Craft CMS Maintenance Services

Craft CMS and Plugin updates

Enhanced Security + Peace of Mind

Access to new Craft CMS features

Optimised performance and usability

Keeping technical debt in-check

Less vulnerabilities and compatibility issues

Craft CMS Dev 4

Keeping your Craft CMS website secure and up-to date

Regular updates and maintenance ensure that your system remains current and efficient, preventing the need for complex and costly overhauls in the future.

Craft CMS Updates

Always have the latest Craft features and improvements.

Craft Plugin Updates

Utilising the latest plugins for optimised performance and security.

Server Updates

Security exploits and bug fixes taken care of.

Disk Space Checks

Identifying capacity problems before they become issues.

Form Testing

All primary forms tested to ensure they’re delivered successfully.

Uptime Monitoring

Every 5 mins. We’ll know if there’s an issue before you do.

Monthly Communication

Know what’s been done each month.

Craft CMS Expertise

We only maintain Craft CMS websites.

Getting started with our Craft CMS Maintenance Services

Step 1

Get in touch

Give us the low-down about your website needs

Step 2

Site Audit + Onboarding

Reviewed and moved into our echo-system

Step 3

Monthly Maintenance

Up to date and secure


Craft CMS Maintenance FAQs

Why is regular maintenance important for my Craft CMS website?

Even for a Craft CMS website regular maintenance is crucial to prevent security vulnerabilities, ensure compatibility with the latest web technologies, improve performance, and provide a better user experience.

Without a maintenance plan, your Craft CMS website is vulnerable to security breaches, performance issues, and outdated software, which can lead to downtime, loss of revenue, and damage to your brand.

Does your Craft CMS Maintenance include design or development of additional features?

No – it only includes:

  • Craft CMS Updates
  • Craft Plugin Updates
  • Server Updates
  • Disk Space Checks
  • Form Testing
  • Uptime Monitoring

If you need regular ongoing work then please get in touch about our Craft CMS Support & Development Retainers.

What kind of support do you provide for Craft CMS maintenance?

Our Craft CMS maintenance comes with basic email support, so we’ll always be available to answers questions and guide you with any Craft CMS issues you have with your site.

Please note this service is not a Support Retainer. For priority support and development requests, please see our Craft CMS Support & Development Retainer service.

Does the updates include major Craft CMS version upgrades?

No. As part the monthly maintenance, we will only update Craft CMS and plugins.

Updating refers to installing minor releases within the same major version of Craft CMS. These releases typically include:

  • Bug fixes: Corrections for issues and bugs found in the current version.
  • Security patches: Updates that address security vulnerabilities to keep the site secure.
  • Performance improvements: Enhancements that make the CMS run more efficiently.
  • Minor feature additions: Small new features or improvements that do not drastically change how the CMS operates.

Due to the unique complexities of each Craft CMS website, each major version update will need to estimated for individually.

For major Craft CMS version updates, please see our Craft CMS Update service.

What if I need additional Craft CMS development work beyond regular maintenance?

Just let us know. Any additional development work can be requested and will be estimated and invoice for separately from the maintenance plan.

See our Craft CMS development services for more info.

How will I be informed about updates and maintenance activities?

You'll receive a report via email each month, outlining updates performed, checks, performance metrics, and any issues resolved during the period.

How often will the maintenance be run?

Craft CMS updates, Craft CMS plugin updates and Server Updates will be run once per month.

However, we will priorities any critical security patches.

How do you deal with outdated or unsupported hosting environments?

We recommend and assist with migrating to supported hosting environments – such as DigitalOcean or Servd – ensuring your website remains secure and performs optimally.

Do you provide hosting?

No. However, we’re happy to recommend and set up and maintain server environments on:

If your Craft CMS website exists on another hosting in platform, please get in touch to see how we can work with you.

How do you manage multiple environments (development, staging, production)?

We use best practices to manage multiple environments, ensuring updates are thoroughly tested in development and staging environments before deployment to production.

How do you handle plugin updates?

We regularly monitor and test plugin updates in a staging environment before applying them to your live website to ensure there are no conflicts or issues.

What about custom Craft CMS plugin updates?

We support custom plugins and include them in our update and maintenance processes.

If your Craft CMS website currently relies on a custom plug-in, please get in touch and provide any documentation (development brief, scope of work, user intrusions, etc) so we can assess how we can best support you.

What if a major Craft CMS or plugin update breaks my website?

We test all updates in a staging environment before deploying them to your live site. If an update causes issues, we will revert the update, troubleshoot the problem, and find a solution to ensure your site remains functional.

How do you handle deprecated Craft CMS plugins?

We can and replace deprecated plugins with supported alternatives, ensuring functionality and compatibility are maintained. Each plug-in replacement will need to be estimated for individually and is not included as part of maintenance.

Also see our Custom Craft CMS Plugin Development service.

Will server updates cause downtime for my website?

We strive to minimise downtime during server updates. However, that’s not always possible. We’ll aim to schedule any necessary downtime during off-peak / low traffic hours, and you will be notified in advance.

How do you ensure my website’s security?

As part of our on boarding process, we will do a thorough audit of your site and highlight any current security issues which need addressing before we bring you into our development ecosystem.

