Hosting, maintenance and support.
Someone whose job it is to keep the site running. Updates, backups, certificates and monitoring, so the thing you paid for still works in three years.
Four reasons an unmaintained site is a liability.
A website is not a thing you buy. It is a thing you run.
The danger is plugins, not the platform.
Of 11,334 new WordPress ecosystem vulnerabilities in 2025, 91% were in plugins and 9% in themes. Six were in WordPress core. The risk is the twenty things bolted on, each written by someone else.
Nearly half have no fix when they are announced.
46% of those vulnerabilities had no patch available from the developer at the point of public disclosure. Updating promptly is necessary and, on its own, not sufficient.
Exploitation starts in hours, not months.
The weighted median time from public disclosure to the first exploitation attempt was five hours, and about half of high-impact vulnerabilities are exploited within twenty-four. Monthly patching is not a schedule, it is a gap.
Neglect is the actual cause of compromise.
Of 39,594 infected sites cleaned by Sucuri, 39.1% were running an outdated content management system at the point of infection. Not exotic attacks. Old software.
What a plan covers.
From SGD 200 a month. The list is short on purpose, because these are the things that actually prevent the failures above.
Core, theme and plugin updates
Applied promptly and checked afterwards, not queued until someone remembers.
Backups, and restore testing
A backup nobody has restored is a hope. We test that it comes back.
Uptime monitoring
We find out the site is down before your customers tell you.
Certificates and domain renewal
The two things that silently expire and take the site with them.
Hosting
SGD 200 a year, on infrastructure we manage rather than the cheapest shared box available.
The small content changes
A price, a phone number, a new certificate. The edits that otherwise never get made.
Organisations fix about 9% of the problems their own scans find.
That figure is from Verizon's analysis of 22,052 security incidents, and it is the most useful number in this whole area. Knowing about a vulnerability and fixing it turn out to be almost entirely different activities. The knowing is automated and cheap. The fixing needs a person with the time and the access to do it.
That is the whole service. Not software, not a dashboard, not a monthly report of things a scanner noticed. Someone whose job it is to actually apply the update, check the site still works afterwards, and tell you when something needs a decision.
Our process.
- 01
Take stock of what you have
Hosting, domain, certificates, plugin versions, backup state. Usually the first complete picture anyone has had.
- 02
Bring it current, carefully
Staged updates with a tested restore point, so nothing goes down while it gets fixed.
- 03
Put monitoring on it
Uptime, certificates and renewals watched, so the silent failures stop being silent.
- 04
Keep it that way
Updates applied promptly, backups tested, and a person you can email when something looks wrong.
What else we do.
Same team, same accountability. Most clients start with one of these and add another later.
Websites
Sites that win work and help you hire.
Web apps
Portals, booking systems and field tools.
Brand identity
Marks, colour and type that hold up everywhere.
AI tools
Narrow tools for one repetitive job, done well.
Custom software
Replaces the spreadsheet holding the business together.
SEO
Getting found by people and by AI answers.Common questions.
Everything is in your accounts, not ours. Hosting, domain and the site itself are registered to you, and you can move to another provider without asking us for anything. That is deliberate.
It depends on the size of the site and how much change it needs month to month. A brochure site that rarely moves is a different commitment from one with a careers section and regular publishing. We will quote against what yours actually needs.
Core, theme and plugin updates, backups with restore testing, uptime monitoring, certificate and domain renewal, and the small content changes that otherwise sit in a queue for weeks. Hosting itself if you want us to handle it.
Faster for a site that is down than for a wording change, which is how it should be. We agree the response you need before you sign, so the expectation is set rather than discovered during an incident.
We can, or we work with the host you already have. Either way the hosting account is registered to you. Being locked out of your own hosting by a supplier is a common and entirely avoidable problem.
Monitoring tells us before your customers do, which is the point of having it. From there it is a matter of whether the fix is a restore, a rollback or a host problem, and we tell you which it was afterwards.
Regularly, and yes. An untested backup is a guess. Restore testing is the part most people skip, and it is the part that decides whether a backup is worth anything on the day you actually need it.
Yes. We look at it first and tell you what condition it is in, because taking on a site with known problems without saying so would only postpone the argument. Sometimes the finding is that it needs work before a support plan makes sense.
Yes, and it is one of the quiet reasons to have someone doing this. An expired certificate puts a browser warning in front of every visitor, and an expired domain is far worse. Neither should ever be a surprise.
Neglect, almost always. The danger is plugins rather than the platform, nearly half have no fix available when the problem is announced, and exploitation starts within hours. A site nobody is updating is the one that gets found.
Already have a website?
Not every firm needs a new one. Sometimes the structure is sound and it just needs better content, a proper update and a tidy-up. We will tell you which one you are, and we will say so if a refresh is the honest answer.
Talk to us about a refreshTell us what the website has to do.
No pitch and no deck. One call to work out whether the problem is the one you think it is.
- Reply within one working day
- No obligation, and no sales sequence
- Over 100 projects since 2023