WORDPRESS · UPDATE AND SECURE
Type your address below and you will see the actual price, and why it is that price. No form, no call, no "prices from".
We read what your site already shows every visitor. You get the findings and the questions to ask about them, free, whether you ever speak to us or not. Nothing is probed, nothing is stored, and no email address is asked for.
This is the same information your browser is sent when it loads your home page.
Which one you are in comes from what your site is, not from how long a conversation takes.
Band 1
£75
2 to 3 working days
A brochure or business site with a tidy plugin list and nothing taking payment.
Band 2
£225
3 to 5 working days
A working site: a shop, a members area, or a fuller plugin stack that needs testing properly afterwards.
Band 3
£600
5 to 10 working days
A large plugin stack, a shop with a lot bolted on, or a site several major versions behind.
A site this far back needs looking at before anybody quotes. Often the hosting has to move first, and sometimes rebuilding costs less than dragging it forward. We look first, tell you honestly whether updating or rebuilding is cheaper, and price whichever you choose before any work starts.
Because updating can break things, and everybody knows it. Pretending otherwise would be the least convincing thing on this page, so here is what we do about it instead.
Taken and verified before anything is touched. An untested backup is a belief, not a backup.
Where your hosting allows it, the work happens on a copy and goes live once it is proven, rather than being done live and hoped over.
If something cannot be fixed, we put it back as it was and tell you why. You are no worse off than you were this morning.
This is the part worth being straight about. A site three years behind is often running perfectly. The difficulty is that bringing WordPress current means bringing three years of plugin and theme releases with it, and that will change how some things look and behave.
That is not a reason to leave it: an unpatched WordPress is the most commonly compromised thing on the web. It is a reason to test against the old site and take the decisions with you rather than for you, which is why sites that far back land in a higher band, or in no band at all.
Two things, and neither needs anybody technical.
Everything else is ours. You get a written report at the end saying what was updated, what was removed and why, and anything still worth doing that was not part of this.
We do see it. A WordPress site tells every visitor which plugins it loads, which theme it uses, and usually which version it runs, because that is in the page your browser is sent. We read that, exactly as a browser does. We do not probe anything, test anything, or try to log in to anything.
It can, which is exactly why yours has probably not been updated in a while. So: backup first and checked, work on a copy where your hosting allows, and a rollback if anything cannot be fixed. You end up either up to date or exactly where you started.
No. A temporary WordPress administrator account is enough for the update itself.
It happens, and the check above will often spot it before you ask: a lot of servers announce their PHP version to every visitor. If yours is on a version that stopped getting security fixes, current WordPress may not run on it at all.
That is worth knowing for a bigger reason than this job. A host still serving PHP 7 in 2026 has not patched anything else either, so the insecurity is underneath your site rather than in it, and updating WordPress on top of it only fixes half the problem. We run our own servers and can move you, managed, as a separate priced job. We will tell you either way rather than quietly working around it.
Usually, but not at a fixed price sight unseen. Below WordPress 6 the hosting often has to move before WordPress can be updated at all, and some plugins no longer exist to update to. We look first and then price it, and if rebuilding is cheaper we will say so.
We stop, tell you exactly what we found, and quote for that separately. Cleaning a compromised site is a different and bigger job, and folding it into a fixed price would be bad for both of us.
Not as a monthly plan yet. For now this is a single job you can repeat whenever you want, with no retainer and nothing to cancel. If you would like reminding when it is drifting again, say so and we will.
Run the check above, or take the free questionnaire. Twelve questions, an honest answer, and most people are told to stay exactly where they are.
Have you outgrown WordPress? Get a price