Skip to content
Step to Begin
Care & Maintenance · Step To Begin Studio

For when you would rathernot think about it.

Proactive security updates, off-site cloud backups, uptime monitoring, routine monthly changes, and a concise 1-page health report. Flexible month-to-month care, quoted strictly after codebase audit.

Message on WhatsAppDirect
System Status (Specimen)
Illustrative Specimen · Not Live Data

The 4-Stage Care Routine

Click stage to inspect
01 · CheckScheduled scan

Routine scans for forms, links & SSL status.

Site Health Indicators (Specimen)

SSL Security
Valid · auto-renewal
Off-site Backups
3 off-site snapshots
Form Endpoints
Verified · alerts active
Core & Dependencies
Tested on staging
Regular verification and deliberate actions — realistic care, plain language.
SCOPE OF ONGOING CARE

Four practical areas.Handled with quiet consistency.

Ongoing care is not a vague promise of 100% invulnerability. It is structured, practical upkeep that keeps your website dependable, current, and functional for your customers.

01 · Routine Checks & Issue Detection

Catching anomalies before customers notice

  • End-to-end contact form and inquiry delivery tests
  • Broken link and missing resource scans (404 monitoring)
  • SSL security certificate validity & expiration tracking
  • Mobile viewport reflow and layout integrity checks
  • Browser console warnings and runtime script error triage
Concrete example:

Catching an SMTP mailer timeout on an inquiry form and fixing it before leads are missed.

02 · Updates & Compatibility Review

Safely tested in staging before production release

  • Core system & framework security patch deployment
  • Plugin, extension, and third-party library maintenance
  • Regression testing on staging environment before live push
  • Server environment runtime deprecation & compatibility review
  • Pruning unused dependencies to reduce attack surface
Concrete example:

Testing an e-commerce checkout module update on a staging mirror before applying to production.

03 · Backups & Recovery Preparation

Isolated off-site snapshots with tested rollbacks

  • Automated scheduled database & media asset snapshots
  • Off-site cloud storage isolated from primary host infrastructure
  • Documented rollback capacity if an unexpected bug emerges
  • Quarterly restoration drill to ensure snapshot archives actually work
  • Retention log of verified restorable versions
Concrete example:

Restoring a clean snapshot within 15 minutes after an unexpected hosting database corruption.

04 · Agreed Content & Technical Requests

Routine content updates handled without postponement

  • Copy, pricing, business hours, and staff profile updates
  • Image replacements, banner uploads, and asset compression
  • Minor CSS styling, link redirection, and button tweaks
  • Publishing formatted client-supplied articles or announcements
  • Capped within your agreed monthly hours allocation
Concrete example:

Adding a new team member and updating seasonal business hours within one business day.

Scope Clarity & Transparency
All commitments operate strictly within your agreed written proposal.

What we do not claim

01No 24/7 human emergency dispatch room (automated monitoring runs 24/7; human triage operates during Moroccan business hours, Mon–Fri 09:00–18:00 Casablanca time).
02No unlimited development requests (work is bounded by your agreed monthly hours to ensure quality).
03No fictitious 100% uptime guarantee (upstream hosting infrastructure remains a factor).
04No magic immunity against every global zero-day vulnerability (we maintain disciplined prevention).
SAFE CHANGES & RECOVERY

Safe changes, never raw edits.Why a recoverable version matters.

Direct edits on a live production site risk breaking checkouts and losing leads. We enforce an accessible four-step sequence to safeguard continuity.

01Before any change

Backup Snapshot

Full database and codebase snapshot preserved to isolated off-site storage.

Timestamped recovery checkpoint
02Isolated test replica

Staging Update or Change

Patches, plugin updates, or content revisions deployed to mirrored sandbox.

Isolated staging verification protects production
03Human & functional checks

Verify & Test

Contact forms, checkout pathways, and responsive mobile layouts tested.

Regression checklist & core flows verified
04Dual-outcome safety

Live Release or Rollback

If tests pass: off-peak live release. If any anomaly appears: prompt rollback to pre-change snapshot.

