Medical Website Maintenance: What a Monthly Plan Should Actually Include
A physician website does not stay the way it launched. What breaks, what a real maintenance plan covers each month, the red flags in a bad one, and what to ask before you sign.
Roger de OcaFounder, DEOCAs7 min readIn this article
A physician website looks finished on launch day. It is not. From that day on, the software underneath it ages, the certificate that makes it “secure” counts down to renewal, the contact form depends on services that change their rules, and the hours on the footer are one staffing change away from being wrong. None of this announces itself. It just accumulates until a patient notices, or Google does.
Maintenance is the work of noticing first. This article lists what actually breaks on a medical website, what a monthly plan should include to catch it, the red flags in plans that only look like maintenance, and the questions to ask before you sign one.
What quietly breaks
- Software: the framework, plugins and libraries under the site publish security fixes constantly. Unpatched sites are how practices end up with a warning page in search results.
- Certificates and domains: the SSL certificate expires, the domain renewal card expires, and the site shows a full-screen security warning or disappears. It happens to practices every month.
- Forms: the service that delivers your contact form changes an API, tightens a spam rule or expires a key. The form still says “sent”. Nobody receives anything. This one can run for weeks.
- Content: hours, providers, insurance lists, a service you stopped offering. Every stale line is a wrong call or a lost patient.
- Speed: images get added at full size, a script gets pasted in, a plugin grows. A site that scored 95 at launch scores 60 a year later.
- Links: a page you retired, a partner who changed their URL, a PDF that moved. Broken links cost trust and rankings.
- Search settings: a redesign, a plugin or a well-meaning edit tells search engines to stop indexing the site. Nobody notices until traffic is gone.
A site nobody maintains does not stay the same. It gets slower, less accurate and less visible, quietly, and the physician is usually the last to know.
What a real monthly plan includes
Software and security updates
Dependencies updated on a schedule, security patches applied when they appear, and each update checked so it does not break something else. This is the least visible item and the one most plans quietly skip.
Uptime and form monitoring
Someone, or something, checks that the site is up and that a test submission through every form actually arrives. A form that fails silently is the most expensive failure a practice site can have, because the loss is invisible.
Content changes with a stated turnaround
You send the change; it appears, correctly, within a known time. New hours, a new physician, a new insurance, a new page. The plan should say how many changes are included and how fast, in writing.
Performance checks
Speed measured against Google’s Core Web Vitals on a real phone, not once at launch but every month, so that regressions are caught while they are small. Speed is a ranking factor and a patience factor.
Backups
Regular backups, stored somewhere other than the site itself, tested at least once so you know they restore. A backup nobody has restored is a hope, not a backup.
Domain, DNS and certificate management
Renewals handled before they expire, DNS records kept clean, the certificate renewed automatically and verified. And the domain registered in the practice’s name, always, so that no provider can hold it.
Search health
Search Console checked for indexing errors, pages that dropped out, and warnings, with fixes applied. Also a check that name, address and phone still match the Google Business Profile.
A monthly report
What changed, what was measured, what needs attention next, in a page a busy physician reads in two minutes. If a plan produces no report, you have no way to know the work happened.
Hosting is not maintenance
Hosting only
- The server is on
- Maybe automatic backups
- Nobody looks at the site
- Changes are your problem
A maintenance plan
- Updates applied and checked
- Forms and uptime monitored
- Content changes handled
- Speed and search health measured, reported monthly
Many practices pay a small monthly fee and believe they are covered. Read what it actually includes. “Hosting and support” usually means the server is running and someone will answer an email. That is not the same as someone checking that your form works.
Red flags in a maintenance plan
- The domain is registered to the provider, not to the practice. If you leave, you lose your address on the web.
- “SEO included” with no definition and no report. Vague inclusions are usually nothing.
- No monthly report, or a report that is only a dashboard screenshot.
- Unlimited everything for a tiny fee. Something is unlimited only because nobody does it.
- A contract that outlives its usefulness: long lock-ins, cancellation penalties, or a site you cannot export.
- No answer to “what happens if I cancel?”.
Do
- Ask exactly what is checked each month, and how you will know
- Confirm the domain, the content and the site are yours
- Ask for a sample monthly report before signing
- Ask how form failures are detected
Don’t
- Confuse hosting with maintenance
- Accept “we will keep an eye on it” as a deliverable
- Sign a plan with no written scope or turnaround
- Let the provider own any account the practice depends on
What a month looks like
Updates and checks
Dependencies updated, security patches applied, every form tested end to end, uptime confirmed.
Your changes
Hours, providers, insurance, pages, photos. Sent through one channel, handled within the stated turnaround.
Performance and search
Speed measured on a real phone, Search Console reviewed, broken links found and fixed, profile consistency checked.
The report
What changed, what was measured, what we recommend next, including anything you should stop paying for.
The bottom line
The question is not whether your site needs maintenance. It is who is doing it. If the answer is nobody, the site is slowly becoming the version of your practice that patients meet first. Our medical website maintenance plan covers the platforms we build, with a written scope and a monthly report. If your site was built elsewhere and you are not sure what shape it is in, the medical website audit is the honest first step: it tells you whether to maintain it as it is or rebuild, and the report is yours either way.
To check the most common failures yourself first, read the ten signs your website is losing patients.
Frequently asked questions
Does a small practice website really need maintenance?
Yes, and the smaller the practice, the more it matters, because nobody on staff is watching. Software updates, certificate renewals, forms that stop delivering and hours that drift out of date all happen whether or not anyone is looking. Maintenance is the person who is looking.
What counts as a content update?
The routine changes of a living practice: hours, a new provider, an updated insurance list, a new page for a service you added, photos, an announcement. Larger builds, such as a new section or a redesign, are quoted separately, and a good plan tells you the line before you cross it.
Can a maintenance plan cover a site another company built?
Some providers will take on any site. We maintain what we build or rebuild, because we can only stand behind a foundation we know. If your site was built elsewhere, an honest first step is an audit that tells you whether it is worth maintaining as it is or rebuilding.
What happens if I cancel?
With a fair plan, nothing bad: the site, the domain and the content are yours and stay yours. If a provider cannot answer this question plainly, that is the answer.
Article written by
Roger de Oca
Web designer, developer, and founder of DEOCAs. Roger builds and maintains web platforms for physicians and medical organizations, including the 2025-2026 president of a national medical society, and writes about what actually works for practices online.
This article is general information for physicians and practice managers, not legal, medical or financial advice. Rules and prices change; confirm anything that affects your practice with your own advisors.
Keep reading
Ready for a website that works as hard as you do?
We design, build, and maintain web platforms exclusively for physicians and healthcare institutions.