Once on boarded, we use security best practices to ensure the security and confidentiality of your data:

  • All passwords are strong and stored in a password manager
  • 2 Factor Authentication is enabled on all Honcho accounts where this is an option
  • Structural changes to your website database are only enabled on local development
  • Websites are only served over HTTPS

We also utilise:

SSH-only connection

The servers we use can only be accessed via SSH, meaning the connection is limited to predetermined machines so even if the password was leaked, the server cannot be accessed.

No root connection

The server cannot be connected to via the root user, so sudo tasks cannot be performed without an SSH connection and additional password authentication.


Uncomplicated Firewall (UFW) is installed and enabled, only allowing traffic on port :80 and :443


IP addresses of brute force attackers are automatically blocked from the server with fail2ban.


Ubuntu and any dependencies are updated once per month, and critical security updates are performed automatically.

Craft CMS

Craft CMS follow many best practices related to security, which you can read about on their Security FAQ.

Particularly relevant is their use of CSRF tokens, encrypted cookies, HTML sanitisation, and granular user permissions. Passwords are also stored encrypted, not in plain text.

Do you provide backups as part of the maintenance plan?

Yes, if your hosting with our preferred suppliers (DigitalOcean or Servd) regular backups are included to ensure data can be restored in case of an emergency. The frequency of the backup can be tailored, depending on your requirements.

For other hosting environments, please get in touch to discuss how we can support you and meet your backup requirements.

What if my goes down?

If the downtime is due to our maintenance we’ll investigate and resolve the issue as a high priority. For any other issues, not attributed to our maintenance updates – we’ll investigate the issue as a priority but won’t be able to guarantee a resolution time.

For priority support for mission / business critical website’s check out our Craft CMS Support & Development Retainers.

What happens if my website is hacked despite the maintenance plan?

In the unlikely event of a security breach, we will promptly work to resolve the issue, restore your site from backups, and implement additional security measures to prevent future incidents.

As a precaution, we would also refresh any API keys and passwords.

How much does the Craft CMS maintenance plan cost?

£250 per month.

Does this include Craft CMS license costs?

No. All Craft CMS and login licenses will need to be paid for separately via Craft Console.

Does this include hosting costs?

No. Your hosting costs are separate and will come directly from the hosting provider. The hosting costs will vary depending on your server requirements.

What other costs can I expect to incur?

Yes, there will be initial costs to move you into our maintenance ecosystem.

Before taking you on as a maintenance client, first we will need to do a Craft CMS Audit to make sure we can fully support you.

After the audit, we’ll be able to estimate an onboarding cost.

What do we need to do to get started?

The first step is always a call – so we can find out what you need and how we can support you.

If we feel we can help, the next step would be to do a code audit. That would mean getting access to the code base, any scope or documentation you have, and (if possible) a conversation with the developer(s) that built the site.

Our code review will delve into:

  • Craft CMS Setup
  • Plugins / Custom Plugins
  • Routing
  • Multi-site setup (if applicable)
  • 3rd Party Connections / APIs

From there we’ll be able to estimate an onboarding cost.

What kind of input or resources will you need from our team?

This will be defined in full during the onboarding process but usually involves your technical lead, IT support or previous developers (when possible).

Typically to onboard a project successfully, we will need:

  • Repository access – which should contain the following:
    • composer.json
    • Source files (scss, js, images)
    • package.json
    • Compiler config (gulpfile.js / webpack.js / mix.config.js / etc
  • An Admin user to the Craft site
  • Database backup (Could be via Craft Admin)
  • SFTP details
  • An export of any uploaded assets
  • The .env file
  • API keys for any external services
  • DNS access or email access for someone who manages this
  • Google Analytics access (if applicable)
  • Any original artwork files (XD, Figma, PSD, etc)

How long does the onboarding process take?

The onboarding process typically takes 1-2 weeks, depending on the complexity of your website.

How long is the maintenance contract?

Rolling 3 months.

Can I cancel my maintenance plan at any time?

Yes, you can cancel your maintenance plan with a notice period of 90 days.

Our plans typically allow for flexibility, but specific terms regarding early termination will be outlined in your service agreement.

What happens if I decide to terminate the maintenance plan?

If you choose to terminate the plan, we provide a transition process that includes handing over all relevant documentation, backups, and access credentials to ensure a smooth handover.

Can the maintenance plan be customised to suit my specific needs?

Maybe. Lets chat : )

Can you maintain Craft Commerce or Craft Multi-site projects??

Yes, we can work with you on your Craft Commerce or multisite / multi-lingual / multi-language project.

Will the maintenance improve my website’s loading speed?

Potentially, yes. But there are many factors to consider with load speed which sit outside of Craft CMS updates, such as:

  • Unoptimised code
  • Too many HTTP requests
  • Image sizes and compression
  • Lack of caching
  • Not using a content delivery network (CDN)
  • Hosting provider
  • Server location
  • Slow server response time
  • Ads and trackers
  • Heavy web fonts
  • And more..

Any of the above may required dedicated development time to resolve.

What CMS platforms do you support?

Only Craft CMS.

Do you provide Craft CMS training for my team?

Yes, we do. Please get in touch to let us know your requirements.

What clients say about us

Matt Stephenson

– Stepthinking

Alex Rhodes

Susie Lee-Kilgariff

– Northern Light Marketing

Trusted by 180+ organisations

Client logos colour mobile

There are 234 other Craft CMS Partners out there, so why choose Honcho?

Using Craft CMS since 2015

100+ Craft projects

We only use Craft CMS

WordPress-free Zone

Inhouse development team

Inhouse UI/UX team

Ready to talk?