Maintenance
Website and app maintenance, with one person who answers
Maintenance is a written agreement that someone watches the software your site or app runs on, applies security patches, keeps a tested backup and answers when something breaks. At Murarum it comes in three levels: security watch, planned updates, and evolutive maintenance billed on the hours worked. It can start at launch, after the 12-month bug warranty, or for a platform someone else built.
Three levels
Choose how much we look after
Each level includes the one before it. What we watch, how fast we react and what we report are written in the contract for your site.
Security watch
For a site that works and has to stay safe. We follow the security advisories for the exact stack you run and patch when it matters.
Includes
- Watching advisories for your language, framework, CMS and main dependencies
- Security patches, applied and tested
- A backup, with a restore tested on a schedule we agree
- A written reaction time for critical vulnerabilities, agreed for your site
- One named person to call
Updates
For a platform that must not fall behind. We keep it on versions that still receive fixes, before an advisory forces the move.
Includes
- Everything in Security watch
- Planned minor and major version updates: PHP or Node.js, framework, CMS
- Dependency upgrades, tested on staging before production
- A monthly report: what changed and what is due next
Evolutive
For a platform that changes with the business. This is our ongoing partnership, the Scale phase of how we work.
Includes
- Everything in Updates
- Monthly hours for improvements and small features, planned with you
- A backlog of next changes, reviewed every month
- Billed monthly for the hours actually worked, at a rate agreed in advance
In writing
What our maintenance contract states
So you never depend on goodwill. Each item is written for your site.
- Which stack we watch: the exact versions of the language, framework, CMS and main dependencies.
- The reaction time for critical vulnerabilities, agreed for your site and written down.
- Who on your side decides on maintenance mode, and how we reach that person when a patch cannot wait.
- How often backups run, where they are kept and when a restore is tested.
- The named person on our side, and who stands in when that person is away.
- Which updates are included, and which are quoted separately before the work.
- What we report each month, and in what form.
- That code, hosting and accounts stay in your company's name, and how the handover works if the contract ends.
Not worth paying for
Three things we do not sell
Some maintenance offers look generous and protect very little.
Hours that expire unused
A bundle of support hours that resets every month pays for availability. Nothing in it shows that anyone looked at your site. We bill work that was done and say what it was.
Round-the-clock on-call for a presentation site
Most presentation sites do not need 24/7 cover for every small issue. Fast reaction belongs to critical vulnerabilities and outages, and that is the time we write into the contract.
Blind automatic updates
Updating everything automatically, untested, trades one risk for another: a plugin update that breaks the contact form on a Friday night. We update on a plan and test before production.
Frequently asked questions
What does website maintenance include?
At the first level: watching security advisories for your stack, applying and testing security patches, a tested backup and one named person to call. The second level adds planned version updates and a monthly report. The third adds monthly hours for improvements, as an ongoing partnership.
How fast do you react to a critical vulnerability?
The reaction time is written in the contract and agreed per site, because a shop that takes payments and a presentation site do not carry the same risk. When a critical vulnerability is published, we tell you whether your site is exposed, what we propose and when it will be patched, then confirm in writing.
Do I need maintenance during the 12-month warranty?
The warranty covers bugs in what we built. It does not cover new vulnerabilities in the software your site runs on, such as PHP, Node.js or the CMS, nor version updates. Security watch covers that part, so it makes sense from launch.
Can you maintain a website another agency built?
Yes, after we look at it. We check the stack, the versions in production, who holds the access and whether backups exist, then tell you in writing what has to be fixed before we can take responsibility for it.
How much does maintenance cost?
There is no price list. The price depends on the stack, the number of platforms and the reaction time you need, and we quote it in writing after we look at the site. Evolutive maintenance is billed monthly for the hours actually worked, at a rate agreed in advance.
How we price
Not sure who would patch your site today?
If your site was delivered as a project and nobody looks after it, give us 20 minutes and we will tell you which versions it runs and which level makes sense.