Nobody should pay to stand still.
Adobe now ships Magento security fixes every few months. Applying them keeps you exactly where you already were. So we stopped charging for it — upgrades and security patches are included in every ITQ Magento support contract, at no extra cost.
Adobe Commerce and Magento Open Source security bulletins, 9 September 2025 to 9 September 2026, compared with the 24 months before that.
Marked months carry more than a routine patch: May brought the 2.4.9 general release, August ended support for 2.4.6, September added an out-of-schedule critical hotfix on top of the scheduled update, and an aggregated security release is expected in November.
Why we changed this
Maintenance is not an investment. It is the price of the door staying shut.
In January 2026 Adobe replaced its fixed quarterly patch cycle with more frequent isolated security fixes. On paper that is good news — fixes reach merchants faster. In practice it turned Magento maintenance into a standing monthly bill for most stores, because someone has to test each patch against your extensions, your customisations and your integrations before it can go live.
The numbers bear it out. Adobe published eight security bulletins in the twelve months to September 2026, against eleven across the two years before that — an annualised increase of 45 per cent. Four of those eight landed in the last eight weeks alone.
Two things make skipping them a false economy. Isolated patches are only tested against the latest patch level of your release line, so every month you defer compounds the work needed to catch up. And every 2.4 line runs out of support three years after its release — 2.4.6 stopped receiving fixes in August 2026 — after which no patch exists to apply at all.
So merchants end up funding a treadmill. In our experience a mid-sized Magento store spends the equivalent of ten to fifteen developer days a year on patching and version upgrades. That is a meaningful share of a support budget, and not one pound of it makes the store faster, easier to buy from, or better at converting the traffic already arriving.
The old model
Patch released. Agency quotes. Merchant approves or defers. Work is scheduled weeks later. The store ends up where it started, and the invoice competes with the roadmap.
What it costs you
Deferred patches, widening version gaps, and a support budget that quietly funds standing still instead of the merchandising, speed and conversion work that pays for itself.
Always Current
Patches are applied on our schedule, not on the back of a quote. No approval loop, no line item, no argument about whether this month’s release is worth the money. It is simply done.
Where the money goes instead
Spend the budget on the things that move revenue
Removing patching from your bill does not shrink your support spend. It redirects it. The same retainer now buys work with a return attached, measured against benchmarks you agree up front.
Conversion
Checkout and basket flow, product page structure, search and filtering, mobile journeys. The changes that lift revenue from the traffic you already pay for.
Speed
Core Web Vitals, caching strategy, asset delivery, and where it earns its keep, a move to . Faster stores rank better, hold attention longer and convert more.
Operations
ERP and stock integrations, B2B pricing and account tooling, order automation. Less manual work behind the scenes, more margin retained.
The offer
Included with every Magento support contract
Every package, from £500 + VAT per month upward. Not an add-on, not a premium tier, not a fixed allowance of hours that runs out in October.
- Every Adobe security patch and isolated security fix, applied within 24 hours of release
- Out-of-schedule critical hotfixes, treated as an emergency release
- Patch-level version upgrades within your release line
- Minor and major version upgrades, including moving you to a supported line before yours reaches end of life
- PHP, OpenSearch, MariaDB and Composer dependency updates required by the upgrade
- Compatibility testing and remediation of the extensions on your site
- Regression testing on staging against your critical customer journeys
- Scheduled out-of-hours deployment, with a tested rollback
- Post-release monitoring, and a written record of what changed
- A platform health report showing your version, patch level and support horizon
- Third-party extension and theme licence renewals paid to their vendors
- Hosting, CDN and infrastructure costs
- Rebuilding bespoke modules written against an unsupported architecture, where replacing beats patching
- Front-end rebuilds, such as moving from Luma to
- New features, design changes and integrations introduced alongside an upgrade
- Remedial work identified in the onboarding health check, on code we did not write
- Replatforming to another system
- Adobe Commerce licence fees, which remain payable to Adobe
What your retainer buys
Our support is not just about keeping the lights on
It is about making sure your Magento store works harder for you, every day. Here is what you can expect from us every month, on top of the patching and upgrades you no longer pay for.
Free upgrades and security patches, on top of all of it. Every Adobe patch and every version upgrade is applied for you at no extra cost, and never comes out of the hours below.
Magento technical support
- General troubleshooting
- Extension support and upgrades
- Theme updates and small enhancements
- Ongoing bug fixes and issue resolution
Growth and optimisation
- Conversion rate audits and improvements
- UX and mobile journey enhancements
- Checkout and cart flow optimisation
- Magento speed performance upgrades
Reporting and strategic reviews
- Regular review calls
- KPI tracking: bounce rate, page speed, abandonment
- Strategic prioritisation of tasks against your roadmap
Marketing and SEO support
- Technical SEO checks
- Structured data fixes
- Landing page or blog setup
- Digital marketing partner liaison and introductions
Growth & Optimisation
The same promise on every package
Packages differ on how much development capacity you hold each month. They do not differ on whether your store stays secure and supported, or on how fast a critical patch reaches you.
For smaller stores that need to stay secure, supported and steadily improving without a large monthly commitment.
- Security patches and upgrades
- Included
- Critical patch applied within
- 24 hours
- Support hours
- Business hours
- Platform health report
- Quarterly
- Roadmap and KPI review
- Quarterly call
- Named account manager
- Included
For stores with an active roadmap, where the retainer is funding real conversion, speed and merchandising work each month.
- Security patches and upgrades
- Included
- Critical patch applied within
- 24 hours
- Support hours
- Extended hours
- Platform health report
- Quarterly
- Roadmap and KPI review
- Monthly call
- Named account manager
- Included
For high-volume and B2B stores where downtime is expensive and integrations, pricing logic and trading calendars need close attention.
