Skip to content

Dedicated Infrastructure Management for Growing Businesses.

We take full operational responsibility for your servers and systems, so you can focus on running the business.

No obligation. If we are not the right fit, we will say so on the call.

20 minComplimentary Infrastructure Audit

A call to establish fit and agree what would be reviewed. Scoped to what you approve.

The complimentary audit is a 20-minute call. It does not include a written report. If you want it in writing, that is the paid Technical Assessment.

You keep the business. We keep it running.

Yours

We do not touch these, and we do not need to.

  • Decisions and priorities
  • Product direction
  • Customer relationships
  • Budget

Ours

The operational work, on a schedule.

  • Updates and patching
  • Backups, tested
  • Uptime monitoring
  • Incident triage
  • Documentation
  • Vendor chasing

Built for your business.

Let us handle the technical chaos, you focus on what matters.

It's for you if

  • Your website or online shop brings in revenue
  • You run a custom app, API, or customer portal
  • You depend on Linux servers someone else set up
  • There is no dedicated technical person on your team
  • Your internal team is already stretched thin
  • The developer who built it has moved on

It's not for you if

  • You need laptops, printers, or desktop support
  • You want new features built, or a redesign
  • You need a formal security audit or compliance sign-off
  • You want a full website redesign
Start here

A Clear picture of what you're running.

Free 20-minute systems check, so we both know whether this is for you. Then we do a technical assessment, paid once. The written report is yours to keep either way.

  1. Free 20-minute systems check

    A short call to establish fit and agree exactly what would be reviewed. No report at this stage, and no obligation.

  2. The Technical Assessment

    Done once, before the review starts. A review limited to the systems you approve: nothing intrusive, and nothing you did not authorize.

  3. You get a written report

    What we found, what carries risk, and what we would fix first. Yours to keep even if you do not continue.

Technical AssessmentSample
Observations
·
Risks, ranked
·
Next steps
·

Yours to keep, whether or not you continue

What you get

  • Observations from the review
  • Risks, ranked by what matters
  • Practical next steps
  • A written report you keep

Systems rarely fail because of one big mistake.

They drift. Updates get postponed, nobody is quite sure when the backups were last tested, and the person who built it moved on two years ago. None of that looks like a problem until the morning it does.

  • Nobody can say when the last restore was tested
  • Changes go straight live, because there is no other route
  • Everything technical sits with one person
  • You find out something is broken when a customer tells you

What it costs when nobody owns it

  • Revenue48 hrs
  • Customers2,400
  • Pipeline31%
  • Trust1 moment

Illustrative only. These show the shape of the loss, not a measurement.

Four things we take off your plate.

The jobs nobody on your team wants, handled on a schedule and reported in writing.

You stop bracing for downtime

Updates go out on a schedule, server health is watched, and the routine care happens before it becomes an incident. Nobody has to remember.

You stop hoping the backups work

We monitor them and we test restores. An untested backup is only an assumption, and you should not have to find that out the hard way.

You stop finding out from customers

Uptime is monitored where your setup supports it, and a real person investigates. No ticket link, no queue, no waiting to be told.

You stop being the only one with keys

Access is limited to the right people, credentials get rotated, and the configuration stays in a state you could hand over tomorrow.

All eight responsibilities

  • Website and application maintenance
  • Server and infrastructure operations
  • Backup monitoring and restoration verification
  • Uptime monitoring and incident triage
  • Controlled deployments
  • Access hygiene and security configuration
  • Light automation and operational improvements
  • Clear reporting and ongoing technical ownership

What we cover is agreed in writing first. Not every package includes every responsibility at the same depth. Pricing sets out what each one covers.

How working together goes.

Five stages. Each ends in something concrete, and none of them commits you to the next.

  1. 1

    Free Systems Check

    20 minutes · free

    We talk through what you run, what worries you, and whether this is the right kind of help.

  2. 2

    Technical Assessment

    $195, paid before the review. Includes the written report

    A non-intrusive review, and a written report of what we found. Paid before the review starts.

  3. 3

    Scope & agreement

    In writing first

    Which systems, what is included, what is not, and what it costs.

  4. 4

    Onboarding

    First month

    Access set up, monitoring switched on, systems documented, backups proven.

  5. 5

    Ongoing operations

    Every month

    Agreed maintenance, incidents handled, and a monthly report.

What counts as one thing.

Every package is measured in systems we look after. The definition is deliberately narrow, so you know exactly what you are buying.

A website

One standard CMS site, such as WordPress, or a static site on one domain.

An application

One custom web app or API, including its main database.

A server

One standalone Linux server on Ubuntu or Debian, with a standard web stack or Docker.

