Website and eshop maintenance, before something breaks.
We take care of website and eshop maintenance, so your WordPress, WooCommerce or Shopify site stays up to date and secure and you never hear from a customer that something broke. We test updates before and after, keep daily backups, clean up malware, make small changes and take over sites someone else built, and every month you get one page on what we did.
Maintenance · Tuesday 3 Nov, 08:10
- Online: OKUpchecked every 5 minutes
- SSL: OK62 daysto expiry, renews itself
- Backup: OK03:00today · restore tested 14 Oct
- Updates: Waiting2waiting for checks on staging
- Security: OKCleanno suspicious file changes
- Email: Needs attentionDMARCmissing from DNS, added today
- 03:00OKFiles and database backed up to another server
- 07:42OKWooCommerce updated; cart and checkout checked
- 07:55WaitingPayment plugin breaks checkout on staging; held back
WHAT HAPPENS TO A SITE WITHOUT MAINTENANCE
A website showing a critical error after an update You clicked “Update” and the site went down
WordPress showed twelve updates and you ran them all at once. Now the homepage says there has been a critical error, and you don't know which plugin caused it or whether there's a backup from yesterday.
Updates go to a copy of the site first, with checks before and after.
One update, step by stepA check where the last order came in two days ago The eshop stopped taking orders, and a customer told you
A customer writes that card payment won't go through. You check the orders: the last one came in two days ago. Nobody noticed, because the site still opened as usual.
We keep checking that the site opens and the checkout answers, and hear about it before your customers.
A phone where Chrome warns the site may be compromised The site sends visitors somewhere else
Visitors see ads you never placed, or land on a site handing out “prizes”. Chrome shows a red warning, and Google says under your name that the site may be hacked.
We clean malicious code off the site and close the way they got in.
Has your WordPress site been hacked?Messages to the last developer, who doesn't answer The last developer has gone quiet
Whoever built the site doesn't answer any more. You don't know where it's hosted, who has the passwords for the domain and the email, or which plugins they installed and why.
We take over sites someone else built: we find the hosting, the passwords and the domain.
We take over sites someone else built
WHY UPDATES CAN'T WAIT
- 11,334
- new security holes found in WordPress during 2025
- 91%
- of them in plugins, not in WordPress itself
- 46%
- had no fix on the day they became public
WHAT MAINTENANCE COVERS
Updates, checked before and after
WordPress, WooCommerce, the theme and the plugins are updated on a copy of the site first. We check the homepage, cart, checkout and forms, and only then apply the update to the live site.
Daily backups, with restores we test
Files and database every night, on a different server from the site's, with the last 30 days always at hand. Every month we test a restore, because a backup is only worth something if it opens.
Security and malware clean-up
File checks for suspicious changes, a firewall, a password plus a second step for every admin, and no accounts nobody needs. If something gets in, we clean it out and close the gap it came through.
Uptime and SSL, every few minutes
We keep checking that the site opens and that checkout responds, so we find out before your customers do. We watch the SSL certificate too, which expires more often from 2026 on, so the browser never says “Not secure”.
Speed on a phone
Every month we measure how fast the site opens on a phone. Heavy images, a cache that isn't working and plugins that load for nothing get fixed before the first customer gives up.
Hosting, email and DNS
The PHP version, server space, DNS, and the SPF, DKIM and DMARC records Gmail and Outlook check before sending an email to spam, so order confirmations reach your customers. If you like, we host the site too.
Small changes and content
A new page, new shipping rates, a banner for the sale, a paragraph that changed. You send them in one email, and you see them live, checked on a phone too.
When an order or a payment stops
Card payments, couriers, order emails, the feeds for Skroutz and BestPrice, the connection to Odoo. When one of them stops, we find out what went wrong and get it running again.
One page every month
What was updated, what was held back for checks, which problems came up and how they were solved, what we changed for you and what we suggest for next month.
Building a new site or a new eshop? Maintenance starts the day it goes live, by the same people who built it.
