Chapter 08
Understanding Agency Pricing and Promises
Compare website proposals, recurring fees, maintenance promises, ownership and cancellation terms. Use clear deliverables, total-cost examples and practical questions to judge when professional work is worth paying for.
Published Updated
A business owner receives two website proposals. One asks for thousands of dollars upfront. Another promises a site for a small monthly payment. Both say the result will be professional, secure, and optimized for search. Neither price tells the owner what happens when something breaks, what work continues after launch, or what they can take with them if they leave.
That is the problem this chapter addresses. The question is not whether agencies are inherently expensive or unnecessary. It is whether the work, service, rights, and risk behind the price are clear enough to compare.
This guide is for people considering web design in Fort Smith, Arkansas; Van Buren, Arkansas; Sallisaw, Oklahoma; and elsewhere. It does not evaluate, name, or accuse any particular agency or freelancer. All local businesses and proposals used below are hypothetical.
In this chapter
- What are you actually paying for?
- Why website quotes vary so much
- The real cost of monthly website subscriptions
- What does website maintenance actually include?
- How website costs accumulate over time
- When a professional package is worth the price
- Marketing promises versus measurable deliverables
- SEO guarantees: what you should know
- Accessibility and security promises
- Ownership, contracts, and cancellation
- Three local pricing scenarios
- Comparing website quotes without being misled
- Questions to ask before signing
- Final thoughts: pay for value, not just promises
What Are You Actually Paying For?
A serious website project can involve several kinds of work. Planning determines what the business needs, what customers need to accomplish, and which existing systems must connect. Design organizes information, navigation, typography, forms, and mobile layouts. Development implements the pages, functionality, integrations, and publishing process. Content work may involve writing, editing, photography, product descriptions, and obtaining permission to use images or branding. Testing checks whether the result works across devices and with assistive technology.
A complex project may additionally require inventory synchronization, a payment provider, customer accounts, accessibility evaluation and remediation, security reviews, or custom business software. Someone must also coordinate feedback, scope changes, deadlines, and handoff. An agency's price can reasonably include payroll, taxes, insurance, training, management, and profit as well as the work a customer can see.
The same website can have different legitimate prices depending on content readiness, custom functionality, support obligations, revisions, turnaround, risk, and who takes responsibility if something fails. A five-page brochure site and a store with live inventory and multiple integrations are not equivalent purchases.
Ask for a description of the deliverables rather than a vague promise of a “premium website.” A provider should be able to explain what is planned, what is included, what depends on third parties, and what costs extra. This is also consistent with the FTC's small-business guidance on asking hosts who will maintain software, who can change the website, and what security service is included.[1]
The difference between labor and infrastructure
Renting a server is not the same thing as configuring, protecting, maintaining, and supporting a customer's website. For illustration, AWS lists a small Linux/Unix Lightsail virtual server with a public IPv4 address at $5 per month, with specified memory, storage, and data-transfer limits. That is an infrastructure price, not a quote for design, managed support, backups, custom development, compliance work, or incident response.[2]
Likewise, a domain is its own cost. Dynadot's public pricing page listed a standard .com registration and renewal at $10.88 per year when checked for this chapter, subject to pricing changes, premium-domain exceptions, and promotional terms. Cloudflare Registrar describes registration and renewal at registry/ICANN cost without registrar markup, but the exact amount depends on the extension and live quote.[3][4]
These real prices provide context, not a formula for deciding what an agency should charge. Paying an expert to manage a service can be reasonable. Paying a mysterious monthly premium without knowing who does what is harder to evaluate.
Why Website Quotes Vary So Much
The payment model changes the comparison as much as the amount.
| Model | What it commonly means | Main question |
|---|---|---|
| Fixed-price project | Defined build at an agreed price; later work may be separate | What is in scope, and what counts as a change? |
| Hourly work | Pay for recorded time, often with an estimate | Is there a budget cap, approval process, and work log? |
| Milestone payments | Pay when specified stages are reached | What evidence makes a milestone complete? |
| Monthly website subscription | Build, platform access, support, or a mixture bundled into recurring payments | What happens to the website if payments stop? |
| Website-as-a-service | Provider supplies and operates an ongoing website service | Do you license access, receive an asset, or both? |
| Maintenance-only plan | Ongoing work on an already-built site | Exactly which tasks, frequency, and hours are covered? |
| Hosting-and-support package | Infrastructure combined with some level of human help | Who is responsible for security, updates, failures, and restoration? |
| Retainer or performance-based contract | Reserved professional capacity or fees tied to defined outcomes | What is measured, verified, excluded, and payable? |
These are descriptive models, not claims about industry averages or every provider's contract. Actual terms control.
