White-label website support and maintenance
Selling a care plan is straightforward. Running one is a rota, an inbox and a person on call. We run it under your brand, so you keep the recurring revenue and your client keeps escalating to you.
The care plan problem
Most agencies sell maintenance because clients ask for it and because recurring revenue smooths a project business. Then it becomes the thing nobody has time for.
Updates get deferred until an update breaks something. A plugin vulnerability is disclosed on a Friday. A site your agency built in 2021, for a client you barely speak to any more, goes down — and it is still your name on it.
The work is real, it is unpredictable, and it does not fit around project delivery. It also cannot be given to a junior, because the moments when it matters are the moments when it is hardest.
This service is that rota, run by us, invoiced to you, and presented as yours.
What the agreement covers
Updates
WordPress core, plugins, themes and dependencies, applied on a schedule rather than when something forces it. Updates are staged and checked before they reach production, because the risk in an update is not the update — it is the plugin interaction nobody tested. Where an update carries a cost, for example a paid extension changing its licensing, you hear about it before it is applied.
Monitoring and backups
Uptime and certificate monitoring, error monitoring, and scheduled off-site backups with restores that have actually been tested. An untested backup is a belief, not a backup.
Fixes and small changes
The steady flow of small work every live site generates: a broken form, a layout that fails on a new browser version, a content change your client’s team cannot do themselves, a redirect after a page is retired. Requests come from you, in a defined channel, and come back done.
Reporting
A regular written report per site, in your format and under your brand, covering what was updated, what was fixed and anything that needs a decision. It is designed to be forwarded to your client without editing, because that is what makes a care plan feel like a service rather than an invoice.
How your client experiences it
They experience their agency having a support process. That is the entire intent.
Requests reach us through you, in one defined channel. Reports arrive under your brand. Nothing in the stack, the email or the reporting carries our name, and we do not approach your client. If you want us in a technical call during an incident, you put us in it — introduced however you choose.
Rescue work
Available as one-off work as well as under an agreement, and often the first thing an agency asks us for.
Hacked sites.Identifying the entry point, removing the injected code and backdoors, closing the vulnerability, restoring clean content, and dealing with the aftermath — blacklist removal, search-console warnings, and the client-facing summary of what happened and what changed.
Inherited sites.A site your agency did not build, from a developer who has gone quiet, with no documentation and no repository. We audit it and give you a written assessment: what is safe, what is fragile, what has to be replaced, and roughly what each option costs. That is the document you need to have the conversation with your client.
Sites that broke after an update.Diagnosis first. Restoring a backup and hoping is how the same failure returns in a fortnight.
An incident on a client’s site is a trust event for your agency, not a technical one. It is the moment your client decides whether you are in control. We work to make the answer yes, and to make the explanation something you can send on.
Performance work
Core Web Vitals audits and remediation, and the honest version of what that involves.
A performance report is easy to produce and easy to sell. Actually improving Largest Contentful Paint on a real site usually means image and font strategy, a caching layer that handles logged-in and cart states correctly, removing render-blocking third-party scripts your client’s marketing team added, and sometimes fixing database queries that only degrade at production data volume.
We work from the site, not from a score. You get a prioritised list with the effort and expected impact of each item, so you can decide what is worth billing your client for and what is not.
Sites we can support
WordPress and WooCommerce sites, whether we built them or not. Nuxt, Vue and static front ends. Sites hosted anywhere we can be given proper access.
Two conditions, stated up front because they are the two that cause difficulty later:
Access must be real.Hosting, DNS, repository, admin. Support without access is guesswork billed by the hour.
Some sites need work before they can be supported.A site with no version control, an unsupported PHP version or an abandoned commercial theme is not maintainable in its current state. We will scope that remediation separately and tell you honestly whether it is worth doing.
Response commitments
Response times, coverage hours and escalation are published in full.
Questions agencies ask
Can we resell this to our clients as our own care plan?
Yes. That is what it is for. We invoice you, you set your own price and terms with your client, and everything your client sees carries your brand.
Do you support sites we did not build?
Yes, subject to an audit first. We will tell you before you commit whether the site is supportable as it stands.
What counts as covered, and what gets quoted separately?
Updates, monitoring, backups and small fixes are covered. New features, redesigns and anything that changes what the site does are quoted as work. The boundary is written into the agreement rather than negotiated per ticket, because per-ticket negotiation is what makes care plans unprofitable for both sides.
Who talks to our client?
You do. Requests come from you and reports go to you. We do not approach your client.
Can we start with one site?
Yes. Most agencies do, usually the one currently causing the most trouble.
Book a partner call
Bring the site you are most worried about. That is usually the one that decides whether this is worth doing.