- Security patches and upgrades
- Included
- Critical patch applied within
- 24 hours
- Support hours
- Extended, with escalation contact
- Platform health report
- Monthly
- Roadmap and KPI review
- Monthly, with an ITQ founder
- Named account manager
- Included
On every package starting from only £500 + VAT per month. Free upgrades and security patches for as long as you are in contract, critical patches applied within 24 hours, uptime and error monitoring, and no contract tie-in beyond a three month notice period.
Getting started
How ITQ’s Magento growth and optimisation service works
Five steps, then you stop thinking about patching altogether.
1
We understand your business and your needs
We organise a free 45 minute ecommerce clinic to start with, to take the time to fully understand your online business. We want to learn about your goals and objectives, and your proposition in the market.
Alongside it we run a free Magento platform health check: your current version, patch level, extension estate, customisations and hosting, and how long your release line is supported for.
2
We develop a roadmap of support, growth and optimisation initiatives
Based on your input in the clinic, ITQ prepares a proposal showing tasks and effort estimates for a minimum of a three month period, prioritised around what will move revenue first.
3
We present our proposal with costs, KPIs and ROI
- A month by month timeline of activities
- A set baseline retainer fee for your Magento platform, from £500 + VAT per month
- Relevant references and client testimonials
- KPIs highlighted, so all effort is measured against benchmarks such as page load speed, conversion rate and basket abandonment
- If your store has drifted a long way behind, a one-off baseline remediation cost to bring it back to a supported patch level, quoted once and in advance
4
We onboard you as an ITQ client
- Set up on the ITQ ticketing system
- Introductions to the ITQ team and your account manager
- Regular monthly calls arranged
- We start to grow and optimise your business in line with the agreed roadmap
From day one, every patch and upgrade from that point forward is included, and it does not come out of your development hours.
5
We keep you current, and keep adding value
There are no contracts for our retainers. We just ask for a three month termination notice period, and you continue for as long as it is working for you.
Throughout the engagement you have monthly calls with your account manager and the ITQ Commerce founders, focused on sharing KPI results and prioritising activity on a month by month roadmap. We track Adobe’s release calendar so you do not have to: you approve the deployment window, never the spend.
Our commitments
What you can hold us to
Included has to mean something, so here is what we are signing up to.
You will never be quoted for a patch
No line item, no approval request, no change order for applying a security fix or a version upgrade while your contract is live.
Your retained hours stay yours
Upgrade work is not drawn from your monthly development capacity. It sits outside the allowance entirely.
You will never be left on an unsupported version
We plan your move to a supported release line well before your current one reaches end of life, and we carry the cost of getting you there.
Critical fixes are treated as emergencies
Out-of-schedule hotfixes are applied within 24 hours on every package, not held back for the next scheduled window.
Nothing ships untested
Every release goes to staging first, is checked against your critical journeys, and deploys with a rollback ready.
You always know where you stand
Your health report states your version, patch level and how long that line is supported for. No guessing, no unpleasant discoveries.
Rated Excellent on Trustpilot.
“A great team to work with.” — Not only do they help us complete web development needs, but also advise us on strategic decisions that save us time and money.
"Outstanding understanding and service." — The team went above and beyond to understand our business, challenged our thinking where it mattered, and delivered results that exceeded expectations.
“Significantly improved our store.” — ITQ’s attention to detail has taken our store to the next level — a refreshing change from previous agencies.
“High level of professionalism.” — The level of work, input and advice from ITQ has been most enlightening — and very welcome.
The obvious questions
Answered plainly
How can this be free? Someone has to pay for the time.
We are not pretending the work is costless. We have priced it into the retainer instead of billing it as it arises, because keeping every client current is far more efficient than firefighting stores that have drifted years behind. Predictable maintenance across a portfolio costs less than emergency remediation on a handful of them, and clients who spend their budget on growth stay with us longer. The economics work because the incentives finally point the same way.
What if my store is years out of date?
The health check tells us how far behind you are, and we quote a one-off baseline remediation to bring you back to a supported patch level. It is a single, known cost agreed before anything starts. Once you are current, everything after that is included for as long as your retainer runs.
Does this cover Adobe Commerce as well as Magento Open Source?
Yes. Both editions are covered on the same terms. Adobe’s own licence fees for Adobe Commerce remain payable to Adobe.
What happens if a patch breaks a third-party extension?
Diagnosing the conflict and remediating it on our side is included. If the fix requires a paid upgrade from the extension vendor, that licence cost is theirs to charge and yours to pay, but we will tell you before it happens and handle the work.
Can I still defer an upgrade if it clashes with peak trading?
Yes. We will not deploy into your peak season without agreement. We will apply security fixes on the fastest safe path and schedule the larger version work around your trading calendar.
Is there a minimum term?
No. There are no contracts for our retainers and they run on a rolling monthly basis. We ask only for a three month termination notice period. The value does build over time, though: the longer you stay current, the smaller each upgrade becomes.
What if I leave?
You leave with a store on a supported, fully patched version and a documented record of everything that was done to it. There is no exit fee and no clawback for the upgrade work already carried out.
Find out how far behind you actually are.
Book a free 45 minute ecommerce clinic and we will run a Magento platform health check alongside it: your version, your patch level, how long that release line is supported for, and what it would take to move you onto Always Current. No obligation, and useful even if you never speak to us again.
Book your free ecommerce clinicAlways Current applies to Magento Open Source and Adobe Commerce stores under an active ITQ Commerce support retainer, and is subject to our support terms. Release dates and support horizons are set by Adobe and correct at the time of publication. Magento, Adobe Commerce and Hyvä are trademarks of their respective owners.