Off-peak release window minimizes visitor impact
Safe Change Approval & Deployment PipelineControlled Flow
01Off-site Snapshot
Preserved
02Staging Sandbox
Tested
03Review & Signoff
Approved
04Monitored Live Push
Rollback Ready
Technical Truth in Plain Language
Honest Engineering

What Backups Cover — and Their Real Boundaries

What backups genuinely protect:

  • Rapid recovery from incompatible plugin or system updates.
  • Protection against accidental human deletions or corrupted edits.
  • Restoration of database contents after hosting platform glitches.

What backups cannot solve alone:

  • Cannot prevent datacenter-level power or network outages at your host.
  • Cannot renew third-party domain names or external subscription bills.
  • An untested backup is just wishful thinking; we run regular test-restores.
INCLUDED WORK VS. NEW PROJECTS

Included care vs. new project work.Knowing exactly where the boundary lies.

Ongoing care protects and updates your existing website. When your business needs brand-new pages, major features, or a redesign, we quote those transparently as distinct project work.

Included in Monthly Care

Routine Care & Minor Edits
  • Routine uptime monitoring & SSL certificate expiry tracking
  • Core system, framework, and plugin security patch deployment
  • Off-site automated backups with quarterly restoration drills
  • Minor content updates (text, prices, hours, team) within agreed monthly hours
  • Priority communication channel on WhatsApp and email
  • Concise 1-page monthly health summary and next recommendations

Quoted Separately as New Projects

Structural & New Builds
  • +Designing and developing brand new pages or landing funnels
  • +Complete visual redesigns, identity shifts, or structural rebuilds
  • +Custom complex features (e.g., custom portals, ERP APIs, booking logic)
  • +Extensive copywriting, professional photography, or ad campaigns
  • +Complete platform migration to an alternative tech stack
Hosting, Domain Renewals, and Software Licenses

Hosting infrastructure fees, domain name registration renewals, premium plugin licenses, and third-party SaaS subscriptions remain under the client’s direct accounts and billing unless explicitly bundled in a written SLA contract.

TRANSPARENT CLIENT REPORTING

What you see each month.A concise summary you can actually read.

No 50-page automated PDF export bloated with technical filler nobody reads. You receive a clean, 1-page summary covering checks conducted, updates deployed, requests resolved, and next priorities.

Sample Monthly Report · Illustrative Client Specimen
Client:Atelier Lumen (Sample Specimen)
Cycle:October 2026
Tier:Standard Studio Care
Status:Healthy & Stable

Checks Completed

4/4 Completed
Uptime & AvailabilityOperational · 0 outages recorded
SSL Security CertificateActive · 284 days remaining
Inquiry & Contact Forms4/4 endpoints tested & receiving
Broken Links & 404 Check0 internal broken links found

Updates Made

Staging Verified
Core Framework Security PatchTested on staging replica prior to live rollout
3 Third-Party Dependencies UpdatedZero regression confirmed across flows
Off-site Cloud Snapshot PreservedIntegrity verified in off-site archive vault

Requests Handled

Within Monthly Allocation
Updated seasonal pricing table on services pageCompleted · 45 mins
Replaced founder portrait and biography paragraphCompleted · 30 mins

Total time utilized: 1 hour 15 mins out of agreed monthly allowance.

Recommended Next Steps

Actionable Advice
013 recent portfolio images exceed 2.5MB — we recommend WebP compression next cycle to improve mobile speed.
02Domain registration renews in 60 days — reminder to verify active payment credentials with your registrar.
MONTH-IN-CARE RHYTHM

What happens in a normal month.A predictable, documented routine.

We do not wait for things to break before taking action. Ongoing care follows a structured operational routine across four weeks, keeping your site resilient and you fully informed.

Illustrative schedule — check frequency and request allocations are configured in your agreed plan.
WEEK 01· Days 1–5 of month

Week 1 · Initial Health Audit

Proactive health scan & DNS review

Scheduled Tasks & Verifications

Full SSL certificate sanity & domain expiration tracking

Automated check

End-to-end inquiry & contact form intake delivery test

Manual verification

Scan for broken links, missing assets, and 404 redirects

Automated check

Baseline off-site database & file snapshot generated

Snapshot drill
How it is documented:

Logged in studio technical inspection log

Client notification:

Alerted only if an urgent anomaly requires input

INCIDENT TRIAGE & RESOLUTION

When something goes wrong.Structured triage, not frantic panic.

