Website Care

Website Maintenance Uganda: What Breaks and What It Costs to Fix

By toexee Team · 2026-09-14 · 6 min read
Developer running maintenance checks on a Ugandan business website

Key Takeaways

  • →An expired domain and an expired SSL certificate are the two failures that cost the most and cost almost nothing to prevent.
  • →A hacked site or a suspended host account turns a 50,000 UGX a month habit into a 600,000 UGX rebuild plus lost enquiries.
  • →Thirty minutes a month on a phone catches nearly everything on this list before a customer does.
  • →Never let anyone else hold the domain, the hosting and the backup. Owning the logins is what maintenance depends on.

Most Ugandan business owners think about their website twice: the day it launches, and the day it stops working. Everything between those two days decides whether it keeps bringing in customers, and almost nobody budgets for it.

A website is not a signboard. It is a machine on a server in another country, holding a domain that expires on a date you may never have written down, a certificate that has to be renewed, and software strangers try to break into every day. Here are the seven failures we actually get called about, what each costs to repair, and how to prevent them.

1. The domain quietly expires

This is the most expensive failure on the list, because it can cost you the name itself. A domain is rented, not bought. It renews every year and the notice goes to the email address used at registration, which is often the designer's address and not yours.

After the expiry date there is a grace period, usually around 30 days, when the site still loads and you are already late. Miss that and the domain enters a redemption period, where recovery costs a redemption fee on top of the renewal. Past that window the name is released and anyone can register it, including a competitor.

Prevention costs 50,000 to 70,000 UGX a year for a .com. Put the renewal date in your phone calendar, register the domain in your company's name, and make sure the reminder email is one you read. If your designer owns the domain, fix that first.

2. The security certificate expires and Chrome calls you unsafe

Secure sites run on an SSL certificate. When it lapses, Chrome and Safari stop showing the padlock and show a full page warning that the connection is not private. In a market where most visitors arrive on a phone, that is the loudest signal a business is not safe to send money to.

The certificate itself is free. Let's Encrypt issues them at no cost and renews them automatically when hosting is configured properly. When it is not, the padlock depends on someone remembering a paid renewal. On our 600K UGX Essential build, SSL is included free for the first twelve months and stays included on any monthly SEO plan.

3. An outdated plugin or theme gets the site hacked

This is what usually sits behind the message every owner dreads: the site loads with someone else's content, or the host suspends the account for sending spam. Old plugin code is the front door. Attackers do not target your business, they scan millions of sites for a known hole and take the ones that never updated.

Recovery is the part that hurts. With a clean backup, cleanup takes a few hours. Without one, the site gets rebuilt, and that means a fresh build plus telling customers why the site they were about to order from now shows a warning page.

Red flag: the designer who keeps the keys

If your site lives on the designer's personal hosting account, the logins are in his name and the backups are on his laptop, you do not own a website yet. When his account is suspended or he moves on, you cannot log in to save your own content. Ownership of the domain, the hosting and the backup is what makes maintenance possible at all.

4. The contact form stops sending and nobody notices

A contact form is a chain: the form, the mail server, the inbox, and whoever reads it. Any link can break quietly. A password change, a mail limit on the host, or a plugin update stops delivery while the site still says the message was sent.

This is the cheapest failure to fix and the most expensive to ignore. You are not losing a page, you are losing the enquiries it was built to produce. Test the form and the WhatsApp button with a real message every month and reply from the other side.

5. Hosting lapses or the account is suspended

Hosting is a subscription, and a lapsed subscription takes the whole site down. Suspensions are worse because they happen while you are paying: an account that overuses resources, or sends spam from a compromised plugin, can be switched off with your site still inside it.

Ask two questions before you renew hosting in Uganda. Who do I call at 8am when the site is down? And where do the daily backups live, on the same server or somewhere separate? A backup on the same server disappears with the site. At toexee, hosting after the free first year is 50,000 UGX a month, 600,000 UGX a year, covering SSL, daily backups and uptime monitoring.

