Launch day is the start of a system's life, not the end. What unsupported software actually costs, and what a sensible support arrangement covers.

There is a common assumption that software is finished when it launches. The invoice is settled, the team moves on, and the system is expected to keep working indefinitely — the way a building keeps standing.
Software does not behave like that. It sits on top of operating systems, libraries, browsers, payment providers, and hosting platforms that all keep moving. A system that is not maintained is not stable; it is slowly drifting out of alignment with everything around it.
Security is the fastest-moving. Vulnerabilities are discovered continuously in the open-source components nearly all modern software depends on. When one is disclosed, the details become public and automated scanning for unpatched systems begins within days. An unmaintained application does not stay as secure as it was at launch — it becomes measurably less secure every month.
Dependencies expire. Every framework, runtime, and library has a support window. Once it closes, security fixes stop. A codebase left alone for three years often needs a substantial upgrade project before it can accept a simple change, because the gap has grown too wide to cross in one step.
Integrations move without asking. Payment gateways deprecate API versions. Shipping providers change response formats. Social logins alter authentication flows. These changes arrive on the vendor's schedule, and something that worked on Friday can fail on Monday through no fault of your code.
Browsers and devices shift. New OS releases change how pages render and how forms behave. Layouts that were correct at launch develop faults nobody introduced.
Deferred maintenance is not saved money; it is borrowed money with a poor interest rate.
A patch applied promptly is routine. The same vulnerability exploited becomes a breach, with the incident response, customer notification, regulatory exposure, and reputational damage that follows. A framework upgraded on schedule is a contained piece of work. Three versions behind, it becomes a rebuild.
There is also an opportunity cost that rarely gets counted. When every small change is risky because nobody has touched the code in two years, the business stops asking for changes. The system quietly becomes a constraint on what the business can do.
A support arrangement worth paying for goes beyond someone answering the phone when things break.
Monitoring. Uptime, error rates, and performance watched continuously, so problems are found before customers report them. Learning about an outage from an angry email is a support failure.
Patching on a schedule. Security updates applied predictably, with a defined process for urgent ones, rather than whenever someone remembers.
Verified backups. Backups exist almost everywhere; tested restores do not. A backup nobody has restored from is a hypothesis, not a safety net.
Defined response times. Agreed windows for different severities, so both sides know what happens when something breaks at 2am on a bank holiday.
Small changes included. Content updates, minor adjustments, and configuration tweaks handled without a separate quotation each time. This keeps the system evolving instead of freezing.
Continuity of knowledge. Someone who understands your system and does not need to relearn it every time. This is the part that is hardest to replace and most valuable when something goes seriously wrong.
A common planning figure is fifteen to twenty percent of the original build cost annually for maintenance and support. Simpler sites sit lower; systems with many integrations or compliance obligations sit higher.
The useful discipline is deciding this before the build rather than after. Support arranged at the start is part of a considered budget. Support arranged after an incident is an emergency purchase made under pressure, and it is always more expensive.
Whatever arrangement you choose, make sure you control the essentials: the domain registration, the hosting account, the source code repository, and the credentials. A good partner has no objection to this. It is what makes the relationship a choice rather than a dependency — and it protects you if circumstances change on either side.
The question is not whether your software needs ongoing attention. It does, in the same way vehicles need servicing.
The question is whether that attention is planned, budgeted, and handled by people who know the system — or improvised under pressure at the worst possible moment.
Running a system nobody currently maintains? NexoLink provides ongoing support for platforms we built and for systems inherited from elsewhere. Get in touch and we will review what you have and tell you honestly what it needs.