Drupal Maintenance
Knowing what is in your website: dependency scanning and vulnerability monitoring
A modern website is assembled from a great deal of software that nobody on your team wrote. Drupal core, dozens of contributed modules, the PHP libraries they depend on, the JavaScript packages behind...
What a website costs to run, and where the money goes
The price of building a website is discussed at length before a project starts. The cost of running it afterward is discussed much less, and it is the larger number over the life of the site. A busine...
The free security wins: TLS, headers and the basics every website should have
Some of the most effective protections a website can have cost nothing and take an afternoon. They are settings rather than software: a handful of response headers, a correctly configured certificate,...
What a predictable release calendar buys a business
When a business chooses a platform for its website, the conversation usually centers on features, design and price. Those matter. But the decision that quietly shapes the next five years of cost is a ...
Defense in depth: the seven layers that protect a business website
Ask what keeps a website secure and you will often get a single answer: keep it updated. That is true, and it is the most important habit, but it is one layer of several. A site that stays safe over y...
Drupal 10 reaches end of life on December 9: a calm upgrade plan
On December 9, 2026, Drupal 10 reaches end of life. After that date it receives no further releases, including security releases. If your site runs Drupal 10, this is the season to plan the move to Dr...
The security review we run on a website we inherit
Every few months a business comes to us with a website that somebody else built, often years ago, and a simple question: is it in good shape? Sometimes the question is prompted by a story in the news....
How security patches reach your site
Every so often a client forwards us a news article about a security vulnerability and asks whether their site is affected. It is one of our favorite messages to answer, because the answer is almost al...
What managed hosting actually means for your Drupal site
Managed hosting is one of those phrases that gets used for very different things. Sometimes it means a server with a control panel and a support address. Sometimes it means somebody will respond if th...
How we verify backups: retention, restore drills, and proof
There is a sentence we repeat internally whenever backups come up: a backup is only real once it has been restored somewhere. Until that moment it is a file you hope is complete, produced by a job you...
Performance is a habit, not a project
Launch day is the fastest most websites will ever be. The content is lean, the images are the ones the designers chose, the code is fresh, and everyone has just spent weeks paying attention to speed. ...
What we monitor on every site, and why silence is the goal
The best months in a hosting relationship are the ones where the client hears nothing from us at all. No alerts forwarded, no incident summaries, no requests to look at something. Just a website that ...
The difference between Drupal support and Drupal repair
Two very different services get sold under the name Drupal support. One is repair: a page goes down, a form stops sending, a ticket goes out, someone digs in, and the fire gets put out. The other is t...
What delaying Drupal updates really costs
A delayed update is a loan. The balance is small at first and the interest is invisible, so it never feels urgent. Six months later it is still invisible. Twelve months later the bill arrives all at o...
Have a Drupal question your team is trying to think through?
If you are weighing a rebuild, a migration, a support decision, or a technical direction change, we are happy to talk it through.