Remove malware, restore access and recover a compromised WordPress website.
● WORDPRESS CARE PLAN
A WordPress care plan built by people who recover hacked websites
A WordPress care plan is a monthly arrangement where a specialist keeps your website updated, backed up, monitored and supported. Dr Web care plans are designed around one question most plans ignore: if this website failed tomorrow, could we recover it quickly?
- Plans from $99/month, no lock-in contract
- Hack-cleanup guarantee on Business and Commerce
- Managed WordPress, theme and plugin updates
- Backups checked for real recoverability
- Firewall, virtual patching, uptime, SSL and domain-expiry monitoring
- A named path for support requests
Trusted to look after business websites since 2006.
Australian businesses of every size rely on the team behind Dr Web and Vibes Design to keep their websites running.

















What is a WordPress care plan?
A WordPress website is not finished when it launches. WordPress core, the theme and every plugin release updates, some of them for security reasons. Backups run, fail silently or fill up storage. Hosting changes PHP versions. Without someone responsible, these small tasks drift until one of them becomes an outage or a compromise.
A care plan assigns that responsibility for a fixed monthly scope. Dr Web handles the agreed updates, backup checks, monitoring and routine support, reports what was done, and tells you clearly when something falls outside the plan and needs a separate repair or security assessment.
● CARE SCOPE
What every Dr Web care plan includes
01
Managed updates
Core, theme and plugin updates are applied on a regular cycle and the site is checked afterwards. Risky updates are flagged and discussed instead of pushed blindly.
02
Backups you can actually restore
We confirm backups exist off the server and that a realistic restoration path is available. A backup nobody has checked is not a recovery plan.
03
Firewall and monitoring
A firewall with virtual patching blocks known plugin vulnerabilities before updates are available. Monitoring watches uptime, SSL certificates, domain expiry and unexpected file changes so problems are noticed before customers notice them.
04
Support requests
A defined channel for WordPress questions and small agreed changes, handled by a WordPress specialist.
05
Plain-English reporting
A concise report of completed work, notable findings and recommended next actions, not an automated activity log.
06
A recovery-first mindset
The same team that handles hacked-site recovery looks after your plan, so the setup is kept in a state that can be investigated and restored if something goes wrong.
WordPress website maintenance packages
Choose the level of care your website needs. Every plan is month-to-month with no lock-in contract. Prices include GST and are paid monthly in advance by card or direct debit.
Essential Care
Keep a simple website updated, backed up and watched.
- Weekly core, theme and plugin updates
- Daily off-site backups
- Firewall and virtual patching
- 24/7 uptime, SSL and domain-expiry monitoring
- Security monitoring and broken-link scanning
- Monthly plain-English report
- Priority incident response, 10% off recovery
Business Care
For websites that bring in enquiries, bookings and customer trust.
- Hack-cleanup guarantee, 1 incident per year
- Everything in Essential
- 1 hour of support or changes each month
- Quarterly backup restore test
- Critical response within 4 business hours
- 10% off additional work
Commerce Care
For stores and business-critical integrations.
- Hack-cleanup guarantee, 1 incident per year
- Everything in Business
- Up to 3 hours of support each month
- Staged updates tested against checkout and orders
- Critical response within 2 business hours
- Extra time quoted and approved first
Every plan starts with a one-off $330 onboarding audit. We review the site, hosting, plugins, backups and security first. If the site is already compromised, it is cleaned up before the plan and guarantee begin.
Who a care plan is for
A care plan is a good fit if:
- your website brings in enquiries, bookings, sales or customer trust
- nobody in the business owns WordPress updates
- your original developer has moved on
- you have been hacked before and do not want to repeat it
- you would rather pay a predictable monthly fee than an emergency repair bill
If the website is hacked, offline or seriously broken right now, a care plan is not the first step. Start with Malware Removal or Emergency WordPress Repair, then move onto a plan once the site is clean and stable.
How starting a care plan works
Onboarding audit ($330)
A one-off review of the site, hosting, plugins, backups and security. If we find an existing compromise, it is cleaned up first, before the plan and guarantee begin.
Agree the scope
Inclusions, exclusions, response expectations and monthly price are confirmed in writing.
Onboard and baseline
Access, backups and monitoring are set up and the site’s starting condition is recorded.
Ongoing care
Dr Web completes the monthly work, reports back and escalates anything that needs a separate decision.
Website care from the team that recovers hacked websites.
Dr Web was founded by Gal Opatovsky, who has looked after business websites since starting Vibes Design in 2006. Two decades of building, updating and maintaining WordPress sites taught us that most outages and hacks trace back to the same things: skipped updates, untested backups and nobody watching.
Dr Web care plans are built to fix exactly that. The people who look after your site each month are the same people who investigate and clean up compromised websites, so your plan is run with recovery in mind. Most hacked sites we recover were not attacked with anything sophisticated; our Recovery Files show what caused them.
The service was professional, efficient and extremely thorough. Every detail was handled with care, and communication was clear throughout.
The support has continued over many years. Communication is always prompt and it has always been a pleasure to deal with the team.
Related services
WordPress care plan FAQs
A monthly service where a WordPress specialist handles updates, backups, monitoring and routine support for an agreed scope, so the website stays secure and working without the business owner managing it.
Dr Web care plans start at $99 per month including GST, with Business at $385 and Commerce at $650. A one-off $330 onboarding audit applies to every new plan. Plans are priced by the level of care and the complexity of the site. WooCommerce stores and business-critical integrations need more testing and cost more than a simple brochure site.
Hosting keeps the server running. A care plan looks after the WordPress software on that server: updates, backups, security and support. Some businesses need both; see Managed WordPress Hosting.
Yes. Every plan starts with a review of the existing setup, so inherited risks are identified before we agree to look after it.
A care plan reduces the risk of a compromise and makes recovery faster, and Business and Commerce plans include a hack-cleanup guarantee: one full investigation and clean-up per 12 months at no extra charge. Essential plan clients receive priority incident response and 10% off recovery work. Sites already compromised before joining are cleaned up as part of onboarding, not under the guarantee.
No. Care plans are month-to-month, paid monthly in advance by card or direct debit, with no lock-in contract. Extra work beyond the included hours is only done after you approve it.
Put your website on a care plan
Tell us about the website and what it does for the business. Dr Web will review it and recommend the right level of care.
