Why maintenance is critical in e-commerce
An online shop that goes down on a Saturday afternoon means lost revenue and damaged customer trust. Unlike a brochure website, a shop handles payments, stock and personal data all the time: the slightest failure has an immediate and sometimes lasting cost. Preventive maintenance is therefore not an optional expense, but insurance for your business.
Industry figures give a measure of the risk. Cyberattacks against online shops have doubled in a few years, rising from 15% to 31% of all attacks recorded worldwide. The impact is not limited to the incident itself. A figure of 60% of small businesses closing within months of a serious attack is often quoted; in reality, that percentage is disputed and hard to establish seriously. But even scaled down, the point stands: a major incident weakens a real share of the businesses affected for a long time, and the cash flow of a small shop copes badly with a prolonged shutdown.
What an outage or an attack really costs
Average cost of a cyberattack for a French SME: up to 466,000 euros.
Global average cost of a data breach (IBM, 2026 report): 4.99 million dollars (a record, up 12% in a year, organisations of all sizes and sectors).
Share of the bill due to operating losses (business shutdown): around 50%.
A modest ransomware scenario, no ransom paid, two weeks of partial shutdown: 70,000 to 120,000 euros.
These amounts cover varied scenarios, from the most modest to the most serious, but the message is constant: preventive maintenance costs far less than an incident, even a minor one. There are two stakes: keeping the shop available and fast for your customers, and protecting it against threats that target e-commerce sites first, a favoured target because of the payments and data they handle.
Monthly checklist
CMS and extension updates: apply security patches promptly, ideally within days of their release. Known, unpatched vulnerabilities are the favourite entry point for attacks.
Backups: check that automatic backups actually run and are stored off the server. A backup that has never been tested is not a backup: restore one from time to time to make sure.
Scheduled technical checks: check loading times with tools such as Google PageSpeed and fix any regression. A shop that slows down risks losing sales.
SSL certificate: make sure the certificate is valid and that automatic renewal works. A missing padlock or a security warning is enough to scare a buyer away.
Broken links and 404 errors: scan pages to find dead links that spoil the experience and hurt search visibility.
Quarterly checklist
Security audit: look for known vulnerabilities, review access rights and delete unused accounts. Fewer doors, fewer risks.
Database optimisation: purge expired sessions, old abandoned baskets and bulky logs. A lighter database means a faster shop.
Full checkout test: place a test order from end to end: add to basket, payment, confirmation email, stock update. It is the best way to spot a malfunction before your customers do.
Commercial performance review: analyse the pages and products that convert least to adjust product pages and journeys.
Annual checklist
Renewals: domain name, hosting, paid extension licences. If the domain expires, the whole shop disappears.
In-depth technical review: platform version, module compatibility, accumulated technical debt.
Update of the legal notice and privacy policy, in light of regulatory changes.
An example of a structured maintenance plan
For a standard-sized shop, a typical maintenance contract splits the tasks as follows:
Continuous monitoring: site availability, SSL certificate, security alerts.
Scheduled monthly work: updates, backup checks, speed checks.
Quarterly review: light security audit, database optimisation, checkout test.
Annual review: renewals, technical debt, legal compliance.
This structure avoids the classic pitfall: maintenance done "when someone thinks of it", which lets vulnerabilities pile up silently until the incident.
A responsibility to assign clearly
In-house, maintenance often falls to the person most comfortable with technology, even though it is not their main job: they deal with it between two emergencies, and preventive tasks come after the day-to-day. This is not a question of skill but of availability and priority. An outsourced maintenance contract sets a clear scope and a regular rhythm of work, so that the shop's security does not depend on someone's spare time. That scope deserves to be spelt out at signature: a standard contract covers security, backups and technical availability, but rarely changes to the shop, such as adding products or new features, which usually fall under a separate service to be budgeted separately.
The worst time to go down
Not all outages are equal, and it is often a question of timing. A shop that is unavailable on a Tuesday in January loses a few sales; the same outage on a sales day, during Black Friday or in the final run-up to Christmas can represent a considerable share of annual revenue, at the very moment the business has invested most in advertising to bring in traffic. These peaks are also when the infrastructure is under the most strain, and therefore most likely to give way.
That is why maintenance is planned around the commercial calendar. You avoid deploying a heavy update the day before a big campaign, you check in advance that the site will handle the load, and you make sure you have a recent backup before every critical period. Anticipating these moments means refusing to let an outage happen where it costs the most.
Anticipate rather than endure
The difference between enduring and anticipating often comes down to one detail: automatic monitoring. A tool that constantly checks site availability, certificate validity and response times, and raises an alert at the first sign of weakness, lets you step in before customers notice anything. Without it, the outage is too often discovered through the first message from an unhappy buyer, in other words when the damage is done and sales are already lost.
A structured maintenance contract, with scheduled work and regular follow-up, costs far less than emergency work on a shop that is down on a busy day. Preventive maintenance also means peace of mind: you focus on your sales while a partner looks after the technical side. These habits are the natural continuation of the work done at shop launch. To start with a prioritised review of the journey, the catalogue and the technical settings, see our e-commerce audit. Our e-commerce maintenance and support service then handles the agreed scope: for work tailored to your shop, contact us.
Sources: IBM, Cost of a Data Breach Report 2026 · Laucked, Cost of a cyberattack for French SMEs 2026 · LeMagIT, How many SMEs close down after a cyberattack