WordPress Guide

WordPress for South African Small Businesses

What it is, what it costs, how to keep it running and how to get the most out of it. Written for business owners, not developers.

WordPress powers more than 43% of all websites on the internet. It is the platform behind everything from small business brochure sites to large news publications and online stores. For South African small businesses, it is also the most common choice when building a professional web presence, and with good reason.

But owning a WordPress site and getting value from one are two different things. This guide covers everything you need to know: how WordPress works, what it costs to build and maintain, how to keep it secure, what to do when it breaks, and how to grow it over time.

No technical background required.

What is in this guide

What is WordPress and why do so many businesses use it
What a WordPress site costs in South Africa
Building your site: what to expect
WordPress security: the basics every business needs
Maintenance: why it matters and what it includes
When things break: common problems and what to do
Growing your site over time
Choosing the right WordPress developer in South Africa

What is WordPress and why do so many businesses use it?

WordPress is an open-source content management system (CMS). That means it is software you install on a web server that lets you build and manage a website through a browser-based dashboard, without needing to write code for every change.

When people talk about WordPress, they usually mean WordPress.org, the self-hosted version where you own and control your site completely. (WordPress.com is a different thing: a hosted service with significant limitations on what you can customise.)

Why it is the dominant choice

A few reasons account for WordPress’s reach:

It is flexible. From a five-page brochure site to a complex multi-currency WooCommerce store, WordPress handles it. The same platform scales with your business.

It has a massive ecosystem. Tens of thousands of plugins extend WordPress’s functionality: payment gateways, booking systems, SEO tools, form builders, membership platforms. If you need a feature, there is almost certainly a plugin for it.

It is owned by you. Unlike a website built on a proprietary platform (Wix, Squarespace), a WordPress site belongs to you. You control the files and database. You can move hosts, switch developers, make any change you like.

It is SEO-friendly. WordPress gives you granular control over the elements search engines care about: page titles, meta descriptions, URL structures, site speed, schema markup. With a plugin like Yoast SEO, this becomes straightforward to manage.

It is widely supported. Because WordPress is so common, finding developers and support resources is easy. This matters when you need to expand or when something goes wrong.

The realistic downsides

WordPress requires ongoing maintenance. It is updated regularly, and plugins and themes need to stay current. A WordPress site you do not maintain is a security liability. This is not a reason to avoid it, but it is a reason to plan for it from day one.

What a WordPress site costs in South Africa

Cost varies significantly based on scope. The honest answer is that you get what you pay for, and the market has a very wide range.

Build costs

As a rough guide for the South African market in 2026:

Mini site / one-pager

A single-scroll landing page. Good for new businesses or service providers who need something live quickly. Expect R3,500 to R6,500 for a professionally built version.

Small business site

Four to eight pages, contact form, mobile-optimised, SEO foundations. The most common type. Professionally built: R10,000 to R20,000 depending on complexity.

E-commerce / WooCommerce

Online shop with product listings, cart and checkout. Pricing starts from R12,500 for a basic setup and rises significantly with product count, integrations and custom requirements.

These ranges assume you are working with a professional developer. Freelance marketplaces will offer lower prices; the trade-offs in quality, reliability and post-launch support are usually significant.

Ongoing costs

Beyond the build, factor in:

Hosting: R100 to R600 per month depending on provider and plan. Local hosts (Afrihost, Hetzner, RSAWEB) typically give better performance for South African visitors than overseas alternatives.
Domain: R200 to R400 per year for a .co.za domain.
SSL certificate: Free with most reputable hosts via Let’s Encrypt.
Premium plugins: Some functionality (advanced forms, booking systems, premium SEO tools) requires paid plugins. Budget R500 to R2,000 per year for these depending on your setup.
Maintenance plan: If you want someone to handle updates, backups and monitoring, a care plan typically runs from R850 to R2,100 per month depending on site complexity and service tier.

A realistic total ongoing cost for a maintained small business WordPress site in South Africa is R1,500 to R3,000 per month, covering hosting, any plugin licensing and basic maintenance.

Building your site: what to expect

A WordPress build follows a reasonably consistent process, though timelines and specifics vary by developer and project scope.