A subscription may make a website affordable at launch and transfer operating responsibility to someone else. A fixed-price project may cost more initially but create an asset that can be hosted elsewhere. Hourly or retainer work can make sense when requirements change. Milestones can reduce disputes when acceptance criteria are documented. No single arrangement is automatically fair, unfair, or economical.
The essential distinction is development cost versus ongoing operating cost. A finished site may still need paid hosting, domains, software licenses, and support. Conversely, paying for a platform indefinitely does not necessarily mean anyone is designing or improving the site each month.
The Real Cost of Monthly Website Subscriptions
When an agency quotes a monthly amount, ask for the actual service behind that amount. Hosting, domain renewal, software licenses, uptime monitoring, security updates, verified backups, technical support, content revisions, SEO, reporting, and design improvements are different products. They do not all happen automatically, and they do not all require the same amount of labor.
Here is a practical way to read a recurring invoice:
| Charge or promise | What to clarify |
|---|---|
| Hosting | Which platform or server? What resource limits, uptime terms, and account access? |
| Domain | Who is the registrant? Which extension? When does it renew, and for how much? |
| SSL/TLS certificate | Is the certificate already included by the platform? Is the charge for actual configuration and monitoring? |
| Updates and security | Which software is maintained, by whom, and with what testing? |
| Backups | What is included, how long are copies retained, and has restoration been tested? |
| Monitoring | What is checked, how often, who gets alerted, and who responds? |
| Content changes | How many requests or minutes are included? What is the turnaround? |
| Support | Which channels and hours? Response time versus resolution time? |
| SEO and reporting | Which tasks and measurements will be delivered each month? |
| Revisions | Are redesigns included, or only small text and image changes? |
There is a difference between charging for a certificate and charging for the work of managing it. Let's Encrypt provides free TLS certificates, while Squarespace says it automatically issues free certificates for properly connected sites. Neither fact means every integration or security task is effortless.[5][6]
Software subscriptions also already contain services. For example, Squarespace's public U.S. pricing showed its Basic plan at $19/month with annual billing or $25/month billed monthly on the research date. Shopify's Basic plan showed $29/month with annual billing or $39/month billed monthly; payment-processing and other possible charges require separate evaluation. Both are platform prices, not a substitute for professional design, editorial work, or custom integration.[7][8]
A useful monthly plan names the work, the limits, the evidence, and the exit procedure. Ask whether unused support carries forward, whether support is limited by a fair-use policy, whether urgent incidents cost extra, and who pays for third-party renewals. If the response is “everything is included,” request the exclusions in writing.
What Does Website Maintenance Actually Include?
Maintenance is not the same as keeping a subscription active. Depending on the website, genuine maintenance can include reviewing security advisories, installing relevant patches, updating dependencies, testing forms and checkout after changes, monitoring uptime, checking backup success, attempting test restores, handling compatibility problems, reviewing access permissions, renewing services, and repairing failures.
The FTC advises businesses to update software, use multifactor authentication, keep backups, monitor activity, and maintain incident-response plans. Those are legitimate services when someone is actually assigned to perform or verify them.[9]
But the platform may already do part of the work. WordPress.com says it manages core WordPress version updates. Its documentation says eligible plugins and themes can update automatically, while some third-party items may need different treatment. On eligible Business and Commerce plans, WordPress.com also provides automatic backups; its published retention and restoration rules have plan-specific limits.[10][11][12]
Wix likewise says its proprietary hosted service performs platform software updates automatically, while requiring Wix hosting to operate the Wix site itself.[13]
This does not make paid maintenance pointless. An expert can still review failures, manage custom code, check commerce flows, respond to incidents, update business content, and help with recovery. It does mean a customer should not be given the impression that routine automatic platform functions are bespoke monthly labor.
