What is actually included in a website hosting plan?

A hosting plan supplies a defined technical service, but its surrounding features vary. Domain registration, email, content changes and recovery may be included, optional or absent. Read the plan as a list of deliverables and responsibilities rather than assuming that the word hosting means everything required to keep a business website useful.
In this guide
Separate the core service from adjacent services
The core question is where and how the website runs. Then identify domain registration, DNS management, certificate handling, email and application operation as separate lines. One supplier may provide all of them, but that does not make their billing or support identical.
A domain points customers toward services; owning hosting alone does not establish ownership of the domain. Ask which account holds each component and who can change it. This is particularly important when a package is purchased through a designer or reseller.
References: Biaway service catalogue: hosting and maintenance · Let's Encrypt: Getting started · Cloudflare: DNS record types
Translate feature names into work
For SSL, ask who configures and renews the certificate. For monitoring, ask what is checked and who responds. For backups, ask what is copied and whether restoration work is included. These questions turn an attractive label into an understandable service.
Avoid assuming the broadest possible interpretation. Monitoring that the homepage responds may not check whether the Arabic enquiry form reaches the right inbox. Agree the useful checks for the business rather than rely on an undefined promise.
Read Biaway's scope precisely
Biaway's catalogue reviewed on 15 October 2026 lists annual hosting for Biaway websites at SAR 250, with hosting, SSL, deployment, DNS configuration, basic security, availability monitoring and basic technical hosting support. CDN/performance infrastructure is listed where applicable.
The catalogue separately lists minor maintenance. It does not specify every possible licence, mailbox, backup retention period or incident response target. Confirm those requirements in a quotation if they matter to your project instead of quietly adding them to the advertised package.

Check the customer-specific dependencies
An illustrative Hofuf service business covering Mubarraz and Al Ahsa may depend on WhatsApp links and a simple enquiry form. A Dammam and Khobar supplier may need document uploads. Identify the service behind each function and whether its cost and support are included.
For Riyadh and Jeddah campaigns, check landing-page updates and conversion-related configuration separately from infrastructure. Serving Saudi Arabia through one website does not mean a hosting subscription includes unlimited campaign implementation.
Build an inclusion sheet before acceptance
Use four columns: requirement, included work, owner and cost if excluded. Leave unanswered items visible. Give the sheet to both the website builder and hosting provider so no task disappears between their agreements.
At handover, verify access, deployment, certificate operation and the actual contact journey. Save the accepted scope with renewal details. A short accurate agreement is more useful than a long checklist of impressive features that nobody has defined or tested.
References: Biaway service catalogue: hosting and maintenance · Let's Encrypt: Getting started · Cloudflare: DNS record types
How this guide was prepared
Prepared with AI assistance, with platform and accessibility claims checked against the primary sources below at publication. The planning frameworks are Biaway’s editorial recommendations. Examples labelled illustrative are not client stories or measured results. Platform features and requirements can change.
Your questions.
01Does hosting include website design?
Not automatically. A bundled offer may include both, but construction and operation should still have separate clear deliverables.
02Does basic security mean malware removal is included?
Do not assume so. Ask about prevention, monitoring, incident response and cleanup as distinct tasks.