ONE UPDATE, STEP BY STEP
This is how every update reaches your eshop. When a plugin's automatic update takes the whole site down, WordPress rolls it back by itself; a checkout that has stopped taking cards, though, goes unnoticed. Flip the switch to see what happens then.
- Backup
- Staging site
- Checks
- Live eshop
- Before we touch anything, we back up the eshop's files and database.
- A copy of the eshop, at a staging address customers never see, gets the updates: WooCommerce, the theme and five plugins.
- We check the homepage, search, a product page, the cart, checkout with a test payment, the contact form and the order email. Everything works.
- At checkout, card payment won't complete: the new version of the payment plugin doesn't get along with the theme.
- This update doesn't go to the live eshop. Your customers see nothing and keep ordering as before.
- We fix the missing setting, or wait for the plugin maker's fix, and test again. This time checkout works.
- The update goes to the live eshop, in the hours with the least traffic.
- The same checks again, now on the live eshop, and one line in the monthly report on what changed.
If anything slips through all the same, the eshop goes back to the backup from the first step.
HAS YOUR WORDPRESS SITE BEEN HACKED?
The signs: the site sends visitors to another site, ads appear that you never placed, Chrome shows a red warning, or Google says the site may be hacked. Usually they got in through a plugin that wasn't updated or a password that leaked.
We clean the files and the database, or go back to a clean backup when there is one, close the gap they came through and change every password. Then we ask Google to review the site through Search Console, so the warning comes off.
If the hack touched customer data, the GDPR generally requires you to notify the data protection authority (in Greece, the Hellenic DPA) within 72 hours of finding out. We give you in writing what we saw, so you can decide with your lawyer.
- Isolatea copy of the site as it is, and a maintenance page for visitors
- Find how they got inan old plugin, a stolen password, an unknown admin
- Cleanfiles and database, or a restore from a clean backup
- Close the gapupdates, new passwords and keys for everyone
- Ask Google for a reviewso the warning comes off
And for the weeks after, we watch for it coming back
WE TAKE OVER SITES SOMEONE ELSE BUILT
The last developer doesn't answer, or the agency that built the site has closed. We start with the basics: where the domain is registered, where the site is hosted, who holds the passwords for DNS and email. Whatever isn't in your name, we bring into your name.
If you have no passwords at all, access is recovered through the domain registrar and the hosting company, with your company's details. We tell you exactly what to ask them for.
Before we change anything, we take a full backup and write down what's installed, what's out of date and what's at risk. We don't rebuild the site from scratch: we keep what works and fix what's at risk.
SITE HANDOVER
Εταιρεία Α.Ε.First check
1Accounts in your name
- Done: Domain: registered to your company
- Done: Hosting: new password, old user removed
- Done: WordPress: 2 unknown admins removed
- Pending: DNS and email: access from the registrarYou
2What we found
| What | Today | What we do |
|---|---|---|
| Plugins | 23, 4 of them abandoned | replace or remove |
| PHP | 8.1, no security fixes | 8.3, after a test |
| Backups | none for 5 months | daily, from today |
| no DKIM or DMARC | records in DNS |
THE MONTHLY REPORT
Every month we send you one page: how many backups ran, what was updated, what was held back for checks and why, which problems came up and how they were solved, and what we'll do next month.
The numbers come from the tools that watch your site, not from estimates. You can see its layout, with the other documents you get when we work together, in our samples.
MONTHLY REPORT
Εταιρεία Α.Ε. · October 2026Eshop maintenance
- 31
- backups; 1 restore tested
- 14
- updates; 1 held back for checks
- 2
- alerts, both solved
What happened
- The new version of the payment plugin broke checkout on staging. It was held back, and went live on 21 Oct with the plugin maker's fix.
- On 9 Oct the site was down for 12 minutes before dawn. The hosting company fixed it; no orders were lost.
- New shipping rates for the islands and two new category pages.
