October 2026: critical PHP flaws October 2026: critical PHP flaws and mass TLS certificate revocations. Is your site affected? Read the advisory

Home / Website maintenance

Website maintenance

Website maintenance that keeps you patched, online and backed up.

Updates, monitoring, backups and certificates, handled by engineers, with a monthly report so you always know where your site stands. For sites we build and sites we inherit, PHP included.

  • Fixed monthly or yearly fee
  • Updates tested before release
  • Priority patching for new threats

What's included

Everything a business website needs to stay safe

Every care plan covers the essentials below. Plans differ in how many sites, how often, and how fast we respond.

Security updates

PHP, framework, CMS, plugin and theme patches, tested on staging before they reach your live site.

Uptime monitoring

Round-the-clock checks with alerts to us, so problems are found before your customers notice.

Off-site backups

Automated daily backups stored separately from your hosting, with regular restore tests.

SSL/TLS certificates

Automatic renewal and expiry monitoring, and a fast replacement if a certificate authority revokes yours.

Security hardening

Security headers, firewall rules, login protection and periodic reviews of who has access.

Performance checks

Load times and Core Web Vitals tracked, with regressions fixed before they cost you rankings.

Monthly report

What was updated, what was blocked, and what we recommend next, in plain language.

Support when you need it

A direct line to the engineers who look after your site, for questions, changes and fixes.

Node.js, TypeScript, Go & Python applications

Application maintenance: vulnerable dependencies patched, critical updates shipped

Your APIs, back ends and internal tools need the same care as your website. We keep them on supported runtimes with patched dependencies, without breaking production.

Vulnerability scanning

Continuous checks of npm, Go module and Python dependencies with npm audit, govulncheck and pip-audit, plus GitHub or GitLab security alerts.

Critical security updates

Vulnerable packages patched quickly, tested in CI and released through your normal deploy process.

Runtime upgrades

Node.js LTS lines and Go releases lose security support on a fixed schedule. We upgrade before yours does.

Supply-chain protection

Lockfiles pinned and reviewed, new dependencies vetted, and fast action when a package is compromised.

Major version upgrades

TypeScript, Express, Next.js, NestJS, Gin and Django upgrades planned and shipped in small, safe steps.

Containers & CI

Base images rebuilt with security patches, pipelines kept green, and dependency-update bots configured and triaged.

How it starts

Taking over your website, step by step

We maintain WordPress, WooCommerce, Laravel, custom PHP, Django, Wagtail and static sites, plus Node.js, TypeScript, Go and Python applications, on the hosting you already have.

  1. Audit

    We review the site, its code and its hosting with a security audit.

  2. Fix the urgent things

    Critical issues are fixed first, at a fixed price.

  3. Onboard

    Monitoring, backups and the update routine are set up and access is documented.

  4. Ongoing care

    Updates, checks and a monthly report, with us on call when you need us.

Plans sized to your website

A fixed monthly or yearly fee based on how complex your site is and how critical uptime is to your business. No hourly surprises.

Ask for a quote

FAQ

Maintenance questions

Do you maintain websites you didn't build?

Yes. We start with an audit, fix anything urgent at a fixed price, then take the site over on a care plan. WordPress, Laravel, custom PHP, Django and static sites are all welcome.

What happens when a vulnerability like php2shell is announced?

Sites on a care plan are checked and patched as a priority, and you get a short note explaining what was affected and what we did.

Do you also maintain Node.js, TypeScript and Go applications?

Yes. We patch vulnerable npm and Go module dependencies, ship critical security updates and keep applications on supported Node.js and Go versions, with every change tested in CI before release.

Can we keep our current hosting?

Yes. We work with your existing host. If the hosting itself is holding the site back, we'll recommend a move and handle it for you.

How much does website maintenance cost?

A fixed monthly or yearly fee, sized to your site: how complex it is and how critical uptime is to your business. Ask for a quote after the security check.

Contact

Book a website security check

Tell us your website address and what's worrying you. For a small fixed fee, we check it and reply with what we found and what we recommend.

  1. Send the formYour website address and a short description are enough.
  2. We check your siteA non-intrusive outside check of PHP and server versions, CMS, TLS and security headers.
  3. You get a clear answerWhat's at risk, what to fix first, and a fixed price if you want us to do it.