  • Checking that the site works afterwards, not just that the update finished.
  • We also keep an eye on the server's PHP version. Old versions stop receiving security fixes, and moving to a newer one needs testing, because some older plugins do not cope with it.

    Backups that have been test-restored

    Almost every site has some kind of backup. Few have a backup that has been tested. The difference shows at the worst moment: when you need to restore and the file turns out to be incomplete, corrupted or out of date.

    For a backup to count, it should:

  • Include both the database and the files, uploads included.
  • Be stored away from the server the site runs on. If that server fails or is compromised, a backup on the same disk goes with it.
  • Keep enough history. A compromise can be discovered weeks later, so you need a clean copy from before it happened.
  • Have been restored at least once. We periodically restore backups to a separate environment and check that the site loads and works.
  • For an online shop, frequency matters. A weekly backup means that on a bad day you could lose a whole week of orders.

    Monitoring: uptime and integrity

    The simplest layer is uptime monitoring: a check that loads the site every few minutes and raises an alert if it does not respond. That way we hear about a problem before a customer tells us.

    Uptime is not enough, though. A site can load perfectly and still be compromised. So we also watch its integrity:

  • Comparing WordPress core files against the official release, so any modified file stands out immediately.
  • An alert whenever a new administrator account is created. An unknown admin is one of the clearest signs that someone has got in.
  • Checking for new PHP files in folders where they should not exist, such as uploads.
  • Tracking expiry dates for the SSL certificate and the domain.
  • Security: fewer doors, fewer keys

    Site security is not a plugin. It is a series of small decisions that reduce the ways someone can get in:

  • Few administrator accounts, each with its own name and a strong password, plus two-step verification where possible.
  • Removing plugins and themes that are not in use. A deactivated plugin still sits on the server and can still have a vulnerability.
  • Disabling file editing from the dashboard and setting correct file permissions.
  • Limiting failed login attempts and protecting the login page.
  • None of this is impressive. Together it makes a real difference.

    Performance that slips over time

    A site rarely becomes slow overnight. It usually loses speed gradually: a new plugin here, a few oversized images there, a database that grows with old data nobody cleans up.

    So we measure performance at regular intervals and compare against previous readings. We care more about the trend than any single number. When we see a decline, we look for what changed while the cause is still recent and easy to find.

    Spam on Google: the silent sign

    A compromise is not always visible. A common type of attack adds large numbers of spam pages or hidden links that are shown only to search engines. You see your site as normal. Google sees something completely different. Showing search engines different content like this is called cloaking.

    It usually shows up through indirect signs:

  • Search results show pages on your domain with titles in another language, or for products you do not sell.
  • Google Search Console shows a sudden jump in indexed pages, or a security notice.
  • Organic traffic drops for no obvious reason.
  • That is why we regularly check Search Console and how the site appears in search. The earlier this is caught, the less damage it does to your rankings.

    A quick self-check for your site

    If you are not sure whether your site is being looked after, these questions help:

  • Do you know when WordPress and your plugins were last updated?
  • Do you know where your backups are kept, and when a restore was last tested?
  • If the site goes down at midnight, who will find out, and when?
  • Do you know how many administrator accounts exist and who they belong to?
  • Does someone have access to Google Search Console, and do they look at it?
  • Are there plugins installed that nobody remembers adding?
  • If any answer is "I don't know", it is worth finding out.

    In closing

    Good site care is invisible. When it is done properly, nothing happens: the site loads, orders come in, and Google sees what you see. At APV Studio we take on this work for WordPress and WooCommerce sites, with monitoring packages starting from 149 euros per month.

    If you want us to look at this for your site, write to us at info@apvstudio.gr.

    More articles

    WordPress Performance: What Really Slows Down Your Site (and What Makes Sense to Fix)

    The speed of a website is not a technical detail. It is directly connected to conversions, SEO, and overall how effectively a business's online presence operates. Especially in eCommerce environments, every delay translates to lost sales. WordPress can reliably support business sites and online stores. However, it is not inherently a performance-first system. And this has specific consequences.

    Read more

    Why UX/UI is Crucial for E-commerce Conversions

    Discover how the right UX/UI can improve conversions and increase sales on your e-commerce platform, ensuring a smooth and enjoyable user experience.

    Read more

    Tell us about your project

    Our offices