How to Find WordPress Maintenance Clients (and Keep Them)

Recurring revenue is what makes a WordPress business stable, and maintenance plans are one of the simplest ways to get it. But how to find WordPress maintenance clients is a question many developers struggle with, because owners rarely search for “maintenance” until something breaks. The trick is to find WordPress sites that are already showing signs of neglect, explain the risk in plain language, and offer a clear, affordable package. This guide covers the signals to look for, how to package your service, how to find WordPress sites to contact, and how to reach out.

Why maintenance is a good service to sell

WordPress powers a huge share of business websites, and every one of them needs updates, backups and monitoring. Many owners had a site built, then never thought about it again. That creates steady demand for someone who will:

• Keep WordPress core, themes and plugins updated safely.
• Take regular backups and know how to restore them.
• Watch for downtime, security problems and broken features.
• Make small content edits when the owner needs them.

Maintenance clients also tend to come back for bigger projects such as redesigns, speed work or new features, because they already trust you.

Signals a WordPress site needs maintenance

You can’t log in to a prospect’s dashboard, but you can see plenty from the outside. Look for these visible signs.

Outdated core, theme or plugins

Some sites expose version numbers in the page source, for example a generator meta tag, or ?ver= query strings on theme and plugin files. If those versions are clearly old, the site probably isn’t being updated. Treat this carefully: version strings are a hint, not proof, and some sites hide them on purpose.

An old copyright year and stale content

A footer year from long ago, a blog that stopped years back, or out-of-date opening hours all suggest nobody is looking after the site.

Speed problems

Slow loading, huge images, and lots of scripts often point to a site that has collected plugins over time without anyone cleaning up. A free speed test such as PageSpeed Insights gives you a concrete number to discuss with the owner.

Security warnings

• No HTTPS, or an expired certificate causing browser warnings.
• Strange links or spam content in the footer or pages.
• Browser or search engine warnings about the site.

Be careful how you mention security issues. Point out what is visible and offer help; don’t scare people or imply you tested their site without permission.

Broken features

Contact forms that don’t send, sliders that no longer load, broken layouts on mobile and PHP warnings printed on the page are all signs of a site that needs care.

For a deeper checklist, see our guide on how to find outdated WordPress websites.

Packaging a care plan for WordPress maintenance clients

Owners buy outcomes, not task lists. Package your service so it is easy to understand and compare. A simple tiered structure works well:

Plan	Typical inclusions	Good for
Essential	Core, theme and plugin updates; regular backups; uptime monitoring; monthly report.	Small brochure sites.
Standard	Everything in Essential, plus security monitoring, speed checks and a small amount of content edits each month.	Active small businesses.
Priority	Everything in Standard, plus faster response times, more edit time and proactive improvements.	Shops and sites that drive revenue.

A few tips for packaging:

• Set your own prices based on your costs, time and market, and keep them simple.
• Offer an onboarding check as the first step: a paid or low-cost review where you fix urgent issues and take a clean backup.
• Send a monthly report in plain language: what you updated, backups taken, any issues fixed.
• Be clear about what is not included, such as new features or redesigns, and how you price those.

How to find WordPress maintenance clients: building your list

Because maintenance only makes sense for WordPress sites, your first job is finding businesses that run WordPress. Then you filter them by the signals above.

1. Choose a niche and area. For example, “accountants in Manchester” or “restaurants in Dublin”.
2. Collect websites. Search by keyword and location, browse local directories, or use a list of domains you already have, such as past clients or contacts.
3. Confirm WordPress. Look for /wp-content/ and /wp-includes/ paths in the source, a REST API at /wp-json/, or a WordPress login page. Our guide on how to check if a website is WordPress explains each method.
4. Note the maintenance signals for each site: old versions, old copyright, slow, security warnings, broken features.
5. Find contact details. Check the contact and about pages for a business email, phone number and social links.
6. Prioritise. Sites with several signals, owned by businesses that are clearly still trading, go to the top.

You can read more about the list-building process in our guide to how to find WordPress websites.

Reaching out to maintenance prospects

Your message should be calm, specific and helpful. Owners don’t want to feel lectured about security. A simple structure:

1. What you noticed: “Your site’s contact form shows an error when I try to send a message.”
2. Why it matters: “Enquiries might not be reaching you.”
3. Your offer: “I look after WordPress sites for local businesses: updates, backups and fixes like this. Happy to take a look.”
4. An easy next step: “Would a quick call this week help?”

Our cold email templates for WordPress services include maintenance-focused examples. Follow up two or three times with something useful, such as a tip on backups, then stop.

Opt-outs and regulations

When you email businesses, follow the rules that apply to you and your prospects, such as GDPR and PECR in the UK and EU, and CAN-SPAM in the US. Identify yourself, give a clear way to opt out, honour opt-outs straight away and keep a do-not-contact list. This is general guidance, not legal advice.

Other places to find maintenance clients

• Past build clients who don’t yet have a care plan.
• Web designers who build sites but don’t want ongoing support work.
• Hosting customers if you also resell hosting.
• Local networking groups where owners often mention website headaches.

Finding WordPress sites faster with WP Finder

Checking dozens of sites by hand for WordPress, then hunting for an email on each, is slow. WP Finder does both at once. Search by keyword and country, or load your own list of domains, and it checks each site for WordPress using themes, plugins, the REST API, the login page and more. It also collects public emails, phone numbers, WhatsApp links and social profiles, and lets you export to Excel or CSV or send personalised emails with follow-ups from your own mailbox. The first 150 sites are free, so you can download it and try it on your niche.

Conclusion

WordPress maintenance clients are out there in large numbers; most just don’t know they need you yet. Learn the visible signals of a neglected site, package a clear and simple care plan, build a list of WordPress sites in a niche you understand, and reach out with specific, helpful messages. Done consistently, this turns into reliable monthly income. For related reading, see WordPress lead generation and how to get web design clients.

FAQ

How do I know if a website needs WordPress maintenance?

Look for visible signs such as old version numbers in the page source, an old copyright year, slow loading, missing HTTPS, broken forms or layouts, and spam content. Several signs together usually mean nobody is maintaining the site.

What should a WordPress maintenance plan include?

Most plans include core, theme and plugin updates, regular backups, uptime and security monitoring, and a monthly report. Higher tiers often add content edits, speed work and faster response times.

Where do WordPress maintenance clients come from?

Common sources are past build clients, referrals from web designers, local networking and direct outreach to businesses whose WordPress sites show signs of neglect.

Is it OK to mention security issues in outreach?

Yes, if you only mention what is publicly visible and keep the tone helpful. Never test or access a site without permission, and avoid scare tactics.