For MSPs, IT providers and security firms
The website is the gap in managed IT.
You look after your clients’ devices, network and Microsoft 365. The website often sits outside all of it, with nobody patching it. BLACKBX looks after that part the way you look after the rest: monitored, patched, and every change written down.
We only look after websites, so we’re never after your work.
With BLACKBX, row 04 has an owner.
The gap
Everyone’s doing their job. The website still isn’t patched.
IT provider
Responsible for the devices and the network. Not the CMS.
The gap
CMS core, plugins, PHP versions, the SSL nobody renewed, the admin account nobody removed.
Pen test
Finds it, writes it up. Isn’t engaged to fix it, or to keep it fixed.
When the website is hacked, your client still calls you.
That’s the part we take off your hands.
Working together
Two ways to work with us.
Some firms want to stay the main contact. Others would rather hand the website over. Both work.
1 · You stay the client
- One BLACKBX login for the sites you look after
- A logbook for each site
- We only ever deal with you
- You choose the plan for each site
2 · You hand it over
- You introduce the client and step away
- We look after them directly, as BLACKBX
- They get their own login and logbook
- You don’t need to be involved
Either way
- We look after the website; you keep everything else
- We never pretend to work for your company
- Every change recorded, with the date
- Monthly, no minimum term
A pen testing firm? Either way works. On Maintenance, we fix what your report finds in the site’s software and record each fix in the logbook. We don’t do pen testing, so the retest stays yours.
The logbook
An audit trail for the website. Like the rest of your client’s IT.
One logbook per site. Every change, finding, renewal and outage, dated and in order. Each finding says who’s responsible for it. Cyber insurance questionnaires ask whether public-facing systems are patched: the logbook is the evidence.
Security findings · scanned daily
Service history
Sample, redacted. On Monitor, findings show under “Need your action”. On Maintenance, we fix the site’s software and the host handles the server. On Full service, we handle both.
Every logbook includes
- Nightly health check
- Vulnerabilities scanned daily
- Uptime monitoring and alerts
- Expiry tracking: SSL, domain and software end-of-life dates
- Lookalike domain watch
- Admin access and MFA audit
- Service history, live and staging
- Support tickets
Maintenance plan adds
- We patch the site’s software: CMS, plugins, code
- Defacement watch
- Developers for new features and content
Full service plan adds
- We patch the server too
- Australian hosting
- Backups
- Migration included
Visibility
When a big vulnerability lands, the logbook shows what we’re doing.
When a major vulnerability is published, the logbook shows a notice: what we’ve done so far and what happens next. Nobody has to chase anyone. This is a client, the morning after two critical PHP flaws were published in October 2026.
“I jumped into BLACKBX and saw you already had the incident notice up saying the interim protections had been applied, uploads temporarily disabled and the patches were being rolled out this morning. Honestly, that visibility is great. Rather than us sitting in the dark wondering what was happening or chasing you guys, I could immediately see what was being done.”
How it works
From first call to looked after.
Plans
Three ways we look after a website.
Monthly, no minimum term. Maintenance works wherever the site is hosted now.
Monitor
The site’s developer fixes it. We watch it.
$99/month + GST
The site’s host and developer.
See what’s includedMaintenance
We look after the site. The site’s host runs the server.
From$840/month + GST
Developer hours each month, sized to the site.
Everything in Monitor, plus
See what’s includedMost popular
Full service
We’re responsible for all of it.
Quoted
Price on application. Our host, our developers.
Everything in Maintenance, plus
See what’s includedThe price a site starts on is the price it renews on.
Who we are
Developers who look after websites for a living.
BLACKBX is a website service department. Our developers keep WordPress, Drupal, Magento and Silverstripe sites and custom applications updated, patched and working, every day, from Sydney, the Sunshine Coast and Ho Chi Minh City. The same developers have spent fifteen years building websites for organisations like these.
You’ll always deal with a person, never an unnamed inbox.
Questions
Before you ask.
Does BLACKBX compete with IT providers?
No. BLACKBX looks after websites: the CMS, plugins and code, and on Full service the server they run on. We don’t do desktop support or penetration testing. The website is the part we take on.
Do you do penetration testing?
No. Our scanning checks the sites we look after for known vulnerabilities and out-of-date software, every day. A penetration test is a different job, and we’d rather you did it. On Maintenance and Full service, we fix what it finds on the website and keep it fixed.
What are the two ways of working?
One: you stay the client. You get a BLACKBX login for the sites you look after, a logbook for each one, and we only ever deal with you. Two: you hand the client over. We look after them directly, with their own login and logbook, and you don’t need to be involved.
Who does your client deal with?
On the first option, you: we only ever deal with you. On the second, us, directly, as BLACKBX. Either way, we never pretend to work for your company.
Is the login branded BLACKBX?
Yes. The login and every logbook carry the BLACKBX name.
Is there a referral fee?
When you hand a client over, there can be. It’s an ongoing share of what the client pays, agreed with you privately. Some firms prefer none so their advice stays independent, and that’s fine too.
Does the logbook help with cyber insurance?
Yes. Cyber insurance questionnaires ask whether public-facing systems are patched. The logbook records every patch and fix on the site, with the date, so the answer comes with evidence.
Which platforms do you look after?
WordPress, Drupal, Magento and Silverstripe sites, and custom applications and headless sites such as Next.js, Node.js, Laravel, Statamic and Craft CMS. See custom applications.
Does the site have to move hosting?
No. Maintenance works wherever the site is hosted now. On Full service we host it too, on Google Cloud, AWS or our own Australian servers, with migration included.
What if the site already has a developer?
They can stay. On Monitor, $99 a month + GST, we watch the site and tell the developer what needs doing.
What does it cost?
Each site is on its own plan. Monitor is $99 a month + GST. Maintenance starts at $840 a month + GST. Full service is quoted. Every plan is monthly with no minimum term, and the price a site starts on is the price it renews on. See pricing.
Talk to us
Talk to us about partnering.
A few lines about your firm is plenty. We’ll reply with a time to talk. You can also run the free health check on any site first.
What happens next