Audit, development & support

Included

• +Twenty hours a month for fixes and development
• +Incident response within two working hours — weekdays, 10:00 to 19:00 Moscow time
• +Dependency updates and triage of new vulnerabilities
• +Backups watched, and restores tested
• +A monthly report: what was done and where the hours went

Not included

• −Rolling unused hours into the next month — the fee reserves capacity rather than buying a pack of hours; for one-off work there is Hour
• −Round-the-clock on-call
• −A new product from scratch — that is a project of its own
• −Hosting, licences and third-party services

Included

• +A four-hour minimum block
• +A time report describing what the hours went on
• +A review of existing code and infrastructure, with written findings
• +A consultation on architecture, on the stack, or on someone else's quote

Not included

• −A whole project — past a few days of work a package costs less
• −Scheduled on-call — that is Retainer
• −Availability on a given day without booking it in advance
• −Work that starts before the task is written down