Websites that stay fast, safe and online.
Managed maintenance for WordPress, Joomla, Laravel, Shopify and custom sites — with 24/7 uptime monitoring, daily backups, security patching, performance tuning and a guaranteed 4-hour content SLA.
Built for the shape of your business.
Three broad client shapes we design, build and operate for. Every engagement starts with the actual workflow — not a template.
Business & Corporate Sites
Brochure, service and corporate sites on WordPress, Joomla or Laravel — kept secure, fast and search-visible.
- Plugin / core updates
- Content change SLA
- Security patching
- Monthly health report
eCommerce & Booking Sites
Revenue-critical Shopify, Woo and custom stores — with deeper monitoring, order-flow checks and peak-event readiness.
- Checkout uptime monitoring
- Gateway + courier sync
- Load testing for peaks
- Priority incident response
Enterprise & Portals
Hospital portals, member sites and government sites — with full compliance operations, audit logs and dedicated engineering.
- Dedicated engineer
- SSO / LDAP ops
- Compliance audit retainer
- 24/7 on-call rotation
Everything a modern program actually needs.
No generic checklist — every capability is specified to the operational reality of Sri Lankan and international markets.
24/7 Uptime Monitoring
1-minute external checks across 6 regions, status page, PagerDuty escalation and 15-minute incident-response SLA on paid plans.
Daily Off-Site Backups
Nightly full-site + database backups retained for 90 days, stored across two regions, one-click restore and quarterly restore drills.
Security Patching & Firewall
WAF rules, brute-force prevention, weekly CMS / plugin patches, malware scanning, PHP / Node version hygiene and SSL renewal.
Performance Tuning
Core Web Vitals monitoring, CDN tuning, image optimisation, database indexing and quarterly deep performance audits.
Content & Minor Fixes
4-hour SLA on content changes, image updates, form edits, price changes, new pages and small design tweaks — unlimited on Growth / Enterprise tiers.
Reporting & Named Engineer
Monthly health report in plain English, a named engineer on Slack / WhatsApp and a quarterly strategy call with your account lead.
Tangible outputs. No vapor.
Every engagement produces a specific set of assets, documentation and ongoing guarantees — handed over in a documented package.
Launch deliverables
- 140-point site health audit
- Security & backup baseline setup
- External + synthetic monitoring
- WAF + firewall rules configured
- CDN + image optimisation
- Status page in your domain
- Runbook + escalation playbook
- Named engineer introduction
Ongoing deliverables
- 24/7 uptime + performance monitoring
- Daily backups (90-day retention)
- Weekly core + plugin patching
- Monthly malware + security scan
- Content changes within 4 hours
- Monthly health + insight report
- Quarterly strategy call
- Annual disaster-recovery drill
Your site is a revenue asset — not a side project.
Every plan is covered by 24/7 monitoring, daily off-site backups across two regions, weekly security patching and a content SLA measured in hours. You get a named engineer, a monthly report in plain English and a quarterly review — not a ticket queue.
Recent website maintenance engagements.
A sample of website maintenance engagements from the past three years — each measured against real business outcomes.
University of Kelaniya
9 years continuous maintenance. 99.98% uptime, zero security incidents, smooth migration across 3 CMS versions.
Thyagarajan & Co.
Takeover + modernisation program. -72% LCP, +3× organic traffic and a 4-hour content SLA kept for 27 months.
Ceylon Spice Shop
Black Friday readiness and 365-day management. Zero downtime during 18× traffic peak and 68% faster checkout.
Pricing that matches the need.
Indicative engagement tiers. Every project is scoped to exact operational needs — request a proposal for a firm quote.
Care Plan
- 24/7 uptime monitoring
- Daily backups (30-day)
- Weekly security patching
- Up to 2 hours content / month
- Monthly health report
- Email support (24h response)
- SSL renewal + management
Managed Plan
- All Essential features
- Unlimited minor content changes
- 4-hour content SLA
- 90-day off-site backups (2-region)
- WAF + malware scanning
- Named engineer on Slack
- Quarterly strategy call
Mission Critical
- All Managed features
- 99.99% uptime SLA
- 15-minute incident response
- Dedicated engineer (part-time)
- DR drills + load tests
- Compliance audit retainer
- 24/7 phone + WhatsApp
Answers to honest questions.
What clients usually want to know before engaging us on website maintenance.
Will you maintain a site you didn't originally build?
Yes — we run takeover engagements every month. We start with a 140-point technical audit, document findings, then migrate monitoring, backups and access. Most sites are production-ready in week one. Sometimes we'll recommend a targeted rebuild of specific components first — but that's honest scoping, not a sales pitch.
What exactly counts as a content change?
Text edits, image swaps, new pages, menu changes, price updates, form tweaks, testimonial additions and SEO meta updates. On Managed and Enterprise plans, these are unlimited within the SLA. Large redesigns or new features are quoted separately.
What CMS platforms do you support?
WordPress, Joomla (yes, genuinely — the original specialty), Laravel, Drupal, Shopify, WooCommerce, Magento, Webflow, Next.js custom builds and static-site generators. If it runs on a web server, we probably maintain one already.
What happens during an incident?
Monitoring raises an alert, the on-call engineer acknowledges within 15 minutes (paid plans), triages and either patches or escalates. You get a status page update, a Slack / WhatsApp ping and a post-incident report within 24 hours — with root cause, impact window and prevention steps.
Do you handle hosting too?
Yes — managed hosting on AWS, DigitalOcean, Cloudways, Kinsta or WP Engine, included in Managed and Enterprise tiers. If you prefer to keep your existing host, we integrate without requiring a migration.
Can we cancel any time?
Yes. All plans are month-to-month with 30-day notice. You own your code, your site, your domain, your data — leaving is friction-free. Most clients don't, but the door isn't locked.
Services that pair naturally.
Most website maintenance engagements extend into adjacent work. Here's where projects usually grow.