Website agency Malaysia: what's included (and what costs extra)

A website agency in Malaysia normally includes discovery, design, development, a CMS with a training session, basic on-page SEO setup, testing, launch and 14 to 30 days of bug fixes. Copywriting, photography, content migration, integrations, redirect mapping, hosting and later support are usually extra. Ask for a line-by-line scope before comparing prices.

Two quotes for "a company website" can sit RM10,000 apart and describe the same page count. Most of that gap is scope one agency wrote down and the other left out.

Why two quotes for the same site never match

When the scope is vague, the price is a guess about how much you will push back later.

Take the line "5-page corporate website" with nothing after it. It does not say whether the site is bilingual, whether the contact form feeds a CRM, who writes the words, or what happens when the logo arrives as a screenshot. Every one of those gaps becomes a change request.

For a custom brochure site, the usual budget is RM 15,000 to RM 30,000 over 6 to 10 weeks. A custom quote far below RM 15,000 is probably a template or missing a rung. Above RM 30,000 you are paying for custom functionality, a larger page count or a heavier content job.

Template-based sites usually run RM 8,000 to RM 15,000 over 3 to 5 weeks. The schedule side is covered in web design agency Malaysia timelines and what's normal in a quote.

The CUBEevo Scope Ladder

We sort every line of a website quote onto four rungs, so quotes written in different shapes can be compared.

1. Build (Rung 1): discovery, sitemap, design, front-end development, CMS setup, responsive layouts, on-page SEO basics, browser testing.
2. Launch work (Rung 2): redirects, analytics and event tracking, forms, privacy and cookie pages, performance testing, backups, SSL, handover.
3. Content inputs (Rung 3): copywriting, photography, video, translation, product data entry, migration of old pages.
4. After launch (Rung 4): hosting, security patches, content updates, performance monitoring, new pages, support hours.

Every agency is clear about Rung 1 because it is what they sell. Rungs 2 to 4 are where a website design quote in Malaysia goes quiet, and silence on a rung means "not included" until the quote says otherwise in writing.

What a website agency in Malaysia includes as standard (Rung 1)

These items belong in any serious quote, and you can reasonably object if they are billed separately.

• A discovery step, even a short one, covering your customers, your competitors and what the site must do.
• A sitemap and page structure agreed before design starts.
• Visual design for desktop and mobile, with a stated number of revision rounds (two or three is normal).
• Front-end development that works on current Chrome, Safari, Edge and Firefox.
• On-page SEO basics: page titles, meta descriptions, heading structure and an XML sitemap.
• A CMS you can log into and edit yourself, plus a training session.
• Basic QA across devices before you see a staging link.

"Unlimited revisions" usually means the project drifts to month five. Set a fixed number instead. A round is one consolidated list of feedback.

Launch work that gets left off the quote (Rung 2)

Rung 2 covers redirects, tracking, legal pages, performance and handover. Cheap quotes tend to omit the parts of it that take real hours: redirects, event tracking and performance testing.

Redirects. If you already have a site and the URLs change, every old URL needs a permanent redirect to its new home. Google's site move guidance says to redirect old URLs to their new equivalents, and notes that a move with URL changes can cause temporary fluctuations in search rankings while Google processes it. Without a line for redirect mapping when you redesign a website, expect to lose rankings. The mapping is usually billed as extra.

Analytics and tracking. Installing GA4 and Search Console is a small job. Event tracking for form submissions, WhatsApp clicks and phone taps, so you can tell which pages bring enquiries, takes longer and is often its own line. Check that the events tracked at launch are listed.

Legal pages. Malaysia's Personal Data Protection (Amendment) Act 2024 raised the maximum penalty for breaching the data protection principles to RM1 million and/or three years' imprisonment, as summarised by Baker McKenzie. Any site that collects names and emails needs a privacy notice that matches what the form does. Most agencies install a template page and recommend a legal review. Refuse a form that collects data with no privacy page.

Performance. Google's thresholds for a "good" experience are a Largest Contentful Paint of 2.5 seconds or less, Interaction to Next Paint of 200 milliseconds or less, and Cumulative Layout Shift of 0.1 or less, measured at the 75th percentile of visits, as set out in Google's Web Vitals guide. A proper quote commits to testing against those three numbers before launch.

Handover. The domain, the hosting account, the code repository and the CMS admin should all be registered in your company's name before launch.

Content inputs that cause surprise bills (Rung 3)

Copywriting. Many quotes assume you supply final text, so check who writes it and in which languages. Agency copywriting is priced per page or per project, and a bilingual site needs translation priced on top.

Photography and video. Stock images are cheap and look it. A half-day shoot with a photographer in Kuala Lumpur is a separate line item, even when the agency arranges it.

