Development
Your website kept online, patched and backed up after launch, with someone watching for problems so you don't first hear about them from a customer.
In short
Website care and hosting is ongoing management of your website: secure hosting, software updates, backups, uptime monitoring and security monitoring. Catharsis is a cyber security company, so your site is maintained by a security team that patches promptly, tests restores and investigates the alerts monitoring raises.
01Who it's for
It suits organisations whose website has had little care since launch, including sites another developer built and nobody has looked after since.
02What's included
Host & protect
Hosting on a configured, hardened platform with HTTPS, security headers and a web application firewall. We manage the server and platform software, and we can host in Australian regions where data residency matters.
We manage your domain name system (DNS) records and HTTPS certificates and help protect them from accidental or unauthorised changes, which could take your website or email offline.
Maintain
We update your content management system (CMS), plugins, themes and server software on a regular schedule. Security patches go on sooner when a serious flaw is announced. We check the site after updating and roll back any change that breaks it.
Automatic backups of your site files and database, stored separately from the hosting. We test restores, so a backup is something we know works rather than something we hope works.
Monitor
Your site is checked automatically from outside your network. If it goes down or its security certificate is about to expire, we are alerted and investigate.
We watch for signs of compromise such as changed files, new admin accounts, malware and blocklisting, and scan for known vulnerabilities. Anything suspicious is investigated by our security team, not passed to a general helpdesk.
03In detail
It is the ongoing work that keeps your website online, current and secure after launch: a place for your site to live, plus the routine maintenance most sites quietly miss. From Sydney, Catharsis looks after websites for organisations across Australia. When we take over a site, the first review often finds unused admin accounts and plugins that are no longer maintained.
The result of a missed update can be a defaced homepage, a site that serves malware to visitors, stolen form data or a browser warning that drives customers away. Ongoing care is the website equivalent of patching your computers, and it applies the same thinking as “Patch applications” and “Regular backups”, two of the controls ASD prioritises, aligned with ASD Essentials.
Managed hosting means we run the platform your site sits on, not just rent you space. Care covers the website, its hosting, domain and certificates. Your wider systems are covered by other services:
If your site is down, we find the cause and restore service. If it has been compromised, we contain the problem, restore from a known-good backup and close the weakness that was used. We also tell you whether personal information may have been involved, and whether it may be a notifiable data breach under the Notifiable Data Breaches (NDB) scheme.
04The process
We review your current site, hosting, domain and accounts, and list any urgent issues such as outdated plugins or missing backups.
We move your site to our managed hosting, or take over care where it is, with a tested backup before any change.
Scheduled updates, backups and monitoring, handled by our team, with plain-English updates when something needs your attention.
05Frameworks
Useful for your auditor, board or procurement team. The mapping shows where this service supports each framework. It doesn't replace a formal assessment.
| Control | ASD Essentials | ASD maturity model (current) | ISO/IEC 27001 | NIST CSF |
|---|---|---|---|---|
| Patching CMS and plugins | Not applicable | Patch applications | A.8.8 | Protect (PR.PS-02) |
| Backups and tested restores | Not applicable | Regular backups | A.8.13 | Protect (PR.DS-11) |
| Uptime and security monitoring | Visibility and response | Not applicable | A.8.16 | Detect (DE.CM-01) |
| Hardened hosting | Boundary services | Not applicable | A.8.9, A.8.20 | Not applicable |
06Pricing
Pricing*
Quoted for your environment
What changes the price
The price depends on the size and type of site, traffic, whether it is an online store, the platform it runs on and how often it changes.
Not included: rebuilds and larger design or feature work, which are quoted separately. If your site needs a rebuild, our website design and development team can quote it.
07FAQ
Can't see your question? Ask a specialist and get a straight answer.
Ask a specialistThe core is the work needed to keep your site online, up to date and secure: hosting, updates, tested backups and monitoring. Small changes to content, design or features can be added to your plan, and larger work is quoted separately.
Because the software behind most websites, such as the CMS, plugins and themes, regularly has security flaws discovered and fixed. Automated scans look for sites still running a version with a known flaw, and many successful attacks use a flaw that already had a fix available. Regular updates close those gaps, and checking each update protects your site from breaking when one changes.
It shouldn't, if the move is planned. Email usually runs on a separate service, such as Microsoft 365 or Google Workspace, and depends on mail-routing and email authentication records in your DNS. Before moving, we copy every existing DNS record, change only the records the website needs and check that mail still flows afterwards. If your email is hosted with your current web host, we plan its move separately.
Yes. We start with a review of the site, its hosting, domain and accounts, and tell you about anything urgent first. Some sites can be cared for where they are hosted now; others are easier to secure after a move to our managed hosting. We take a tested backup before making any change.
Monitoring alerts are investigated by our security team, and coverage and response targets are agreed with you in a written service level agreement (SLA) before you sign. Automatic protections such as the web application firewall and scheduled backups run without waiting for a person. If your site is an online store or otherwise time-critical, tell us early so the SLA reflects it.
Yes. Your domain name is registered to your organisation, not to us, and you own your website content and files. We document every account involved in running the site. If you ever move to another provider, we hand over a full backup and the access details they need, so you are not locked in.
Talk to our team
No obligation. You talk to the people who do the work.
