Get The Scoop on Our Frequently Asked Questions

Once you’ve signed up for a support plan, we’ll ask you to securely share:

• Your WordPress admin credentials

• File access (FTP or cPanel) via LastPass

This allows us to safely connect to your site and set up key services like security monitoring, backups, and plugin updates.

If your site includes custom-built plugins, we’ll also ask for a quick heads-up—so we can be extra cautious before making any updates.

Your credentials are stored securely and only accessed by our internal team. We take your trust seriously.

For most routine updates, we apply them directly to the live site—safely and carefully.

However, if your site hasn’t been updated in a long time or there’s a major update (like a big theme, plugin, or WordPress core release), we’ll first test everything on a staging site.

Once you review and approve it, we’ll push the updates live. That way, there are no surprises—and no downtime.

Multisite and multi-network setups aren’t included in our standard Care Plan add-on.

That said, we’re happy to help—you’ll just need to reach out so we can fully understand your setup first. These configurations often require a more custom approach.

Drop us a message at hello@expresswp.co, and we’ll walk you through the next steps for getting your multisite maintained properly.

If you’re on an active Care Plan, your site is continuously monitored using BlogVault’s malware scanner. Our tech team manually reviews any alerts to filter out false positives and catch real threats fast.

If we detect a security issue, it becomes our top priority—jumping ahead of any regular tasks. We aim to respond and begin mitigation immediately during business hours.

In most cases, we can resolve the issue using automated tools. If manual cleanup is needed:

• We’ll use your monthly 30-minute allocation for basic manual work

• If the infection is more complex, we’ll recommend using your development support hours or upgrading to a plan that includes more cleanup time

We always take a full site backup before making changes, and if anything breaks—we’ll help restore or fix it.

Security is serious. We treat it that way, so you don’t have to stress.

All of your support plans are grouped under one simple monthly subscription.

You’ll be billed on the same date each month, starting from the day you first signed up. The total charge will reflect all active plans you’ve subscribed to.

Need to check your plans? Just head over to the “Manage Subscriptions” section in our project management tool to view or update everything in one place.

Yes! All reports are fully white-labeled with your agency’s logo and name—so they look like they came straight from your team.

Our reports cover key areas like:

• Backups

• Security

• Performance

• Uptime monitoring

Perfect for sending to clients and showcasing the value you’re delivering.

Yes—if you’d like, we can provide your clients with access to our white-label project management tool.

They’ll be able to submit tasks and requests directly, without ever seeing or interacting with our team. Everything appears under your agency’s name.

You can choose how visible our task comments are:

• Keep our updates private (and copy-paste them to your clients), or

• Let clients see progress directly within the portal—it’s totally up to you.

Either way, you stay in full control of the relationship. We’re just quietly working in the background.

Not at all! We can work with any hosting provider.

That said, for sites hosted on AWS, Pantheon, Azure, or Google Cloud, there’s an additional $15/month due to the extra configuration and complexity involved.

Also, while we’ll do our best with any setup, please note:

Shared hosting can limit what we can achieve in terms of speed, security, and performance—so if you’re aiming for top-tier results, we may recommend better hosting options.

We run automatic daily backups of your website—so you’re always covered.

We keep a 90-day backup history, which means you can restore your site to any point in the past three months if needed. Peace of mind, built right in.

Generally, we expect sites to be up to 5GB in size—but if your site is larger, no worries. Just let us know!

As long as it’s fair use, we’re happy to make exceptions at no extra cost. In fact, we already support clients with sites over 6GB.

We also use incremental backups, which means only the changed files are backed up each time—keeping things efficient and reliable without using unnecessary storage.

No—backups are not taken in real time. We run backups on a fixed daily schedule, so your site is safely backed up once every 24 hours.

We don’t directly scan for SQL or JavaScript injections at the code level.

However, we do work at the IP level, which means we use firewall and security tools to block suspicious traffic and known threats before they can reach your site.

For deeper protection like code-level scanning or firewall rules, we can help recommend and configure additional tools based on your site’s setup.

While no one can guarantee 100% protection, we do everything in our power to keep your site safe.

We use tools like:

• Firewalls to block malicious traffic

• Login protection to prevent brute force attacks

• Regular monitoring for suspicious activity

If something ever does go wrong, we’ll be there right away to help investigate, clean it up, and restore your site with backups. Your security is our priority.

Yes! At ExpressWP, we use premium malware scanning via WPRemote.