What proof of maintenance should look like
A basic monthly report can be short and useful. It might say: “Plugin security update installed and checkout tested”; “Last backup and restore-test dates”; “Two contact-form defects fixed”; “Monitoring alert investigated; downtime resolved”; or “No incidents this month, checks completed on these dates.” Some months may require little intervention. That is acceptable if the plan promises readiness and monitoring, rather than a fictional number of repairs.
Ask whether the report shows tasks completed, checks performed, outstanding risks, and who is responsible next. A dashboard full of green icons without dates or explanations is not equivalent to proof that promised work occurred.
How Website Costs Accumulate Over Time
A small monthly fee can become a major multi-year expense. A large upfront fee can also be poor value if it buys a fragile site or insufficient support.
Total cost = Initial fees + Recurring charges + Additional services + Applicable termination or migration costs.
The following table is entirely hypothetical. Its prices are teaching examples, not current agency quotes or market averages. Each scenario assumes the stated price stays unchanged, payments continue for the full period, and no service upgrades occur. All exclude taxes, domain renewals, transaction fees, paid third-party apps, additional revisions, and migration or termination costs. The services are not equivalent.
| Hypothetical option | Upfront | Monthly | 12 months | 24 months | 36 months | 60 months |
|---|---|---|---|---|---|---|
| A: Custom build + basic care | $2,400 | $35 | $2,820 | $3,240 | $3,660 | $4,500 |
| B: Managed website subscription | $300 | $125 | $1,800 | $3,300 | $4,800 | $7,800 |
| C: Self-managed builder subscription | $0 | $49 | $588 | $1,176 | $1,764 | $2,940 |
How to interpret it: Option B is less expensive than A at month 12 but more expensive at month 36. Option C has the lowest listed cash outlay, but its owner must do the work or purchase help separately. A may require significant change fees; B may include real support; C may lack complex features. Nobody should declare a winner from this table without checking deliverables and responsibilities.
A change in price matters too. If hypothetical Option B rose from $125/month for the first year to $150/month for the next four years, its five-year total would become $9,000 including the $300 setup fee, rather than $7,800. A separate $600 exit migration would raise that total to $9,600. Those added costs are illustrations, not predictions of a provider's behavior.
For quotes with renewal dates, break the calculation into billing periods rather than assuming a price remains frozen. State the domain and platform renewals, whether payment is annual upfront, what “included changes” means, and whether the agreement has a minimum term. Compare the totals at 12, 24, 36, and 60 months, not just month one.
When a Professional Package Is Worth the Price
An agency can be worth substantially more than the underlying hosting subscription when its work removes genuine burdens or improves business operations. Think about a restaurant with rapidly changing menus, a store whose inventory must synchronize correctly, or a service company that relies on accessible appointment forms. A dependable specialist may reduce downtime, train staff, maintain continuity, and solve problems the owner cannot reasonably solve alone.
Paying for a template-based website is not inherently unreasonable either. A skilled provider can choose an appropriate template, organize confusing content, customize the user experience, integrate business services, and test the finished product. The problem would be a mismatch between what is represented as custom work and what the customer actually receives.
A useful value test is to ask: What work would I otherwise have to perform, what risk is being handled, what concrete output is delivered, and what would a failed implementation cost my business? Time and operational risk are real considerations, even when a do-it-yourself tool looks inexpensive.
Marketing Promises Versus Measurable Deliverables
A website proposal is often written to reassure. That is understandable. But attractive adjectives are not specifications.
