What Happens If You Don’t Maintain Your Website?

Nothing. That is the honest answer for the first few months, and it is the reason this question is worth asking before the answer changes. Neglect on a website is not visible until it is very visible, and the order in which things go wrong is remarkably consistent.

What follows is that order. Not a worst case, and not a scare story with invented statistics, but the sequence we actually see on sites that have been left alone for a year or more. If you want the preventive side instead, start with what website maintenance actually covers.

Month One to Three: Nothing You Can See

Update notices accumulate in the dashboard. A plugin author ships a security patch you do not apply. Your backup plugin, if you have one, either keeps running or quietly stops, and nobody looks either way.

Everything on the front end looks perfect, which is the whole problem. The site is not degrading in appearance. It is degrading in exposure, and exposure is invisible right up to the moment it is exploited.

Month Three to Six: The First Silent Failure

This is where it usually starts, and it is almost always one of two things.

The contact form stops sending. An update changes how mail is handled, or a spam filter starts swallowing submissions, and the form keeps showing its cheerful thank-you message to every visitor. You do not get fewer inquiries in a way you notice. You get none, and you assume the market went quiet.

The backup stops running. A credential expires, a storage account fills, a plugin update changes a setting. The dashboard may even keep saying it succeeded. You will find out on the day you need it, which is the worst possible day to find out.

Neither of these announces itself. Both are caught in the first month by a plan that tests forms and verifies backups, and both are the reason those two checks matter more than anything else on a maintenance list.

Month Six to Twelve: Search Performance Slides

By now the site is measurably slower than it was, because plugins accumulate and images do not get lighter on their own. Links to other people’s pages have started to rot as those pages move. Internal links break as somebody renames a page. Crawl errors build up.

None of that is a penalty. Google is not punishing you. It is measuring you, and you are measuring worse. The result is a slow slide rather than a drop: a place or two a month, which is invisible week to week and obvious over a year.

The cruel part is that by the time you notice the traffic, the cause is a year of small unrecorded changes, which makes it far more expensive to diagnose than it would have been to prevent.

The Update Debt Becomes Its Own Problem

Here is the trap that catches people who decide to catch up.

Updates that were routine individually become risky as a batch. Twelve months of deferred plugin updates applied in one afternoon means twelve possible breakages arriving at once, with no way to tell which one caused the layout to collapse. Some plugins will have had breaking changes between versions. Some will no longer be compatible with the PHP version your host has moved to. One may have been abandoned by its author entirely, which is a replacement job rather than an update.

This is why the first month on a neglected site is cleanup rather than maintenance, and why it costs more than a normal month. You are not paying for updates. You are paying for the archaeology.

Any Time: The Security Event

This one does not follow the timeline. It can happen in month two or month twenty, and it does not depend on your size or your industry.

When a vulnerability in a widely used plugin is disclosed, the disclosure is public. That is how responsible owners know to patch, and it is also a shopping list. Automated scanners begin walking the web for sites still running the vulnerable version within hours. Your site is not chosen. It is found.

What follows is not one problem. It is malware in your theme files, spam pages appearing in search results under your domain, possible blocklisting by Google so that visitors get a warning instead of your homepage, and in some cases suspension by your host. Each of those is a separate job with its own timeline, and the reputational part is not something you can buy back.

What It Costs to Come Back

The recovery cost is not the mirror image of the prevention cost. It is a different order of magnitude, for a simple reason: prevention is scheduled and cleanup is urgent.

Every row down that table is more expensive than the row above it, and the thing that moves you down the table is time rather than bad luck.

The Costs That Never Appear on an Invoice

The invoiced cost of neglect is the smaller half. The rest never gets recorded anywhere.

The inquiries that went into a broken form are the clearest example. You will never know their value, because you never met the people who sent them. The same is true of the visitors who left because a page took six seconds on a phone, and the ones who saw a browser warning about an expired certificate and decided your business looked unsafe.

And there is the trust cost of an obviously unattended site: prices from two years ago, a copyright date stuck in the past, a team page with people who left. Nobody writes to tell you. They just quietly conclude that if the website is not looked after, the rest of the operation might not be either.

How to Tell Where Your Site Is on This Timeline

You can place your own site in about ten minutes, without any tools.

• Send yourself a message through your own contact form, then check that it arrived in the inbox it is supposed to reach.
• Find out where your last backup is stored, and whether it is on the same server as the site.
• Open your site on your phone on mobile data rather than office wifi, and count the seconds.
• Look at the footer copyright year and your pricing page for anything out of date.
• Check the dashboard for how many updates are waiting and how old the oldest one is.

There are twelve of these signals worth working through, and once you know where you stand, the frequency each task actually needs tells you what the schedule should be.

If more than one of those comes back badly, you are further along the timeline than you thought. The money case for fixing that is set out separately, with the eleven specific failures and what each one costs.

Frequently Asked Questions

Where to Start

The point of the timeline above is that every stage was cheap to prevent and got more expensive to fix. Nothing on it is dramatic. It is all ordinary, and it is all avoidable with a schedule somebody keeps to.

If you would rather know than guess, ask us to look at your site. We will tell you where it sits on this timeline and what the first month would involve, before you commit to anything.