Zum Inhalt springen
Proactive security updates

The Team Behind Your Shop Maintenance

XICTRON combines deep platform knowledge in Shopware and WordPress with solid DevOps expertise and German infrastructure know-how. From Söhlde near Hildesheim, we manage online shops and websites as if they were our own.

Owner-managed since 2013 50+ managed projects Located in Söhlde / Lower Saxony

2013

founded, owner-managed

50+

managed shop projects

97 %

contract renewal (project experience)

8+ years

longest partnership

XICTRON is an owner-managed digital agency headquartered at Glockruthenallee 16 in 31185 Söhlde, Lower Saxony. We specialize in the technical operation and maintenance of online shops and websites. Since our founding in 2013, we have supported companies that understand their online shop as business-critical infrastructure and expect professional technical support. Over 50+ successfully managed projects and a contract renewal rate of 97 percent (project experience) demonstrate that our approach works.

Working Method Since 2013
How Your Shop Becomes Our Project
Four clear steps from first contact to ongoing operations — with no upfront commitment.
Introduction
Audit
Onboarding
Ongoing operations
Our four working principleslived practice
Act proactively — fix risks before they become incidents
Document everything — runbooks, not tribal knowledge
Test first, deploy second — staging is mandatory
Advise honestly — name uncomfortable truths early
First project week
Day 1
Technical audit
Condition report created and prioritized.
Day 2
Staging set up
Test plan defined, backups verified.
Day 3
Monitoring active
1,440 checks per day across all systems.
Day 5
Runbook handed over
Credentials stored encrypted, reviews scheduled.
Owner-managedsince 2013
Contract renewal97 % · project experience
Our onboarding process in four steps: from getting to know each other through audit and onboarding to ongoing operations with quarterly reviews. Example view — values are illustrative.

Our Philosophy: Technology Serves Business Success

At the core of our work lies a simple conviction: technical excellence in shop operations is not an end in itself but the foundation for revenue, customer satisfaction and growth. A shop that runs reliably, responds quickly and is secure against attacks sells more. A shop that regularly goes down, loads slowly or gets compromised costs money and trust. Our entire service portfolio is designed to maximize the first category and eliminate the second.

This attitude also shapes how we collaborate with our clients. We communicate openly when we see a need for action, even when it concerns topics like outdated systems, risky plugin configurations or inadequate backup strategies. At the same time, we only recommend measures that deliver measurable benefit. Technical modernization for its own sake is not our approach. Instead, we focus on the measures with the highest leverage for security, stability and performance.

Technical Expertise: What Distinguishes Our Team

Shop maintenance requires a broad spectrum of competence that extends far beyond CMS knowledge. Our technicians work daily at the intersection of application development, system administration and security. This cross-cutting knowledge enables us to view problems holistically and find solutions that address root causes rather than just treating symptoms.

Platform Expertise

Deep knowledge of Shopware Community Edition and WordPress including shop plugins. We know the architectures, plugin ecosystems and typical problem areas of both platforms in detail.

Linux Administration

Experience with Debian, Ubuntu and CentOS. Configuration and optimization of Nginx, Apache, MariaDB, PHP-FPM, Redis, Memcached and Varnish. SSH hardening and firewall management.

Security Competence

OWASP Top 10 prevention, web application firewalls, SSL/TLS management, vulnerability analysis and incident response. Forensic analysis during security incidents and systematic system hardening.

Monitoring Expertise

Design and operation of monitoring systems: uptime checks, performance metrics, log analysis and configurable alerting chains. Experience with various monitoring stacks and visualization tools.

Database Know-How

Optimization of MariaDB and MySQL: query analysis, index tuning, replication and backup strategies. Experience with database recovery and forensic analysis during data loss.

Scripting and Automation

Automation of maintenance tasks, deployment pipelines and backup routines. Bash, Python and PHP for efficient, reproducible processes that minimize human error.

How We Work: Principles and Practice

Our working methods are based on principles that have proven themselves over more than a decade of maintenance work. They guide every maintenance engagement, every decision and every communication with our clients.

Act Proactively, Not Reactively

The majority of our working time is invested in preventive measures: regular updates, vulnerability scans, performance monitoring and capacity planning. The result: significantly fewer unplanned interventions and continuously improving system stability.

Document Everything, Leave Nothing to Chance

Every maintenance operation, every incident and every configuration change is documented. Our system documentation and runbooks are not a formality but working tools that save time and prevent errors in emergencies.

Test First, Deploy Second

The staging environment is not a recommendation but mandatory. No update, no configuration change and no patch reaches the live system without first being validated on a production-like environment.

Advise Honestly, Even When Uncomfortable

When a plugin poses a security risk, we communicate this openly. When an infrastructure is not designed for current growth, we say so early. Trust is built through honesty, not through appeasement.

