Maintenance plan
Keep the app you launched healthy
Every subscription includes the maintenance plan. It has two halves: active monitoring between audits, and a quarterly audit that takes the long view.
01
Active monitoring
Your app depends on packages and a cloud platform that change without asking you. We watch both and plan the response before the deadline.
Dependency vulnerability scanning
Every package in your app is scanned continuously against published vulnerability advisories. Findings are triaged weekly, and patches go through QA and one-click deployment like any other change.
Cloud advisory tracking
We track AWS advisories, scheduled maintenance windows, and deprecation notices that affect your environment, and plan the response before the deadline.
Urgent escalation
When something needs attention now, you get a plain-language summary, a recommended course of action, and a cost estimate before any work starts. You decide.
02
Quarterly audit
Every quarter we review the whole application against ten engineering dimensions and write up what we found.
Ten dimensions, every quarter
Infrastructure, dependencies, certificates, security, identity, backups, observability, cost, frontend performance and accessibility, and code quality. Nothing is skipped, and anything marked not applicable is explained.
Evidence for every finding
Each finding is ranked High, Medium, or Low and comes with the evidence behind it: the package, the setting, the certificate date, the measurement.
Report within ten business days
You receive a written report within ten business days of the audit, with a recommended action for each finding so you can decide what to do.
Quarterly audit
The ten dimensions
Each audit covers the same ten areas, so results are comparable quarter to quarter.
- 01
Cloud infrastructure health
Configuration, resource state, and service limits in your AWS account.
- 02
Dependencies and packages
Outdated or vulnerable packages across the front end, API, and build tools.
- 03
TLS certificates
Certificate validity, expiry dates, renewal, and supported protocols.
- 04
Application security
Authentication flows, authorization checks, input handling, and secrets management.
- 05
Identity configuration
Identity provider settings, roles, session rules, and directory connections.
- 06
Backups and disaster recovery
Backup schedule, encryption, snapshot retention, and restore procedure.
- 07
Observability readiness
Logging, error alerting, and whether a problem would be noticed.
- 08
Cloud performance and cost
Resource sizing, response times, and spend against actual usage.
- 09
Frontend performance and accessibility
Page load, interaction speed, and accessibility against published standards.
- 10
Technical debt and code quality
Type coverage, lint status, test health, and areas due for cleanup.
What you receive
The plan produces things you can read, file, and act on.
Weekly triage of scan findings
A review of every new vulnerability finding, with anything urgent escalated to you the same week.
Advisory notices
A heads-up on cloud changes that affect your environment, with the planned response and the date it matters.
Quarterly audit report
A written report across ten dimensions, every finding ranked High, Medium, or Low with evidence, delivered within ten business days.
Encrypted backups with retained snapshots
Ongoing encrypted backups of your database with retained snapshots, reviewed each quarter under the backups and disaster recovery dimension.
Maintenance is in the monthly fee
There is no separate support contract. Estimate your screens and the plan is already included.