Skip to content
Proactive security updates

Maintenance & updates

An online shop is software in continuous operation: core, extensions, theme, server and database keep evolving, and postponing updates is paid for later in effort. This category describes what plannable maintenance looks like — keeping track of version levels, applying changes in a staging environment first, assessing dependencies between extensions, agreeing maintenance windows with sales and preparing rollback paths. Added to this are topics such as database upkeep, clearing out old orders and media, deliverability of shop emails and documenting responsibilities and access credentials. The goal is operations in which updates are routine rather than an emergency — even when internal IT capacity is limited. We also show how to write down a maintenance plan that a stand-in can work through without asking questions.

Cyber insurance: questionnaire pledge meets evidenceEvery measure ticked needs an artefact with date, scope and outcomePledge in the risk questionnaireRecord that maintenance producesMFA on all external access pathsticked, but not evidencedMFA coverage report per accountstatus at time of loss3-2-1 backup with restore testingticked, but not evidencedRestore log with checksumdate, duration, outcomeSecurity updates per patch SLAticked, but not evidencedPatch report with timestampsCVE, version, install dateRole and permission conceptticked, but not evidencedAccess matrix with change logwho, when, which roleEvery pledge in the questionnaire needs an artefact showing the state at the time of lossObligations met in full25 %only about one in four SMEs (GDV)Cyber insurance45,370 €average claim per reportedcyber incident (GDV)Attack surface119new vulnerabilities per day,about 24 percent more (BSI)Overall picture202.4 bn €annual cyber damage to theGerman economy (Bitkom)
Maintenance & updates Jul 24, 2026

Cyber Insurance: Which Maintenance Records Count

Insurers scrutinise more closely: which patch reports, restore logs and MFA evidence prove the pledges from the risk questionnaire at the time of loss.

13 min read
Disaster Recovery: RTO and RPO on the Recovery TimelineOutageLast backupRPO: max data lossShop back onlineRTO: max downtimeDetectFailoverRestoreVerifyDaily backupSnapshotOffsite copyTested DR plan instead of backups only: protection tiersTierData pointRestartMaturityBackup onlyRPO 24hRTO daysuntestedDR planRPO 1hRTO hourstestedHot standbyRPO minutesRTO minutesautomatedRPO defines data loss, RTO defines downtime -- both only reliable through regular restore tests
Maintenance & updates Jun 24, 2026

Disaster Recovery: Restoring Your Shop After an Incident

Disaster recovery for online shops: a DR plan, tested restores and defined RTO and RPO targets -- going beyond plain backups, explained step by step.

16 min read
Update test pipeline: from staging to release or rollbackStaging cloneApply updateCache, migrationAutomated test suiteSmoke testHome, login, searchPASSCheckout and paymentCart to orderPASSVisual regressionPixel diff product pageFAILGateall PASS?Release livePromote to productionRollbackSnapshot restoreTest coverage of critical paths96%Checkout94%Payment88%Search82%Account78%APIEvery critical path is checked automatically before releaseVisual diffs, smoke and checkout tests run in parallel on the staging cloneUp to 35.26 percent conversion uplift from clean checkouts (Baymard) - 80 percent admit shipping flawed releases (Global App Testing)
Maintenance & updates Jun 17, 2026

Update Testing: Avoid Regressions After Shop Updates

Avoid regressions after shop updates: smoke tests, checkout verification, visual regression, staging and rollback as a test plan for safe updates in your store.

