Focus on your business. We keep your server patched.
Monthly OS package and security updates, NGINX and PHP upgrades with config checks, out-of-band CVE fixes (end-of-life systems like CentOS 7 included), uptime monitoring, and a human who responds when something fails. For teams running important websites who would rather not babysit a Linux server.
Server Care
- Monthly updates of all OS packages
- NGINX and PHP upgrades with config checks
- Out-of-band CVE patching, end-of-life systems included
- Uptime alerts via Amplify
- Best-effort 24h response
Server + CMS Care
- Everything in Server Care
- WordPress core minor updates
- Active plugin updates
- Post-update smoke check on admin and public URL
Plus to NGINX-MOD
- Full configuration audit
- Hands-on implementation
- Before and after benchmarks
- 90 days email support
What's actually included
| Included | Server Care | Server + CMS Care |
|---|---|---|
| Monthly OS package and security updates | Included | Included |
| NGINX and PHP runtime upgrades | Included | Included |
| Reconciliation of deprecated directives and default changes | Included | Included |
| Out-of-band patching when critical CVEs land, end-of-life systems included | Included | Included |
| NGINX and PHP-FPM config validation before a graceful reload | Included | Included |
| Uptime alerts via Amplify (5 hosts, 7-day retention) | Included | Included |
| Human response on failures (best-effort 24h) | Included | Included |
| WordPress core minor updates | Not included | Included |
| Active WordPress plugin updates | Not included | Included |
| Post-update smoke check on WP admin and public URL | Not included | Included |
| Database administration, application debugging, major OS version upgrades | Not included | Not included |
Pricing is per server. Multi-server customers: email us for a bulk quote.
Kubernetes platform teams
Still running the retired Ingress NGINX controller?
Server Care covers individual Linux hosts. Controller migration is a separate engagement that inventories ingress behavior, recommends a target, and defines cutover and rollback before traffic moves.
Review the Ingress NGINX migration assessmentFrequently asked questions
What is Managed Server Care?
We keep the software under your website patched. Every month we apply all pending OS package and security updates, upgrade NGINX and your PHP runtimes, reconcile deprecated directives and default changes, re-validate the configuration, and reload only after validation passes. When a critical CVE lands between runs, we patch out of band.
Do you update every package on the server?
Yes. Each run applies all available updates from your distribution and from the GetPageSpeed repositories: system libraries such as OpenSSL, NGINX, PHP and its extensions, and the rest of the installed packages. We check that NGINX and PHP-FPM accept their configuration before anything is reloaded.
Can you patch an end-of-life server like CentOS 7?
Yes. Upstream fixes stopped for CentOS 7 and other end-of-life systems, so we apply GetPageSpeed Everpatch builds, which carry backported fixes for PHP CVEs such as PHP2Shell. Everpatch packages need a GetPageSpeed subscription covering the server.
What is NOT included?
Your application code and its debugging, database administration, and major OS version upgrades (for example CentOS 7 to Rocky Linux 9, quoted separately). WordPress core and plugin updates are only part of Server + CMS Care. Scope is deliberately narrow so we can be reliable.
What kind of work actually ships?
A monthly digest of every change applied to servers under maintenance is published at /updates. It is regenerated daily from the ops repository, so it reflects real work, not marketing.
What is the SLA?
Best-effort 24h human response on failures. Not 24/7. This is a pragmatic plan for teams who want their servers patched without hiring a sysadmin or paying enterprise rates. For a contractual SLA, ask about Enterprise.
How do I cancel?
Monthly. Cancel anytime from your Stripe customer portal. No contracts.
How does the access model work?
You add our dedicated ed25519 SSH public key to /root/.ssh/authorized_keys on the server you want maintained. We only connect for scheduled updates or out-of-band CVE patches. You can revoke access at any time by removing the key. There is nothing for you to run or learn.
What is the Plus to NGINX-MOD migration?
A one-time engagement where we replace your NGINX Plus deployment with NGINX-MOD (our open-source distribution). Includes configuration audit, implementation, before and after benchmarks, and 90 days of email support. Starts at $999; complex scopes are quoted individually.