Your Maintenance Routine

A WordPress site needs regular upkeep. For a typical small business site, that’s around 15 to 30 minutes a week and 1 to 2 hours a month. Kinsta does many of these tasks for you automatically. This page shows what’s already handled, what’s left for you, and which Kinsta tool makes each job quicker.

Every day: Kinsta handles this for you

You don’t need to do anything here, as long as notifications are turned on so you hear when something needs attention.

  • Check your site is up: Uptime monitoring checks every 3 minutes and emails you about errors.
  • Back up your site: Automatic daily backups, kept for 14 to 30 days depending on your plan.
  • Scan for vulnerable plugins and themes: MyKinsta scans every plugin and theme daily and flags known vulnerabilities.
  • Block exploits of known vulnerabilities: Vulnerability protection blocks attacks on your plugins, themes, and WordPress version, even before a fix is out.
  • Block attacks: Cloudflare’s firewall, DDoS protection, and bot protection.
  • Update plugins and themes: Done daily for you with Kinsta Automatic Updates, if you add it.

Every week: about 15 to 30 minutes

Updates matter most. In 2025, 11,334 new WordPress vulnerabilities were reported, and 91% of them were in plugins. Almost half had no fix available when they became public. Kinsta’s vulnerability protection blocks known exploits during that gap, but only an update fixes the code, so apply fixes as soon as they appear.

  • Update plugins and themes, or check what was updated for you: Update from Plugins and themes in MyKinsta, or review the Automatic Updates log and its before-and-after screenshots.
  • Act on vulnerability alerts: Vulnerable plugins and themes are flagged in MyKinsta.
  • Test the forms, bookings, or checkout that bring in business: No tool needed; submit a test enquiry or order yourself.
  • Clear spam comments and suspicious new users: Done in WordPress. If spam is constant, raise your bot protection level.
  • Look into any alerts you received: Server logs in MyKinsta show what happened and when.

Every month: about 1 to 2 hours

  • Update WordPress core: Test major releases on your free staging environment first, then push to live.
  • Check a backup actually restores: Restore a recent backup to staging and click through it, without touching live.
  • Run a speed test and check slow pages: Compare with earlier results, then use the APM tool on any page that’s slower.
  • Check plan usage and disk space: Go to Analytics > Plan usage in MyKinsta.
  • Review bot traffic: See the Top traffic report under Bot protection.
  • Clean up the database: Remove old revisions, spam, and expired data with WP-CLI or a cleanup plugin. Take a backup first.

Every quarter

  • Review who has access: Check MyKinsta users in User Management and WordPress accounts with the WordPress Users tool. Remove anyone who no longer needs access.
  • Delete plugins and themes you don’t use: Check which are inactive under Plugins and Themes in MyKinsta, then delete them from your WordPress dashboard or with WP-CLI. Inactive plugins can still be exploited, so delete rather than just deactivate.
  • Test your full checkout or sign-up journey: Run through it on staging so test orders don’t reach your live store.
  • Review traffic trends: Use Analytics in MyKinsta, alongside your own analytics tool.
  • Review bot protection settings and exceptions: Remove exceptions for services you no longer use.
  • Check your PHP version: Upgrade on staging first; see Restart and Update PHP.

Every year

  • Renew your domain: Kinsta alerts you if a domain on your site has expired, but renew before that point with your registrar.
  • Check SSL certificates: Kinsta’s free SSL is managed for you. Custom certificates you uploaded need renewing yourself.
  • Check your plan still fits: Compare a year of usage with Choosing the Right Plan.
  • Remove or refresh outdated pages: Add redirects for any page you delete so visitors and search engines aren’t sent to an error.
  • Review your privacy policy and cookie consent: There’s no Kinsta tool for this; check your site still meets the rules where your visitors are.

Spend less time on maintenance

  • Let updates run themselves: Kinsta Automatic Updates installs plugin and theme updates daily. It compares screenshots of up to five key pages before and after each update, and rolls back automatically if something looks wrong. It costs $3 per environment per month after a month’s free trial.
  • Manage many sites at once: Bulk actions on the Sites page apply updates and settings to several sites in one go; see Work as a Team.
  • Make changes safely: Staging and push environments mean testing never puts your live site at risk; see Make Changes Safely.
  • Get alerted instead of checking: With notifications on, you only need to act when something goes wrong.
Was this article helpful?

© 2013 - 2026 Kinsta Inc. All rights reserved. Kinsta®, MyKinsta®, DevKinsta®, and Sevalla® are trademarks owned by Kinsta Inc.The WordPress® trademark is the intellectual property of the WordPress Foundation, and the Woo® and WooCommerce® trademarks are the intellectual property of WooCommerce, Inc. Uses of the WordPress®, Woo®, and WooCommerce® names in this website are for identification purposes only and do not imply an endorsement by WordPress Foundation or WooCommerce, Inc. Kinsta is not endorsed or owned by, or affiliated with, the WordPress Foundation or WooCommerce, Inc. Legal information