IT Services

Less hassle, more growth.

Web infrastructure that stays reliable, secure, and properly configured — so you can focus on running your business instead of debugging your DNS. The practical, startup-grade tasks that grow with you, handled by people who document everything.

Seven services, one point of contact · Hosting · DNS · Email Setup · Cloudflare · SSL & Security · Backup & Recovery · Monitoring
01 — What’s Included

Seven infrastructure services.
One point of contact.

We handle the technical foundation that keeps your website, email, and online presence running — the work that doesn’t feel important until something goes wrong.

These aren’t enterprise-scale managed services. They are the practical, startup-grade infrastructure tasks that growing businesses need done correctly and maintained over time.

N° 01

Hosting & Cloud Instance Management

Foundational

Provisioning, configuring, and maintaining your web hosting environment — whether that is a managed WordPress host, a VPS on DigitalOcean or AWS, or a dedicated server. We handle the setup, security hardening, performance tuning, and ongoing maintenance so your hosting stays fast, stable, and properly sized for your actual traffic. If you are on a host that is wrong for your needs, we’ll tell you — and help you migrate without downtime.

N° 02

DNS & Domain Management

Records

DNS records, domain registrations, nameserver configurations, and propagation troubleshooting. We manage your DNS so that records are clean, TTLs are sensible, and nothing breaks when you add a new subdomain or move email providers. For businesses managing multiple domains — primary, redirects, regional variants — we keep everything organised and documented in a single reference your team can actually understand.

N° 03

Email Setup (SMTP, SPF, DKIM, DMARC)

Deliverability

Properly configured email authentication is no longer optional — without SPF, DKIM, and DMARC records, your business email is more likely to land in spam or be rejected outright. We set up email infrastructure from scratch or fix existing configurations: SMTP relay services, DNS authentication records, sending-domain verification, and deliverability testing. When your email reaches the inbox instead of the junk folder, every other piece of your marketing works better.

N° 04

Cloudflare & CDN

Edge

Content delivery network setup for faster load times worldwide, DDoS protection, bot management, and edge caching. We configure Cloudflare — or your CDN of choice — with sensible caching rules, proper SSL modes, firewall rules, and page rules that don’t accidentally break your checkout flow or login forms. CDN configuration is one of those things that takes thirty minutes to set up badly and several hours to set up correctly. We do the second version.

N° 05

SSL/TLS & Security Baseline

Hardening

SSL certificate provisioning, renewal automation, HSTS configuration, and basic web application security hardening. We configure proper TLS settings, ensure certificate auto-renewal is actually working (not just “set up”), and implement security headers that protect your visitors without breaking site functionality. For WordPress sites, we add a security baseline covering file permissions, login protection, and database prefixing. This isn’t penetration testing — it is the foundational work that prevents the most common attack vectors.

N° 06

Backup & Recovery

Resilience

Automated daily backups with offsite storage, retention policies, and tested restoration procedures. We set up backups and then verify they actually work by performing periodic test restores — because a backup that fails to restore isn’t a backup, it is a liability. We configure retention schedules that balance storage costs with recovery needs, and we document the restoration procedure so it can be executed under pressure, not only under ideal conditions.

N° 07

Server Health Monitoring

Early-warning

Uptime monitoring, resource usage alerts, disk space warnings, and certificate expiration tracking. We set up monitoring that notifies you (and us) before problems become outages — not after. CPU spikes, memory pressure, disks filling up, SSL certificates approaching expiration: these are the signals that, caught early, prevent the 2 AM emergency calls. We configure dashboards you can check yourself and alert thresholds calibrated to your actual infrastructure, not generic defaults.

02 — How We Approach IT

Proactive. Documented.
No black box.

The most common complaint we hear about IT support is some version of: “We don’t know what they did, we don’t know what’s configured, and we can’t get a straight answer.” Our approach is designed around the opposite experience.

i

Proactive over reactive

We don’t wait for things to break. Monitoring, automated alerts, and regular health checks mean we typically catch issues before they affect your visitors or your email deliverability. When a disk is filling up, when a certificate is three weeks from expiring, when a DNS record was changed outside our management — we know about it early, and we address it before it becomes urgent. Not magic. Just systematic monitoring applied consistently.

ii

Everything documented

Every piece of infrastructure we configure is documented in a shared reference — server specs, DNS records, email authentication settings, backup schedules, monitoring endpoints, and login credentials (stored securely, not in a spreadsheet). When you need to hand off to another provider, or when your internal team needs to understand the current state of things, the documentation exists and it is current. We update it as we make changes, not quarterly in a batch we’ll probably skip.

iii

No vendor lock-in

We configure your infrastructure using standard tools and mainstream hosting providers. Nothing we set up requires you to stay with us to maintain it. Your DNS, your hosting, your email authentication records — they remain yours. The documentation we maintain is designed so any competent technical person could take over without a month-long knowledge transfer. We earn continued business by being good at the work, not by making it expensive to leave.

iv

Plain-language communication

When something breaks, or when a configuration change is needed, we explain what happened, what we did, and what it means for your business — in language that makes sense to someone who isn’t a systems administrator. We don’t hide behind jargon, and we don’t send updates that consist entirely of ticket numbers and acronyms. If an explanation takes a paragraph instead of a sentence, we’ll take the paragraph.

