Updates on a schedule
Core, plugins, themes and dependencies applied to staging first, checked, then pushed live. Not clicked blindly on a Friday.

Updates, tested backups, monitoring and security patching for the website you already have. We built it or somebody else did, and either way you get a report every month that says what actually happened.
Off-site
Backups stored away from the host
Restored
Backups tested, not assumed
Monthly
Written report
24/7
Uptime monitoring
Keeping your site online, current and safe. Core, plugin and dependency updates on a schedule, off-site backups that have actually been restored, uptime and certificate monitoring, then known vulnerabilities patched before anyone uses them.
It is not the same thing as making changes. Content edits and new features are separate work with their own estimate. Maintenance is the part that stops your site quietly rotting between projects.
Core, plugins, themes and dependencies applied to staging first, checked, then pushed live. Not clicked blindly on a Friday.
Stored off-site and test-restored, because an untested backup is a guess. Retention agreed in writing.
Checks from outside your network, with an alert when the site is down or an SSL certificate is about to expire.
Vulnerability advisories tracked for what you actually run, patches applied ahead of exploitation and abandoned plugins replaced.
Core Web Vitals reviewed regularly, because sites get slower one uploaded image at a time.
What was updated, what broke, what was fixed, your uptime and anything that needs a decision from you.
The schedule in writing, so there is no argument about what you are paying for.
| Task | Frequency | Why it matters |
|---|---|---|
| Uptime and SSL checks | Continuous | An alert reaches us before your customers notice |
| Off-site backup | Daily | Recovery point measured in hours, not weeks |
| Core and plugin updates | Monthly, security fixes immediately | Outdated plugins are the leading cause of compromise |
| Restore test | Quarterly | Proves your backup is real |
| Core Web Vitals review | Quarterly | Catches the slow drift after months of edits |
| Written report | Monthly | A record of what changed and what needs deciding |
Stated plainly, because this is where most maintenance contracts get vague.
Ownership, deadlines and defects are where web projects go wrong. We put all three in the contract, not just on this page.
Repository, hosting and domain credentials are in your name before we write a line of code. Not handed over at the end, not held as leverage.
Milestone dates are fixed in writing before the project starts. You always know what ships next and when.
Anything that breaks because of how we built it gets fixed free for 90 days after launch.
Yes, after a technical review. We check the hosting, the codebase, the update backlog and whether backups exist and restore. That review tells you what state the site is genuinely in and what it takes to get it to a maintainable baseline. Occasionally the honest answer is that a rebuild costs less than propping it up, and we will say so.
It depends on the platform, the traffic and how much change you want included. A small WordPress site on a standard host is a different job from a custom application with integrations that need watching. We quote after reviewing what you run rather than publishing a tier that would not fit your site anyway.
On a maintained site the first step is restoring the most recent clean backup, then finding the entry point and closing it before going live again. Recovering a site that was already compromised before it reached us is separate work, priced after we see what was done to it. We will always tell you whether the malware reached the database or only the files.
No. Anything that breaks because of how we built it is fixed free for 90 days after launch regardless. After that you can take a plan, hire someone else or handle updates in-house. Because you own the hosting and the code, none of those doors are closed to you.
Usually yes. We work with whatever you already run, including UAE-based hosting where data residency requires it. If the host is genuinely the reason the site is slow or unreliable, we will show you the evidence and let you decide rather than moving you by default.
Send your brief and get a fixed scope, a written timeline and a real number back within one business day. No discovery-call maze, no sales sequence.