For IT managers and IT teams
“Are we affected?” Answer for the website too.
After every big vulnerability, someone asks. For your devices, network and Microsoft 365, you can answer. For the website, you often have to ask someone else and wait. BLACKBX looks after the website and shows IT what’s being done: scanned daily, patched, and every change written down.
One logbook per site, that IT can actually read.
With BLACKBX, row 04 has an owner, and IT can see it.
The gap
Marketing owns the website. IT owns the risk.
Marketing
Owns the content, the campaigns and the relationship with whoever builds the site.
The gap
CMS core, plugins, custom code, PHP versions, the server underneath. Nobody has shown IT any of it.
IT
Answers the security questions. Gets the call when something goes wrong.
When the website is hacked, it lands on IT’s desk.
BLACKBX takes the work, and gives IT the view.
Visibility
When a big vulnerability lands, the logbook shows what we’re doing.
When a major vulnerability is published, the logbook shows a notice: what we’ve done so far and what happens next. Nobody has to chase anyone. This is a client, the morning after two critical PHP flaws were published in October 2026.
“I jumped into BLACKBX and saw you already had the incident notice up saying the interim protections had been applied, uploads temporarily disabled and the patches were being rolled out this morning. Honestly, that visibility is great. Rather than us sitting in the dark wondering what was happening or chasing you guys, I could immediately see what was being done.”
The logbook
A change record for the website. Like every other system you run.
One logbook per site. Every change, finding, renewal and outage, dated and in order. Each finding says who’s responsible for it. Cyber insurance questionnaires ask whether public-facing systems are patched: the logbook is the evidence.
Security findings · scanned daily
Service history
Sample, redacted. On Monitor, findings show under “Need your action”. On Maintenance, we fix the site’s software and the host handles the server. On Full service, we handle both.
Every logbook includes
- Nightly health check
- Vulnerabilities scanned daily
- Uptime monitoring and alerts
- Expiry tracking: SSL, domain and software end-of-life dates
- Lookalike domain watch
- Admin access and MFA audit
- Service history, live and staging
- Support tickets
Maintenance plan adds
- We patch the site’s software: CMS, plugins, code
- Defacement watch
- Developers for new features and content
Full service plan adds
- We patch the server too
- Australian hosting
- Backups
- Migration included
How it works
From one call to a website IT can see.
Plans
Three ways we look after a website.
Monthly, no minimum term. Maintenance works wherever the site is hosted now.
Maintenance
We look after the site. Your host runs the server.
From$840/month + GST
Developer hours each month, sized to what you need. Your host, our developers.
Everything in Monitor, plus
See what’s includedMost popular
Full service
We’re responsible for all of it.
Quoted
Price on application. Our host, our developers.
Everything in Maintenance, plus
See what’s includedThe price a site starts on is the price it renews on.
Who we are
Developers who look after websites for a living.
BLACKBX is a website service department. Our developers keep WordPress, Drupal, Magento and Silverstripe sites and custom applications updated, patched and working, every day, from Sydney, the Sunshine Coast and Ho Chi Minh City. The same developers have spent fifteen years building websites for organisations like these.
You’ll always deal with a person, never an unnamed inbox.
Questions
Before you ask.
Can the site’s current developer stay?
On Monitor, $99 a month + GST, your developer does the work and we tell them what needs doing. On Maintenance and Full service our developers do it, and yours can keep access: the grant is logged, and the logbook records our work, not theirs.
What happens when a big vulnerability is published?
The logbook shows a notice: what we’ve done so far and what happens next. Nobody has to chase anyone, and IT can read it like any other system’s change record.
Do you look after the server or just the website?
On Maintenance, we look after the site’s software (CMS, plugins and code) and your host runs the server. On Full service, we host it too and patch the server as well.
Does the logbook help with cyber insurance?
Yes. Cyber insurance questionnaires ask whether public-facing systems are patched. The logbook records every patch and fix on the site, with the date, so the answer comes with evidence.
Do you do penetration testing?
No. Our scanning checks the sites we look after for known vulnerabilities and out-of-date software, every day. A penetration test is a different job. On Maintenance and Full service, we fix what it finds on the website and keep it fixed.
Which platforms do you look after?
WordPress, Drupal, Magento and Silverstripe sites, and custom applications and headless sites such as Next.js, Node.js, Laravel, Statamic and Craft CMS. See custom applications.
What does it cost?
Each site is on its own plan. Monitor is $99 a month + GST. Maintenance starts at $840 a month + GST. Full service is quoted. Every plan is monthly with no minimum term, and the price a site starts on is the price it renews on. See pricing.
Talk to us
See a logbook. Then decide.
A few lines about your website is plenty. We’ll reply with a time to talk and show you a logbook on screen. Or run the free health check on your site first.
What happens next