arrow_forwardContact us

Maintenance agreement (SLA)

Secure Website — Updated, Monitored, and Protected

A secure website must be kept up to date. With a maintenance agreement from AG , we update the software, monitor the website, and patch known security vulnerabilities—before anyone has a chance to exploit them. If something goes wrong, we’ll fix it.

The need has increased. AI has made it inexpensive to search for vulnerabilities on websites on a large scale, and in October 2026, the National Security Authority set the national cyber risk level to “high.” An outdated website becomes slower, features stop working, and it becomes easier to attack. It’s more expensive to clean up the mess afterward than to keep the website up to date. Maintenance is better than firefighting.

This is included in all of our maintenance contracts

Regardless of the level, we'll set up your website according to AG's security standards:

  • Two-factor authentication on all administrator accounts. A stolen password alone is not enough to gain access.
  • Security headers that block the most common browser-based attacks.
  • No unnecessary access. Outsiders cannot view usernames or internal data.
  • No unnecessary extensions or tools in use. What isn't there can't be attacked.
  • Back up your data before each update.
  • Monitoring of uptime and known security vulnerabilities.
image of code on a screen

We offer three different levels on our maintenance agreement:

Maintenance of WordPress and Sanity Websites

We deliver websites built with both WordPress and Sanity using Next.js. The tiers and prices are the same, but the maintenance differs:

WordPress Sanity and Next.js
What's Being Updated WordPress, themes, and plugins Next.js, React, and other code libraries (npm packages)
Where vulnerabilities are most commonly found In extensions In code libraries and in the hosting provider's configuration
What We Check Users, Roles, and Extensions Access keys (tokens), roles in Sanity, and access to the hosting service

A website built with Sanity and Next.js generally has fewer attack surfaces than a WordPress site, but it must also be kept up to date. Critical vulnerabilities in Next.js and React in recent years have required prompt updates.

How the Maintenance Agreement Works

We update frameworks and extensions once a month. Before the update, we create a backup, and afterward, we test selected pages. This work is done during regular business hours.

We update frameworks and extensions daily. Updates are performed automatically, with a backup created beforehand and a comparison of the pages before and after the update. If anything goes wrong, the change is automatically rolled back. Once a month, we check to make sure the website is up and running properly.

Same as Standard, but with daily updates and weekly status checks.

The agreement includes time to correct errors that arise as a result of updates and to patch known security vulnerabilities in the software used by the website. It also covers interruptions in automatic updates that require us to intervene manually.

We will notify you in advance of any work that goes beyond the included time and will bill you at the current hourly rate. Major version updates and other special cases may require additional development that is not covered by the agreement. In such cases, we will always provide you with an estimate for your approval before we begin.

We monitor the website digitally and are notified if it goes down or if the software it uses is affected by a known security vulnerability. We then investigate the issue, take the necessary steps, and notify you if needed.

With Standard and Premium, you receive priority support when you need assistance with solutions provided by AG . For solutions from other vendors, we will assist to the best of our ability, but without any guarantee. Development work related to support is billed based on time spent.

If someone else is going to test the security of your website, please let us know in advance. That way, we can distinguish the test from a real attack and help you interpret the results.

Addressing issues identified in security tests conducted by others, and making changes to how the solution is configured or integrated with other systems. Basic security measures in accordance with AG’s security standards are always included. For everything else, you’ll receive an estimate before we begin.

Frequently Asked Questions About Maintenance Contracts

At AG , a maintenance contract costs 950 kr per month for the Minimum plan, 1,500 kr for the Standard plan, and 2,950 kr for the Premium plan, excluding VAT. The difference lies in how often we update the system, how much bug fixing is included, and how quickly you receive assistance.

"Minimum" is suitable for simple websites that are rarely updated. "Standard" is suitable for most business websites. "Premium" is suitable for websites with forms, login features, integrations, or high traffic. If you're unsure, please contact us, and we'll recommend a plan.

The software on which a website is based regularly receives new versions, often because security vulnerabilities have been discovered. A website that isn't updated becomes easier to attack, and features may stop working.

Our monitoring system alerts us if the website goes down or is affected by a known security vulnerability. We then investigate the issue, restore the site from a backup if necessary, and notify you. If any work goes beyond the scope included in the agreement, we’ll let you know before proceeding.

Yes. It generally has fewer vulnerabilities than a WordPress site, but the code libraries on which it is based must also be kept up to date.