You stop bracing for downtime
Updates go out on a schedule, server health is watched, and the routine care happens before it becomes an incident. Nobody has to remember.
We take full operational responsibility for your servers and systems, so you can focus on running the business.
No obligation. If we are not the right fit, we will say so on the call.
A call to establish fit and agree what would be reviewed. Scoped to what you approve.
The complimentary audit is a 20-minute call. It does not include a written report. If you want it in writing, that is the paid Technical Assessment.
You keep the business. We keep it running.
Yours
We do not touch these, and we do not need to.
Ours
The operational work, on a schedule.
Let us handle the technical chaos, you focus on what matters.
Free 20-minute systems check, so we both know whether this is for you. Then we do a technical assessment, paid once. The written report is yours to keep either way.
A short call to establish fit and agree exactly what would be reviewed. No report at this stage, and no obligation.
Done once, before the review starts. A review limited to the systems you approve: nothing intrusive, and nothing you did not authorize.
What we found, what carries risk, and what we would fix first. Yours to keep even if you do not continue.
Yours to keep, whether or not you continue
They drift. Updates get postponed, nobody is quite sure when the backups were last tested, and the person who built it moved on two years ago. None of that looks like a problem until the morning it does.
What it costs when nobody owns it
Illustrative only. These show the shape of the loss, not a measurement.
The jobs nobody on your team wants, handled on a schedule and reported in writing.
Updates go out on a schedule, server health is watched, and the routine care happens before it becomes an incident. Nobody has to remember.
We monitor them and we test restores. An untested backup is only an assumption, and you should not have to find that out the hard way.
Uptime is monitored where your setup supports it, and a real person investigates. No ticket link, no queue, no waiting to be told.
Access is limited to the right people, credentials get rotated, and the configuration stays in a state you could hand over tomorrow.
What we cover is agreed in writing first. Not every package includes every responsibility at the same depth. Pricing sets out what each one covers.
Five stages. Each ends in something concrete, and none of them commits you to the next.
20 minutes · free
We talk through what you run, what worries you, and whether this is the right kind of help.
$195, paid before the review. Includes the written report
A non-intrusive review, and a written report of what we found. Paid before the review starts.
In writing first
Which systems, what is included, what is not, and what it costs.
First month
Access set up, monitoring switched on, systems documented, backups proven.
Every month
Agreed maintenance, incidents handled, and a monthly report.
Every package is measured in systems we look after. The definition is deliberately narrow, so you know exactly what you are buying.
One standard CMS site, such as WordPress, or a static site on one domain.
One custom web app or API, including its main database.
One standalone Linux server on Ubuntu or Debian, with a standard web stack or Docker.
The assessment is a preliminary review limited to the systems you authorize. It is not a penetration test and not a formal security audit. It shows you visible problems and operational gaps so you can decide what to do next.
Only systems you are authorized to have reviewed are assessed.
It finds visible issues and operational gaps. It cannot guarantee that every issue will be found, and it is not unlimited discovery work or a full consultancy engagement.
Monthly technical operations with clear scope boundaries. No lock-in contracts. Everything starts with a one-off Technical Assessment at $195, which produces the written inventory these packages run against.
Baseline stability and disaster recovery for essential web assets.
$149/ month USD
$0 Onboarding Fee (save $120 when signed within 24 hours of your report)
Professional services, clinics, small online shops, and agency client sites.
Recommended for most businesses
Technical operations for active business applications and servers.
$390/ month USD
$0 Onboarding Fee (save $240 when signed within 24 hours of your report)
Businesses running Linux servers, Docker workloads, or custom apps and APIs.
Onboarding fees are waived in full on any plan if you commit to a monthly retainer within 24 hours of receiving your Technical Assessment report.
These apply to every package. They are what keeps scope clear on both sides.
The practices we hold ourselves to. They are not certifications, and we do not claim compliance with anything.
The narrowest access that lets us do the agreed job. Nothing broader.
What is covered, and what is not, written down before work begins.
Routine care happens on a schedule, not only after a failure.
We test that backups restore, because an untested backup proves nothing.
Changes get exercised outside production when the setup allows it.
A written record of work done, what we noticed, and what needs a decision.
Handing over server access is the part people hesitate over. Here is what we do.
The narrowest access that does the job
We ask for what the agreed work needs and nothing broader, and we ask before taking more.
Your accounts stay in your name
Domains, hosting and servers remain registered to you. We are a guest in your accounts, never the owner of them.
Access is removed when the work ends
At the end of an engagement we hand over what we hold and remove our own access.
What we commit to
These are the ones that come up before anyone signs anything.
