Website Maintenance, Hosting and Support

The exact list depends on your platform, but a typical plan contains the following:

• updates to the core system, themes and extensions, applied on a staging copy first;
• automated backups stored away from the live server, with a restore test at agreed intervals;
• uptime monitoring and alerts, plus checks of the security certificate and domain renewal dates;
• security review: user accounts, permissions, unused plugins and known vulnerabilities;
• small content and layout changes within an agreed monthly allowance;
• a short report on what was done.

The UK National Cyber Security Centre's guide for small organisations says the best way to protect against viruses and other malware is to keep all devices up to date, including the software and apps they use, and to replace software that no longer receives updates. It advises backing up all the data a business needs to operate, and it names the website as one example. A backup drive should not stay connected when it is not in use, and once a backup is made you should know how to restore it and check that it contains all your important data.

The NCSC's 10 Steps guidance describes the popular 3-2-1 rule: at least three copies, on two devices, with one offsite backup. It also recommends an offline backup kept separate from your network, because attackers may target backups. Our maintenance work applies the same thinking to websites.

Hosting can be part of the agreement or stay with your current provider. If it stays, we work with the access you give us and list what we can and cannot influence. If we host, the contract names where the data is stored, who has access and how backups are kept. If personal data is processed on your behalf, the ICO's guidance on the UK GDPR is clear: every time a controller uses a processor, there must be a written contract that binds the processor (Article 28). We put that contract in place rather than leave it implicit.

The agreement sets out how you reach us, which requests count as urgent, and the response time we commit to for each category. It separates three things: routine care included in the fee, requests handled within an allowance, and larger changes that are quoted as projects. You always see in advance which category a request falls into. Out-of-scope work is never started without your approval.

Once a quarter, or at another rhythm you choose, we briefly review the state of the site: what was updated, which risks are still open, and whether a larger change is coming, such as a new PHP version or a different theme. That makes maintenance planned rather than reactive, and you keep control over effort and order of work.

If someone else built your site, we begin with a short onboarding: access to hosting, domain and admin accounts, an inventory of plugins and integrations, a first backup and a list of risks we find. You get that list before the agreement starts, so there are no surprises. Fees are given on request after the review, because they depend on the platform and the number of integrations. A new website starts from 300 € excl. VAT, see pricing. To discuss a plan, contact us or request a quote, and see our other services if you also plan changes.

Can you maintain a site you did not build?

Yes. We start with a short review of access, plugins and risks, and you receive that list before any agreement begins.

How much does maintenance cost?

It depends on the platform and the number of integrations, so it is quoted on request after the review.

Do you keep my current hosting?

If you prefer, yes. We work with the access you provide and state in writing what we can and cannot influence.

What happens in an emergency?

The agreement defines urgent requests and the response time committed for each category.

Are content changes included?

Small changes are covered by a monthly allowance. Bigger changes are quoted as a project.