Migration. With 200 product pages or 80 blog posts on an old WordPress site, somebody has to move them. Agencies pick one of three routes: a script that moves everything and leaves the clean-up to you, a manual migration billed per page, or moving only the top 20 percent of pages by traffic and retiring the rest. The third is usually right, and you should agree it before the quote is signed.

After launch (Rung 4)

Plugins need updating, certificates renew, forms break when a third-party service changes its API, and somebody has to notice. Expect 14 to 30 days of bug fixes in the base price. Hosting and content updates usually are not in it, and without Rung 4 in writing, fixes after the first month are billed at a call-out rate. If you don't want to learn the CMS, take a monthly retainer with a stated number of hours and a clear rule on unused hours.

Included or extra, item by item

This table answers what is included in a website quote and what is billed on top.

Item	Usually included	Usually extra	What to ask
Discovery and sitemap	Yes		How many hours or workshops?
Design, desktop and mobile	Yes		How many revision rounds?
On-page SEO basics (titles, meta, sitemap)	Yes		Are titles and meta written per page?
CMS setup and training session	Yes		Is training recorded?
GA4 and Search Console install	Yes		Who owns the accounts?
Conversion event tracking		Yes	Which events are tracked at launch?
Template privacy and cookie pages	Yes		Is the text tailored to the forms on the site?
Legal review of those pages		Yes	Who checks it against PDPA?
Redirect mapping from an old site		Yes	Who maps the URLs, and how many are covered?
Copywriting		Yes	Per page or per project?
Photography and video		Yes	Is stock licensed in your name?
Bilingual (EN/BM/ZH) build		Yes	Is translation included or only the layout?
Content migration		Yes	How many pages, and which ones?
Third-party integrations (CRM, payment, booking)		Yes	Which APIs, and who owns the accounts?
Hosting and security patches		Yes	Monthly or yearly, and where is it hosted?
Bug fixes, first 14 to 30 days	Yes		What counts as a bug versus a new request?
Support after that window		Yes	How many hours a month, and do unused hours roll over?

Three line items that change the total most

Three decisions swing a website budget more than page count does.

E-commerce. A product catalogue, a payment gateway, shipping rules and tax set-up turn a brochure site into a different project, and the platform choice moves the cost again. Our comparison of Shopify vs WooCommerce in Malaysia has the numbers.

Custom functionality. A quote calculator, a members area or a booking flow is software and needs its own scope and estimate.

The technical stack. A template theme is cheaper to build, and moving off it later usually means a rebuild. A custom front end costs more upfront and buys speed and control, which pays off only if your team will use it.

How to get a quote you can compare

Send every agency the same one-page brief with five things: your goal (leads, bookings, sales), the pages you expect, the languages, any existing URLs to protect, and who supplies the content. Then have each agency answer against the four rungs.

Expect questions back first. An agency that sends back a PDF within two hours with no questions has priced a template.

If the quotes still differ once the scope lines up, the difference is experience, process or who does the work, and that can justify paying more. The WATCH check for website design agencies is a short filter for telling those cases from the ones where you are paying for slide design.

If you want one website agency in Malaysia to handle the build, the launch work and the retainer, a full-service digital agency Malaysia should be able to put all four rungs on one quote.

Frequently asked questions

What does a website agency in Malaysia usually include in its quote?

Discovery, sitemap, design for desktop and mobile, front-end development, CMS setup with a training session, basic on-page SEO setup, testing, launch and 14 to 30 days of bug fixes. Content, photography, redirect mapping, integrations, hosting and longer-term support are normally separate lines.

How much does a website agency in Malaysia charge?

Custom brochure sites in Malaysia typically run RM 15,000 to RM 30,000 over 6 to 10 weeks, and template-based sites RM 8,000 to RM 15,000. E-commerce, multi-language builds and custom features push website development cost in Malaysia higher.

Is hosting included in a web design quote?

Usually not. A web design agency in Malaysia that resells hosting charges a monthly or yearly fee, and the renewal price after year one is the figure to check, along with who owns the account.

Who writes the content for the website?

Usually you do. If the agency writes it, the copy should be its own line priced per page. Bilingual sites need translation on top.

Will I lose my Google rankings if I change agency or redesign?

Not if the old URLs are redirected properly. Google recommends redirecting old URLs to their new equivalents, though some temporary ranking movement is normal after a move. The quote should say who maps the redirects and how they are checked after launch.

Should I pay for a maintenance retainer?

If nobody in-house can update the CMS, apply security patches and watch performance, yes. Look for a stated number of hours each month and a clear rule on unused hours.