Every website has to live on a server somewhere. The difference between hosting providers is not really the server. It is who is responsible when something needs doing: a security patch, a failed backup, a certificate that has expired, a sudden spike in traffic. This article sets out the components of a managed service so you can compare offers properly.
The server itself
At the simplest level you are renting space and processing power. The things that matter are where the server is located, which affects both speed and data protection obligations, how much traffic it can handle, and whether it is shared with other customers. For most business sites a shared or cloud-hosted environment is fine. What matters more is everything that sits on top.
SSL certificates
The padlock in the browser. A site without a valid certificate is marked as "not secure" and ranks worse in search. Certificates expire and must be renewed. A managed service should handle this automatically and you should never have to think about it.
Backups
The questions to ask are: how often, where are they stored, how long are they kept, and has a restore actually been tested? A backup on the same server as the site is not a backup. A good arrangement keeps copies off-site, takes them at least daily, and can restore the site to a point in time if content is deleted or the site is compromised.
Software updates and security patching
Content management systems, plugins, frameworks and the server's own operating system all receive security updates. Most website compromises happen through software that was not updated. Managed maintenance means someone applies these updates on a schedule, checks the site still works afterwards, and rolls back if it does not.
Monitoring
Uptime monitoring checks the site from outside every few minutes and alerts someone if it stops responding. Without it, the first person to notice an outage is usually a customer. Good monitoring also watches for slow responses, certificate expiry and unusual traffic.
Support and content changes
Maintenance contracts usually include an allowance for small changes: a new team member on the About page, an updated price, a seasonal banner. Check what is included, how quickly requests are turned around, and what counts as a larger piece of work that would be quoted separately.
Questions to ask any provider
- Where is the server, and who owns the account? You should be able to take the site elsewhere.
- How often are backups taken, where are they stored, and when was a restore last tested?
- Who applies security updates, and how quickly after they are released?
- Is the site monitored? Who is alerted and what is the response time?
- What happens if the site is hacked? Is cleanup included?
- What content changes are included each month, and what is the turnaround?
Our approach. We host and maintain the sites we build, and take on sites built by others. Certificates, backups, updates and monitoring are part of how we run every site, not optional extras, and you keep ownership of your domain and content throughout.