Website maintenance. Preventive. Not reactive.

Five recurring activities. One, uptime monitoring (24/7 external pings with SLA-backed alerts). Two, security patches (CMS core, plugins, themes, dependencies) applied weekly or as urgent. Three, daily off-site backups with quarterly restore tests. Four, performance monitoring (Core Web Vitals, server response time) with regression alerts. Five, allocated development hours for fixes, small features, and content updates. Emergency response (broken page, failed checkout, security incident) is included at higher tiers with a same-day SLA.

Hosting support covers the server and the platform: disk, memory, network, CMS core. It does not cover your plugins, your theme, your JavaScript, or your specific customizations. A typical Shopify or WordPress site has 8 to 20 installed plugins or apps; when one of them breaks checkout or introduces a JavaScript error, hosting support points to the plugin vendor and the plugin vendor points back. Website maintenance covers the gap: someone who knows your site, your plugins, and your business, on contract to fix whatever breaks.

Yes, with a 2-week inheritance audit first. The audit covers: platform version and update status, plugin and theme inventory with known-vulnerability check, backup and recovery setup verification, performance baseline (Core Web Vitals, time-to-first-byte), security posture (HTTPS, security headers, admin access), and a risk register. We then onboard onto the retainer; urgent issues the audit surfaces go in the first-month dev-hour allocation so you do not pay extra.

Essential tier: 48-hour business-hour response for non-critical items, best-effort same-day for emergencies (broken checkout, down page). Standard tier: 24-hour response for non-critical, 4-hour business-hour response for emergencies. Premium tier: 4-hour business-hour response for non-critical, same-day written SLA for emergencies including evenings and weekends. Every response-time commitment is in writing in the contract, not a marketing claim.

Yes. Every tier runs month-to-month after the first month. 30-day written notice to cancel. On cancellation we hand over all access credentials, current backup, a written status of every in-progress item, and a 2-week grace period for emergency issues. No long-term contracts, no automatic renewals past the opt-out window, no data hostage situations. The easiest way to earn the next 12 months of retainer is to make leaving easy.

Defined emergency runbook. Trigger: pageviews drop, error-rate spike, defacement, exfiltration alert, ransomware indicator. Step one: site goes into a maintenance-mode page with a clear message; the affected service stops accepting traffic. Step two: forensic snapshot taken before any remediation. Step three: lateral exposure check (other sites on shared hosting, related accounts). Step four: clean restore from the most recent uncompromised backup. Step five: written post-mortem within 5 business days. Premium tier includes evening + weekend coverage; Standard is business-hours best-effort.