Our Working Method in Practice

Act proactively instead of reactively patching

The majority of our working time goes into prevention: regular updates, vulnerability scans, performance monitoring and capacity planning. This reduces the number of unplanned interventions and steadily increases system stability — your customers never even notice the problems we catch behind the scenes.

  • Monitoring of uptime, response time, SSL and server load around the clock
  • Defined escalation paths instead of alert fatigue
  • Fewer unplanned interventions through consistent prevention
82 %
of interventions are preventive
planned, not reactive — only 18 % unplanned and declining
Early warnings fixed ahead
SSL certificate renewed — 21 days before expiry
Database load rising — index tuning scheduled
Storage at 78 % — cleanup scheduled

Test first, deploy second

No update, no configuration change and no patch reaches your live system without first being validated on a production-like staging environment. Every change follows the fixed path of backup, staging test, deploy and rollback point — documented and reversible in minutes.

  • A full backup before every change
  • Automated tests for critical functions in staging
  • Rollback in minutes instead of hours of reconstruction
Release 58 · ProcessRollback in minutes
13:41
Full backup
Snapshot created, recovery verified.
13:50
Staging test
14 of 14 critical functions passed.
14:02
Live deploy
Completed, error rate unchanged.
After
Rollback point secured
Every change reversible in minutes.

How the Collaboration Begins

Typical ==Starting Situations== That Bring Clients to Us

Agency Switch
Starting point
The previous provider only responded on request, and updates were left undone for months.
Measure
Technical audit, catching up on all updates in staging, setting up monitoring and verified backups.
Result
Predictable maintenance with a documented runbook and defined response times.
After the Incident
Starting point
A compromised shop, unclear entry points and no current, verified backup.
Measure
Cleanup, closing the security gaps, hardening and setting up tested backups.
Result
Restored operations and a maintenance contract that prevents recurrence.
Growing Pains
Starting point
Rising load times and recurring traffic spikes during campaign periods.
Measure
Database tuning, caching strategy and capacity planning ahead of the next peaks.
Result
Stable response times even under load and a clear scaling path.

Illustrative examples from typical project histories (project experience) — anonymized.

Why Maintenance Is Not a Side Job for Us

Many agencies offer maintenance as an add-on to their development work. Maintenance then receives whatever attention remains after development projects are accounted for. That is a fundamentally different approach from ours. For us, the technical operation and maintenance of online shops and websites is the core service, not a by-product. This means: our processes, our tooling and our work organization are fully oriented toward maintenance and operations.

This focus makes the difference in practice. We have standardized onboarding processes, proven update workflows, redundant monitoring infrastructure and documented emergency runbooks, not because it looks good in a glossy brochure, but because we use these tools daily. Our clients feel this difference in the response speed during incidents, in the quality of documentation and in the stability their systems gain over time. Learn more about our methodology and competence areas on the references page.

Continuous Learning and Knowledge Management

The technology landscape in e-commerce and web hosting changes continuously. New PHP versions, new security threats, new best practices for performance optimization and new platform features require constant learning. We regularly invest in our team's development: through analyzing new security advisories, evaluating new monitoring tools, participating in community discussions and systematically reviewing our project experiences, we continuously expand our knowledge.

This knowledge feeds directly into the maintenance of our client projects. When a new attack method becomes known, we check all managed systems for their vulnerability. When a new caching strategy proves effective in practice, we evaluate it for relevant client projects. When a Shopware or WordPress update opens new possibilities, we proactively advise our clients on the benefits. This active knowledge management ensures that the systems we manage are not only current but also technically state-of-the-art.

Responsibility and Reliability

Maintenance is a matter of trust. You give us access to your servers, databases and business data and expect professional and responsible handling in return. We take this responsibility seriously. All credentials are stored encrypted and made accessible only to team members who need them for their work. Logs are created for every access. And when a maintenance contract ends, all stored credentials are demonstrably deleted.

How We Handle Risks and Trade-Offs

In day-to-day maintenance, we regularly face decisions that require trade-offs. A plugin update closes a security gap but causes a known display bug in a specific browser. A PHP upgrade brings performance improvements but is incompatible with an old plugin. A server migration would halve loading times but requires brief downtime. In all these cases, we do not make a unilateral decision but inform you about the options, risks and our recommendation and make the decision together.

This transparency about trade-offs is important to us because it builds trust and leads to better decisions. You know your business better than we do, and we know the technical implications better than you. When both perspectives come together, decisions emerge that are both technically sound and commercially sensible. We have found that clients particularly value this honest advice, precisely because it is not a given in the IT services market.

