Maintenance across the website and its dependencies
We review the platform, extensions, custom code and supporting environment to establish what needs ongoing attention. The service identifies the components included in Midoriweb's scope and the responsibilities held by hosting providers, software suppliers or your own team. That creates a practical boundary for maintenance.
Our work is particularly suited to websites where application and infrastructure decisions are connected. A patch may affect a custom module; an access change may involve a provider; a recovery procedure may depend on several services. We can follow those relationships and implement the relevant technical work, while making the dependencies and decisions visible to your business.
Platform patches and component updates
We assess and implement updates relevant to the installed website, including platform patches and extension changes within the agreed scope. The review considers compatibility and the functions the business needs to preserve. Planned changes are tested in a suitable environment before the agreed release.
For Magento, the work can connect with a wider upgrade project where the current version or dependencies require a larger change. We identify that distinction so an update request does not conceal significant development work. The handover records the components changed, the checks completed and any remaining actions. You can see the maintenance delivered and plan the next stage on an informed basis.
Administrative and technical access
We review access to website administration, hosting and connected services, then implement the changes agreed by your business. The work can include account cleanup, role permissions and available authentication controls. We identify access that is unexplained, shared unnecessarily or no longer required for an active responsibility.
We also define access for developers and providers involved in the website. The configuration should reflect the work they need to perform and the environment they are using. Your business decides who is authorised; Midoriweb handles the technical implementation and documents the resulting arrangement. This can form part of a support takeover or a periodic review of an established site.
Configuration and application review
We assess relevant website configuration and custom implementation for weaknesses that can be addressed within the maintenance scope. This may include exposed administrative functions, unnecessary services or inappropriate handling of access and configuration. Findings are prioritised and explained with the affected component and proposed work.
Our development capability allows us to correct application behaviour where the issue sits in custom code. We also coordinate with hosting or software providers when their controls are involved. The review is scoped explicitly; it is not presented as a comprehensive penetration test or a guarantee that every vulnerability has been found. Where a specialist security assessment is appropriate, we identify it as a separate requirement.
Backup and restoration arrangements
We review the material required to restore the website and the process for using it. The scope covers the application, database, media and relevant configuration, together with ownership of the backups and the access needed in a recovery situation. We identify gaps that could prevent the business from restoring a usable service.
Where agreed, we prepare and test a restoration procedure in a suitable environment. That establishes more than the existence of a backup file: it checks the steps needed to bring the site back into operation. We also consider changing business records and connected systems when planning recovery, so the implications of restoring an earlier state are understood.
Technical assistance after a suspected compromise
We can assist with technical investigation and remediation when a website shows signs of compromise. The initial scope establishes the affected environment, the immediate business impact and the actions needed to contain further disruption. We agree access and responsibilities before carrying out work.
The implementation may involve removing unauthorised changes, closing the identified entry route, updating affected components and restoring a known usable state. We document the evidence and actions available within the scope and identify where additional specialist or provider involvement is needed. Recovery checks assess the relevant website functions, while follow-up maintenance addresses the technical findings that remain after the immediate response.
Monitoring and review responsibilities
We can include relevant monitoring and review tasks in an ongoing maintenance arrangement. The scope defines what is checked, who receives the information and which actions are included. Application errors, service availability and changes requiring attention can then feed into a planned technical response.
Monitoring is useful when it has a clear owner and an actionable purpose. We agree the coverage around the systems Midoriweb supports and the availability your business requires. Tools alone do not establish round-the-clock response or complete security coverage, so those commitments are stated only where they form part of the actual service arrangement.
Maintenance that respects the trading operation
We plan changes around the functions the website needs to keep delivering. A patch or configuration adjustment is reviewed against relevant customer journeys, staff tasks and integrations. The release approach includes suitable backups, a defined sequence and checks after the work is applied.
For ecommerce, the review may include checkout, order processing and the exchange of information with fulfilment systems. Our Magento support expertise helps connect maintenance with those operating requirements. You receive an account of the work completed and any remaining limitations, giving the business a practical basis for continuing to use and maintain the site.
Why choose Midoriweb for website maintenance?
We combine application development and infrastructure skills, allowing maintenance findings to be followed into the relevant implementation. That is useful when an issue crosses the website, a custom module and the hosting environment. We can carry out the agreed corrections and coordinate the contributions needed from other providers.
We also make the scope understandable. Your business can see which components are covered, which work has been completed and what needs a separate decision. The relationship can include server management and ongoing Magento support where appropriate, bringing related responsibilities into a coordinated technical plan.
We can review the technical steps involved when a provider or staff member leaves the project, including removal of access and changes to credentials they controlled. This gives the business an orderly way to update the website's access arrangements as responsibilities change.
FAQs
Does this service guarantee that the site cannot be hacked?
No. We implement and maintain agreed controls, address identified issues and improve recovery arrangements. The scope and evidence are explained clearly, without a guarantee that no incident can occur.
Is a security review the same as a penetration test?
No. The type and depth of assessment are defined in the proposal. A specialist penetration test may be a separate requirement, and we can work with findings from an appropriate assessment provider.
Can you maintain a website built by another company?
Yes. We begin by reviewing the implementation, access and existing responsibilities. Any discovery or corrective work needed to establish maintenance is identified in the initial scope.
How do we get started?
Book a consultation or tell us about the maintenance work you need. If there is an active incident, state the immediate impact so availability and an initial technical response can be discussed.
