Website maintenance is a regular activity without which even a well-built site gradually becomes a security risk. It includes updates to the system core, extensions and libraries, renewal of certificates, checking backups and their restorability, monitoring availability and response time, and fixing errors reported by users. It is recommended to update first in a testing environment, because for more complex websites, an update can break functionality. Companies often pay only for building the website and do not address maintenance, thereby exposing themselves to being hacked, data loss and lost sales due to downtime. A service contract should therefore clearly specify what it covers, what the response time is for an outage, and who is responsible for restoring from a backup, including how often and where backups are made.
See also: Choosing a CMS, NIS2 and cybersecurity, HTTP status codes.
