Plan details & important information.

Security allowances and additional work

All plans include active monitoring for Critical and High-severity security updates relevant to the website platform between scheduled services. When urgent action is required, Brighter will assess and undertake the necessary work as soon as practicable during business hours without seeking prior approval.

Each plan includes two hours of security work annually. Time spent assessing alerts, applying updates, testing changes, coordinating with hosting providers and initially responding to suspected attacks counts towards this allowance. Scheduled maintenance does not deduct from it.

We will notify you when the two-hour allowance has been exhausted. Further necessary security work will proceed without separate approval and be billed at $200 + GST per hour during business hours. Where work is expected to be unusually extensive, such as major compatibility repairs, malware removal or website recovery, we will advise you of the scope and estimated costs before proceeding. Urgent action to address immediate security risks may still be undertaken without prior approval.

Out-of-hours work is not included in the allowance and is charged at $500 + GST per hour, subject to availability and prior agreement. Unused hours expire at the end of the 12-month term and do not roll over.

Response and priority

During a security incident, Brighter prioritises Priority Care, then Plus Care, then Basic Care, taking severity and impact into account. We aim to act as soon as practicable on Critical and High-severity platform security issues, but priority handling does not guarantee immediate attendance, a fixed resolution time or 24-hour emergency response. Monitoring covers relevant security advisories, not continuous real-time intrusion detection.

Maintenance scope and compatibility

Updates are limited to compatible, supported versions within the agreed scope. Major CMS or PHP version upgrades, unsupported software, replacement plugins, substantial compatibility repairs and complex eCommerce or integration work may require separate quoting. If an update cannot safely proceed, we will explain why and recommend next steps.

Security incidents and recovery

Maintenance reduces risk but cannot guarantee freedom from vulnerabilities, attacks, errors or downtime. Initial incident assessment may be covered by the security allowance. Full investigations, malware removal, restoration, rebuilding and specialist response are not automatically included.

Hosting, backups and third parties

Managed hosting is a separate service. Where provided by Brighter, it includes server administration, routine OS/PHP/database/web-server security patching, SSL, automated backups and uptime monitoring under the hosting agreement. Where another provider hosts the website, server patching may be their responsibility. Hosting charges, restoration work and third-party fees are additional unless expressly included.

Licences, access and approvals

CMS and CMS plugin licence renewals are included by default unless Brighter identifies an excluded licence, such as Craft Commerce, and advises you. Licences, subscriptions and charges for third-party or external services are excluded. Maintenance requires appropriate access and current licences. We will advise if access or other dependencies prevent work proceeding. General content edits, technical support and feature development are separate services.

Plan term

Agreed prices and inclusions apply for a 12-month term. Plans are reviewed annually, and any changes will be advised before renewal.