| Marketing description | A better question |
|---|---|
| Premium website | What specific pages, features, and testing are included? |
| Fully optimized | Optimized for speed, accessibility, conversion, search, or something else? How is it measured? |
| Custom design | Which layouts and assets are original, and which use a template? |
| SEO included | Which changes, pages, analyses, and reports will actually be delivered? |
| Ongoing maintenance | Which systems, update schedule, and recovery procedures? |
| Unlimited edits | Which kinds of edits, what response time, and what fair-use limits? |
| Enterprise-grade security | Which controls, monitoring, risk reviews, and incident procedures? |
| Accessibility compliant | Against which standard and scope, tested how, and when? |
| Complete ownership | Which files, copyrights, licenses, access rights, and exports transfer? |
| Dedicated support | Named person or shared queue? Hours and response targets? |
A vague phrase alone is not evidence that anyone has lied. It simply does not allow a buyer to evaluate value. The FTC's advertising guidance says objective claims should be truthful, non-deceptive, and supported by evidence; the meaning and legal application of that guidance depend on the circumstances.[14]
Request a written scope with deliverables, exclusions, due dates, change-request rules, and acceptance criteria. “Five page templates, up to two revisions, forms tested on mobile and keyboard, administrator training, and 30 days of bug fixes” is clearer than “complete premium digital solution.”
SEO Guarantees: What You Should Know
Google explicitly cautions that no one can guarantee a number-one Google ranking. It also warns about providers claiming a special relationship with Google and explains that buying Google advertising does not improve a site's presence in organic search results.[15]
Treat guaranteed first-page rankings, immediate traffic, guaranteed leads, and promises based only on adding keywords with scrutiny. Searches vary by location, competition, query, and changing systems. A ranking for an obscure phrase is not automatically a useful business outcome. An SEO provider can reasonably commit to doing tasks. It cannot independently control every external condition that influences results.
Measurable SEO work might include fixing crawl or indexing problems; improving site structure, page titles, and useful content; validating structured data; analyzing search demand; and reporting changes with a documented baseline. Google Search Console can show impressions, clicks, queries, and average position, with reporting limitations that should be explained.[16]
Structured data is another useful example. Google says correctly implemented markup can make a page eligible for certain search features, not guarantee those features will appear.[17]
If an agency sells monthly SEO, request the actual activities, the affected URLs, the reporting interval, and the business goal. Distinguish work completed from outcomes observed. Also ask who controls the Search Console account and whether you will keep access after cancellation.
Accessibility and Security Promises
Accessibility is more than a scan or a widget
A website can pass an automated scan and still be difficult to use. W3C's Web Accessibility Initiative says no evaluation tool alone can determine whether a site meets accessibility standards; knowledgeable human evaluation is required.[18]
Ask which pages and user journeys were reviewed, which version and level of WCAG were used, whether keyboard and screen-reader use was assessed, what barriers were fixed, and whether results were retested. Automated tools are valuable, but they are not a substitute for meaningful assessment. Nor is a one-click toolbar proof of overall compliance.
Be especially careful with blanket phrases such as “100% accessible,” “automatically ADA compliant,” or “guaranteed compliant.” Technical conformance and legal compliance are not interchangeable claims. ADA.gov explains that Title III applies to businesses that are public accommodations, while Title II applies to state and local governments; requirements depend on the organization and circumstances.[19]
There is also an important timing distinction. DOJ's specific WCAG 2.1 AA web rule for state and local governments is a Title II rule, not a blanket technical-rule deadline for every private retailer. The DOJ's April 2026 interim final rule extended relevant Title II compliance dates to April 26, 2027 for public entities serving populations of at least 50,000 and April 26, 2028 for those serving fewer than 50,000 people and special district governments, subject to the actual rule's scope and exceptions.[20]
Professional accessibility evaluation and remediation can be substantial work that justifies fees. But the customer should receive a clear scope, the findings, and evidence of remediation, not simply a label.
HTTPS is not a security guarantee
HTTPS helps protect the connection between a visitor and a website;[21] it does not prove that the application's login, authorization, dependencies, server configuration, and stored data are secure. OWASP's Top 10:2025 identifies distinct web application risks including broken access control, misconfiguration, supply-chain failures, authentication problems, and injection.[22]
The FTC's business guidance emphasizes software updates, multifactor authentication, security monitoring, backups, and incident response. Its web-host guidance also recommends asking who installs security updates, who can administer the site, and what security practices protect it.[9][1]
A useful security proposal may describe the controls, roles, monitoring, restoration plan, and how incidents will be handled. “Hack-proof” or “fully secure” is not a meaningful substitute for those details. No credible evaluation should treat a padlock icon as a complete security audit.
