Your Drupal site kept secure, updated and backed up every month by a developer credited by the Drupal Security Team — not left until something breaks. One fixed monthly price, no long tie-in, and a real person who already knows your site when you need a change.
Security updates applied on release • Off-site backups • No lock-in, 30 days' notice
Drupal security advisories acted on the day they land, not the next time you get in touch.
Updates go on staging and through automated tests first, so an update never takes your site down.
The same senior developer every month, who learns your site instead of reading a ticket cold.
Monthly rolling, 30 days' notice. Your code, backups and hosting stay yours if you ever leave.
Every plan covers the essentials that keep a Drupal site safe. The difference is how much development time and how fast a response you need. Prices are per month, plus VAT.
Bigger site, or need something in between? Ask for a tailored retainer. Hosting and business email can be bundled into any plan.
Two situations I take on all the time:
You have a Drupal site that works, but nobody’s sure who updates it, backs it up or keeps it secure any more. I adopt sites I didn’t build every week — we start with a short health check so we both know exactly what we’re dealing with, then a care plan keeps it in safe, named hands.
AI tools make it easy to generate a site — and just as easy to generate changes that look right but quietly break security, payments or data. If your site was built or patched with AI and you need a senior developer to make it safe, stable and accountable, that’s exactly what I do. I use these tools myself every day, so I know precisely where they help and where they bite.
Tell me what state it’s in — a short, honest look and I’ll tell you what it needs, care plan or not.
Most small-business Drupal sites are only looked at when something has already gone wrong — a broken checkout, a hacked page, a white screen after a hosting change. By then the fix is slower, more expensive and more stressful than the maintenance that would have prevented it.
Drupal publishes security advisories on a fixed schedule. Modules go end-of-life. PHP versions stop getting security fixes. A care plan means someone is watching all of that for you, applying the fixes on a tested copy of your site first, and telling you in plain English what was done. It is the difference between a site that quietly keeps working and one that surprises you.
If you take card payments through Drupal Commerce, the Commerce & Priority plan includes checkout monitoring and a yearly review of your PCI/SAQ scope. I maintain two published CyberSource payment modules on Drupal.org, so payment work is my day-to-day, not a first attempt.
A care plan keeps your current site secure while we plan the move to Drupal 11 in your own time, at a fixed price, with no big-bang risk. Drupal 7 is already end-of-life and Drupal 10 support ends in December 2026 — a plan gets you off the cliff-edge calmly.
I am one senior developer, not a call centre, and I hold a full-time role as well — my employer has cleared this consultancy work. That shapes these plans honestly: response times are during UK working hours, with same-day and out-of-hours cover reserved for the Commerce & Priority plan and genuine "the site is down" emergencies. What you get in return is continuity — the same person, who knows your site, every single month — which a bigger agency rarely gives a small client.
Verifiable, not just claimed.
In 2026 I reported a Drupal Commerce cross-site scripting issue published as SA-CONTRIB-2026-041, in my name on Drupal.org. My contributed modules and two published CyberSource payment gateways are there too. Graith Internet has been building for the web since 1997.
No. Plans are monthly and rolling, with 30 days' notice to stop. If you pay annually and leave early, I refund the unused whole months.
Anything beyond your monthly pool is quoted up front at a plan-holder rate before I start — you are never billed by surprise.
No. I can work with your existing host, or bundle fast UK hosting and business email into the plan if you would rather have it all in one place.
Yes — most of the sites I look after I did not originally build. The first step is a short health check so we both know what we are starting from.
Site down, checkout broken, or an active security incident. On the Commerce & Priority plan those get same-day and out-of-hours attention; on other plans they are handled first thing on the next working day.
Tell me your site's address and roughly what it does. I'll take a quick look and recommend the right plan — no obligation, and I'll say if you don't need one.
Get a plan recommendation