Website maintenance and maintenance contracts
Your website stays secure and up to date, and you know who is looking after it
Updates, backups, monitoring, security checks and minor changes, agreed in writing. For TYPO3, Joomla, WordPress, Neos, Plone, Magento and Shopware.
Enquire about maintenance
On screen: sample maintenance overview with fictional data
Software ages, even if nobody changes anything
A website is made up of many parts: server, PHP, CMS or shop system, extensions and template. Updates are released for each of these parts all the time, often to close security vulnerabilities. If you leave them unapplied, you will eventually have a website that can no longer be updated safely.
With a maintenance contract, we take care of this. You know who is responsible, what happens on a regular basis and how quickly we respond if something goes down.
An example from this month: the PHP security vulnerability
In October 2026, critical vulnerabilities were disclosed in PHP, the language that almost all CMSs and shops run on. Websites under maintenance receive such updates without anyone having to remember them. All about the PHP security vulnerability
Technical details of the vulnerability become public prematurely.
php.net releases the patched versions; the German Federal Office for Information Security (BSI) issues a level 3 / orange warning.
A further vulnerability is disclosed, initially without an update.
The US agency CISA lists the vulnerability as actively exploited.
PHP 8.2 stops receiving security updates. Websites running on it need to be migrated.
As of 30 October 2026 · Sources: php.net, BSI, CISA
What the maintenance contract includes
Six building blocks. We decide together which ones you need and how often. Prices are set out in our quote and depend on the system, scope and response time.
Updates
Security updates for server software, CMS or shop system and extensions; major version upgrades are tested on a staging copy first.
Backups
Regular backups of files and database to a separate location, with tested restores.
Monitoring
We can see when your website is unreachable or the SSL certificate is about to expire, often before you notice.
Security checks
Checks for modified files, unknown administrator accounts and known vulnerabilities in the versions in use.
Minor changes
New opening hours, a form field, a redirect: by phone or e-mail, without a separate quote.
Response times
How quickly we respond to an outage is set out in the contract. The level depends on how business-critical your website is.
Sample image
When something goes down: what happens
- AlertOur monitoring raises an alert, or you call us.
- ResponseYou hear from us within the agreed response time.
- PreserveWe record the current state before changing anything, in case someone has broken in.
- FixUpdate, restore or clean-up, depending on the cause.
- Wrap-upYou find out what happened, what we did and what we recommend.
What's included. And what we won't sell you.
What's included
- A dedicated contact who knows your website's technical set-up
- Major updates tested on a staging copy first
- If you wish, a regular report on updates, backups and anything unusual
- Takeover of websites built by another agency
What's not
- No "blind" updates on the live website
- No obligation to host with us
- No new development disguised as maintenance: we quote separately for larger changes
Nobody has maintained your website so far? Then we will take a look at it first and tell you what needs doing right away and what belongs in the maintenance contract.
Bastian Kretzschmar, Managing Director · Phone 089 700742-660 ·
Frequently asked questions about website maintenance
How much does a maintenance contract cost?
That depends on the system, the number of extensions, the volume of minor changes and the response time you need. After a brief look at your website, you will receive a written quote.
What is the difference between hosting and maintenance?
The hosting provider runs the server. As a rule, they do not look after your CMS, extensions or content. That is exactly what maintenance covers, whichever hosting provider your website is with.
Do I need maintenance if I rarely change my website?
Yes. Updates are released regardless of whether you change any content. Websites that are rarely updated in particular often run on old versions and are therefore a popular target.
Can you take over a website built by another agency?
Yes. We first check access credentials, versions, extensions and backups. After that, you know what needs doing right away and what belongs in ongoing maintenance.
What happens if my website has been hacked?
Call us: 089 700742-660. We preserve the current state, trace how the attacker got in, clean up the website and close the vulnerability. Find out more on our page about the PHP security vulnerability.
Your contact for website maintenance
Briefly tell us which system your website uses and who has looked after it so far.
Bastian Kretzschmar
Dipl.-Math. oec., Managing Director
Phone: 089 700742-660
Enquire about maintenance