Typical stages

Brief and discovery: The developer understands what the site needs to do, who it is for, and what success looks like. A clear brief here saves significant time and money later.
Design: Either from a custom design or an adapted theme. You will review and give feedback, usually in two to three rounds.
Development: The design is built in WordPress. Pages are created, plugins installed and configured, and everything tested across devices and browsers.
Content population: Your copy and images go in. This is often the biggest single delay in a project, because only you can provide this.
Review and launch: Final checks, speed testing, SEO setup, and then the site goes live.

Realistic timelines

A small business site (four to eight pages) typically takes three to six weeks from kickoff to launch. A WooCommerce shop adds two to four weeks on top of that. Projects move faster when content is ready and feedback comes in consolidated, agreed rounds.

What you need to have ready

The biggest thing that slows projects down is content: copy, images, team photos, product descriptions. If you start a build without these ready, you will discover this the hard way around week three. Get your content together before the project starts, or build the wait into your timeline explicitly.

WordPress security: the basics every business needs

WordPress is the most targeted platform on the web. Most attacks are automated and completely indiscriminate, which means your site is a target regardless of how small or new your business is.

The good news is that most WordPress security breaches are preventable with a small set of consistent practices.

Keep everything updated

WordPress core, all plugins and your theme. When a security patch is released, the vulnerability it fixes is documented publicly. Running old versions is running known vulnerabilities.

Use strong credentials and 2FA

Long, random passwords. Two-factor authentication on all admin accounts. Change the default “admin” username. Brute-force attacks target these specifically.

Maintain off-site backups

A backup on the same server as your site is not a backup. Store copies off-site (Google Drive, Dropbox, S3). Test your restore process at least once.

A security plugin like Wordfence or Sucuri adds a web application firewall, malware scanning and login protection. The free versions cover the basics well. A monthly care plan with security scans takes this off your plate entirely.

POPIA and your WordPress site

South Africa’s Protection of Personal Information Act requires that any business collecting personal information takes reasonable steps to secure it. If your site has a contact form, a newsletter signup or a WooCommerce customer database, you are collecting personal information. A poorly maintained WordPress site, running outdated software with no security monitoring, is not a reasonable security posture under POPIA.

Maintenance: why it matters and what it includes

A WordPress site is not a once-off asset you build and leave. It requires ongoing care, not because WordPress is fragile, but because the ecosystem around it (plugins, themes, PHP, the web in general) keeps moving.

What proper maintenance includes

Core updates: WordPress itself releases regular updates. Major versions bring new features; minor versions are usually security patches.
Plugin updates: Most sites run ten to thirty plugins. Each has its own update schedule. Staying current reduces vulnerability exposure.
Theme updates: Parent theme updates need to be applied carefully to avoid overwriting customisations.
Backups: Daily off-site backups give you a clean restore point if anything goes wrong.
Uptime monitoring: Automated monitoring that alerts when the site goes down, so you know before your clients do.
Security scans: Regular malware scanning to catch infections early.
Performance checks: Load speed tends to degrade over time without active management.

What happens without it

Nothing, for a while. Then usually an unpatched plugin vulnerability gets exploited. Or a hosting PHP upgrade breaks a plugin that has not been updated in two years. Or the database grows so large that page load times double. Maintenance failures compound quietly and then break loudly.

DIY vs. a care plan

You can maintain a WordPress site yourself if you are comfortable in the dashboard and you set reminders to check for updates monthly. The risk is that updates still need to be tested before being applied to a live site, and a failed update without a clean backup can take your site down. A professional care plan handles the testing, the staging environment and the rollback, so you do not have to think about it.

For businesses where the website is a meaningful lead-generation or sales tool, a care plan is a very low cost relative to what a downed or hacked site costs in lost business.

When things break: common problems and what to do

WordPress sites break. Usually for a small set of well-understood reasons. Here is a quick reference.

White screen of death

A blank white page where your site should be. Usually caused by a PHP memory limit being exceeded, a fatal error in a recently updated plugin, or a PHP version incompatibility. Do not start clicking. Take a screenshot, note what you last did, and get help. Experimenting without a backup makes it worse.