  • Third-party APIs, CDNs, and SaaS tools do not count on their own unless they need custom proxy work.
  • Anything not on the agreed list is not covered.
  • Complex or multi-server setups are reviewed before a package is confirmed, and may need a custom quote.

Exactly what the assessment covers.

The assessment is a preliminary review limited to the systems you authorize. It is not a penetration test and not a formal security audit. It shows you visible problems and operational gaps so you can decide what to do next.

What we look at

  • Public-facing DNS and SSL/TLS configuration
  • Web-server security headers
  • Whether backups are reachable, and what evidence exists that they work
  • Any architecture documentation you give us
  • Relevant health logs you provide

Only systems you are authorized to have reviewed are assessed.

What's not included

  • Active penetration testing
  • Exploit simulation
  • Deep source-code vulnerability audits
  • Physical inspection of on-premises hardware
  • Formal compliance audits or certification
  • Any intrusive test that has not been specifically authorized

What you receive

  • A written report: what we found, what carries risk, and what we would fix first
  • A written inventory of the systems that were reviewed
  • One round of written follow-up questions

It finds visible issues and operational gaps. It cannot guarantee that every issue will be found, and it is not unlimited discovery work or a full consultancy engagement.

Predictable Service Tiers

Monthly technical operations with clear scope boundaries. No lock-in contracts. Everything starts with a one-off Technical Assessment at $195, which produces the written inventory these packages run against.

Baseline Care

Baseline stability and disaster recovery for essential web assets.

$149/ month USD

$0 Onboarding Fee (save $120 when signed within 24 hours of your report)

Up to 2 systems, by written inventory2 hrs / month maintained
  • Core, plugin, and dependency updates
  • Documented backups with quarterly restoration testing
  • Uptime monitoring and a monthly written report

Professional services, clinics, small online shops, and agency client sites.

Recommended for most businesses

Operations

Technical operations for active business applications and servers.

$390/ month USD

$0 Onboarding Fee (save $240 when signed within 24 hours of your report)

Up to 5 systems, by written inventory5 hrs / month maintained
  • Everything in Baseline Care
  • Staging-first deployments where supported
  • Incident triage and investigation
  • Access hygiene, credential rotation and patching
  • Quarterly architecture and capacity review

Businesses running Linux servers, Docker workloads, or custom apps and APIs.

Onboarding fees are waived in full on any plan if you commit to a monthly retainer within 24 hours of receiving your Technical Assessment report.

How scope works

These apply to every package. They are what keeps scope clear on both sides.

  • The written inventory defines what is covered. The system count is an indicative ceiling, not the thing you are buying.
  • Monthly fees cover the package and the agreed inventory of systems.
  • Onboarding fees apply unless the waiver condition is met.
  • Triage is included. Malware removal, hack recovery, and full incident repair are always quoted separately.
  • Unused monthly hours do not roll over.
  • Work beyond your included hours, or outside the agreed scope, needs separate approval and may be quoted separately.
  • System limits do not override complexity, criticality, workload, or dependencies.
  • Anything outside the agreed list is excluded.
  • Complex environments are reviewed before a package is confirmed.
  • No unlimited maintenance, and no unlimited development.

How we work.

The practices we hold ourselves to. They are not certifications, and we do not claim compliance with anything.

  • Least-privilege access

    The narrowest access that lets us do the agreed job. Nothing broader.

  • Documented scope

    What is covered, and what is not, written down before work begins.

  • Proactive maintenance

    Routine care happens on a schedule, not only after a failure.

  • Verified restores

    We test that backups restore, because an untested backup proves nothing.

  • Staging-first where supported

    Changes get exercised outside production when the setup allows it.

  • Monthly reporting

    A written record of work done, what we noticed, and what needs a decision.

How we handle access

Handing over server access is the part people hesitate over. Here is what we do.

  • The narrowest access that does the job

    We ask for what the agreed work needs and nothing broader, and we ask before taking more.

  • Your accounts stay in your name

    Domains, hosting and servers remain registered to you. We are a guest in your accounts, never the owner of them.

  • Access is removed when the work ends

    At the end of an engagement we hand over what we hold and remove our own access.

What we commit to

  • Enquiries answered within 1 business day

Questions people ask first.

These are the ones that come up before anyone signs anything.

What does it cost?

The Technical Assessment is $195, paid once before the review starts, and the written report is yours to keep either way. Ongoing operations start at $149 a month for Baseline Care and $390 a month for Operations. Onboarding is $0 on either tier when you sign a retainer within 24 hours of receiving your report; otherwise the fee is $120 or $240.

We're an agency. Can you work behind our brand?

