We test and apply WordPress core, theme, and plugin updates weekly — typically during low-traffic hours. Critical security patches are applied immediately. You’ll see a summary in your monthly report.