Website care plans in South Africa: what should be in yours (and what is a rip-off)

Website care plans in South Africa cost between R500 and R5,000 per month, and the gap between what good ones include and what cheap ones charge for is huge. A R500 plan that just runs auto-updates is barely worth the invoice. A R3,500 plan with proactive monitoring, security, backups, performance work, and an hour or two of actual development time is one of the better-value monthly costs you carry. This post breaks down what should be in your care plan based on your platform, what you should never pay for, and how to spot when you are being charged for things that come free with the platform.
What is a website care plan and do you actually need one?
A website care plan is a monthly retainer for keeping your website running properly: security patches, backups, uptime monitoring, plugin or app updates, performance checks, and a budget of hours for small changes. Whether you need one depends almost entirely on which platform you are on.
If your site is on WordPress, yes, you need a care plan, full stop. WordPress sites are constantly targeted by automated bots looking for outdated plugins and themes. Unpatched WordPress is the number one source of "my site got hacked" calls in South Africa. The plan does not have to be expensive, but it has to exist.
If your site is on Shopify or Webflow, you do not strictly need a care plan, because the platform handles hosting, security patches, uptime, and SSL automatically. What you might need is a development retainer: a block of monthly hours for changes, new pages, integrations, and small features. Different name, different value.
What should be in a website care plan?
A proper SA website care plan includes uptime monitoring, weekly backups, security patches, performance checks, an SSL certificate, and a defined block of development hours for small changes. Anything less is just hosting with extra steps. Anything that promises "unlimited everything" is misleading.
The non-negotiable items, regardless of platform:
| Item | Why it matters |
|---|---|
| Uptime monitoring | You should know your site is down before your customers tell you |
| Off-site backups (weekly minimum) | If something corrupts your live site, restoration must be possible |
| Security patches and updates | Outdated software is the entry point for nearly all SA website hacks |
| Performance monitoring | Speed degrades over time. Someone has to be watching |
| SSL certificate management | Expired SSL kills trust and rankings instantly |
| Development hour budget | 1 to 5 hours per month for content edits, small features, fixes |
| Monthly reporting | What was patched, what was changed, what was monitored |
A plan that includes those seven items, with the development hours clearly defined, is worth what you pay for it. A plan that bundles vague promises and no clear hour allocation is hiding what you are actually getting.
SA website care plan pricing: what you should expect to pay
SA care plan pricing breaks into three tiers based on the work involved.
| Tier | Monthly cost | What you should get |
|---|---|---|
| Basic | R500 to R1,500 | Hosting (if applicable), uptime monitoring, weekly backups, security updates, 1 to 2 hours of dev time |
| Mid | R1,500 to R3,500 | All of basic plus performance optimisation, monthly reporting, 3 to 5 hours of dev time, priority response |
| Comprehensive | R3,500 to R8,000+ | All of mid plus proactive CRO work, content updates, SEO monitoring, 6 to 10+ hours of dev time, priority SLA |
The Symaxx Digital and Procompare SA benchmarks confirm these ranges, with most SA agency retainers landing in the R500 to R5,000 band (Procompare SA, 2026). E-commerce sites typically cost more to maintain than brochure sites because of the additional integrations, payment gateways, and inventory systems involved.
If a SA agency is quoting you R8,000+ per month for a small business website with no e-commerce, ask what specifically is included in those hours. The cost might be justified, but you should know what you are paying for.
Care plan red flags: what you should never pay for
The patterns we see when reviewing SA care plans for prospects, where the agency is charging for things that should not be billable:
- Platform fees marked up. Hosting that costs the agency R200 billed to you at R800 is not a service, it is a margin. Pay the platform directly.
- "Unlimited support" or "unlimited changes". No agency genuinely offers unlimited work. What this actually means is they cap your changes informally and you never know when you have hit the limit.
- SSL certificates as a paid add-on. SSL has been free since Let's Encrypt launched in 2014. Shopify, Webflow, and most modern hosting providers include it. Paying R500 per year for SSL is paying for nothing.
- "SEO included" with no specifics. If the plan says SEO is included but cannot tell you what tasks are done each month, that line item is filler.
