t3land

Run

TYPO3 Maintenance and Security

A TYPO3 site is not a piece of furniture you put in place and then leave alone. Vulnerabilities get published, extensions change, PHP versions reach their end. Maintenance means somebody takes care of that before it becomes urgent.

Start a project

The unspectacular part that makes the difference

Maintenance is rarely noticed while it works. It gets noticed when it has been missing: a site that no longer starts after a PHP update, a hole that stood open for months, a backup that could not be restored.

So we treat maintenance as a task of its own with a fixed rhythm, not as something that runs along on the side.

Security in TYPO3

TYPO3 has a security team of its own that publishes vulnerabilities in the core and in extensions in a coordinated way. That is an advantage, because you find out reliably what is affected. It is also an obligation: publication also tells everyone else what to look for.

With every advisory we check whether the affected component exists in your installation, whether it is reachable from outside, and which version is running. Only then does it become clear how urgent it really is.

What we do not promise

We deliberately quote no fixed response times and no availability figures here. Numbers like that are only worth anything when they fit the actual environment, and we do not know yours before we have talked.

What we do instead: put the scope of the arrangement in writing before it starts. It then says what is covered, what happens at what interval, and what would be charged separately in a given case.

What ongoing care covers

Following the security advisories

The TYPO3 Security Team publishes advisories for the core and for extensions. With every advisory we check whether your installation is affected.

Updates in waves

Smaller updates regularly and bundled, rather than one at a time and in a hurry. Anything security-relevant goes in immediately, of course.

Backups you can actually restore

A backup only counts as one once it has been restored at least once. We check that rather than assume it.

Availability under watch

Monitoring, so an outage does not become known through a phone call from the sales team.

A contact when it matters

Someone who knows the installation and does not start from zero when something jams.

The lifecycle in view

We tell you in good time when the end of maintenance for your version is coming up, so the update fits into the budget.

Common questions

How quickly does a TYPO3 security update have to go in?

That depends on the severity. Critical holes in the core should be closed promptly, because the details are public with the advisory and automated scans follow quickly.

With every advisory we first assess whether the affected component is installed and reachable on your site at all. That decides whether we act at once or take it into the next planned wave.

Do you take over installations currently maintained elsewhere?

Yes. It starts with an inventory: version, extensions, custom code, server environment, the state of the backups, and whether a deployment route exists at all.

From that we can see what needs tidying once before ongoing care begins. We quote that part separately, so it is clear what is one-off work and what recurs.

What is ELTS and do we need it?

ELTS stands for Extended Long Term Support. Once active maintenance for a TYPO3 version has ended, the TYPO3 GmbH continues to supply security fixes for a fee.

It makes sense as a bridge when an update is due but cannot happen yet for scheduling reasons. As a permanent arrangement it is more expensive and riskier than the update itself, because new features and improvements never arrive.

What happens if the site goes down?

The monitoring reports it and we look before the first phone call arrives. Whether the cause sits in the application, on the server or with the host is the first thing we establish, because that decides who has to act.

If a change turned out to be the cause, the way back runs over the last tested backup.

More services

Who is looking after your installation right now?

If the answer is unclear, that is a good reason for a conversation. We will look at where things stand and tell you what is urgent and what can wait.

Start a project See what we do