A Dobermann lying in front of a green pixel folder with an upload arrow

WordPress maintenance for US accounting and tax firms

Your client upload isn’t in your security plan.

We hold the patching, the update testing, and the maintenance record on the site that takes your client uploads. Every month you get a dated record of what was done, written in the language your plan is already written in.

From $129 a month. Cancel monthly plans anytime.

The client upload

The portal keeps the client data.

You put a client upload on the site so people would stop emailing returns as attachments. It worked well, and it also moved client data onto the website. The website is the one system in the practice that nobody's job description covers. Worth checking which systems your current plan actually names. In firms your size, the site is usually not one of them.

A client file being pulled into a green pixel portal

Why it recurs

The plan has to cover every place client data sits.

The written plan is meant to inventory every location where taxpayer data lives, and a client portal is one of those locations. Signing it once does not keep it accurate. Plugins age and form handlers change hands, and none of it surfaces anywhere you would think to look. The attestation is annual. The drift is continuous.

The requirements are in the IRS Publication 5708.

A pixel maze filling with green as a client document finds its path

If nobody has checked

Most firms have not considered a plan against their upload path

So that is where we start. We inventory what is running on the site, follow the path a client document actually travels, and put the result in writing. What is sound, we hold. What needs work gets quoted separately, so you see a clear plan with a price before you commit to anything.

The service

What we hold on your site.

Patching

Core, plugins, and themes kept current on a schedule rather than when someone remembered.

Tested updates

Key pages are checked before and after every update and put back if one breaks something.

A software inventory

Every plugin and theme on the site, and what state each one is in.

The upload path

The page clients send documents through, tested whenever a plugin it depends on is updated.

Malware scanning

Across the whole install.

Backups

Daily, every 12 hours, or every change, off-site, depending on the plan.

What we send you

Every month we send you a report of the work we did on your site.

What we updated, on what date, on which plugin or theme, and what we tested afterwards. It goes into the plan file as it is. No editing, no chasing anyone for it. Every plan, no extra cost, from your first month.

You are buying the record as much as the work.

What it costs

Plans

The Standard

For businesses that need their site secured and off their plate.

$129 / month
Setup & migration$149 one-timeOn yearly billing: Free
Hack cleanup$50 per hourOn yearly billing: Free
Automated backupsDaily
Response commitment4 hours
Small jobs at onceOne
We test a real restore.Once a year
Start on this plan
Recommended

The Higher Standard

For sites where a slow page or broken form has a direct cost.

$249 / month
Setup & migration$149 one-timeOn yearly billing: Free
Hack cleanup$50 per hourOn yearly billing: Free
Automated backupsEvery 12 hours
Response commitment2 hours
Small jobs at onceTwo
We test a real restore.Twice a year
Start on this plan

The Highest Standard

For high-traffic or multi-location operations where the site is a core business asset.

$479 / month
Setup & migration$149 one-timeOn yearly billing: Free
Hack cleanup$50 per hourOn yearly billing: Free
Automated backupsEvery change, as it happens
Response commitment1 hour
Small jobs at onceThree
We test a real restore.Every 3 months
Start on this plan

Every plan carries the same protection. Higher plans back up more often, respond faster, take on more small jobs at once, and test a real restore more often.

Check maintenance plans
Setup and migration free on yearly billing, $149 one-time on monthlyYour latest off-site backup is handed back when you leave.

Who we work with

We are not for everyone.

Built for.

US accounting and tax practices running WordPress with a client portal or a secure upload on the site, on paid hosting, where the owner signs and nobody's actual job is the website.

Not for.

Brochure sites with no client data path do not need this page. If you have an in-house technology function or an administrator who gates vendor decisions, we are out of profile. If the site needs rebuilding rather than maintenance, we are the wrong call.

Put the website in the plan.

We handle setup and migration for you, free on yearly billing and $149 one-time on monthly. If you are in filing season, we will book you for after it.

Onboarding

Onboarding takes 24 to 48 hours.

Your site stays live through onboarding.

Your first report date is named before you sign.

Common Questions

Where the site collects or transmits non-public personal information, yes, and a client portal or a secure upload does exactly that. There is a more direct route as well: the written plan is meant to inventory every location where taxpayer data resides, and the site is one of those locations whether or not it collects anything. We describe the mechanism rather than quoting rule text, because the wording that establishes the website reach reached us through a secondary summary.
There is no small firm exemption from the written programme itself. It applies to sole practitioners and large networks alike. What relaxes below a consumer threshold is a set of recurring items: the written risk assessment, continuous monitoring or annual penetration testing, the written incident response plan, and the annual report to your governing body. Your consumer count is your number, not something we can see or should guess at.
For the software, yes. The client upload on your website is a separate system with a separate owner, and in most practices that owner is nobody in particular.
Managed hosting normally covers the platform and the server. Plugins, themes and the application layer usually sit with you, and that is the layer a client document passes through.
Possibly. Worth asking when an update was last tested rather than just applied, and whether a rollback path exists if one breaks the upload form. Building a site and running one are different engagements, and most build contracts end at launch.
No, and anyone telling you a maintenance plan does is overselling. We are not your assessor and we do not write your plan. We hold the site, keep the software current, test the upload path, and produce a dated record you can put in the plan file.
Yes. Any time outside filing season works.
No. Maintaining the site does not require reading what clients upload through it.
No. We maintain the one you already have. When something new needs building, the wider Pangolin team handles design, content and SEO.