Ownership, Contracts, and Cancellation
The most expensive website may be the one a business cannot leave without rebuilding.
There are several separate things to ask about: the domain registration, hosting account, content, customer records, image and logo files, source code, design files, licensed fonts and themes, databases, administrator accounts, and third-party integrations. The right to use something is not always the right to receive its source files, modify it, or transfer it to another provider.
ICANN explains that a domain registrant has rights and responsibilities under the registration contract, including access to transfer information, with transfer processes subject to applicable policies. Verify that the business is the registered holder or has the necessary account and authorization access, rather than assuming payment to an agency automatically gives direct control.[23]
For creative work, the U.S. Copyright Office explains that copyright generally begins with the author, subject to rules such as qualifying work made for hire, and that transfers of copyright ownership generally require signed writing. Paying an invoice does not, by itself, answer exactly which intellectual-property rights transferred. The particular agreement and third-party licenses matter.[24]
Portability is platform-specific. Squarespace documents that only certain content can be exported to WordPress XML; styles and some site and store features do not export. Wix says Wix websites must operate on Wix infrastructure, even though customers own their content. WordPress.com's standard XML content export does not include the website's full design and plugins. These are real product constraints, not proof that using those products is deceptive.[25][13][26]
Before signing, ask for a written exit procedure: What can be exported? In what format? How much advance notice is needed? Is there a buyout? What happens to email, redirects, analytics, customer data, and the domain? Are there migration or termination fees? Can you access a backup before services end? What happens if the provider closes?
Automatic renewal and legal claims
Read subscription and renewal language rather than relying on a sales discussion. The FTC's long-standing truth-in-advertising guidance is useful context, but website service contracts, especially business-to-business arrangements, can involve different laws, contract terms, and facts.[14]
Important 2026 correction: The FTC's 2024 expanded “click-to-cancel” Negative Option Rule was set aside by a court. In February 2026, the FTC took action to restore the rule text that existed before its 2024 amendment. It would therefore be inaccurate to tell every small business that the invalidated 2024 rule guarantees a particular cancellation mechanism for its agency contract.[27]
Other federal and state requirements may still be relevant. This article is educational, not legal advice. For significant disputes, unusual buyouts, intellectual-property terms, or questions about applicable cancellation law, seek qualified legal advice.
Three Local Pricing Scenarios
The businesses, prices, and quotes below are invented for illustration. They do not describe or imply misconduct by any actual provider in Van Buren, Fort Smith, or Sallisaw.
Van Buren retailer: a managed store versus a platform subscription
A hypothetical Van Buren shop receives a $125/month managed storefront proposal with a $300 setup fee. Its 36-month fixed-price illustration is $4,800. It also sees Shopify Basic advertised at $29/month on an annual payment plan, or $1,044 across 36 months if that published price stayed unchanged.[8]
The price difference is not a verdict. Shopify's base subscription does not supply this retailer's photography, product data, custom branding, hands-on support, or agency labor. Payment fees, themes, apps, and taxes may apply. The owner should compare features, transaction costs, staff time, updates, customer support, and what happens after cancellation. This example is not a forecast of Shopify pricing.
Fort Smith restaurant: what does the maintenance fee maintain?
A hypothetical Fort Smith restaurant is offered a website for $1,800 upfront plus $100/month. Over 36 months, that is $5,400, before exclusions. The written proposal says it includes hosting, seasonal menu updates, broken-form repairs, support, and ongoing SEO.
The owner should ask for an estimate of menu updates each month, who checks reservation links, whether menu changes have a turnaround target, which technical updates are automatic, what the SEO tasks are, and who owns the photos and pages. If the agency actually provides prompt changes and reliable help, the recurring fee may be worthwhile. If it provides only access to a platform, the owner needs a different comparison.
Sallisaw contractor: upfront versus monthly
A hypothetical Sallisaw contractor compares $2,600 upfront plus $45/month against a $179/month subscription with no upfront cost. At 24 months these cost $3,680 and $4,296 respectively; at 60 months, $5,300 and $10,740. These totals assume constant monthly pricing and exclude domains, tax, extras, and migration.
