You stop bracing for downtime
- Scheduled updates
- Health watched
Updates go out on a schedule, server health is watched, and the routine care happens before it becomes an incident. Nobody has to remember.
We take full operational responsibility for your servers and systems, so you can focus on running the business.
No pressure. If we aren't the right fit for your stack, we'll tell you on the call.
Let us handle the technical chaos, you focus on what matters.
The complimentary infrastructure audit is a free call of 10–30 minutes. It does not include a written report; that is the paid Technical Assessment.
Yours to keep, whether or not you continue
They drift. Updates get postponed, nobody is quite sure when the backups were last tested. All of a sudden, it stops working.
The Hidden Risks
No proof it restores
Nobody can say when the last restore was tested.
Changes ship untested
Changes go live without a staging check.
One person holds it
Critical info sits with one person.
Customers find out first
You find out something is broken when a customer tells you.
What it costs when nobody owns it
Illustrative only. These show the shape of the loss, not a measurement.
The critical maintenance your team doesn't have time for, handled proactively and documented
Updates go out on a schedule, server health is watched, and the routine care happens before it becomes an incident. Nobody has to remember.
We monitor them and we test restores. An untested backup is only an assumption, and you should not have to find that out the hard way.
Uptime is monitored where your setup supports it, and a real person investigates. No ticket link, no queue, no waiting to be told.
Access is limited to the right people, credentials get rotated, and the configuration stays in a state you could hand over tomorrow.
What we cover is agreed in writing first. Not every package includes every responsibility at the same depth. Pricing sets out what each one covers.
Platforms we work with
Monthly technical operations with clear scope boundaries. No lock-in contracts, and no onboarding fee. Everything starts with a one-off Technical Assessment at $195: a full written report, with the fixes in priority order, that is yours to keep whether or not you go on to subscribe.
$149/ month USD
Professional services, clinics, small online shops. Agencies are quoted seperately
Recommended for most businesses
$390/ month USD
Businesses running Linux servers, Docker workloads, or custom apps and APIs.
Handing over server access is the part people hesitate over most. Here is how we handle it.
The narrowest access that does the job
We ask for what the agreed work needs and nothing broader, and we ask before taking more.
Your accounts stay in your name
Domains, hosting and servers remain registered to you. We are a guest in your accounts, never the owner of them.
Access is removed when the work ends
At the end of an engagement we hand over what we hold and remove our own access.
What we commit to
These are the ones that come up before anyone signs anything.
The Technical Assessment is $195, paid once before the review starts. You get a full written report: what we found, what carries risk, and the actions to take in priority order. It is yours to keep, and finishing it commits you to nothing. If you want ongoing operations afterwards, the subscriptions are $149 a month for Baseline Care and $390 a month for Operations. There is no onboarding fee on either.
Yes, and that is the normal case. We start by documenting what exists and setting up limited access. The agreement records exactly which systems are in scope, and anything not on that list is excluded.
A review limited to the systems you authorize: public-facing DNS and SSL/TLS configuration, web-server security headers, whether backups are reachable and what evidence exists that they work, any architecture documentation you give us, and relevant health logs you provide. We only assess systems you explicitly authorize us to review. You get a written report with observations, risks, and practical next steps.
A website, application, or server/vps are counted as one system, Feel free to book a call in which we can pick suitable plan for you, no charge, no obligations. .
No. The assessment is a complete piece of work on its own: you get the full report, with the actions in priority order, and it is yours to keep. Nothing in it obliges you to go on. If you would rather have someone carry out the fixes, the two monthly tiers are there, and there is no onboarding fee to join either of them.
No guaranteed incident resolution. No guaranteed uptime, and no financial uptime guarantee. No unqualified 24/7 monitoring or response. No guaranteed resolution time. The reply window below is the only time commitment.. No unlimited emergency work. Support channels, severity definitions, package priorities, and operational terms are agreed in writing.
Yes, and that is the point. We take on the server, backup and application maintenance sitting behind your client sites, and we never contact your clients. That goes in the agreement. Reports come to you and can be forwarded under your own branding. You pay a per-site rate and what you charge your client is yours to set. We recommend starting with one site and a paid assessment to get a feel for how we work.
Small and growing businesses whose digital systems matter day to day, but who have no in-house technical capacity. In practice that is usually a revenue-carrying website or online shop, a custom app or API, one or more Linux servers, an already-stretched internal team, or something built by a developer who is no longer around.
No. It is not a penetration test and not a formal security audit. It does not include active penetration testing, exploit simulation, deep source-code vulnerability audits, physical inspection of on-premises hardware, formal compliance audits or certification, or any intrusive test that has not been specifically authorized. It is a practical way to find visible issues and operational gaps, and it cannot guarantee every issue will be found.
It gets reviewed before a package is confirmed. System limits do not override complexity, criticality, workload, or dependencies, and server or multi-server environments that exceed standard complexity limits must be reviewed and may need a custom quote. We would rather say that up front than discover it halfway through onboarding.
Baseline Care includes Up to 2 systems, on a written inventory agreed before work starts, Core, plugin, and dependency updates where applicable, Backups on a documented schedule, Quarterly restoration verification, Uptime, SSL and domain expiry monitoring, Monthly written report, Up to 2 hours a month for small changes, Business-hours support, Monday to Friday, Enquiries answered within 1 business day. Operations includes Up to 5 systems, on a written inventory agreed before work starts, Everything in Baseline Care, Staging-first deployments where the architecture supports them, Incident triage and investigation during support hours, Access hygiene and credential rotation, Dependency and runtime patching, Up to 5 hours a month for maintenance tasks, Business-hours support, Monday to Friday, Production outage triaged within 4 business hours on Operations.
No. New feature development, major feature builds, and full website redesigns sit outside the retainer. There is no unlimited maintenance and no unlimited development included. Major development projects and work outside scope may be quoted separately, and anything beyond your included hours needs separate approval before it starts.
No. Support runs during business hours, Monday to Friday, and incident response covers triage, investigation and recovery within that window and the agreed scope. There is no out-of-hours cover, no on-call rota and no overnight monitoring. Support channels, severity definitions and package priorities are agreed in writing.
We triage and investigate within the agreed scope and support hours, and keep you informed. Restoring service can depend on things outside our control: your hosting provider, third-party vendors, your architecture, access permissions, and what the incident is. While we don't promise guaranteed resolution times for issues outside our control, we will keep you informed and advocate on your behalf with the vendor.
Unused monthly hours do not roll over, and work beyond the included hours or outside the agreed scope needs separate approval and may be quoted separately. You decide whether to go ahead before any of it starts.
Start with the complimentary audit call. We'll look at what you run and tell you what we find. If you want it written up in full, that's the Technical Assessment, yours to keep either way.
If we're not the right fit, we'll say so on the call.