The boring kind of WordPress work — that pays your retainer.
Updates, backups, security, speed, monthly reports. The unglamorous work most agency owners hate doing themselves but resell at 60-80% margins. We handle it under your brand, you keep the margin.
The four things every WordPress site needs ongoing. Done in a quiet rhythm so your client never thinks about it — until they get the monthly report with your agency's logo on it.
Core, theme, plugin updates
WordPress core, plugins, themes — all updated weekly on staging, tested, then pushed to production. No "auto-update broke our site" surprises. Updates that affect functionality get flagged for your review before going live.
Backups, security, malware cleanup
Daily backups (30 days retained), weekly security scans, malware monitoring, login hardening, 2FA enforcement, brute-force protection. If something gets compromised, we clean it and write up what happened — usually within 4 hours.
Core Web Vitals & speed optimisation
Quarterly Core Web Vitals audit + ongoing speed monitoring. Image optimisation, lazy loading, caching strategy, CDN configuration, render-blocking JS removal — bringing slow sites back under 2.5s LCP, keeping fast sites fast.
White-label monthly care reports
PDF + dashboard format, branded with your agency's logo and colours, sent on the 1st of every month. What we updated, security status, performance metrics, uptime, recommendations. Your client opens it and thinks "good, I'm getting value."
Three real care-plan situations from the last quarter, names omitted.
"Hacked over a long weekend. Site down."
A US agency's client site got hit Saturday night with a malware injection through an unpatched plugin. The agency's freelancer was on holiday. We took the call, isolated the infection within 2 hours, restored from clean backup, patched the entry plugin, did a full security audit. Client never even noticed downtime.
"40 clients on retainer, manual updates eating our time."
A UK marketing agency had 40 client sites under monthly retainer that they were manually updating in-house — 25+ hours/week of pure operational drudgery. We took over the entire portfolio, kept their PM as the client face, dropped their internal update overhead to ~2 hours/week.
"Client's CWV is failing on Search Console."
An Australian SEO agency had a client whose Core Web Vitals were red across Search Console. Largest Contentful Paint at 4.8s, mobile speed score 31. We did a 12-hour speed sprint — image overhaul, JS deferral, cache config, CDN setup. CWV passed, mobile speed hit 87 within 2 weeks. Rankings stabilised.
Your client only ever sees your agency.
Three rules we hold to on every engagement.
Co-branded reports.
Your agency's logo, your colours, your typography. The monthly PDF says "Prepared by [Your Agency]" — not us. Your client never sees our brand.
Your support email handles tickets.
Client emails support@youragency.com → comes to your team → ticket forwarded to us via Slack/PM tool. We respond, you relay. Or set up a shared inbox where we draft, you send.
Quiet rhythm, good margins.
Most agencies sell care plans at $99-499/mo per client. Our work behind the scenes typically costs $40-120/mo per site at the retainer level. The margin is your agency's.
What we actually build with.
We don't pick the stack. You do. Here's what we've shipped enough of to be fluent in.
Update & backup
- ManageWP / MainWP
- WP Migrate Pro for staging
- UpdraftPlus / BackupBuddy
- Visual regression (Percy)
- Custom WP-CLI scripts
Security
- Wordfence Premium
- Sucuri firewall
- iThemes Security Pro
- 2FA enforcement
- Cloudflare WAF
Speed & CWV
- WP Rocket
- Cloudflare APO
- ShortPixel / Imagify
- Perfmatters
- Real CWV monitoring
Reports & monitoring
- UptimeRobot 1-min checks
- Custom branded PDF reports
- Live status dashboards
- Search Console integration
- Auto-send on the 1st
Flat monthly plans. No contracts. No setup fees.
Pick the plan that matches your pipeline. Upgrade, downgrade, or pause anytime.
- Dedicated PM
- Unlimited tasks & projects
- New site development
- Site maintenance & updates
- On-page technical SEO setup
- Speed optimization
- Pre-sales scoping support
- Internal QA on every deliverable
- 24–48 hr turnaround
- Everything in Lite, plus:
- Real-time Slack channel
- Weekly PM sync calls
- Use of your own PM tool (ClickUp, Asana, Teamwork…)
- Priority queue for urgent client tasks
- Monthly delivery report
- Everything in Pro, plus:
- Higher capacity for large or custom builds
- Dedicated senior developer time
- Quarterly architecture reviews
- Bring your own SOPs — we'll work inside them
Not sure which plan fits? Book a partner call and we'll size it based on your actual pipeline.
Things agencies ask first.
What's the response time if a site goes down or gets hacked?
How many sites can fit on each retainer tier?
What if a client wants something not on the standard care list?
Can we customise the monthly care report further?
Do you handle WordPress emergency calls outside business hours?
Stop doing care plans on Sunday nights. Resell them instead.
30-minute partner call. Bring your current care portfolio. We'll size the retainer that takes the burden off your team and keeps your margin intact.
Here's what happens next
-
1
You book a 30-min callPipeline review, honest fit checkThis week
-
2
NDA signedYours or ours, before kickoffSame day
-
3
Plan picked, PM assignedIn your Slack / ClickUp / AsanaWithin 24 hrs
-
4
First ticket shippedUnder your brandWithin 48 hrs