13 min read
Database Dashboard: Tables, Slow Queries, Index HealthShop DBSize 4.8 GB - 142 tables - 38 indexes - Status: optimizedOKLargest Tables (storage usage)cart1.9 GBlog_entry0.9 GBversion_commit0.6 GBproduct0.4 GBenqueue0.3 GBCleanup potential: cart + log_entry = 2.1 GBSlow Query Log (slowest queries)SELECT order JOIN customer WHERE3.2 sSELECT cart WHERE token LIKE1.8 sSELECT product ORDER BY listing1.1 sSELECT category tree path0.7 slong_query_time = 1 s - no index = full table scan4 candidates for new indexes detectedQuery time before vs. after (after index optimization)Before: full table scan3.2 sAfter: index seek0.02 sup to 160xIndex HealthMissing + unused indexesCleanupOld carts, logs, version dataBackup CheckDump size + restore testMedian page grows 8.4 percent per year to 2.6 MB (HTTP Archive 2025) - databases grow with it
Maintenance & updates Jun 10, 2026

Database Maintenance and Optimization for Online Shops

Database maintenance for online shops: index optimization, fixing slow queries, cleanup, backups and growth monitoring for fast and stable online stores.

15 min read
PHP EOL Roadmap: Support Phases and Upgrade PathActive supportSecurity fixes onlyEnd of Life (EOL)2024202620272028PHP 7.4EOL since 2022 - no security fixesPHP 8.1EOL since 31 Dec 2025PHP 8.2Security until 31 Dec 2026PHP 8.3Security until 31 Dec 2027PHP 8.4Active until end of 2026Security until 2028CurrentPHP 7.4Target versionPHP 8.3Stepwise upgrade path instead of a version jumpStaging clone - compatibility - tests - go-live - monitoringEach interim version verified separately, rollback per stageCode audit before the upgradeDeprecations - removed functions - type errorsPerformance gain20 to 40 percent faster PHP codePHP 7.x still at 35.5 percent of PHP sites (W3Techs) - PHP code 20-40 percent faster on 8.3 (Kinsta)

PHP EOL Management: Plan Safe Upgrades 2026

Manage PHP end-of-life safely: 2026 support roadmap, code audit, compatibility checks, staging tests and rollback for predictable PHP upgrades in your store.

13 min read
Deployment Pipeline: Dev - Staging - ProductionEvery change passes the same stages before go-liveDev / BranchFeature and update branchCI build and unit testsComposer / build artifactLint and static analysisStaging (Parity)Clone of productionDB and media sync (anonymized)Apply updateSmoke and regression testsProductionBackup before deployBlue-green switchCanary for partial trafficPost-deploy monitoringSmoke Test Suite (Gate)Home and loginPASSCart and checkoutPASSAPI and webhooksPASSGate ruleOne red test= no go-liveRollback PathDB snapshot right before deployKeep previous releaseSymlink switch backThresholds trigger the rollbackDeployment HygieneImmutable releaseConfig per envSecrets separatedVersioned DB migrationsAudit logGoal: updates without unplanned downtime - reproducible, tested, reversible anytimeParity | Data Sync | Smoke Tests | Blue-Green | Canary | Rollback | Monitoring

Staging Environments for Safe Shop Updates

Staging environments for safe updates: production parity, database and media sync, smoke tests, blue-green, canary releases and a reliable rollback plan.

13 min read
Shopware Update Strategy: Safe WorkflowUpdate Pipeline: Staging - Test - Rollback - Production1. AnalysisReview changelogBreaking changesCreate plugin matrix2. StagingClone production dataApply updateCheck deviations3. TestingRegression testsCheckout flowPerformance check4. Go-LiveMaintenance modeBackup + deployStart monitoringPlugin Compatibility MatrixPlugin A v2.4OKPlugin B v1.8OKTheme v3.1~API Ext. v2.0OKRollback ChecklistDB snapshot before updateFilesystem backupRollback script testedDNS TTL set to 300sRollback window: 15 minTeam communicationMonitoring alerts activeAutomated Regression TestsCheckout FlowCatalog SearchShopping CartCustomer AccountAPI EndpointsResult: 0 Unplanned Downtimes | 99.9% Uptime | Rollback in Under 15 MinutesStaging Environment | Automated Tests | Plugin Audit | Maintenance Window | Monitoring
Maintenance & updates May 25, 2026

Shopware Updates: Safe Deployment

Plan and deploy Shopware updates safely: staging environment, regression testing, rollback plans and plugin compatibility for live operations.

