A care plan you never see output from is a care plan you cancel.
So every plan on this page ships a document on a schedule, states how much change work is included as a number rather than a feeling, and lists what it does not cover. If a plan includes no change requests, it says so on the card.
Priced by how much of it we do, not by how it sounds.
Every figure below is read from the same source the subscription bills against. Annual is twelve months at the monthly rate, paid once, so it is a convenience rather than a discount you have to ask about.
Hosting & Watch
Licensed, backed up, patched and watched. No change work included.
- ✓Hosting on our commercially licensed Vercel Pro team, not a free plan that forbids business use
- ✓Supabase Pro project that never pauses, with daily backups kept 7 days
- ✓SSL certificate provisioning and renewal, monitored
- ✓Domain expiry alerts at 60, 30 and 7 days
- ✓Uptime checks every hour, with alerting
- ✓Monthly dependency vulnerability triage: you are told which alerts matter and which are noise
- ✓Monthly Supabase security advisor sweep
- ✓Security patch releases applied within 5 business days
- ✓Vercel spend monitoring with a hard cap configured, so a traffic spike cannot surprise you
- ✓Quarterly backup RESTORE test, with a pass date you can see
- ✓0 change requests included, by design
Care
Everything watched, plus four changes a month and the upgrade work done for you.
- ✓Everything in Hosting & Watch
- ✓4 change requests a month, delivered in 3 business days
- ✓Monthly dependency upgrade pass: reviewed, merged, deployed and verified, not just reported
- ✓Monthly access-policy drift review on every table added or changed
- ✓Monthly form and email delivery test, with a real submission and the timestamp in your report
- ✓Monthly broken-link scan across every indexed page
- ✓Core Web Vitals tracked, with a written note whenever a number degrades
- ✓Quarterly database version upgrade, verified before and after
- ✓One Next.js major version upgrade a year, included
- ✓A staging preview for every change: nothing reaches your live site unreviewed
- ✓90-day rollback: any deploy in the last 90 days restored within the hour
Care Plus
For a site your business runs on. Standing hours, a one-hour response, and something shipped every month.
- ✓Everything in Care
- ✓10 change requests a month, or 6 hours of development time, your choice each month
- ✓One named improvement shipped every month from a shared backlog, whether or not you ask
- ✓Quarterly 45-minute roadmap call with written follow-up
- ✓Point-in-time recovery on your database: roughly a two-minute recovery point, not yesterday's backup
- ✓Advisor warnings fixed, not just reported, with the migration written and applied
- ✓An annual mini security review on your anniversary month
- ✓Monthly accessibility regression check against WCAG 2.2 AA
- ✓After-hours emergency contact for site-down events
- ✓Log retention configured, because the platform only keeps logs briefly
The plan produces a document, on a date, whether or not anything broke.
A quiet month is the outcome you are paying for. It should still land in your inbox as evidence rather than as silence.
Hosting & Watch
Site Health Card: one page emailed on the 1st with uptime, Core Web Vitals and the month's change, open vulnerability count by severity, advisor warnings, last verified backup restore, SSL and domain expiry, and Vercel spend against cap.
Care
Site Health Card plus a written Care Report: what changed, what we did, what we recommend next, and a change log with before-and-after preview links for every request delivered.
Care Plus
Care Report Plus: everything in the Care report, plus the named improvement shipped this month with before-and-after evidence, plus a rolling 90-day roadmap of what comes next.
Written on the sales page, not discovered in month three.
Every exclusion below is quotable as separate work. None of it is refused. It is simply not inside the monthly fee, and saying so here is cheaper for both of us than saying it later.
Hosting & Watch
- Content, copy or image changes
- New pages, sections or features
- Design changes
- Third-party integrations
- Next.js major version upgrades
- Analytics, tracking or SEO work
- Anything that requires a code change
Care
- New page templates or a design system
- New features or custom development
- Third-party API integrations
- E-commerce or payment work
- Content writing
- SEO strategy, link building or paid ads
- Any single piece over 2 hours, which is quoted separately
Care Plus
- Net-new applications or products
- Redesigns
- Migrating off this stack
- Content writing, SEO strategy or paid media
- Design system creation
- Work beyond the monthly allowance, which is quoted separately
- 24/7 phone support
Roughly seventy percent of a standard care plan does not exist on this stack.
Which is a good thing, and it is also why the contents look different from every other care plan you have been quoted.
- No plugins, no themes, no CMS core and no PHP, so there is no monthly plugin update to sell you.
- No writable web root, so the classic defacement and file-injection attacks have nowhere to land.
- What this stack does need is supply-chain work: dependency advisories triaged, upgrades merged and verified.
- And authorization work: row-level security policies drift the moment a table is added, and drift is silent.
- And proof: a backup nobody has ever restored is a hope, not a backup.
The entry plan is also not something you can do yourself for less. Vercel’s free tier is contractually not for commercial use and Supabase’s free project pauses after a week of inactivity with no automatic backups, so running your own commercial-grade accounts starts at about $45 a month before anyone looks at anything.