Infrastructure and Tools

Our maintenance work is built on a professional toolset that we have evaluated and optimized over years. This includes redundant monitoring infrastructure at multiple locations, automated backup systems with integrity checks and regular recovery tests, production-like staging environments for every managed shop, a ticket system for structured handling of all requests and incidents, and version-controlled deployment processes for traceable changes. This toolset is not an end in itself but enables the quality and reliability that our clients expect from us.

We continuously invest in improving our infrastructure and tools. New monitoring metrics, improved backup strategies and more efficient deployment processes are regularly evaluated and implemented when proven valuable. This investment in our own infrastructure is an investment in the quality of support we can offer our clients.

Our Location in Lower Saxony

XICTRON is headquartered at Glockruthenallee 16 in 31185 Söhlde, in the Hildesheim district of Lower Saxony. Söhlde is conveniently located between Hildesheim and Salzgitter, with good connections to the A7 and A2 motorways. Hildesheim central station is reachable in 15 minutes, Hannover airport in approximately 45 minutes.

The majority of our maintenance clients are supported remotely. Through standardized processes, transparent documentation and defined communication channels, collaboration works regardless of location. Whether your company is based in Hamburg, Munich, Vienna or Zurich: the quality of our support is independent of location. For kick-off meetings and workshops during complex handovers, we are happy to come to you in person.

What Maintenance Means to Us Personally

We have deliberately specialized in maintenance and operations because we are convinced that this area makes the greatest difference to our clients' business success. New features and redesigns get the attention, but it is the daily maintenance work that determines whether a shop reliably generates revenue or suffers from outages, security gaps and performance problems. We find satisfaction in keeping systems stable, preventing problems and maintaining the invisible infrastructure that enables the visible success of our clients.

This attitude is not a marketing slogan but lived practice. Everyone on our team understands that a missed security update can have real business consequences. That a monitoring alert arriving at three in the morning deserves immediate attention. And that clean documentation is not bureaucracy but saves minutes in an emergency that can make the difference between a brief outage and a days-long crisis.

Our Values in Daily Work

Reliability, transparency and technical competence are the values that guide our daily work. Reliability means that agreed services are delivered without reminders and without follow-up. Transparency means that you always know what we are doing, why we are doing it and what results it brings. Technical competence means that we do not merely apply updates but understand how the systems work and what impact each change has. These three values form the foundation on which long-term client relationships are built, and they are the standard against which we measure our own work.

Long-Term Partnerships Instead of Short-Term Projects

Maintenance is by definition a long-term task. Systems evolve, requirements change and new threats emerge. That is why we understand every maintenance relationship as a partnership that goes beyond simply delivering services. In quarterly reviews, we discuss not only past performance but jointly plan the next steps: Is a major update coming? Is the shop growing and needing more resources? Are there new security requirements?

The contract renewal rate of 97 percent shows that this approach works (project experience). Our longest maintenance relationships have been running for over eight years, which in an industry known for frequent agency changes is a remarkable figure. Talk to us and experience what a maintenance partnership on equal footing feels like.

Our Development Since ==2013==

  1. 1

    2013 — Founded with a Maintenance Focus

    XICTRON starts as an owner-managed digital agency focused on technical operations and maintenance — a core service from the very beginning, not a by-product.

  2. 2

    The Learning Years in Everyday WordPress

    In the early years we primarily support WordPress websites and learn about plugin conflicts, outdated PHP versions and inadequate backup strategies firsthand. This experience shapes our processes and toolset from the ground up.

  3. 3

    Specializing in E-Commerce

    With growing experience we expand our service range to Shopware Community Edition and increasingly take on business-critical shops with payment processing.

  4. 4

    Building Redundant Infrastructure

    Monitoring at multiple locations, automated backups with integrity checks and production-like staging environments for every managed shop become the firm standard.

  5. 5

    Today — 50+ Managed Projects

    From small niche shops to platforms with thousands of products. The core principles have remained the same since founding: proactive maintenance, transparent communication and high technical competence.

The Most Important Facts About Us

  • Owner-managed digital agency from Söhlde in Lower Saxony, specialized in technical operations and maintenance since 2013
  • 50+ managed shop and website projects, contract renewal rate of 97 % (project experience)
  • Broad competence spectrum: platform expertise, Linux administration, security, monitoring and database know-how
  • Firm working principles: act proactively, document everything, test first deploy second, advise honestly
  • Operated on servers in German data centers, credentials encrypted and demonstrably deleted after contract end

Frequently Asked Questions About Us

If Our Working Method Convinces You

from €199 per month net
  • Basis €199 per month — first response within 8 hours
  • Business €349 per month — first response within 4 hours
  • Enterprise €699 per month — first response in 45 minutes
  • Updates, monitoring, backups and reporting in every package

Three SLA tiers — Basis, Business and Enterprise. The tier determines response time and scope, not the person on the phone. Minimum term 6 months.

By submitting you consent to the processing of your details to handle this request. Details in our privacy policy.