Plugin conflict

A feature that was working yesterday has stopped working after an update. Two plugins are interfering with each other. The diagnostic approach is to deactivate all plugins and reactivate them one at a time until the problem reappears. The last one reactivated is the conflict source.

Hacked site

Spam links appearing in your content, Google showing a “dangerous site” warning, visitors being redirected elsewhere. Usually the result of an exploited plugin vulnerability. Do not try to clean this yourself unless you know what you are doing: a partial clean that misses the backdoor will result in reinfection. Get professional help.

Site disappeared from Google

Either a noindex setting got applied accidentally (check Settings > Reading in WordPress), robots.txt is blocking crawlers, or the site has been penalised. Check Google Search Console first. It will usually tell you what the issue is.

General rule

When your site breaks: stop, note what you see and what changed, and do not make changes you cannot undo. Almost everything is recoverable with a clean backup and clear information about what happened. The same situation without a backup is significantly harder.

Growing your site over time

A WordPress site does not have to stay the same after launch. Most successful small business sites evolve significantly over their first two to three years. Here is how to think about growth.

SEO and content

Search engine visibility is built over time through consistent, relevant content and well-structured pages. A blog or resources section lets you target the questions your potential clients are actually searching for. Each piece of content is a new entry point to your site from search.

If you want to go deeper on SEO, our complete guide to SEO for South African small businesses covers everything from keyword research to Google Search Console.

Speed and performance

Google uses page speed as a ranking signal and visitors increasingly expect fast load times. A site that loaded in two seconds at launch may load in five seconds eighteen months later without active performance management. Regular performance audits catch this before it starts costing you rankings.

Refreshes and glow-ups

A full rebuild is not always the answer when a site feels dated. A visual refresh, restructured navigation and updated copy can significantly improve a site’s performance without the cost or disruption of starting again. This is worth considering before assuming a site needs to be replaced entirely.

E-commerce expansion

If you started with a brochure site and want to add a shop, WooCommerce can be added to an existing WordPress site. The scope of this depends on what is already built and how the existing site is structured, but it is generally straightforward on a properly built WordPress foundation.

Choosing the right WordPress developer in South Africa

There are a lot of options in the South African market. The range in quality is enormous. A few things to look for:

What good looks like

A portfolio of recent, live sites you can actually visit and evaluate
References from clients willing to speak to their experience
A clear, written quote that specifies scope, revisions and what is excluded
A post-launch plan: maintenance, support, handover documentation
Transparency about ownership: domain, hosting, files all belong to you

Red flags

Very low prices without a clear explanation of what is being cut
Promises of specific Google rankings
Vague scope or no written quote
No mention of what happens after launch
Pressure to sign quickly

Local vs. overseas

Offshore freelancers are often cheaper. The trade-offs include time zone friction, no knowledge of the South African market (POPIA, local payment gateways, ZAR pricing, local search intent), and limited recourse if something goes wrong. For a business-critical website serving South African clients, local usually makes more sense.

Questions to ask before committing

Can I see three recent sites and speak to one of those clients?
Who owns the domain, hosting and files after launch?
What does the revision process look like?
What happens if the site breaks after launch?
Do you offer ongoing maintenance?

How tiger&type can help

We build, maintain and repair WordPress sites for South African small businesses. Here is where to start.

Build a new site

From a mini one-pager to a full WooCommerce store. Custom design, South African context, with a proper handover and documentation.

Web design service →

Maintain what you have

Monthly care plans covering updates, backups, security scans and uptime monitoring. Three tiers, month-to-month, no lock-in.

WordPress care plans →

Fix a broken site

Site down, hacked, plugin conflict or WooCommerce emergency? We diagnose and fix WordPress problems for South African businesses, fast.

WordPress rescue →

Go deeper: WordPress articles

Each of these articles covers one aspect of WordPress in more detail.

For SEO specifically, read the companion pillar: SEO for South African Small Businesses.

Ready to sort out your WordPress site?

Whether you are building from scratch, need someone to take maintenance off your hands, or have a site that is not behaving, get in touch. We will tell you what the right next step is. No pitch, no jargon.

Get in touch → See all services