We watch the version you cannot control
Every month we check the bundled builder and slider versions on your site against the current releases, and the theme against its own last update. None of that appears in your WordPress updates screen, because a bundled plugin does not report to it — which is exactly why these sites drift years behind without anybody noticing. You get the gap in plain numbers, and a recommendation only when the gap becomes a reason to act rather than a reason to worry.
Core and everything else still gets updated, carefully
The parts you can update are applied on a staging copy first, with the pages that use the builder most heavily checked before anything reaches the live site. That ordering matters more here than on a typical site: a core or PHP change can alter how old shortcodes render, and the failure is usually visual rather than an error, so nothing alerts you. The check is a human looking at the pages that earn money.
The security work that actually applies to this stack
Generic hardening is worth little on a site whose exposure is a known vulnerability in a component that cannot be patched. What helps is specific: blocking the request patterns that target the historic slider exploits, restricting who can upload and what, and watching the files those exploits write. If a site is compromised anyway, cleanup starts from $299 and we would rather have prevented it.
Backups you can actually restore, tested on this site
A backup of a bundled-theme site is only useful if the theme and its licence state come back with it, which is the part most backup plugins are quietly bad at. We take a copy that includes the theme as installed, keep enough history to go back past a problem you did not notice for a fortnight, and restore one to a scratch environment periodically to prove the restore works. An untested backup is a belief, not a safeguard.
Small changes, without opening the builder unnecessarily
Text corrections, price updates, a new staff photo, a seasonal banner — the work most sites need monthly. On a WPBakery site each of these carries a small chance of a layout shifting, so we make them, check the published page at the widths that matter, and keep a note of what changed. Plan hours cover these, and the notes are what make the next change quicker rather than a fresh archaeology exercise.
A standing answer to "when do we have to do something"
The genuinely useful thing a plan gives you here is a date rather than a worry. We keep a running position on how long this arrangement remains reasonable, based on the theme's update history, the severity of anything published against the bundled versions, and how much the site earns. When that position changes, you hear it early and with options — a direct licence, a theme replacement, or a staged move — rather than in the week something breaks.
What the plans cost
Care starts at $159/mo a month and covers monitoring, updates, backups and small changes. The development plan at $700/mo adds a standing allowance of build time, which suits sites that change most months rather than occasionally. Anything beyond a plan's hours runs at the same published rates as everywhere else — $750 and $1,400 for blocks, $165 hourly. Plans are monthly and can be cancelled; nothing here is a contract you have to argue your way out of.