Updates, tested first
Plugins, themes and dependencies updated on a staging copy first, checked that nothing broke, then pushed live — never straight onto your customers.
Websites do not look after themselves
Plugins break. Dependencies go stale. Pages get slower every month nobody is watching. We keep yours patched, backed up and fast — and we fix things before your customers are the ones who tell you.
Nothing Goes Wrong. Until It All Does at Once.
It gets hacked. An outdated plugin is the front door. You find out when Google flags your site with a red warning screen, and by then customers have already seen it.
It quietly gets slower. Nobody notices a site going from 2 to 6 seconds over a year. Your visitors do — they just leave instead of complaining.
It breaks on a Friday night. A plugin auto-updates, the checkout stops taking payments, and you find out on Monday from an angry customer. That is a weekend of lost sales.
None of this is dramatic. It is just neglect, and it is entirely preventable.
What We Actually Do Every Month
Real backups
Off-site, automated and actually tested by restoring them. A backup nobody has ever restored is not a backup — it is a guess you find out about at the worst moment.
Security patches
Known vulnerabilities across both the website and the server — core, plugins, dependencies and OS packages — closed as they are disclosed, before a scanner finds them open.
Uptime & SSL monitoring
Round-the-clock checks on uptime, SSL certificates and domain expiry. If it drops or a certificate is about to lapse, we know before your customers do.
Speed & optimisation work
Core Web Vitals watched every month, not measured once and forgotten. We tune caching, compress images and trim heavy scripts so the site does not creep back to slow.
A monthly report
A full plain-English summary — patches applied, vulnerabilities closed, updates tested, speed numbers and anything we fixed.
Everything We Keep Running
WordPress maintenance
Where most of this work happens. WordPress runs a huge slice of the web and every plugin is a potential hole. We update on staging first, keep the core patched, clean the database, and watch for the plugin that quietly breaks your contact form.
Plugin updatesCore updatesDatabase cleanupMalware scans
Shopify & WooCommerce store care
A broken store is not an inconvenience, it is lost revenue by the hour. We watch the checkout specifically, test that payments still go through after every update, and keep the product pages fast during your busy season.
Checkout monitoringApp updatesPeak-season readiness
Speed & Core Web Vitals
Slow sites lose customers and rank worse. We audit what is actually slowing yours down — usually images, scripts, and a plugin doing far too much — then fix it with the right caching and optimisation setup, whether that is WP Rocket, LiteSpeed Cache, Perfmatters or a hand-rolled config. After that we keep measuring so it does not creep back.
Performance auditWP RocketLiteSpeed CachePerfmattersImagifyImage optimisationCachingCDN
Security & malware cleanup
If you are already hacked, we clean it, close the hole, and get you removed from Google's blocklist. If you are not, we harden the site with the right tools — Wordfence, Sucuri or iThemes Security — and make sure it stays that way.
Malware removalWordfenceSucuriiThemes SecurityFirewallSSLBlocklist recovery
Custom app & server maintenance
For the software we or anyone else built. Dependency updates, security patches, database health, server monitoring. The stuff that keeps working software working.
DependenciesServer monitoringDatabase health
VPS & cloud server management
If your site or app runs on its own box, someone has to look after the box. We manage VPS and cloud servers on DigitalOcean, AWS, Azure, Google Cloud, Hetzner and Linode, on Ubuntu, Debian or CentOS, and with or without a control panel like cPanel or Plesk — OS and security updates, firewall and SSH hardening, SSL renewals, resource monitoring, and scaling up before traffic knocks you over. Set up right, patched regularly, and watched so a full disk or a runaway process is our problem at 3am, not yours.
AWSAzureDigitalOceanHetznerUbuntuDebiancPanelPleskFirewall & SSHScaling
Taking over from another developer
Your developer disappeared, the agency folded, or you just want someone who answers emails. We audit what you have, document it properly for the first time, and take it over. This is more common than you would think and we are used to walking into a mess.
Code auditDocumentationHandoverNo judgement
What we run it on
WordPressWooCommerceShopifyNext.jsNode.jsCloudflareWordPressWooCommerceShopifyNext.jsNode.jsCloudflareWordPressWooCommerceShopifyNext.jsNode.jsCloudflare
WP RocketSentryUptime monitoringGitDockerBackupsWP RocketSentryUptime monitoringGitDockerBackupsWP RocketSentryUptime monitoringGitDockerBackups
How Getting on a Plan Works
01
Health check
Free. We audit what you have and tell you what is actually wrong, whether you hire us or not.
02
Fix the urgent
Anything broken or exposed gets dealt with in the first week.
03
Set up monitoring
Uptime, backups, error alerts. We find out before you do.
04
Monthly work
Updates on staging, speed checks, security patches. Quietly, in the background.
05
Monthly report
A full summary — security, patches, updates, speed, backups, and what needs a decision from you.
What It Costs
Monthly, no contract, cancel whenever. Cheaper than one emergency.
Essential
$150/month
For brochure sites and small WordPress builds. The basics, done reliably.
- Weekly updates on staging
- Daily backups
- Uptime monitoring
- Security patches
- Monthly report
- 1 hour of small changes
Business
$350/month
For stores and busier sites where downtime costs money.
- Everything in Essential
- Checkout & payment monitoring
- Speed optimisation
- Malware scanning
- Priority response
- 3 hours of changes
Managed
$750/month
For custom applications and sites you cannot afford to have go down.
- Everything in Business
- Custom app & server care
- Error tracking
- Same-day response
- Quarterly deep audit
- 8 hours of changes
Not ready for a monthly plan?
Fair enough. We also do one-off work — a speed audit and fix, a malware cleanup, or a rescue when your site is already down. Priced per job, no subscription, no pressure to sign up afterwards. Starts at $300.
Not sure which plan fits? Take the free health check and we will tell you honestly.
Questions We Get Asked
Yes, and about half our maintenance clients are in exactly that position — their developer vanished, the agency closed, or they just want someone who replies to emails. We audit what you have, document it, and take it over. We are used to walking into a mess and we will not lecture you about it.
Hosting keeps the server on. That is not the same thing. They do not test your plugin updates, they do not watch your checkout, and they will not notice your site has slowed to six seconds. Some offer 'managed' plans that are mostly automatic updates, which is what breaks sites in the first place.
You can, and if your site is simple you probably should. The problem is that updates break things, and they break things at the worst time. We update on a staging copy first, check nothing broke, then push it live. That is the whole difference.
We clean it, close the hole, restore from backup if needed, and deal with getting you off Google's blocklist. Included on all plans, no extra charge. That is the point of the plan.
No. Monthly, cancel any time, and you keep everything. If we are not earning it, you should not be paying it.
Text edits, swapping images, adding a page, changing a price, fixing something that broke. Not building new features — those are quoted separately. We are not precious about the hours and we will not nickel-and-dime you over ten minutes.
Maybe not. If it is a simple site, rarely changes, and you are comfortable updating it yourself, save your money. Take the free health check and we will tell you honestly. It matters most when your site makes you money, or when going down for a day would hurt.
Find Out What Is Actually Wrong With Your Site
The health check is free and takes us about an hour. You get a plain-English list of what is broken, what is slow, and what is exposed — whether you hire us or not.