The questions are not merely which amount is smaller. Does the subscription include answering support requests, making changes, or managing local search content? Does the fixed project deliver a portable site with documented handoff? Are either provider's lead or ranking claims measurable? The owner should compare the work, then the price.
Comparing Website Quotes Without Being Misled
Use the same scorecard for every offer. Do not award points for adjectives. Record the written answer, supporting document, and financial impact for each row.
| Compare | Proposal A | Proposal B | What evidence to request |
|---|---|---|---|
| Upfront and milestone fees | ______ | ______ | Itemized estimate and payment schedule |
| Monthly/annual charges | ______ | ______ | Recurring invoice details and renewal rules |
| Pages and development | ______ | ______ | Page list, features, custom work, revision limit |
| Content and brand assets | ______ | ______ | Who writes, photographs, licenses, and delivers files |
| Hosting and domain | ______ | ______ | Provider, account holder, renewal prices |
| Maintenance and backups | ______ | ______ | Task schedule, logs, retention, restore responsibility |
| Support | ______ | ______ | Hours, channels, limits, response commitments |
| SEO | ______ | ______ | Deliverables, baseline, access to reports |
| Accessibility and security | ______ | ______ | Scope, standard, issues found, remediation evidence |
| Ownership and portability | ______ | ______ | Rights, admin access, export and transfer formats |
| Cancellation | ______ | ______ | Notice, term, fees, buyout, data return |
| Total at 12/24/36/60 months | ______ | ______ | All assumptions and excluded expenses |
A strong quote makes an informed “no” possible. It should let a buyer identify what is not included, what can change, and what continuing responsibilities stay with the business. That transparency is a reason to trust a professional, not an attack on the profession.
Questions to Ask Before Signing
Use this checklist when discussing a proposal, including one marketed as a complete package.
- What am I purchasing: a finished site, continuing service, a license, or a combination?
- Which pages, features, integrations, and tests are delivered at launch?
- What is custom-created, and what uses a builder or template?
- Who creates content, supplies photos, and secures necessary licenses?
- Who is the domain registrant, and can I access its registration account?
- Which copyrights and licenses transfer, and what source/design files will I receive?
- Is hosting included? Where, at what cost, with what resource limitations?
- What maintenance is performed, how often, and how is it documented?
- Who handles software patches, incidents, restores, and emergency support?
- Which backups exist, how long are they retained, and who can restore them?
- What changes are included? Do unused hours roll over? What limits apply to “unlimited” edits?
- What is SEO work actually going to include, and how will it be reported?
- What evidence supports performance, accessibility, or security representations?
- What are the support hours, response targets, exclusions, and extra-work rates?
- What are the renewal, price-increase, minimum-term, and cancellation conditions?
- What would it cost to leave after 12, 24, 36, or 60 months?
- Can I export the content and data, move the site, retain the domain, and preserve search redirects?
- If the provider closes or the relationship ends, what access and documentation will I have?
- Will you put the scope, fees, rights, responsibilities, and exit terms in writing?
An agency should not be expected to promise a number-one ranking, zero security incidents, or perfect legal compliance without qualification. It can commit to defined work, reasonable standards, careful testing, clear records, and a fair process when something goes wrong.
Final Thoughts: Pay for Value, Not Just Promises
An agency's fee may purchase expertise, time, reliability, and accountability. Those are real things. It may also purchase access to software, a bundle of automatic platform features, or a long-term obligation whose cost only becomes obvious years later. The price alone cannot tell you which.
Before choosing a proposal, identify what will be delivered, what happens every month, how results are checked, what you control, and how you leave. Compare the total cost across years rather than reacting to the size of the first payment.
A professional who can explain those details is giving you information worth using. A proposal that cannot explain them is not ready for your signature.
References
- Cybersecurity for Small Business — U.S. Federal Trade Commission
Supports: FTC recommends asking hosts about TLS inclusion and setup, security practices, current software and update responsibility, and who can administer or change the website.
Location in source: Hiring a Web Host; What to look for; What to ask
Verified .