Yes, and that is the point. We take on the server, backup and application maintenance sitting behind your client sites, and we never contact your clients. That goes in the agreement. Reports come to you and can be forwarded under your own branding. You pay a per-site rate and what you charge your client is yours to set. Start with one site and a paid assessment.

What kinds of businesses do you work with?

Small and growing businesses whose digital systems matter day to day, but who have no in-house technical capacity. In practice that is usually a revenue-carrying website or online shop, a custom app or API, one or more Linux servers, an already-stretched internal team, or something built by a developer who is no longer around.

Do you work with what we already have?

Yes, and that is the normal case. We start by documenting what exists and setting up limited access. The agreement records exactly which systems are in scope, and anything not on that list is excluded.

What happens in the assessment?

A review limited to the systems you authorize: public-facing DNS and SSL/TLS configuration, web-server security headers, whether backups are reachable and what evidence exists that they work, any architecture documentation you give us, and relevant health logs you provide. You get a written report with observations, risks, and practical next steps. It creates no obligation to buy a retainer.

Is the assessment a penetration test?

No. It is not a penetration test and not a formal security audit. It does not include active penetration testing, exploit simulation, deep source-code vulnerability audits, physical inspection of on-premises hardware, formal compliance audits or certification, or any intrusive test that has not been specifically authorized. It is a practical way to find visible issues and operational gaps, and it cannot guarantee every issue will be found.

What counts as one system?

A website is one standard CMS instance, such as WordPress, or one static web property on a single domain. An application is one custom web application or API runtime, including its primary database. A server or VPS is one standalone Linux instance running Ubuntu or Debian with a standard web stack or Docker containers. Third-party APIs, CDNs, and SaaS integrations do not automatically count as separate systems unless they require custom reverse-proxy management or additional work.

What if our setup is more complicated than it looks?

It gets reviewed before a package is confirmed. System limits do not override complexity, criticality, workload, or dependencies, and server or multi-server environments that exceed standard complexity limits must be reviewed and may need a custom quote. We would rather say that up front than discover it halfway through onboarding.

What's in each package, in detail?

Baseline Care includes Up to 2 systems, on a written inventory agreed before work starts, Core, plugin, and dependency updates where applicable, Backups on a documented schedule, Quarterly restoration verification, Uptime, SSL and domain expiry monitoring, Monthly written report, Up to 2 hours a month for small changes, Business-hours support, Monday to Friday, Enquiries answered within 1 business day. Operations includes Up to 5 systems, on a written inventory agreed before work starts, Everything in Baseline Care, Staging-first deployments where the architecture supports them, Incident triage and investigation during support hours, Access hygiene and credential rotation, Dependency and runtime patching, Up to 5 hours a month for maintenance tasks, Business-hours support, Monday to Friday, Production outage triaged within 4 business hours on Operations.

Will you build new features?

No. New feature development, major feature builds, and full website redesigns sit outside the retainer. There is no unlimited maintenance and no unlimited development included. Major development projects and work outside scope may be quoted separately, and anything beyond your included hours needs separate approval before it starts.

Do you offer 24/7 support?

No. Support runs during business hours, Monday to Friday, and incident response covers triage, investigation and recovery within that window and the agreed scope. There is no out-of-hours cover, no on-call rota and no overnight monitoring. Support channels, severity definitions and package priorities are agreed in writing.

What if a third-party provider causes an outage?

We triage and investigate within the agreed scope and support hours, and keep you informed. Restoring service can depend on things outside our control: your hosting provider, third-party vendors, your architecture, access permissions, and what the incident is. We do not promise guaranteed incident resolution.

How does the onboarding-fee waiver work?

Sign a monthly retainer within 24 hours of receiving your Technical Assessment report, and your onboarding fee is waived in full. The fee is USD 120 on Baseline Care or USD 240 on Operations. The 24-hour period begins when you receive the assessment report, and the waiver applies to the onboarding fee for the package you choose. It is the only promotion we offer, and nothing extra is needed beyond signing inside the window.

What if I need more than my monthly hours?

Unused monthly hours do not roll over, and work beyond the included hours or outside the agreed scope needs separate approval and may be quoted separately. You decide whether to go ahead before any of it starts.

What do you not guarantee?

No guaranteed incident resolution. No guaranteed uptime, and no financial uptime guarantee. No unqualified 24/7 monitoring or response. No guaranteed resolution time. The reply window below is the only time commitment.. No unlimited emergency work. Support channels, severity definitions, package priorities, and operational terms are agreed in writing.

Know what your systems need next.

Start with the complimentary audit. We will look at what you run, tell you what we find, and you keep the written report either way.

If we're not the right fit, we'll say so on the call.