14 min read
WordPress Security 2026: Protection LayersDefense in Depth: Multi-Layer ProtectionOuter Defense LayerApplication LayerWordPress CoreFile IntegrityDB HardeningAuth SecurityAuto-UpdatesSecurity Headers2FA LoginWAFCDNRateLimitingSSL/HSTSBackupMonitorBrute-Force ProtectionLogin limits, IP blocks, CAPTCHAPlugin SecurityAudit, updates, permissionsFile IntegrityChecksums, change alertsResult: 95% Fewer Attack Vectors | Real-Time Detection | Automated HardeningSecurity Headers | Content Security Policy | XML-RPC Disabled | REST API Restricted | Login URL Changed
Maintenance & updates May 22, 2026

WordPress Security 2026: Hardening and Updates

Secure WordPress in 2026: core hardening, plugin security, brute-force protection, Web Application Firewall and security monitoring practical guide.

13 min read
Backup Strategy: RPO, RTO and RecoveryRPO - Recovery Point ObjectiveMaximum acceptable data loss1 hr4 hrs24 hrs7 daysCriticalStandardArchiveRTO - Recovery Time ObjectiveMaximum acceptable downtime15 min1 hr4 hrs24 hrsPremiumStandardBasic3-2-1 Backup Rule: 3 Copies | 2 Media | 1 Off-SiteFull BackupWeeklyFiles + DB + ConfigCompressed, encryptedIncrementalDailyChanges onlyFast, space-efficientDB SnapshotHourlyOrders, customersPoint-in-time recoveryOff-SiteExternal storageGeo-redundantAES-256 encryptedRestore Test: MonthlyA backup without testing is no backupRetention: 90 DaysDaily 30d, weekly 90dResult: RPO 1 Hour | RTO 15 Minutes | 99.99% Data Integrity
Maintenance & updates May 19, 2026

Backup Strategies for Online Shops: RPO and RTO

Backup strategies for online shops: plan RPO and RTO, full and incremental backups, off-site storage and restore testing for disaster recovery.

12 min read
Uptime Monitoring: Detect Outages EarlyMonitoring Stack: Synthetics + RUM + Alerting + Status PageSynthetic ChecksHTTP Status: 200 OKTTFB: 245msSSL: Valid (287 days)Real-User MonitoringLCP: 1.8s (p75)FID: 42ms (p75)CLS: 0.04 (p75)Alerting Chain1. Email (instant)2. SMS (after 5 min)3. Call (after 15 min)Status PageAll Systems: OKUptime: 99.98%Incidents: 0 openSLA Tracking Dashboard99.98%Uptime (30 days)245msAvg. Response Time8.7 minTotal downtime2Incidents (30d)Multi-Location Checks3+ locations, consensus-basedNo false positivesContent ValidationKeyword check, screenshot diffDefacement detectionCertificate MonitoringSSL expiry, chain issues30-day early warningResult: 99.9% Uptime SLA | Detection in 30 Seconds | Escalation in 5 MinutesHTTP Checks | SSL Monitoring | DNS Verification | Performance Tracking | Incident Management
Maintenance & updates May 16, 2026

Uptime Monitoring: Detect Outages Before Customers

Set up uptime monitoring: synthetic monitoring, real-user monitoring, alerting chains, status pages and SLA tracking for online shops.

