Website Care & PHP Updates
Keep your website secure, updated and protected every month.
On 21 October 2026 the PHP project released fixes for two critical flaws and asked everyone running PHP to update. If you're not sure what your website runs on, that's completely normal. We'll check it for you, explain it in plain language, and help keep it current.
Sources: PHP project · CERT-EU · CERT-FR · CNBC
Not sure yet? Get a free Website Health CheckFor owner-led businesses in Europe · First month €99, no commitment · Excl. VAT · No passwords needed to sign up
What happened
The PHP updates of 21 October, in plain words
01
Two critical flaws, now fixed
PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two flaws that could let someone run code on a web server without logging in. The PHP team encourages all users to update.
02
Europe's security teams agree
CERT-EU advises patching straight away, and France's CERT-FR recommends moving to a maintained PHP version. Some public bodies briefly took sites offline while they updated.
03
Older versions need a plan
PHP 8.1 and older no longer receive official fixes, and PHP 8.2 stops receiving security fixes on 31 December 2026. Now is the time to plan a decisive move to a supported version.
What can go wrong
Unmaintained websites fail without warning. Protect yours before it happens.
Most breaches start with one overlooked gap: a plugin nobody updated, a PHP version that stopped getting fixes, a backup that quietly stopped running. On 21 October the PHP project fixed two critical flaws, a reminder that the software under a website needs regular care.
Without regular care
- Security fixes wait until someone remembers
- Old PHP versions keep running without official patches
- Updates are done live, so a broken page is found by a customer
- Backups may be missing, old or stored on the same server
- Downtime is noticed days later
With Website Care
- Security updates are applied on a set schedule
- A planned move to a supported PHP version
- Updates are checked after each round (Pro and Premium: on a staging copy first)
- Daily off-site backups and a tested restore path
- Uptime is checked every 5 minutes, and we act on alerts
You stay in control: every update is tested, backed up and reported. Updates reduce risk; nobody can honestly promise a site will never have a problem.
What's included
Website Care, month by month
PHP & CMS updates
We keep PHP, WordPress or your CMS, themes and plugins current, testing after each update.
Upgrade off PHP 8.1 / 8.2
A planned move to a supported version, checked on a copy of your site before it goes live.
Backups
Regular backups stored away from your server, so there's always a recent copy to restore.
Uptime monitoring
We watch that your site is up and alert you fast when something needs attention.
Monthly care note
A short, friendly summary each month: what we updated and anything worth planning next.
Plans
Three proven plans to keep your website secure
Emergency response promotion, first 100 signups. Regular prices: €199, €399 and €799 a month.
PHP 8.2 stops receiving security fixes on 31 December 2026, and 8.1 and older already have. A version upgrade takes planning and testing, so starting now keeps you in control, well ahead of the deadline.
Essential
For one brochure website
Emergency response promotion€199€99
first month, excl. VAT · one payment, no subscription
- 1 website (WordPress, Joomla or similar PHP site)
- Monthly PHP, CMS, theme and plugin updates
- Critical security updates applied within 2 business days of release
- Daily off-site backups, kept 30 days
- Uptime monitoring every 5 minutes, with alerts to us
- Monthly care note in plain language
- Email reply within 2 business days
- 1 restore from backup per month if something breaks
Pro
For sites that bring in enquiries
Emergency response promotion€399€199
first month, excl. VAT · one payment, no subscription
- Everything in Essential
- Updates tested on a staging copy before going live
- Weekly update rounds
- Weekly malware scan with Wordfence, with findings explained (clean-up quoted separately)
- One PHP version upgrade per year included (e.g. 8.1/8.2 → 8.4)
- Email reply within 1 business day
- 1 hour of fixes or content changes per month
Premium
For shops and multi-site portfolios
Emergency response promotion€799€399
first month, excl. VAT · one payment, no subscription
- Everything in Pro
- Up to 3 websites, or 1 WooCommerce shop
- Checkout or key-form test after every update round
- Backups kept 90 days
- Priority reply within 4 business hours (09:00–17:00 CET)
- 3 hours of fixes per month
- Quarterly review call in English, with a written plan
What's not included
Breach or incident response, malware clean-up, forensics, penetration testing and security audits. Updates and monitoring lower risk; no one can promise a site will never have a problem. Response times apply on business days (Mon–Fri). We reply in your language; calls are in English.
Clear and fair
Your first month is one payment, with no subscription, contract or setup fee. Before it ends, we'll send you a link to continue monthly if you'd like to.
Compare plans
What's included in each plan
| Essential | Pro | Premium | |
|---|---|---|---|
| Websites covered | 1 | 1 | Up to 3, or 1 shop |
| PHP, CMS, theme and plugin updates | Monthly | Weekly | Weekly |
| Critical security updates | Within 2 business days | Within 2 business days | Within 2 business days |
| Daily off-site backups | 30 days | 30 days | 90 days |
| Uptime monitoring every 5 minutes | ✓ | ✓ | ✓ |
| Monthly care note | ✓ | ✓ | ✓ |
| Updates tested on a staging copy first | – | ✓ | ✓ |
| Weekly Wordfence malware scan | – | ✓ | ✓ |
| PHP version upgrade included | – | 1 per year | 1 per year |
| Fixes or content changes | – | 1 hour/mo | 3 hours/mo |
| Checkout or key-form test after updates | – | – | ✓ |
| Quarterly review call (English) | – | – | ✓ |
| Email reply time | 2 business days | 1 business day | 4 business hours |
| Choose | Choose | Choose |
Prices are for the first month, excl. VAT. One payment, no subscription. Breach clean-up and security audits are not included in any plan.