6. The site gets slower every month as images pile up

Every photo straight off a phone adds two to five megabytes to a page. Nobody notices at first, then the homepage takes eight seconds on mobile data and Google quietly drops it, because speed is a ranking factor. Slow matters more in Uganda, where your visitor is paying for data and has three competitors open in other tabs.

Compressing images, removing unused plugins and switching on caching fixes almost all of it. Check your own site free with PageSpeed Insights once a quarter and watch the mobile score, not the desktop one.

7. You find out from a customer, not from a system

The last failure is silence. A site hacked for three days, a form dead since the plugin update: in every case the first person to notice was a customer who quietly left. Uptime monitoring and Google Search Console are free, and they turn that silence into an email you get first.

The 30-minute monthly routine

This is the whole maintenance programme most Ugandan small businesses need. Do it on your phone, once a month.

  1. Load the site on your own phone over mobile data, not office wifi, and look for the padlock.
  2. Send a test enquiry through the form and the WhatsApp button, and reply from the other side.
  3. Check the domain renewal date and confirm the reminder email is your address, not your designer's.
  4. Install the updates waiting in your website admin, then click through three pages.
  5. Confirm last night's backup exists, and once a quarter download one and open the folder.
  6. Open Google Search Console and clear anything new under errors or security issues.
  7. Answer new reviews and questions on your Google Business Profile.

Once a quarter, add one more job: read every page as if you were a customer and update anything that no longer matches reality, starting with prices, phone numbers and the address.

What website maintenance should cost in Uganda

There are two honest models in Kampala. The first bundles care into hosting: a monthly fee covers the server, the SSL certificate, daily backups and uptime monitoring, and you handle your own content. At toexee that fee is 50,000 UGX a month after the free first year, and stays free while you are on a monthly SEO plan from 500,000 UGX.

The second is a retainer, where an agency does the technical work and the content changes for you. Before you sign, ask what is inside: backups, security updates, malware scanning, how many content edits a month, and how fast they respond when the site is down. A care plan without backups is not a care plan.

Either way the maths works like insurance. The monthly fee is smaller than one rebuild, and a rebuild is what you are buying when the fee stops.

If you take one thing from this, take the logins. The domain, the hosting and the backup belong in your company's name.

Frequently Asked Questions

How much does website maintenance cost in Uganda?

Expect 300,000 to 1,000,000 UGX a month from a Kampala agency for a full care plan. At toexee, hosting with SSL, daily backups and uptime monitoring is 50,000 UGX a month after the free first year, which is 600,000 UGX a year, and it stays free while you are on a monthly SEO plan from 500,000 UGX a month.

Why does my website say Not secure in Chrome?

Your SSL certificate has expired. Chrome and Safari show a full page warning instead of the padlock, and visitors on phones leave immediately. A correctly configured host renews a free Let's Encrypt certificate automatically, so this is usually a hosting setup problem rather than a bill you forgot to pay.

How often should a website be backed up?

Daily, automatically, to storage that is not the same server the site runs on. A backup that lives on the same hosting account disappears with the site on the day a hack or a suspension takes the account down. Once a month, download one backup to your own computer so you know the files open.

What happens if my domain expires?

The site keeps working during a grace period, usually around 30 days, while you are already late. After that the domain enters a redemption period where recovering it costs a redemption fee on top of the renewal. Once that window closes the name is released and anyone can register it, including a competitor.

Want to Know What Is About to Break on Your Site?

Send us the link. We check your domain and certificate expiry dates, whether the contact form still delivers, where your backups live and your mobile load speed, then send back the list. Free, and you keep it.

Useful Pages

Send us the link. We will tell you what is broken.

The audit takes about 20 minutes and costs you nothing.

If a rebuild is the answer: 600K UGX, live in 5 days. If it is not, we say so.