Service
Servers, email and maintenance
Delivery is not the end. Unpatched servers accumulate holes, untested backups don’t exist, and an unrenewed certificate takes the site down. This is our daily work.
Scope
Server setup
Linux server provisioning, web server and database configuration, domain and DNS setup.
Corporate email
Email on your own domain, webmail, SPF/DKIM/DMARC and fixing deliverability problems.
SSL and security
Certificates with automatic renewal, firewall, access restrictions and hardening.
Backups
Automated backups and — more importantly — tested restores. An untested backup is not a backup.
Monitoring
Uptime checks, disk and resource monitoring, certificate expiry alerts.
Ongoing maintenance
Updates, security patches, performance checks and small content changes.
What we most often find on inherited systems
Not theoretical risks — things we actually encounter.
- Backups assumed, not taken. Either missing entirely or never restore-tested.
- The “publish folder” isn’t the publish folder. Files uploaded, site unchanged, hours lost.
- Passwords in source code. Database and API keys written into the code.
- Updates untouched for years. Known vulnerabilities sitting open.
- Email landing in spam. SPF/DKIM/DMARC records missing or wrong.
- Certificates renewed by hand. The day it is forgotten, browsers warn visitors away.
What a server maintenance agreement should cover
A good maintenance agreement does not say “unlimited support”; it lists what gets done. Ours covers the following — and whoever you buy it from, insist on seeing these six in writing.
Update management
System and application updates applied in a controlled way; risky updates tested first.
Backup verification
Backups are checked and restores are tested at regular intervals.
Security monitoring
Access logs and suspicious activity monitored; access rules updated when needed.
Performance checks
Page speed and server resources measured periodically, before slowdowns become visible.
Small changes
Content updates and minor edits included, with the scope written down.
Reporting
What was done is reported monthly in writing. Invisible maintenance is indistinguishable from none.
Market
Maintenance and server management — 2026 monthly
Maintenance is the one item where nothing happens when you skip it — until everything happens at once.
| Service | Common monthly range | Scope |
|---|---|---|
| Basic maintenance (brochure site) | ₺1,000 – 5,000 | Updates, backups, technical support |
| Corporate / e-commerce maintenance | ₺5,000 – 15,000 | Regular content entry, monitoring, security |
| Platform maintenance (listings, e-learning) | ₺16,000 – 45,000 | Work involving continuous development |
| Dedicated server | ₺2,000 – 80,000 | By resource needs; management billed separately |
Source: agency price pages published in Türkiye, August 2026. These are not our prices — they are market ranges and do not constitute a quotation. Published Turkish agency prices usually exclude VAT; ask when comparing quotes. A maintenance quote must state response time and monthly scope in writing; “unlimited support” is unmeasurable.
Security
What server hardening includes
Security is not a feature added later; it is part of the build. The following are applied without exception.
- Firewall — only required ports open; databases closed to the outside.
- SSH hardening — key-based access, per-person accounts, revoked when work ends.
- Automatic SSL renewal — a manually renewed certificate takes the site down the day it is forgotten.
- Update discipline — security patches tracked; risky updates tested first.
- Secret management — passwords and keys never written into code; kept in environment variables.
- Least privilege — each service runs as its own user; nothing runs everything as root.
- Access logging — who did what and when must be traceable.
Why corporate email lands in spam
If you send from your own domain and your mail lands in spam, the cause is almost always missing or incorrect DNS records. Three records tell the receiving server “this sender is genuinely authorised”:
SPF lists which servers may send on your behalf. DKIM signs outgoing mail, proving it was not altered in transit. DMARC says what to do when the first two fail, and sends you reports.
With all three configured correctly, deliverability improves markedly. Corporate email hosted on your own server also avoids per-mailbox monthly fees — a meaningful line item once you have several employees.
- SPF — the list of authorised sending servers.
- DKIM — digital signature proving the message was not altered.
- DMARC — failure policy and reporting.
- Reverse DNS (PTR) — the server IP matching the domain.
- Webmail and mobile setup — IMAP/SMTP settings distributed correctly.
Frequently asked
Our site is hosted elsewhere. Can you still maintain it?
Yes, we do this often. We review the existing setup and produce a status report: what is out of date, whether backups exist, which risks are open. If hosting doesn’t need to move, we don’t move it.
Does migrating a server cause downtime?
Planned properly, downtime is close to zero: the new server is prepared, data copied, tested, and DNS switched last. Migrations that go wrong usually begin with “let’s switch DNS first”.
Can you set up corporate email?
Yes — mailboxes on your own domain, webmail access and device configuration. Deliverability requires correct SPF, DKIM and DMARC records; without them your mail lands in spam.
Where are backups stored?
Backups are kept separate from the server. A backup living on the same machine is not a backup when that machine fails. Retention and frequency are agreed in writing.
What if we skip maintenance?
Nothing happens in the short term — that is exactly the problem. Risks accumulate: unpatched components, filling disks, expiring certificates. The result usually arrives suddenly. Even without a plan, at least find out how your backups are taken and restored.
What does website maintenance cost?
The market runs ₺1,000–5,000 per month for brochure sites and ₺5,000–15,000 for corporate and e-commerce sites. What sets the price is less site size than monthly work scope: updates only, or content entry too, and what response time.
Does skipping maintenance really cause problems?
Not in the short term — that is exactly the problem. Risks accumulate quietly: unpatched components, filling disks, expiring certificates, untested backups. The result arrives suddenly, and that day costs more than two years of maintenance. Even without a plan, find out how your backups are taken and restored.
How much should a server cost?
Dedicated servers start around ₺2,000 per month and rise with resource needs. But most corporate sites do not need the upper tier; the difference comes from correct configuration, not size. Moving a slow site to a bigger server is usually money thrown away.
Our site is hosted elsewhere — can we buy maintenance only?
Yes, we do it often. We review the existing setup and produce a status report: what is out of date, whether backups actually run, which risks are open. If hosting does not need to move, we leave it.
Let’s check your server
We can verify for free whether your backups are actually being taken and which updates are pending.