- Plugin licences charged separately each time. Plugin licences are a once-off business cost. Repeated invoices for the same plugin is double-billing.
- Long lock-in contracts. A good care plan is month-to-month or 30 days notice. Twelve-month contracts protect the agency, not you.
The biggest red flag of all is no clear definition of what is included. If the proposal is two paragraphs of vague "we keep your site healthy and secure", request a specific scope. If they cannot give one, they do not have one.
What care looks like by platform
Different platforms need different care work. Paying for things your platform already does for free is the most common waste in SA care plans.
Shopify care plans
Shopify handles hosting, security, SSL, PCI compliance, and platform updates automatically. You do not need to pay anyone for those. What you might need:
- App management (which apps are installed, are they still needed, are they slowing the site)
- Theme customisations and small layout changes
- Product page improvements and CRO work
- Integration maintenance (PayFast, Peach Payments, Bob Go, Postmark, etc.)
- Performance monitoring as apps and theme code accumulate
A reasonable Shopify retainer in SA runs R1,500 to R4,000 per month depending on store complexity and how much development time is included.
Webflow care plans
Webflow also handles hosting, SSL, and platform updates. The work you might need on a Webflow site:
- CMS content updates if your team is not comfortable in Webflow
- New page builds and template work
- Custom code maintenance (anything you added beyond Webflow's native features)
- SEO updates and schema management
- Integration maintenance (forms, CRM, analytics)
A Webflow retainer in SA typically runs R1,500 to R5,000 per month. We cover Webflow specifically in our breakdown of Webflow vs WordPress for SA businesses.
WordPress care plans
WordPress needs the most work because the platform is open-source and updates do not happen automatically. A proper WordPress care plan must include:
- WordPress core, theme, and plugin updates (weekly)
- Security scanning and malware monitoring
- Database optimisation
- Off-site backups (Cloudflare, S3, or similar)
- Uptime monitoring
- A defined block of development hours
WordPress care in SA runs R800 to R5,000 per month. The lower end is risky for any site doing actual business. R2,000 to R3,500 is a reasonable mid-point for a small business site.
WooCommerce or other custom builds
Anything custom (PHP, Laravel, Django, a bespoke React build) needs care from a developer who knows that stack. Generic agency care plans usually cannot service custom builds properly. Budget more, typically R3,500 to R10,000+ per month depending on the build.
What we include in LaunchLlama's Care plan
For transparency, here is what we put in the Care service for Shopify and Webflow clients:
- Weekly off-site backups stored independently of the platform
- Uptime monitoring with notification before you notice an issue
- Monthly performance audit (Core Web Vitals, page speed, mobile usability)
- Monthly security and integration check
- 2 to 5 hours of development time per month (tier-dependent) for changes, new pages, CRO work
- Monthly written report showing what was monitored, what was changed, and what we recommend next
We do not charge for SSL, platform fees, or things the platform already includes. If you want to see exactly what your current care plan should be doing, ask your provider for a written scope and compare it against the table above.
How to switch care plans without losing your site
The biggest risk in switching care providers is losing access to your hosting, domain, or critical accounts. Before you cancel anything, run through this checklist:
- Confirm you own the domain. Log in to the registrar (Domains.co.za, Truehost, Afrihost, xneelo) and check that your name is the registrant, not your previous agency. If it is not, transfer it before cancelling.
- Get admin access to every platform: hosting, CMS, payment gateway, analytics, email marketing, ad accounts.
- Export backups of your site and database before switching.
- Confirm DNS access. If your previous provider controls your DNS, you cannot move email or hosting until that is transferred.
- Keep your existing care plan active for 30 days while you confirm the new one is working.
We cover the full domain ownership and DNS picture in our breakdown of hosting and domains for SA founders.
Not sure if your site is working?
Get a free audit and find out exactly what to fix.
Built by founders, for founders
LaunchLlama works with South African founders who are serious about growth. We build the site. We run the ads. We handle
More from growth
Discover what's working for other founders building in South Africa.
Ready to launch properly? Let's talk.
Whether you're starting from scratch or fixing what's broken, we'll build the site and the growth engine behind it.




.png)