12 min read
SSL Certificates: Management and Best PracticesCertificate Lifecycle: Issuance - Monitoring - RenewalIssue CertificateLet s Encrypt: AutomatedWildcard: *.domain.comSAN: Multi-DomainTLS ConfigurationTLS 1.2 + 1.3 (minimum)Strong cipher suitesOCSP stapling activeMonitoring + RenewalExpiry warning: 30 daysAuto-renew with CertbotChain validationHSTS ConfigurationStrict-Transport-Security: max-age=31536000includeSubDomainspreloadMixed Content CheckHTTPSImagesScriptsFontsAll resources loaded via HTTPSA+ SSL RatingSSL Labs: Best possible gradeCAA RecordsDNS: Only authorized CAsCT LogsCertificate transparency checkResult: A+ SSL Rating | 0 Mixed Content | Automatic Renewal | 30-Day Warning
Maintenance & updates May 13, 2026

SSL Certificate Management: Renewal and Best Practices

Manage SSL certificates professionally: automated renewal with Let's Encrypt, certificate monitoring, HSTS, TLS configuration and mixed content.

15 min read
Plugin Audit: Find Bloat, Boost PerformanceAudit Process: Inventory - Analysis - Assessment - OptimizationPlugin Inventory (Example Shop)Payment Plugins (3)ActiveSEO Plugins (2)ActiveAnalytics Plugins (4)RedundantSocial Sharing (3)UnnecessaryInactive Plugins (8)RemovePerformance Impact per PluginABCDEFGHIJLoad time contribution in ms (higher = slower)Audit Result: Before vs. AfterBefore: 38 plugins | 3.8s load | 2.1 MBAfter: 18 plugins | 1.9s | 0.8 MB-53% Plugins-50% Load TimeRedundancy CheckSame function, multiple pluginsDB Query AnalysisMeasure slow queries per pluginAsset AnalysisQuantify CSS/JS per pluginResult: 50% Fewer Plugins | 50% Faster Load | 60% Fewer HTTP Requests
Maintenance & updates May 10, 2026

Plugin Audit: Better Performance Through Less Bloat

Conduct a plugin audit: identify unnecessary extensions, analyze performance impact, find alternatives and safely deactivate for faster load times.

15 min read
Emergency Plan: Website Hacked -- Immediate ActionsIncident Response: Detect - Contain - Clean - Harden1. DetectionMonitoring alertMalware scanBehavior analysisCustomer report2. ContainmentIsolate websiteLock accessPreserve evidenceMaintenance page3. ForensicsFind entry pointDetermine scopeBuild timelineSearch backdoors4. CleanupRemove malwareClean installChange passwordsVerify data5. Post-Incident HardeningPatch vulnerabilityConfigure WAFStrengthen monitoringEnable 2FA6. CommunicationGDPR notificationInform customersIncident reportSearch ConsoleTime-Critical Actions (Golden Hour)0-60 min: Containment1-4 hrs: Forensics4-24 hrs: CleanupResult: Containment in 60 Min | Forensics Report | Full Cleanup | HardeningIncident Response | Malware Removal | GDPR Reporting | Backup Recovery | Post-Incident Review

Emergency Plan: What to Do When Your Website Is Hacked

Emergency plan for a hacked website: detection, containment, forensics, cleanup, hardening and communication -- step by step.

15 min read
Maintenance Contract: Services and SLA TiersWhat a Professional Maintenance Contract Should CoverBasicSecurity updatesWeekly backupUptime monitoringSSL managementResponse: 24 hoursMon-Fri, 9am-5pmSLA: 99.5% UptimeStandardAll updates (core + plugins)Daily backup + off-siteMonitoring + alertingPerformance optimizationSecurity hardeningResponse: 4 hoursMon-Sat, 8am-8pmSLA: 99.9% UptimePremiumStaging + regression testsHourly DB snapshots24/7 monitoring + emergencyMonthly security auditPriority emergency supportResponse: 1 hour24/7, 365 daysSLA: 99.95% UptimeRed Flags: How to Spot Unreliable ProvidersNo defined response timesNo staging for updatesNo backup restore testsResult: Clear SLAs | Defined Services | Transparent Costs | Measurable ResultsUpdates | Backups | Monitoring | Security | Performance | Emergency Support | Reporting

Maintenance Contract: Key Contents

Maintenance contract for online shops and websites: SLA tiers, included services, response times, pricing models and what to watch out for.

12 min read