• Your site is automatically scanned every 24 hours

• We scan both site files and the database

• Need a quick check? You can also request an on-demand scan anytime by submitting a task

We keep a close eye so you don’t have to worry.

We use trusted premium tools like MalCare and the pro version of iThemes Security to protect your site from most known threats and vulnerabilities.

That said, no firewall can catch everything—especially if plugins or themes are outdated. That’s why we strongly recommend keeping your WordPress core, plugins, and themes fully updated at all times (which we handle under our care plans).

Our setup goes a long way in blocking common attacks, and if anything slips through, we’re on it fast.

We back up your entire WordPress site—incrementally and completely—including:

• ✅ All posts, pages, images, themes, and uploads

• ✅ Full database (content, settings, configurations)

• ✅ All core WordPress folders: wp-content, wp-includes, and wp-admin

To keep backups clean and efficient, we exclude:

• Temporary cache files

• Log files

• Backups created by other plugins

These files aren’t needed and can cause issues during restoration, so we leave them out to ensure your site can be restored quickly and safely.

We store a rolling history of backups for the past 90 days. That means you can restore your site to any version from the last three months—whenever you need to.

Every website is different, depending on the number of pages, complexity of the design, third party integrations, custom theme vs. using page builders, and functionalities outside of WordPress core. We have dedicated testers in our team who test work before delivery, which also adds to the timeline. We can only give ballpark estimates from our experience.

• You can get two landing pages developed in one week of a starter plan.

• Typically a five unique template page website takes 3 weeks on our Pro package.

• Custom designed sites with a custom theme and custom field (ACFPro) typically takes 3 weeks on our Business plan.

We aim to keep things simple and fair—but yes, larger or more complex websites may have small additional charges.

Here’s how it works:

Unique Page Count

Our Care Plan includes up to 40 unique page templates per site.

A “unique page” means a distinct layout or design—not just a different copy on the same template. For example:

• A blog article page = 1 unique page

• Ten service pages using the same layout = still 1 unique page

We review one version of each unique page after updates to make sure nothing breaks.

Need more? It’s just $5/month for every additional 10 unique pages.

ECommerce,Membership, or LMS Sites

Sites with user logins, orders, memberships, or learning systems typically involve more plugins, custom logic, and QA time.

These sites are audited individually. Based on complexity, we may apply a modest additional fee of $15–$30/month.

🚫 What’s Not Supported:

• HIPAA-compliant websites

• WordPress Multisite / Multi-network setups

We’ll always review your site first and let you know if any extra costs apply—no surprises.

In addition to regular maintenance, you get 30 minutes of development time each month as part of your Care Plan. You can use it for small tasks like:

• Restoring your site from a backup

• Quick copy or content edits

• Basic site cleanup

• Troubleshooting issues

• Fixing minor bugs or errors

It’s a great way to keep your site polished without dipping into your main support hours.

On-Page SEO Audit

We check for:

• Missing or duplicate meta titles & descriptions

• Image optimization issues (missing alt tags, large files)

• Heading structure problems (H1, H2, etc.)

• Broken links

• robots.txt misconfigurations

• Schema and structured data opportunities

• Content structure issues impacting SEO

Core Web Vitals Audit

We analyze:

• Site speed & load time bottlenecks

• Render-blocking scripts & large assets

• Performance issues affecting Google’s Core Web Vitals

• Opportunities to improve LCP, FID, and CLS scores

This helps you stay ahead of issues and show measurable improvements to your clients—month after month.

Yes—we’re happy to adapt.

While we have our own proven SOPs and workflows designed for efficiency and quality, we’re also flexible. If your agency has specific processes or tools you’d like us to follow, we’ll make sure our team integrates with your way of working.

Our goal is to blend seamlessly into your systems, not disrupt them.

No problem! If you need more support beyond what’s included in your Care Plan, you can request additional help through our Starter Development Package.

This package gives you access to daily development support, and you can use the time across multiple websites—perfect for agencies managing several client sites.

What can we help with?

• Full or partial new site builds

• Custom theme or plugin tweaks

• ACF & custom field setup

• Bug fixing & troubleshooting

• Speed optimization & performance fixes

• Page builder layout fixes (Elementor, Bricks, etc.)

• Styling tweaks (CSS, responsiveness)

• Minor WooCommerce customizations

• Content population & layout formatting

• WordPress version or plugin conflict resolution

You get a team that works as an extension of yours—with clean communication, fast turnarounds, and expert WordPress support every step of the way.