Your clients' servers, patched, backed up and online. With your name on the report.

Patch & Protect is white-label server care for web agencies. You keep the client and the invoice. We look after the Linux servers underneath, not just the WordPress or Laravel on top, and send you a monthly report you forward as your own.

Who it is for: agencies with 5 to 75 client sites on their own VPS or cloud servers, no full-time sysadmin, and a founder who still gets the 2 a.m. “site is down” call.

See a sample report in your nameGet a quote
Last month on our own server: 34 sites, 28 September to 27 October 2026
Updates applied
2,135
Database backups off-site
21 of 22
Restore test
passed, 20 October
Certificates renewed
24, 0 expired
Sites up at every check
34 of 34

One failed off-site upload, caught and re-run the next night. Your report shows the misses too.

A sample monthly report, in your agency's name

Type your agency's name and the report below is signed by you. The numbers are real: they come from our own servers over the last month, counts only.

The preview stays in your browser. Nothing is sent until you use the form.

Sample, generated from our own servers

Your Agency

Monthly server report · 28 September to 27 October 2026 · 1 server, 34 sites

Updates applied
2,135
Database backups
21 of 22 off-site
Restore test
passed, 20 October
Certificates renewed
24, 0 expired

Patched

2,135 package updates, including 1 operating-system release upgrade on 23 October in a planned window (1 reboot).

Backed up

22 nightly database backup runs of 40 databases; 21 uploaded off-site. 1 off-site upload failed and was fixed; the next night's upload completed. File backups nightly since 26 October, 0 failed. Restore test 20 October: passed (36 tables restored to a scratch database and checked).

Watched

Uptime 100% since monitoring began on 26 Oct (34 of 34 sites up at every daily check). 24 of 35 certificates renewed automatically, none expired.

What went wrong, and how long it took

  • 20 October: A maintenance job truncated a database; full restore from the nightly backup in 2 hours; root cause fixed.
  • 26 October: A deploy overwrote a config file; rolled back in under 2 minutes.

Note you can forward to your client

This month we applied 2,135 updates to your servers, including a planned operating-system upgrade on 23 October. 22 nightly database backups ran, 21 of them copied off-site, and a restore test on 20 October confirmed they can be brought back. 24 security certificates renewed automatically and none expired. 2 incidents were resolved from backup; details are below. Questions? Just reply to this email. — Your Agency

What you get, every month

  • Security fixes within 48 hours of a published fix, restarts in a window you choose, rollback if anything breaks, and a one-paragraph note you can send to the client
  • Nightly backups, restore-tested every month, in storage you own
  • Uptime, certificate and domain-expiry monitoring, with alerts to you before the client notices
  • Safe releases with rollback
  • Access you create and can revoke; every change we make shows in your report
  • A monthly report in your agency's name: what was patched, what was backed up, what went wrong and how long it took

Plans

Starter

$499 a month

  • Up to 10 sites on 1 to 2 servers
  • Next-business-day response

Agency

$999 a month

  • Up to 30 sites on up to 5 servers
  • Same-business-day response
  • Deploys included

Partner

$1,999 a month

  • Up to 75 sites
  • 4-hour response on business days
  • Small fixes included
  • 2 hours of development a month

Response time is how fast a human answers you. Security fixes run on their own clock: within 48 hours of a published fix, weekends included.

Optional setup of $300 per server, waived for pilots. No contract longer than a month; cancel with 30 days' notice.

Health check (one-off): $490

One read-only pass over your servers and apps: patch level, backups, certificates, open ports, and optionally your repo history for leaked keys. Written report, fixes in priority order, yours to act on. Credited against your first month if you continue.

How it works

  1. Send your site count (form below, or reply to our email). You get a one-page quote and a sample monthly report in your agency's name.

  2. You create read-only access and a storage bucket for backups. We run the health check in week one and you get the findings as a short report.

  3. Onboarding in week two. Monitoring, backups and a patch schedule go live. Nothing changes on a server without your OK.

  4. From then on, monthly reports and quiet servers.

Pilot, three agencies: half price for two months, setup fee waived, in return for a short case study you approve. Your clients are never named.

Send your site count

We'll reply with a one-page quote and a sample monthly report in your agency's name.

Questions

Will my clients know?
Only if you tell them. Reports and notes carry your name, and we never contact your clients.
Do you take over hosting?
No. Servers stay on your account and your bill. We get access, you keep ownership. Need a new server? We set one up in your own Hetzner or OVH account (you pay them directly, usually $20 to $40 a month) and manage it under your plan; setup $300 per server, waived for pilots.
Do you restart my servers without asking?
No. Patches that need a restart run in a window you choose. We snapshot first and roll back if anything breaks.
Who owns the backups?
You do. They land in storage on your account.
What stacks?
Linux servers running PHP, Laravel, WordPress, Node and static sites. Docker is fine. Windows is not.
What if something breaks?
Incidents are included within the response time of your plan. If a fix needs real development, we quote it first.
Who are you?
GM Sunshine LLC, a Delaware company: a web development and AI shop that runs 30-plus sites of its own on the same tooling we will use for yours.

Building something new rather than keeping it running? See our cloud and DevOps and web development services.