The Technical Assessment is $195, paid once before the review starts, and the written report is yours to keep either way. Ongoing operations start at $149 a month for Baseline Care and $390 a month for Operations. Onboarding is $0 on either tier when you sign a retainer within 24 hours of receiving your report; otherwise the fee is $120 or $240.
Yes, and that is the point. We take on the server, backup and application maintenance sitting behind your client sites, and we never contact your clients. That goes in the agreement. Reports come to you and can be forwarded under your own branding. You pay a per-site rate and what you charge your client is yours to set. Start with one site and a paid assessment.
Small and growing businesses whose digital systems matter day to day, but who have no in-house technical capacity. In practice that is usually a revenue-carrying website or online shop, a custom app or API, one or more Linux servers, an already-stretched internal team, or something built by a developer who is no longer around.
Yes, and that is the normal case. We start by documenting what exists and setting up limited access. The agreement records exactly which systems are in scope, and anything not on that list is excluded.
A review limited to the systems you authorize: public-facing DNS and SSL/TLS configuration, web-server security headers, whether backups are reachable and what evidence exists that they work, any architecture documentation you give us, and relevant health logs you provide. You get a written report with observations, risks, and practical next steps. It creates no obligation to buy a retainer.
No. It is not a penetration test and not a formal security audit. It does not include active penetration testing, exploit simulation, deep source-code vulnerability audits, physical inspection of on-premises hardware, formal compliance audits or certification, or any intrusive test that has not been specifically authorized. It is a practical way to find visible issues and operational gaps, and it cannot guarantee every issue will be found.
A website is one standard CMS instance, such as WordPress, or one static web property on a single domain. An application is one custom web application or API runtime, including its primary database. A server or VPS is one standalone Linux instance running Ubuntu or Debian with a standard web stack or Docker containers. Third-party APIs, CDNs, and SaaS integrations do not automatically count as separate systems unless they require custom reverse-proxy management or additional work.
It gets reviewed before a package is confirmed. System limits do not override complexity, criticality, workload, or dependencies, and server or multi-server environments that exceed standard complexity limits must be reviewed and may need a custom quote. We would rather say that up front than discover it halfway through onboarding.
Baseline Care includes Up to 2 systems, on a written inventory agreed before work starts, Core, plugin, and dependency updates where applicable, Backups on a documented schedule, Quarterly restoration verification, Uptime, SSL and domain expiry monitoring, Monthly written report, Up to 2 hours a month for small changes, Business-hours support, Monday to Friday, Enquiries answered within 1 business day. Operations includes Up to 5 systems, on a written inventory agreed before work starts, Everything in Baseline Care, Staging-first deployments where the architecture supports them, Incident triage and investigation during support hours, Access hygiene and credential rotation, Dependency and runtime patching, Up to 5 hours a month for maintenance tasks, Business-hours support, Monday to Friday, Production outage triaged within 4 business hours on Operations.
No. New feature development, major feature builds, and full website redesigns sit outside the retainer. There is no unlimited maintenance and no unlimited development included. Major development projects and work outside scope may be quoted separately, and anything beyond your included hours needs separate approval before it starts.
No. Support runs during business hours, Monday to Friday, and incident response covers triage, investigation and recovery within that window and the agreed scope. There is no out-of-hours cover, no on-call rota and no overnight monitoring. Support channels, severity definitions and package priorities are agreed in writing.
We triage and investigate within the agreed scope and support hours, and keep you informed. Restoring service can depend on things outside our control: your hosting provider, third-party vendors, your architecture, access permissions, and what the incident is. We do not promise guaranteed incident resolution.
Sign a monthly retainer within 24 hours of receiving your Technical Assessment report, and your onboarding fee is waived in full. The fee is USD 120 on Baseline Care or USD 240 on Operations. The 24-hour period begins when you receive the assessment report, and the waiver applies to the onboarding fee for the package you choose. It is the only promotion we offer, and nothing extra is needed beyond signing inside the window.
Unused monthly hours do not roll over, and work beyond the included hours or outside the agreed scope needs separate approval and may be quoted separately. You decide whether to go ahead before any of it starts.
No guaranteed incident resolution. No guaranteed uptime, and no financial uptime guarantee. No unqualified 24/7 monitoring or response. No guaranteed resolution time. The reply window below is the only time commitment.. No unlimited emergency work. Support channels, severity definitions, package priorities, and operational terms are agreed in writing.
Start with the complimentary audit. We will look at what you run, tell you what we find, and you keep the written report either way.
If we're not the right fit, we'll say so on the call.