Bugs and external outages happen: hosting downtime, broken third-party APIs, or unexpected updates. What counts is having a disciplined protocol to assess, investigate, resolve, and document.

The 5-Step Incident Lifecycle

01STEP 1

Report

Automated monitoring alert triggers or client submits details via WhatsApp/email.

02STEP 2

Assess Priority

Triaged into P1 Critical, P2 Major, or P3 Minor based on business impact.

03STEP 3

Investigate

Log inspection, root-cause isolation, and staging reproduction.

04STEP 4

Apply Fix / Rollback

Immediate rollback to verified safe snapshot or targeted patch deployment.

05STEP 5

Confirm & Document

Cross-browser verification with client, issue closeout, and preventive logging.

Crucial Contractual Distinction
Morocco Business Hours (Casablanca)

Response Time vs. Resolution Time

Response Time (Acknowledgment & Diagnosis)

The time to acknowledge the notification, mobilize a technical specialist, and begin active diagnosis. Under our dedicated SLA retainer, we target initial response and diagnosis within 4 business hours for critical (P1) incidents (Mon–Fri, 09:00–18:00 Casablanca local time).

Resolution Time (Fix or Recovery)

Depends on the root cause: restoring a clean snapshot can take 20 minutes, while an upstream datacenter outage or bank gateway fault requires coordination. We never falsely guarantee fixing every complex defect in 4 hours; instead, we provide honest progress until service is fully restored.

Priority Levels & Illustrative Scenarios

Illustrative scenarios for educational clarity — real tickets are handled on your agreed channel.

P1 · Critical (Site Down / Checkout Broken)Target: Within 4 business hours
Triage Criteria:

Complete site outage, broken checkout gateway, or fatal server error.

Illustrative Case: Checkout 500 error after external update

Immediate diagnostic -> issue isolated -> rolled back to safe snapshot in 25 min to preserve sales -> patch safely tested on staging.

06 · PRICING & TAILORED SLA

Predictable technical care,scoped strictly after diagnostic.

We do not invent arbitrary monthly fees or unrealistic response guarantees. Ongoing care is quoted transparently following an audit of your technical stack and update rhythm. Completely optional, with flexible month-to-month cancellation.

Tailored SLA CareStep To Begin · Care SLA

Ongoing Website Maintenance & Security SLA

Security updates, cloud backups, uptime monitoring, and priority technical response.

Quoted on Briefmonthly retainer · 30-day notice

Confirmed net quote exclusive of tax (HT)

Monthly scope inclusions:

  • Scheduled encrypted off-site cloud snapshots with routine restore testing.
  • Core and dependency security updates tested on staging prior to live deployment.
  • Proactive uptime monitoring and automated SSL certificate verification.
  • Small monthly content updates (text, images, pricing, announcements under 30 minutes).
  • Monthly end-to-end testing of contact forms and lead notification delivery.
  • Concise plain-language monthly report detailing actions taken and platform health.

✦ Predictable cancellation: 30 days written notice before monthly renewal, no multi-year lock-in, zero exit penalties.

Ongoing Website Maintenance & Security SLA
Preventive Care & Health SLALive Protection

Key factors that shape your care quote:

Technical stack

Lean static Next.js vs multi-plugin WordPress or dynamic store.

Traffic & scale

Standard company showcase vs high-transaction e-commerce store.

Update frequency

Quarterly preventive health vs weekly active content deployments.

Response priority

Standard business-hours triage vs expedited weekend emergency coverage.

✦ All hosting accounts, domain registrations, and credentials remain in your name.

FAQ

The questionsthat always come up.

Never. Your website is 100% complete and fully operational without it, and all source code, hosting, and domain accounts belong entirely to you. Monthly care exists strictly for clients who prefer having professional oversight for security patches, off-site backups, and routine updates, rather than managing maintenance themselves.

Next step

Ready to start care & maintenance?Detailed written scope & estimate on brief.

Tell us what you need. You get a written scope, clear estimate, and delivery timeline after reviewing your brief.

See the packs

Usually replies within the hour · Mon–Sat