Website maintenance and security
Security updates, managed hosting and DNS, regular maintenance and checks after every change, so your website stays current and keeps working for your business.
Short answer: with ongoing management, Remidiy looks after the technical details that keep your website current and working: security updates to the website software we manage, managed hosting and DNS, regular maintenance of your content and site components, and functionality checks after updates so the important parts keep working together.
It's for business owners who don't want to be the person applying updates, renewing certificates and checking the contact form still works. It's covered by a tiered monthly subscription, not billed by the hour.
Websites age quietly. The software they run on gets security fixes for a while, then stops. Hosting companies upgrade their servers and old code breaks. A plugin update fixes one thing and stops the booking form. None of it is visible until a customer tells you the site is broken, or until it shows a security warning. Maintenance is the routine work that stops those surprises.
What's included
- Security updates. We keep the website software we manage up to date as part of regular maintenance.
- Regular maintenance. We manage hosting and DNS and keep your content and site components current.
- Checks after changes. After updates, we check site functionality so the important parts keep working together.
- Managed hosting. Your site runs on hosting we look after, so there's no separate host to chase.
- Monitoring and support. Part of the monthly subscription, alongside updates and tuning.
This care comes with sites Remidiy manages. If you already have a website, we audit what you have and rebuild it as a fast site, migrating the parts worth keeping: URLs, SEO equity, content and photos. See web development for the build side.
How it works
- Audit. A short discovery call, then a written audit of where you stand online. Together we work out which pieces you actually need.
- Build. We build or rebuild the pieces you chose. Fixed scope, fixed price, quoted up front.
- Manage. A monthly subscription tier matched to what we're managing for you. This is where maintenance and security live: your site gets attention every month, not just on launch day.
How pricing works
A one-time setup fee covers the audit, build and onboarding, at a fixed price quoted after a short discovery call. A tiered monthly subscription then covers updates, tuning, maintenance, monitoring and support. Tiers match what we manage for you and can scale as your needs change. We don't publish dollar amounts, and there's no hourly billing and no surprise add-ons.
What a good maintenance plan covers
Whoever looks after your site, this is what "maintained" should mean in practice.
Updates, applied promptly
Updates fix security holes, and once a fix is released the hole it closes is public knowledge. The US Cybersecurity and Infrastructure Security Agency's advice is simply to install updates and turn on automatic updates where you can (CISA: update software). On a website that means the content management system (CMS), its plugins and themes, and the server software underneath. If your site runs WordPress, the project's own guide covers updating WordPress and recommends a backup first.
A supported PHP version
Many small-business sites run on PHP. Each PHP release branch gets two years of full support and then two more years of critical security fixes only; after that it gets nothing (php.net: supported versions). Find out which version yours runs with the PHP vulnerability checker, and read the PHP2Shell guide for why it matters right now.
Checks after every change
An update that installs cleanly can still break the parts that earn you money. After each round of updates, someone should load the key pages and test the contact form, booking, phone links and anything that takes payment.
Renewals and the quiet failures
- HTTPS certificate. If it lapses, browsers show a full-page warning. See HTTPS and SSL certificates.
- Domain name. If it expires, your website and email stop together. See domain expiration.
- Email records. SPF, DKIM and DMARC records keep your mail delivered. See email authentication.
Hardening
Small settings that make a site a harder target: security headers, and hiding your server and PHP version so the site doesn't advertise what it runs.
Questions to ask any maintenance provider
- Which software do you update (CMS, plugins, themes, PHP, server), and how soon after a security release?
- What do you check after an update, and what happens if something breaks?
- How are backups taken, how often, where are they kept, and when was a restore last tested?
- Who renews the domain and HTTPS certificate, and who gets the reminder emails?
- Is the work a fixed monthly fee, or billed by the hour when something goes wrong?
Free tools and guides
Two free checkers show where your site stands today, from public information only. Neither attempts to break in, and neither replaces a security audit.
Website checker
Security, speed, SEO, AI crawler access, email and domain records, and contact details, with a fix guide for every problem it finds.
PHP vulnerability checker
The PHP version your server reports and whether it's affected by PHP2Shell, with a full health report included.
Then work through the website maintenance checklist, and see outdated website software if the checker flags old versions.
Sources
Common questions
What does website maintenance include?
At minimum: software and security updates, hosting and DNS management, content kept current, and a check after every update that forms, booking and other key features still work. A good plan also covers backups, certificate and domain renewals, and monitoring.
How often should a website be updated?
Security updates should go on as soon as is practical after they're released, because the fixes they contain become public knowledge. Content should change whenever your business does, such as new hours, services or prices.
What happens if I never update my website?
The software underneath falls further behind its security fixes. PHP, for example, only gets security fixes for a limited time per version, after which known holes stay open. Old sites also tend to break quietly when hosts upgrade their servers.
Can Remidiy take over maintenance of my existing website?
Yes. We start by auditing what you have, then rebuild it as a fast site and migrate the parts worth keeping, such as URLs, SEO equity, content and photos. From then on it's managed under a monthly subscription.
Is website maintenance billed hourly?
Not with Remidiy. Ongoing management is a tiered monthly subscription matched to what we manage for you, after a one-time setup fee. There's no hourly billing and there are no surprise add-ons.
Book a free discovery call. Run the website checker first if you like, then tell us what it found. We reply within one business day, usually sooner. Contact Remidiy, email [email protected] or call (914) 222-3310.