How it works
Three clear steps
01
Choose a plan, 2-minute sign-up
Tell us your website, your hosting provider (or "I don't know") and your plan. No passwords or logins.
02
Secure checkout with Stripe
Pay for your first month by card in one payment. You'll get a Stripe receipt straight away.
03
We set up access together
Within 1 business day we email you a short guide and a secure form, help you find your access details, and start the first update round.
Every month
A proven, repeatable routine
We update your CMS, themes and plugins, and check the site afterwards.
A fresh copy of your site is stored away from your server.
We check the site is reachable, and look into any alert.
Critical fixes, like the 21 October PHP release, are applied within your plan's window.
You get a short, plain-language summary and anything worth planning next.
What you receive
What lands in your inbox
- A monthly care note: what was updated, backup status, uptime and next steps
- A heads-up before anything larger, such as a PHP version upgrade
- A clear answer when you email us, in your language
- A written plan each quarter (Premium)
Sample
What your monthly care note looks like
Sample for illustration only, not a real client report.
- Site: example-bakery.nl · WordPress
- PHP: 8.1 → 8.4 (tested on a staging copy first)
- Updated: WordPress core, theme, 7 plugins
- Backups: daily, off-site, latest restore point yesterday 02:00
- Uptime: monitored every 5 minutes; no outages this month
- Worth planning next: replace one plugin that is no longer maintained
Is it a fit?
Who Website Care is for
A good fit if
- Your website brings in enquiries, bookings or sales
- It runs on WordPress, Joomla or another PHP-based CMS
- Nobody on your side has time to watch updates
- You'd like a plain-language report instead of a dashboard
Probably not a fit if
- Your site is hacked right now and needs urgent clean-up
- You need a formal security audit or penetration test
- Your site is built on Wix, Squarespace or Shopify, which handle updates for you
- You want a large redesign, which is a separate project
Why BrandBoost
Senior-led care, explained clearly
10+ years of experience
We've been maintaining and securing websites for 10+ years.
Senior-led
Your site is looked after by experienced people who explain what they did and why.
Based on Samui
BrandBoost Digital Co., Ltd. is based on Samui, Thailand, and works with businesses in Europe and Asia.
Your language
We reply by email in Dutch, German, French or English. Any calls are held in English.
No passwords by email
Access is arranged after payment through a secure form, ideally a separate user you can remove anytime.
Common hesitations
“Do I really need this?”
“My host already does updates.”
Many hosts update the server, but not your CMS, themes and plugins. We check what your host covers and fill the gaps.
“I can do it myself.”
You can, and our free posts show how. Care is for when you'd rather spend that time on your business, with testing and backups handled.
“My site isn’t a target.”
Every site is a target: sites of all sizes are targeted by automated scans, which don't check size. Essential is built for exactly this.
“What if an update breaks something?”
We keep a recent backup and can restore it. On Pro and Premium, updates are tested on a copy before they go live.
Latest news
What is happening in website security
Website security, PHP vulnerabilities and hacking, from leading security sources.
Being clear
What Website Care is not
Website Care is routine maintenance. It is not a security audit, and it does not include breach or incident response, forensics or penetration testing. Updates lower risk, but no one can promise a website will never have a problem. If you suspect your site has already been compromised, please contact a specialist incident-response provider or your national cyber-security centre first. We're happy to point you in the right direction.
Questions
Good questions, plain answers
Do I need to give you my passwords to sign up?
No. Sign-up only asks for your website, hosting provider and plan. After payment we arrange access with you through a secure form, never by email. Ideally you create a separate user for us that you can remove at any time.
What if I don't know who hosts my website?
That's completely normal. Choose "I don't know" and we'll find out from your website's public records and walk you through the rest.
Can you guarantee my site won't be hacked?
No one honestly can. Regular updates, backups and monitoring lower the risk a lot and make recovery much easier. Clean-up after a breach is not included in the plans.
Am I committing to a subscription?
No. Your first month is a single payment with no auto-renewal. Before it ends, we'll send you a link to continue monthly, and it's entirely your choice.
Which plan should I choose?
Essential suits a brochure site. Pro is our recommendation for sites that bring in enquiries, because updates are tested on a copy first. Premium suits shops or up to 3 sites.
Do you speak my language?
We reply by email in Dutch, German, French or English. Any calls are held in English.
Who are you?
BrandBoost Digital Co., Ltd., a digital agency based on Samui, Thailand, working with businesses in Europe and Asia. Questions are welcome at contact@brandboost.ink.
Act today
Protect your website with expert monthly care
Choose a plan, pay securely with Stripe, and we'll arrange access with you within 1 business day. First month €99, no commitment.
Choose your planNot ready yet? Ask for a free Health CheckFree Website Health Check