What maintenance covers
The point of maintenance is that nothing on this list becomes an emergency. Each item is routine when done on schedule and expensive when done after the fact.
- Security: core and module patches applied on release, third-party modules reviewed for known vulnerabilities, hardening of admin and file permissions
- Updates: minor version upgrades, PHP version moves, module updates tested on staging first
- Backups: database and files, versioned, with restores actually tested rather than assumed
- Monitoring: uptime, error logs, checkout success, crawl errors, so problems surface before a customer reports them
- Performance: cache configuration, database maintenance, image pipelines, server sizing
- A person: one contact who knows your store, not a support queue rotating through strangers