Next month
- PHP from 8.2 to 8.3, because 8.2 stops getting security fixes on 31 Dec
- The Black Friday offers, with the lowest price of the previous 30 days shown
ESHOP SUPPORT THAT KEEPS YOUR SHOP FAST AND SAFE
You don't need to work out what broke. With eshop support, we spot it, we fix it, and you keep selling.
- Eshop
Bots stay off your eshop
We separate real shoppers from bots in your server logs, and set up Cloudflare rules that stop mass requests before they weigh the eshop down. Your customers get a fast shop and your server gets room to breathe.
- Eshop
New photos, without closing the eshop
Product photos are cleaned up and swapped in for the old ones with no downtime and without changing a single address, and there's a backup to restore from. Your customers only see the better result.
- Hosting
Backups and upgrades without the worry
The hosting platform we run for Odoo keeps backups in separate storage, and every upgrade is tried on one installation before it reaches the rest. If something isn't right, you never feel it.
- Eshop
Code someone else left? We'll take it on
We write our own WooCommerce plugins, with automated tests on every change. That's why we're at home reading and fixing whatever the last developer left you.
Something worrying you about your eshop? Tell us what's happening and we'll take a look.
HOW WEBSITE MAINTENANCE STARTS
A rough guide, for a WooCommerce eshop. If the site has been hacked, the clean-up comes first.
A message and access
You tell us what you have and what worries you. You give us access with a user of our own, so you never have to share your own passwords.
First check
Week 1. We take a full backup and check versions, plugins, security, speed, SSL, email and DNS. You get what we found, in order of priority, with our proposal.
Urgent things first
Week 2. We start with what's at risk: plugins with known holes, backups that weren't running, accounts nobody needs. We set up the daily backups and the monitoring.
The monthly routine
From month one. Tested updates, backups, the changes you ask for and, at the end of the month, the report on what we did.
QUESTIONS
How much does website maintenance cost?
It depends on the site: a company website of a few pages needs less work than an eshop with payments, couriers and a connection to Odoo. After the first check we send a written proposal with a fixed monthly price and exactly what it covers.
Doesn't WordPress update itself?
Partly. It installs core security releases by itself, and plugins update automatically if you switch that on. But if an update breaks checkout without taking the site down, nobody notices. That's why we test on a copy first and check again afterwards.
Do you maintain sites you didn't build?
Yes. We start with a first check, bring the accounts into your name and tell you what's urgent and what can wait. The site doesn't need to be rebuilt.
What if the site has already been hacked?
The clean-up comes first, before regular maintenance starts: we find how they got in, clean the site, close the gap and ask Google to remove the warning. See what we do, step by step.
What if orders or payments stop?
Write to us: an eshop that isn't taking orders goes ahead of any other work. We check checkout, payments, order emails and connections, and tell you what went wrong and what we changed. Often the monitoring shows it to us first.
Do you maintain Shopify stores too?
Yes. On Shopify, the servers and platform updates are Shopify's job. We look after the theme, the apps, tracking, feeds and the connection to Odoo. If you're still choosing a platform, see our guide WooCommerce or Shopify.
Are the accounts and backups mine?
Yes. The domain, hosting, email and every account are in your name, and we log in with a user of our own. If we stop working together, you keep everything, with a handover note for whoever comes next.
Do you work in English?
Yes. Calls, the first check, the monthly report and every change request work in English or Greek, and we keep sites in both languages in step.
ALONG WITH MAINTENANCE
Websites & eshops
A new site or a redesign of the old one, fast on a phone and set up for Google.
Eshop compliance
The withdrawal button, cookies with “Reject”, accessibility and the right previous price, on the eshop you already have.
Eshop–ERP integration
Orders, prices and stock update automatically between your eshop and your business software.
WooCommerce or Shopify
Our guide to which platform suits which eshop, and what that means for looking after it.
SEND US YOUR SITE'S ADDRESS.
We start with a first check and tell you what we found: what's urgent, what can wait and what we'll do every month.