packages
Drupal security advisories land on a fixed schedule and cannot wait. We apply core and contrib patches on staging first, run composer updates cleanly, monitor uptime and backups, and document every change. Twelve years of Drupal experience, including sites still on unsupported versions, with monthly reporting so you know exactly what was done.
Security advisories reviewed against your module set, patched on staging, then promoted.
Composer core and contrib updates on a fixed cadence, never blind-applied to production.
Uptime, backups, performance, and on the Large tier, WCAG 2.1 AA accessibility monitoring.
Month to month. Every tier includes development hours, staging testing, and a written monthly report.
Small Drupal 10/11 sites, low complexity
$499/month
Institutional sites with custom modules
$999/month
Multisite, high traffic, or unsupported versions
$2,000/month
| Feature | Small$499/month | Medium$999/month | Large$2,000/month |
|---|---|---|---|
| Security advisory response | Within 72 hours | Within 24 hours | Within 8 hours |
| Core and contrib updates | Monthly | Bi-weekly | Weekly |
| Composer dependency management | |||
| Staging environment testing | Persistent staging | ||
| Offsite backups | Daily | Daily | Daily + on-demand |
| Uptime monitoring | 24/7 | 24/7 with SLA | 24/7 with SLA |
| Database and cache optimization | |||
| Custom module maintenance | |||
| Performance monitoring | |||
| Accessibility monitoring (WCAG 2.1 AA) | |||
| Multisite support | |||
| Major version upgrade planning | |||
| Included development hours | 2 per month | 5 per month | 12 per month |
| Response time | 2 business days | 1 business day | Same day |
| Monthly report | Yes + account contact |
Three tiers: $499 per month for small Drupal 10 or 11 sites, $999 per month for institutional sites with custom modules, and $2,000 per month for multisite, high traffic, or sites still on an unsupported version. Each tier includes development hours, so routine changes do not need a separate invoice.
Within 72 hours on Small, 24 hours on Medium, and 8 hours on Large. Critical advisories affecting your specific module set are patched on staging first, verified, then deployed to production with a written change record.
Yes. The Large tier is built for it, and includes major version upgrade planning so you have a path off end of life rather than a permanent patching bill. We have run Drupal 7 to 10 and 11 migrations for universities, government agencies, and nonprofits.
Content type changes, view and block adjustments, template tweaks, form updates, accessibility fixes, and small feature work. Hours do not roll over. Larger work is quoted as a fixed-fee change order.
Always. Core and contrib updates run through composer on a staging environment, are checked against your custom modules and theme, and are only promoted after verification. Large includes a persistent staging environment.
Every patch applied, advisories reviewed, uptime, backup verification, performance notes, and how the included development hours were spent. The Large tier adds a named account contact.
Related pages: WordPress and other CMS maintenance plans, Drupal Certified Partner, SEO and AI search visibility packages, and project pricing.
Book a 30 minute callQ&A
