Security Patching
Regular core, plugin, module, and theme security updates — applied and tested before they cause problems.
CMS Support & Maintenance
Drupal, WordPress, GatsbyJS, Webflow — we support and maintain all of them. Security patching, theme customization, plugin and module development, performance optimization, and emergency break-fix. Senior-level help without the enterprise agency price tag.
Whether you need ongoing monthly maintenance or a one-off fix, we handle it — on your platform, on your timeline.
Regular core, plugin, module, and theme security updates — applied and tested before they cause problems.
Design changes, new page templates, layout updates, and visual refinements on your existing theme.
Custom plugins for WordPress, custom modules for Drupal — built to spec, documented, and maintainable.
Page speed audits, caching configuration, database optimization, and Core Web Vitals improvements.
Structured content updates, page builds, and editorial changes — handled by people who know your CMS.
Ready to move to a modern stack? We handle migrations off Drupal, WordPress, Gatsby, and Webflow with SEO protection built in.
Something broke. We respond fast — diagnosis, fix, and verification. Available to both retainer and ad hoc clients.
WCAG 2.1 AA audits and code-level remediation on your existing CMS — no overlay widgets.
Each has its own quirks, its own security landscape, and its own developer ecosystem. We know all of them well.
Security updates, custom module development, theming, migrations, and performance — for Drupal 9, 10, and 11.
Maintenance plans, plugin development, theme customization, WooCommerce support, and performance optimization.
Build fixes, component development, Gatsby Cloud migration, performance, and headless CMS integrations.
Designer support, CMS configuration, Webflow Logic, integrations, and performance for Webflow sites.
Usually one of three reasons.
The developer who built your site is gone. You’ve been running on autopilot, deferring updates, hoping nothing breaks. Then something does — a plugin conflict, a security vulnerability, a layout that stopped working after an update. You need someone who can get into an unfamiliar codebase quickly, figure out what’s happening, and fix it without creating three new problems. That’s exactly the situation we’re built for.
Hiring a full-time developer for a site that needs occasional support doesn’t make economic sense. A retainer with a senior developer who knows your platform does. We provide ongoing support — security updates, content changes, feature additions, performance tuning — without the overhead of a full-time hire or the unpredictability of a freelancer who may or may not be available when you need them.
Not every site on a legacy CMS needs to be migrated immediately. If your Drupal or WordPress site is serving you well, the right move is often to maintain it properly — security patches applied on time, performance kept sharp, custom functionality extended as needed — while you plan the next phase. We can maintain your current site and help you plan a migration when the timing is right.
Whether you need a retainer or a one-off project, the process is the same.
We start by reviewing your current site — codebase health, plugin/module versions, security vulnerabilities, performance baseline, and any known issues. This gives us a clear picture of what we’re working with before any work begins. Included free for prospective retainer clients.
We define the scope — retainer hours and priorities for ongoing clients, or project scope and timeline for ad hoc work. Retainer clients get a dedicated Slack channel, defined response times, and a monthly report covering what was done and what’s coming.
Retainer clients get proactive maintenance — security updates applied as released, performance monitoring, and a queue for feature requests and fixes. Project clients get fixed-scope delivery with review checkpoints and a clear handoff.
Monthly retainer clients get a review call covering site health, work completed, upcoming priorities, and any migration planning if relevant. We treat your site as an asset to be maintained and eventually improved — not just kept alive.
Drupal, WordPress, Gatsby, Webflow
Across all four platforms
Flexible to your needs
Emergency support available
| Feature | FlintHorn | Freelancer / Dev Shop |
|---|---|---|
| Senior developer on every engagement | ✓ | – |
| Proactive security patching (not just reactive) | ✓ | – |
| Defined response times on retainer | ✓ | ✗ |
| Monthly site health reporting | ✓ | ✗ |
| Custom plugin / module development | ✓ | – |
| Migration planning when the time is right | ✓ | ✗ |
| Accessibility remediation capability | ✓ | – |
| SEO awareness built into all development work | ✓ | ✗ |
“Our Drupal developer left and we had no one to apply security patches or fix things when they broke. FlintHorn stepped in, audited the site, and set up a maintenance retainer. We have not had a single security incident since. Knowing someone competent is watching the site lets us focus on the business.”
“We had been paying a freelancer for WordPress maintenance but updates kept breaking things. FlintHorn tests everything on staging before touching production. In eight months, zero broken updates. That reliability is worth every dollar of the retainer.”
Both. Retainer clients get a set number of hours per month, proactive security and maintenance coverage, defined response times, and a dedicated communication channel. Project-based clients get a fixed scope and timeline for specific work — a new plugin, a theme update, a performance audit. We’ll recommend the right model based on how much ongoing support your site needs.
Yes — and it’s most of what we do. We’re used to picking up unfamiliar codebases, understanding how they were built, and working within them competently. We do an audit at the start of every new engagement to get up to speed before any work begins.
Retainer clients have a defined response time and a direct line to reach us. For non-retainer clients, we offer emergency break-fix support on an ad hoc basis — availability dependent, but we respond to enquiries quickly and prioritize emergencies. If your site is down or critically broken, reach out directly via the contact form and flag it as urgent.
Yes — within reason. We support Drupal 9, 10, and 11, and can work on Drupal 7 sites for security patching and maintenance (noting that Drupal 7 reached end of life in January 2025 and has no official security support). We support all current WordPress versions and can work on legacy installs. We’ll always advise on upgrade paths when relevant.
Absolutely — and that’s often the natural next step for long-term retainer clients. We know your site well by that point, which makes the migration planning significantly more accurate. See our migration service for how we handle that process.
Yes. WooCommerce on WordPress and commerce functionality on Drupal are both within our scope. E-commerce support — product management, payment gateway issues, checkout flow fixes, performance — is available as part of retainer or project-based engagements.
Guides on maintaining, optimizing, and migrating legacy CMS platforms.
A perfect Lighthouse score isn't a vanity metric. It's a direct signal to Google that your site loads fast, works for everyone, follows best practices, and is built for search. Here's what it takes to get there — and what it means for your rankings and conversions.
Migrating off Drupal — whether to WordPress, a headless CMS, or another platform — requires careful planning to protect your content, functionality, and SEO rankings.
Is migrating from Drupal to WordPress worth it? Here’s an honest look at the benefits, the trade-offs, and how to know if it’s the right move for your organization.