- Amazon Lightsail Pricing — Amazon Web Services
Supports: Lightsail Linux/Unix public-IPv4 bundles list USD 5/month for 0.5 GB RAM, 2 vCPUs, 20 GB SSD and 1 TB transfer, plus USD 7 and USD 12 tiers. Listed regions have half the transfer allowance; overage charges can apply.
Location in source: Virtual servers; public IPv4 Linux/Unix bundles; USD 5 tier; transfer allowances
Verified .
- Domain Prices, TLD Registration & Renewal Costs — Dynadot
Supports: Dynadot lists .com registration and renewal at USD 10.88 each per year as checked October 28, 2026.
Location in source: Domain pricing table; .com registration and renewal; USD, one year
Verified .
- Cloudflare Registrar FAQ — Cloudflare
Supports: Cloudflare Registrar charges registry and ICANN list prices without markup and requires Cloudflare nameservers; using another authoritative nameserver provider requires transferring the domain to another registrar.
Location in source: Billing: registration and renewal at registry and ICANN list prices; Domain management: nameserver requirements
Verified .
- Let's Encrypt FAQ — Let's Encrypt
Supports: Let's Encrypt issues SSL/TLS certificates for HTTPS without a certificate fee. Integrators may charge for administration or management, and correct deployment remains necessary.
Location in source: What does it cost to use Let’s Encrypt? Is it really free?
Verified .
- Understanding SSL certificates — Squarespace Help Center
Supports: Squarespace automatically supplies free SSL certificates for eligible domains correctly connected to Squarespace websites. Domain connection and technical requirements apply.
Location in source: Overview > What you’ll need / Technical details
Verified .
- Squarespace Pricing Plans and Features — Squarespace
Supports: Squarespace lists USD monthly/annual-billing monthly equivalents: Basic 25/19, Core 39/29, Plus 65/49, Advanced 139/99 as checked October 28, 2026; annual equivalents require annual payment.
Location in source: Basic; pay annually versus pay monthly; USD 19/25; annual prepayment
Verified .
- Shopify Pricing — Shopify
Supports: Shopify Basic costs USD 29/month equivalent on annual billing or USD 39/month monthly. It includes an online store and web hosting. U.S. standard online card rates start at 2.9% plus USD 0.30; premium, international and third-party payment arrangements can have other fees.
Location in source: Compare all features; Basic pricing, pay monthly USD 39 / pay yearly USD 29
Verified .
- Cybersecurity for Small Business — U.S. Federal Trade Commission
Supports: FTC business guidance recommends software updates, multifactor authentication, backups, monitoring for unauthorized access, incident-response planning and recovery.
Location in source: Cybersecurity Basics; NIST Cybersecurity Framework: Protect, Detect, Respond and Recover
Verified .
- Check your WordPress version — WordPress.com Support
Supports: WordPress.com manages server-side WordPress versions and automatic core updates; newly released versions can be tested before rollout.
Location in source: Intro > server-side features and version management
Verified .
- Update a plugin or theme — WordPress.com Support
Supports: WordPress.com automatically updates eligible WordPress.org repository plugins and themes and its own themes. Other third-party items may require manual updates or their own updater.
Location in source: Automatic updates > managed plugins and themes
Verified .
- Back up your WordPress.com site — WordPress.com Support
Supports: WordPress.com automated backups require an eligible activated Business or Commerce plan. Backups run at least daily; eligible plans can restore backups from the past six months, with 30-day retention after plan removal.
Location in source: Availability; About WordPress.com backups; Back up a site on Free/Personal/Premium
Verified .
- Exporting or Embedding Your Wix Site Elsewhere — Wix
Supports: Wix says it performs platform software updates automatically and its proprietary sites must run on Wix servers. Customer-created content belongs to the customer.
Location in source: Automatic Setup & Updates; SaaS hosting limitation; content ownership
Verified .
- Advertising FAQ’s: A Guide for Small Business — U.S. Federal Trade Commission
Supports: FTC states advertising must be truthful, nondeceptive and substantiated; materially misleading claims require contextual fact-specific review.
Location in source: What truth-in-advertising rules apply?; What makes an advertisement deceptive?
Verified .
