Maintenance, Support & Optimisation
Software does not stay finished. Dependencies age, certificates expire, users find edge cases, pages and queries slow down as the data grows, and the business asks for small changes. We run the hosting and the deploys, keep the product updated, monitored, backed up and fast, and stay the people you write to when something needs fixing.
Top services
Monthly maintenance retainers
Ongoing care for a live product, with updates, fixes and checks done on a schedule each month.
Bug fixes & small changes
The fixes and small features a live product keeps needing, without a new project each time.
Security updates
Dependencies and frameworks patched, secrets rotated and access reviewed regularly.
Speed & Core Web Vitals
Slow pages measured and fixed, so they load fast for users and pass Google's checks.
Database & query optimisation
Slow queries found, indexes chosen for real access patterns and heavy reports moved off the main database.
Cloud hosting & DevOps
Hosting on AWS, Vercel or Railway set up, documented and kept within budget.
CI/CD pipelines
Checks, tests and migrations that run before every deploy, with a rollback that has been tried.
Monitoring & backups
Uptime checks, error alerts and backups that are restored on a schedule to prove they work.
What this covers
Deploys that are boring, on purpose
Infrastructure as code and pipelines with real gates: type checks, tests and migrations run before a deploy proceeds, with a rollback path that has been tried rather than assumed.
Updates and hardening on a schedule
Framework, dependency and security updates applied regularly and in small steps, with the hardening a live product needs: secrets rotated, security headers set and access reviewed.
Monitored and backed up
Uptime checks and error tracking that tell us about a problem before your users write in, and backups that are restored on a schedule rather than assumed to work.
Made faster as it grows
Slow pages, slow queries and rising hosting bills measured first, then fixed in order of what users feel most: indexes chosen for real access patterns, caching, and the code paths a profiler points at.
Have a maintenance, support & optimisation project?
Tell us the problem and the constraints you are working within. We will come back with how we would approach it.
Start a conversationFrom the notes
- CSP for a blob: iframe that prints a PDFWhy printing a PDF from a hidden iframe needs blob: in frame-src, not a data: URL, what the frame inherits from your policy, and what Chrome's PDF viewer does.
- Content Security Policy for Razorpay CheckoutThe Content Security Policy a live billing app ships with Razorpay Checkout, line by line: why a wildcard, why unsafe-inline, and how to prove it is on.