Ask most small business owners what their website costs and they’ll quote you the build price. “We paid $8,000 three years ago.” That’s like saying your car cost $30,000 and ignoring fuel, insurance, registration, servicing, and repairs for the rest of its life.

Websites have ongoing costs. Some are obvious, some are hidden, and almost all of them are higher than people expect. Let’s go through them honestly.

Hosting: The Foundation Cost

Every website needs to live somewhere, and that somewhere costs money.

For a basic WordPress site on shared hosting, you’re looking at $10-$30 per month from providers like SiteGround or Kinsta. That sounds trivial until you consider that shared hosting means your site shares server resources with hundreds of other sites. When one of those neighbours gets a traffic spike, your site slows down.

Managed WordPress hosting — where the provider handles updates, security, and performance optimisation — runs $30-$100 per month. For most small businesses, this is the sweet spot between cost and reliability.

Custom-built sites on cloud infrastructure (AWS, Azure, Google Cloud) vary wildly. A simple static site might cost $5-$20 per month. A complex application with databases, file storage, and compute resources can run hundreds or thousands monthly.

Domain Registration

Your domain name needs to be renewed annually. A standard .com.au domain costs around $30-$50 per year through accredited registrars. Premium domains or multiple domain variations (common misspellings, different extensions) add to this.

Don’t let your domain registration lapse. It sounds basic, but businesses lose their domain names to expiry every single day. Set up auto-renewal and keep your registrar contact details current.

SSL Certificates

SSL certificates — the thing that puts the padlock in your browser’s address bar — used to be a significant annual expense. Now, services like Let’s Encrypt provide them free, and most hosting providers include them.

But if you need extended validation (EV) certificates or wildcard certificates for multiple subdomains, you’ll pay $100-$300 annually. For most small business sites, a free certificate is perfectly adequate.

Content Updates

Here’s where costs start surprising people. A website that never changes is a website that Google increasingly ignores. Regular content updates — blog posts, case studies, product updates, service page revisions — require time, which means money.

If you’re writing content yourself, the cost is your time (and opportunity cost). If you’re hiring a content writer or agency, expect to pay $150-$500 per blog post for decent quality in Australia. Two posts per month at $300 each adds $7,200 per year to your website costs.

Even if you’re not creating new content, existing content needs periodic review. Services change, prices update, team members leave, regulations shift. A website with outdated information is worse than no website at all.

Plugin and Software Updates

If you’re running WordPress (and roughly 40% of all websites are), you’ve got plugins. The average WordPress site runs 20-30 plugins. Some are free, some have annual licence fees.

Premium plugin licences typically cost $50-$200 each per year. A site running five premium plugins — say, a form builder, an SEO tool, a caching plugin, a security scanner, and a backup service — adds $250-$1,000 annually in licence renewals.

Beyond cost, plugins need updating. Outdated plugins are the single most common attack vector for WordPress security breaches. Someone needs to test and apply updates regularly. If you’re paying a developer to do this, expect $100-$300 per month for maintenance.

Security

Security isn’t optional. A compromised website damages your reputation, risks customer data, and can get you delisted from Google search results.

Basic security measures — firewall rules, malware scanning, login protection — are often included in managed hosting or security plugins. But serious security monitoring, incident response, and regular vulnerability assessments cost $50-$300 per month depending on the service level.

If you’re collecting any personal information through your website — contact forms, newsletter signups, customer accounts — you have obligations under the Australian Privacy Act. Meeting those obligations costs time or money or both.

Analytics and Monitoring

Google Analytics is free and provides adequate traffic data for most businesses. But understanding what that data means and acting on it requires either your time or a marketing analyst’s time.

Uptime monitoring services that alert you when your site goes down cost $10-$50 per month. You can get by without one, but finding out your site’s been down for 12 hours because a customer mentions it isn’t a great look.

The Real Total

Let’s add it up for a typical Australian small business website:

• Managed hosting: $600-$1,200/year
• Domain: $40-$50/year
• SSL: $0-$300/year
• Content updates (minimal): $2,400-$7,200/year
• Plugin licences: $250-$1,000/year
• Maintenance/updates: $1,200-$3,600/year
• Security: $600-$3,600/year
• Analytics/monitoring: $120-$600/year

Total: $5,210-$17,550 per year.

That’s $100-$340 per week to keep a basic-to-moderate business website running properly. And this doesn’t include major redesigns (typically needed every 3-5 years at $5,000-$30,000+), SEO work, or paid advertising that drives traffic to the site.

Is It Worth It?

For most businesses, yes — but only if you’re actually maintaining it. A well-maintained website that generates leads, supports customer service, and builds credibility is worth every dollar. A neglected site with broken links, outdated content, and security vulnerabilities is worse than having no web presence at all.

The mistake isn’t spending money on your website. The mistake is spending money building one and then forgetting it exists.