What is Maintenance agreement?
A maintenance agreement governs the running of a website after handover: updates to the system and its extensions, backups, uptime monitoring, minor content changes, and the question of who gets called when something happens. It is not a guarantee, it is a declaration of responsibility. That is why its value depends less on the price than on what happens within which timeframe.
Three points separate a workable agreement from a decorative one. First, frequency: a monthly patching slot is a promise, not protection, because dangerous vulnerabilities are exploited within hours. Second, authority: almost half of disclosed vulnerabilities have no fix at the moment they become public, so the only remedy is a decision such as switching an extension off or replacing it, and that needs somebody allowed to make it. Third, restoration: a backup that was created is not a backup that was tested.
In practice it pays to write the agreement along three clocks rather than along a number of hours. Technology runs in hours and days, content in months, the foundation in years. An agreement that serves only the middle clock leaves the most expensive one uncovered. It should also state what is explicitly not included, because the common dispute is not about poor work but about work never agreed.
Why does Maintenance agreement matter?
The value sits in the response time, not in the scope. For vulnerabilities in the most widely used content management system that were actually attacked, the weighted median to the first attempt is five hours. Against that pace, an agreement without a fixed response window is a reassurance rather than a measure.
Maintenance agreement in practice
- 01A trades business agrees a four-hour response window for security notices and a monthly slot for everything else.
- 02A law firm has a restore from backup demonstrated once a year instead of accepting a report about it.
- 03A company keeps a list of all installed extensions inside the agreement, so a vulnerability notice can immediately be matched against its own site.
