WordPress Care Plan Baseline
BEFORE YOU COMMIT TO A RETAINER, LET’S SEE WHAT YOU’RE WORKING WITH.
A one-time baseline setup covering access review, update approach, monitoring, backup strategy, security hardening, performance baseline, and a current-state technical summary. Designed for inherited or messy sites.
- Access Review
- Backup Strategy
- Performance Baseline
- Technical Summary
Ready to baseline your site?
Tell us about your WordPress environment and we’ll scope it.
Every Inherited Site Is a Black Box Until Someone Opens It
A Structured WordPress Site Assessment Changes Everything
Sucuri found that 39.1% of compromised CMS sites were running outdated core software at the time of infection. Outdated doesn’t mean neglected on purpose. It means nobody had a system. No documented update approach, no inventory of what’s installed, no clarity on who has access or what’s actually running.
The Care Plan Baseline is designed for exactly this moment. Before you sign a retainer or commit to ongoing maintenance, we document what you’re actually working with. You get a clear picture of every access point, every plugin, every configuration decision that’s been made (or avoided) so the next step forward is informed, not assumed.
- Full access and user account audit with role verification
- Plugin and theme inventory with version and status documentation
- WordPress core version assessment and update readiness check
- Current-state technical summary delivered as a reference document
You Can’t Harden What You Haven’t Mapped
Building a Real Security Baseline Starts with Visibility
In 2025, 91% of published WordPress vulnerabilities originated from plugins. Not core. Not themes. Plugins. The ones your team installs for forms, analytics, SEO, caching, and dozens of other functions. Without an inventory and a plan, every plugin is a potential blind spot that nobody is watching.
The baseline engagement includes a practical security hardening pass. We review your plugin stack, remove what’s unnecessary, configure what matters, and document the current security posture. Whether the next step is a full hardening engagement or ongoing monitoring, it starts from a known position instead of guesswork.
- Inactive plugins and default themes identified and removed
- Security plugin configuration review and adjustment
- User access tightened to least-privilege principles
- Documented security posture snapshot for ongoing reference
You Can’t Improve What You’ve Never Measured
A WordPress Performance Baseline You Can Actually Build On
Dealing with a site breach costs a minimum of $3,000 in cleanup. Preventive maintenance averages $750 a year. The math on reactive versus proactive is not complicated, but it requires knowing where you stand first. The same logic applies to performance: you can’t justify optimization spend, measure improvement, or catch regressions without a documented starting point.
We capture your site’s current performance metrics, identify the obvious bottlenecks, and give you a baseline you can measure against over time. This is not a full optimization engagement. It’s the foundation that makes optimization (and every operational decision after it) more effective and easier to prioritize.
- Core Web Vitals snapshot with page-level detail
- Server response time and TTFB measurement
- Caching configuration review and initial recommendations
- Documented performance baseline for future comparison
Everything Included
One engagement. Full visibility. A documented foundation for every WordPress decision that follows.
Access & User Review
- Full WordPress user account audit
- Role and permission review against least-privilege
- Identification of unused or orphaned accounts
- Admin access documentation
- Shared credential flagging
Update Approach
- WordPress core version assessment
- Plugin and theme version inventory
- Update sequencing recommendation
- Staging environment evaluation
- Documented update workflow for your team
Monitoring Configuration
- Uptime monitoring setup and verification
- Alert routing to the right contacts
- Monitoring tool recommendation (if none exists)
- Notification preferences configured
- Public status page evaluation
Backup Strategy
- Current backup method review
- Backup frequency recommendation
- Off-site storage verification
- Restore process documentation
- Retention policy recommendation
Security Hardening Baseline
- Security plugin review and configuration
- Inactive plugin and default theme removal
- Login hardening recommendations
- File permission review
- SSL configuration verification
Performance & Summary
- Core Web Vitals snapshot
- Server response time benchmarks
- Caching configuration review
- Current-state technical summary document
- Prioritized recommendations for next steps
How the Baseline Works
Four steps from unknown to documented. We handle the heavy lifting so your next move is clear.
Know Exactly Where Your WordPress Site Stands
$750 for a standard single-site baseline. $1,500 for complex environments or multiple sites.
Most maintenance relationships start with assumptions. This one starts with evidence. A documented baseline turns guesswork into a clear plan. Whether the next step is ongoing WordPress maintenance or a targeted fix, you’ll know exactly where to focus.
[email protected]
Ready to stop guessing about your WordPress site?