Software Maintenance
A system that stays supportable — dependencies patched, defects fixed to a service level, and changes delivered predictably.
Corrective, adaptive and preventive maintenance that keeps an application secure, current and aligned to changing requirements.
What this service is usually brought in to fix
Dependencies age into vulnerabilities
Frameworks and libraries reach end of life, and an application that was secure at launch accumulates known exposures.
Small changes take months
Without a maintained environment, release process and test suite, even a minor change becomes a project.
Knowledge left with one person
The system is understood by a single developer, and their departure turns routine maintenance into reverse engineering.
What the service covers
- Corrective maintenance and defect resolution under SLA
- Dependency, framework and security patch management
- Adaptive changes for new requirements or regulation
- Performance profiling and optimisation
- Refactoring and incremental legacy modernisation
- Documentation recovery and knowledge transfer
What you receive
- Maintenance service agreement with response and resolution targets
- Dependency and vulnerability register with remediation plan
- Release notes and change log per deployment
- Periodic service report covering tickets, causes and trends
- Updated technical documentation
How the work runs
Each stage produces something reviewable, so scope, risk and progress stay visible to your team throughout.
Onboard
Take custody of source, environments and credentials, assess code and dependency health, and record what is undocumented.
Stabilise
Clear critical defects and security exposures, and establish a repeatable build, test and release process.
Maintain
Handle incidents and changes to agreed service levels, patching dependencies on a defined cadence.
Improve
Refactor the areas that generate the most incidents, and report trends so maintenance spend reduces over time.
Where we apply it
- Government systems in long-term operation
- Financial and enterprise applications
- Healthcare and education platforms
- Any organisation whose original vendor is no longer available
The controls that apply
- Dependency vulnerabilities tracked and remediated on a documented cadence.
- All changes released through change control with rollback available.
- Access to production credentials logged and reviewed periodically.
Frequently asked
If your question is not here, ask it directly — we would rather answer it before a proposal than after a contract.
Ask a questionYes, provided source code and environment access are available. We start with a technical assessment covering code quality, dependency health, security posture and documentation gaps, and quote stabilisation separately from ongoing maintenance.
What this is usually combined with
Discuss your Software Maintenance requirement
Tell us the outcome you need and the constraints you are working within. We will respond with a scoped approach and the documentation your evaluation process requires.