- Do you need an SEO? — Google Search Central
Supports: Google warns against guaranteed first-place rankings and claimed special relationships, and says Google advertising does not affect organic placement.
Location in source: Introduction: advertising; precautions: no one can guarantee a number-one ranking
Verified .
- Performance report (Search results): Overview and basic setup — Google Search Console Help
Supports: Search Console reports clicks, impressions, click-through rate and average position, grouped by queries, pages, devices and dates. Position and counts depend on reporting aggregation.
Location in source: Configuring the report > Choosing metrics / dimensions
Verified .
- General structured data guidelines — Google Search Central
Supports: Proper structured data may qualify for supported rich results, but Google does not promise the results will appear even if validated.
Location in source: Important: rich results are not guaranteed even with correctly marked-up pages
Verified .
- Selecting Web Accessibility Evaluation Tools — W3C Web Accessibility Initiative
Supports: Automated evaluation tools alone cannot determine whether a website meets accessibility standards; human evaluation is also needed.
Location in source: What Evaluation Tools Can Do and Can Not Do
Verified .
- Guidance on Web Accessibility and the ADA — U.S. Department of Justice
Supports: DOJ describes web accessibility obligations under ADA Titles II and III, links to separate requirements for state and local governments, and cautions that a clean automated accessibility report does not necessarily mean everything is accessible.
Location in source: When the ADA Requires Web Content to be Accessible; separate Title II rule notice
Verified .
- Fact Sheet: New Rule on the Accessibility of Web Content and Mobile Apps Provided by State and Local Governments — U.S. Department of Justice, ADA.gov
Supports: DOJ guidance describes the Title II state and local government web/mobile rule as generally requiring WCAG 2.1 Level AA. Its April 2026 interim-rule update extends compliance dates to April 26, 2027 for entities with populations of at least 50,000 and April 26, 2028 for smaller entities and special district governments, subject to the rule's scope and exceptions.
Location in source: April 2026 interim final rule update; Highlights: WCAG 2.1 AA; compliance-date table
Published . Verified .
- Transport Layer Security (TLS) — MDN Web Docs
Supports: HTTPS is HTTP secured with TLS. TLS protects the connection with encryption and integrity for data in transit and authentication, normally of the server to the browser; its scope is the network connection.
Location in source: Introduction: HTTPS and the three TLS connection protections
Verified .
- OWASP Top 10:2025 — OWASP Foundation
Supports: OWASP identifies access control, misconfiguration, injection and other serious risks relevant to web applications.
Location in source: 2025 list: access control, misconfiguration, supply chain, injection and authentication
Verified .
- Information for Domain Name Registrants — ICANN
Supports: ICANN explains that registrants enter registration contracts with registrars and have rights to information about managing, transferring, renewing and restoring domain registrations.
Location in source: What is a Registrant?
Verified .
- Chapter 2: Copyright Ownership and Transfer (17 U.S.C. §§ 201, 202, 204) — U.S. Copyright Office
Supports: Copyright generally initially vests in the author; buying a copy does not itself transfer copyright; transfers normally require signed writing, subject to legal exceptions.
Location in source: 17 USC sections 201, 202 and 204
Verified .
- Export your site content — Squarespace
Supports: Squarespace exports selected content in a WordPress-compatible XML file, but excludes specified page types including store pages, style settings and custom CSS; not all images necessarily migrate with the importer.
Location in source: What exports to WordPress and what does not; styles, CSS, store pages
Verified .
- Export WordPress Content — WordPress.com
Supports: WordPress.com exports posts, pages and comments as XML, with links to media rather than the media files themselves. The basic export omits theme design, customizations and plugins; full-site migration requires an appropriate migration process.
Location in source: Prepare for export; About your export file; full migration alternatives
Verified .
- Revision of the Negative Option Rule, Withdrawal of the CARS Rule, Removal of the Non-Compete Rule — Federal Trade Commission
Supports: FTC final action effective February 12, 2026 recodified the pre-2024 Negative Option Rule text after a court vacated the expanded 2024 rule. This does not establish a universal cancellation entitlement for agency contracts.
Location in source: Federal Register 91 FR 6507; Summary, effective date, and section I.A on the Negative Option Rule
Published . Verified .