Services / Maintenance
A site is not a thing you finish.
Website upkeep costs £120 / month for a site that sits there and sells, or £250 / month for one with a login, customer data or live ad spend behind it. Both include dependency patching reviewed by hand, uptime and error monitoring, backups with a restore we have actually rehearsed, and small changes. Monthly, cancel any time. Upkeep is offered on sites we built.
£120 / month / £250 / month
monthly · cancel any time
What it costs
Care
£120 / month
a site that sits there and sells
- Dependency patching, reviewed by hand — never auto-merged
- Uptime and error monitoring, alerts on failure
- Backups with a rehearsed restore
- Small content changes included
- Any bad release reversed in under a minute
Care+
£250 / month
a login, customer data, or ad spend
- Everything in Care
- Admin login monitored, audit log actually read, 2FA enforced
- Bot and AI-scraper control, durable rate limits
- Form abuse protection
- SPF · DKIM · DMARC kept correct
- Stated data retention and deletion on request
- Quarterly review and a written report
Included
£720
6 months, with the from £5,000 package
- The complete package ships with 6 months of Care
- So you decide about upkeep after living with the site
- Not before you have seen whether you need it
What we are actually watching for
Supply-chain compromise
The dominant route in 2026: a package you depend on ships a malicious version. Pinned lockfile, few dependencies, and every update read by a person before it reaches your site.
Losing everything
Accidental deletion, a provider incident, ransomware. Database snapshots with a restore we have performed, not merely configured.
Silent breakage
The contact form stopped sending in March and nobody noticed until June. Uptime and error monitoring exists to make that a two-hour problem instead of a three-month one.
Credential attacks — Care+
Your admin login watched, the audit log read rather than merely written, and two-factor enforced instead of merely available.
Someone invoicing as you — Care+
SPF, DKIM and DMARC kept correct. Effectively mandatory since the 2024 mailbox-provider enforcement, and most small businesses still fail all three.
What we do not sell
Penetration-test certification, SOC 2, PCI attestation, 24/7 monitoring or cyber insurance. And nobody honest will tell you a website cannot be hacked.
The questions people actually ask
- Which plan do I actually need?
- A site that shows your work and takes enquiries wants Care at £120 / month. Care+ at £250 / month is for sites where something would genuinely be lost — a customer list, a login, money going out on ads every day. If you are unsure, start on Care; moving up takes an email.
- Ten months of Care+ costs more than the build. Why?
- Because it is a different thing. The build is made once; upkeep is somebody watching it every month for the next several years. We say this out loud rather than hoping you do not do the arithmetic — and it is exactly why we do not sell Care+ to a three-page brochure.
- Do you take on sites you did not build?
- Not for ongoing upkeep. We will audit anything for £750, but inheriting an unknown plugin stack means inheriting someone else's incident. If yours needs that much, rebuilding is usually the better spend and we will say so.
- What counts as a 'small change'?
- Copy edits, a new image, a price update, a new team member — anything you could reasonably have done yourself in the admin, done for you. Structural work and new pages are quoted separately.
- Is there a contract?
- Monthly, cancel whenever. There is no minimum term and nothing auto-escalates. The only long commitment on this site is the two-year exclusivity clause, and that one is optional too.
- What does 'a rehearsed restore' mean?
- That we have actually performed a restore from the backups, not merely configured them. A backup nobody has ever restored is a hope, and it is the single most common thing to discover too late.
The site keeps running while the internet changes around it.