What is the difference between software maintenance and managed hosting?

Software maintenance covers source code, dependencies, tests, technical defects and application releases. Managed hosting covers infrastructure, platform, monitoring, backups, system updates and incident response. The services can be combined but remain separately traceable in the proposal.

What does Managed Code Care from €699.90 per month include?

For one clearly bounded application, the starting service includes an agreed process for repository care, dependencies, CVE and EOL assessment, approved patch and minor updates, limited technical fixes and a controlled release path. The exact allowance is defined in the proposal after review.

When is a Production Readiness Audit required before support starts?

For unknown inherited code, unclear architecture, missing tests or an opaque deployment path, we first assess the application through the Production Readiness Audit. Applications built by WZ-IT or already reviewed to a sufficient level can be assessed directly for ongoing support.

How does WZ-IT handle a critical CVE?

We first determine whether the deployed version is actually affected and exposed. We then prioritise the appropriate measure: patching, updating, temporary mitigation or a separately scoped change. Critical changes are not deployed to production blindly.

Are major upgrades included in the monthly price?

Not by default. Major upgrades can require data migrations, breaking API changes and extensive regression testing. Small low-risk steps may fit the agreed maintenance allowance; larger upgrades are scoped separately in advance.

Can our team or an AI continue to develop the application?

Yes. Your team can continue development and push changes. If WZ-IT should independently review those changes on an ongoing basis, the AI Code Review Retainer is the appropriate service. Software maintenance instead covers agreed technical care, fixes and releases implemented by WZ-IT; both services can be combined with clear boundaries.

Can WZ-IT also provide hosting and 24/7 operations?

Yes. Managed hosting, platform operations, backups, infrastructure monitoring and service levels are available as additional operating modules. This keeps application and infrastructure responsibilities explicit.

What determines the final monthly price?

The main factors are the number and size of repositories, technology stack, maintainability, test coverage, number of environments, release frequency, existing findings and the required engineering allowance. You receive a documented scope and price before work begins.

Software maintenance and ongoing support for custom applications

WZ-IT keeps custom, inherited and AI-assisted applications technically maintainable. We assess dependencies and security advisories, plan updates, support releases, resolve defects and evolve the application within the agreed scope. Hosting and infrastructure remain optional modules.

Request software support Review the scope

Reviews

IT Beratung Service Consulting Soforthilfe

Companies worldwide trust WZ-IT

Read client reviews

Starting point

Suitable for applications with ongoing maintenance needs

A custom application is in production and requires recurring technical care
An internal or external team keeps developing while WZ-IT safeguards maintenance and releases
An AI-assisted application needs a controlled path after go-live
An existing codebase needs ongoing support after an audit or modernisation
Dependencies, CVEs, EOL risks and technical defects need a clear owner

Ongoing responsibility

A reliable maintenance process for code, dependencies and releases

Instead of reacting only after an outage or critical security advisory, the application is reviewed on a regular basis. Measures, approvals and releases remain traceable.

Maintainable source code
Repositories, runtimes, dependencies and technical debt are maintained in a prioritised technical backlog.
An action path for CVE findings
Relevant security advisories are assessed for actual impact and translated into patching, mitigation or a separately scoped change.
Controlled releases
Changes follow the agreed testing, approval and deployment path with a traceable outcome.

The comparison explains when ongoing code review is sufficient and when WZ-IT should implement fixes, updates and releases as software maintenance.

Read the distinction

Service scope

Application care from dependency to release

The exact scope is aligned with the application, stack, environments and change frequency. Ongoing support covers the application layer and can be combined with hosting or managed operations.

Included

Repository and maintenance backlog
Maintain a traceable inventory of relevant repositories, runtimes, package sources and open technical measures.
Dependencies, CVEs and EOL
Review dependencies and vendor advisories, assess actual impact and prioritise routine measures.
Updates and technical fixes
Apply approved patch and minor updates and limited defect fixes within the agreed maintenance allowance.
Tests and quality gates
Run existing automated checks and protect the agreed release path against critical regressions.
Release and deployment support
Bundle changes, document approvals and coordinate deployments to staging and production.
Named technical contact
Review technical findings, priorities and next steps with a consistent point of contact.

Modular boundaries

Code maintenance is not an infrastructure contract

Hosting, server operations, backups and 24/7 incident response without an added operations scope
Major upgrades, platform changes, data migrations or complete redevelopment without a separate scope
Unlimited defect remediation or feature development beyond the agreed maintenance allowance
Third-party licence, cloud, registry, scanning or telemetry costs
Penetration testing, legal advice or formal certification

Process

From the technical baseline to a reliable maintenance cycle

For unknown or inherited code, the Production Readiness Audit first clarifies risks and suitability for takeover. Applications built or already reviewed by WZ-IT can be assessed directly.

01
Confirm the baseline
Capture repository, stack, responsibilities, environments, tests and the current release path.
02
Define the care scope
Agree the application, repositories, update classes, release windows, approvals and development requirements.
03
Review and maintain regularly
Assess dependencies and advisories, implement approved measures and test changes.
04
Control releases and follow-up work
Roll out changes in a controlled process, document the outcome and scope larger measures separately.

What we need for the initial assessment

Repository and technology stack
Production, staging and development environments
Current build, test and deployment path
Known defects, technical debt and planned changes
Desired responsibilities for approvals, releases and operations

Two service levels

Technical maintenance or maintenance with ongoing development

Both levels require a confirmed technical baseline. The final monthly scope depends on the codebase, stack, environments, release frequency and testability.

Technical maintenance

Managed Code Care

For one clearly bounded application with recurring maintenance, security and release requirements.

from €699.90 / monthexcluding VAT, monthly

Repository and dependency care within the agreed scope
CVE, security-advisory and EOL assessment at application level
Approved patch and minor updates within the maintenance allowance
Agreed release window with testing and documentation
Limited technical defect remediation
Named technical point of contact

Ongoing Development

For applications that need planned development in addition to technical maintenance.

from €1,490 / monthexcluding VAT, monthly

Everything in Managed Code Care
Larger monthly engineering allowance
Planned defect remediation and small features
Technical backlog and recurring prioritisation
Release planning for staging and production
Coordination with your internal or AI-assisted development process

These are starting prices, not an unlimited development flat rate. Application, repositories, maintainability, environments and desired change frequency are reviewed before a proposal. Hosting, infrastructure, higher service levels and third-party costs remain separate.

All prices are net and exclude statutory VAT. The offers are addressed to businesses.

Related modules

Combine assessment, code care and operations cleanly

The application layer remains separately priced from infrastructure and compliance requirements. This makes WZ-IT's actual responsibility explicit.

Production Readiness Audit

Assess unknown or inherited code for risk, maintainability, deployment and operations before takeover.

View the audit

Add managed hosting

Add infrastructure, monitoring, backups, updates and incident response as a separate operating scope.

View hosting

Section 203 Managed Cloud

Assess a separate infrastructure and contractual framework for applications used by professional secrecy holders.

View Section 203 service

Frequently asked questions about software maintenance

Scope boundaries, takeover, security updates, releases and hosting

Reviews & projects

Software projects with reliable outcomes

Proof for modernization, API extension, architecture, deployment and ongoing operations.

WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.

Steve KirchnerManaging Director, nextGYM GmbH

View project

International

Built in Germany's Ruhr Valley. Running worldwide.

WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.