A flat monthly retainer for your Drupal site: security patches, Composer updates, break-fix, and a real person who answers. For small and mid-size sites, not just enterprise. From $140/mo.
Almost every Drupal support page on the first page of Google is pitched at enterprises: 24/7 monitoring, certified engineer teams, and a quote you only get after a sales call. Fine if you are a bank. Useless if you are a nonprofit or a small business that inherited a Drupal site and the developer who built it is long gone.
That second group is who we work with. A flat monthly retainer covering the Drupal work a real site needs: the security advisory you should patch this week, the Composer update that keeps stalling, the contrib module that broke after the last core release, and the Drupal 7 site that hit end-of-life in January 2025 and now needs either coverage or a migration plan. One price, a real person, an answer the same week.
Drupal security advisories land most Wednesdays. We track them, test the patch on a copy, and apply it before it becomes the reason your site gets defaced. Core and contrib, on 9, 10, and 11.
Composer updates, deprecated module swaps, and minor version moves done carefully so the site does not break on a Tuesday. We run updates on a staging copy first, then push when they pass.
A named contact who knows your site and its quirks, not a queue. You send a request, you get a human reply the same week, faster on the higher tier.
The enterprise pages lead with 24/7 and certifications because they are selling to procurement. We lead with the price and the checklist because we are selling to the person who actually has to keep the site alive.
A retainer is hands-on time plus the routine care that keeps a Drupal site healthy. Here is what a month covers, and where a job becomes a separate quote.
Every retainer month includes the routine care plus your block of hands-on time, with a short log so you can see where the time went.
Your monthly block of developer hours spent on whatever the site needs, from bug fixes to small changes.
Security and stability updates tested and installed, not just listed in a report.
Off-site backups with a restore actually run, so recovery is real, not theoretical.
A short summary of what we did and what we recommend next, in plain language.
We start with a health check so the first month is not a scramble, then settle into a rhythm where you send requests and we handle them.
We audit the Drupal version, the contrib modules, the pending security advisories, and the backups, and list anything urgent.
Week 1We clear the urgent items: missing patches, broken updates, the bugs you have been working around.
Week 1-2Patches, monitoring, and your hands-on time run on a monthly cycle you can predict.
OngoingEmail or message a request any time; we pick it up and reply the same week, same day on Care+.
OngoingRetainers start at $140/mo for routine care plus an hour of hands-on time. Busier or larger sites take Care+ at $290/mo for more hours and same-day response. Drupal 7 migrations and new builds are quoted separately so a big job never eats your monthly hours by surprise.
Every plan is month-to-month. If a quiet month rolls around and you do not need us, cancel with a month’s notice and keep your backups and access. We would rather earn the next month than trap you in a contract.
A retainer keeps a working site healthy. If your Drupal site is already down or hacked, that is an emergency, not a retainer item: see our Drupal restoration and recovery. Stuck on an old version and ready to move? Our Drupal rescue and upgrade bundle handles that as a fixed-price job. This page is part of our wider website support and maintenance service, and our Drupal support and development page lists everything else we handle.
We'll triage the same day. Send context, screenshots, error messages — whatever you have. No sales calls, no chatbots.