03 — Who It’s For

Reliable infrastructure,
without hiring a sysadmin.

Our IT services are scoped for growing businesses — companies with one to fifty employees — who have a website, use business email, and need their online infrastructure to work without becoming someone’s full-time job. You are not big enough to hire a dedicated systems administrator, and you shouldn’t need to be.

This is a good fit if you have outgrown the “my nephew set up the hosting” phase but aren’t ready for enterprise IT management.

  • i Founders running a WordPress site on a VPSNobody on the team remembers who configured the server or what changed last. You need someone to take ownership and document it.
  • ii Businesses whose email keeps landing in spamDeliverability dropped, nobody on staff knows what SPF, DKIM, and DMARC are, and customers are quietly missing your invoices.
  • iii Teams paying for hosting they don’t understandThe bill arrives every month and nobody is sure whether the plan still fits, whether the backups are running, or whether the SSL is set to renew.
  • iv Professional firms with sensitive intake dataForms collect personal information, and you need an honest opinion on whether the current setup is good enough — and what to fix first if it isn’t.
  • v E-commerce stores where every minute of downtime is revenueYou need monitoring that pages someone before customers see a checkout error, and a backup plan that has actually been tested with a restore.

We are not a full managed services provider. We don’t manage Active Directory, internal networks, hardware procurement, or employee workstation support. What we do is handle the web-facing infrastructure — hosting, DNS, email, security, backups, monitoring — that directly affects whether your website loads, your email arrives, and your data is protected. For most growing businesses, that covers the infrastructure work that actually matters.

The best infrastructure is the kind you forget exists. We do the quiet, careful work that keeps it that way.
— The Aureole Practice —
04 — A complimentary report

Curious how Google sees your site?

Send us your URL. We’ll send back a Premium SEO Report, prepared by hand, within 48 hours — domain authority, keyword rankings, backlinks, competitor gap, and the quick wins worth chasing first.

No sales call required.

05 — Frequently Asked

Questions we
get asked about infrastructure.

If a question is missing here, the contact link at the foot of the page goes straight to the person who would answer it. No ticket queues, no funnels.

i Do you manage hosting accounts, or do you host sites yourselves?
Both, depending on what makes sense for your situation. We can manage your existing hosting provider account — DigitalOcean, AWS, Cloudways, WP Engine, SiteGround, or others — handling configuration and maintenance while you retain ownership. Alternatively, we can provision and manage hosting on infrastructure we operate. In either case, all credentials and access remain yours. We document everything so a transition to another provider is straightforward if you ever need it.
ii What happens if our site goes down at 2 AM?
Our monitoring catches it immediately and begins alerting. For clients on a maintenance or care plan, we have defined response time commitments. For project-based IT work without an ongoing plan, we’ll respond during business hours. That said, most of the work we do is preventive — proper server sizing, automated restarts, health checks, and early-warning alerts — which means most 2 AM outages are prevented rather than responded to after the fact. We don’t promise an enterprise 24×7 NOC, and we’ll be honest with you about response expectations before you sign anything.
iii Can you fix our email deliverability issues?
In most cases, yes. Email deliverability problems typically stem from misconfigured or missing SPF, DKIM, and DMARC records, sending from blacklisted IP addresses, or using shared hosting email that has been contaminated by other users. We audit your current email authentication setup, fix the DNS records, verify deliverability with test sends, and document the correct configuration so it doesn’t regress when someone changes something later.
iv Do you provide ongoing IT support or just one-time setups?
Both. One-time projects — server setup, email configuration, DNS migration — are scoped and quoted individually. For ongoing support, we offer monthly IT retainers that include monitoring, maintenance, and a defined number of support hours. The retainer approach works well for businesses that want someone watching their infrastructure continuously rather than calling us after something breaks. Many clients start with a one-time project and graduate to a retainer once they see the value of having someone watching the house.
v We’re on shared hosting — should we upgrade?
It depends on your traffic, your site’s complexity, and your performance expectations. Shared hosting works fine for brochure sites with modest traffic. Once you are running WooCommerce, handling form submissions with sensitive data, or receiving more than a few hundred visitors per day, a managed host or VPS typically makes sense. We can audit your current hosting performance and give you an honest recommendation — including whether staying put is the right call. The goal is fit-for-purpose infrastructure, not the most expensive option.
vi What’s included in your security baseline?
Our security baseline covers the fundamentals that prevent the most common attack vectors: SSL/TLS configuration with auto-renewal, security headers (Content-Security-Policy, X-Frame-Options, Strict-Transport-Security), file permission hardening, login protection, automated malware scanning, and firewall rule configuration via Cloudflare or server-side. This isn’t a penetration test or a SOC-2 compliance audit. It is the practical security work that keeps typical business websites safe from the attacks they will actually encounter.
vii Can you take over infrastructure someone else set up?
Yes, and this is actually a common starting point for new IT engagements. We’ll audit the existing setup, document what’s there, identify anything that is misconfigured or risky, and create a remediation plan. We don’t insist on rebuilding from scratch unless the current state genuinely warrants it. If the previous setup is sound, we’ll document it and take over maintenance. If there are issues, we’ll fix them in priority order and keep you informed throughout.
The Invitation

Ready for infrastructure
that just works?

Tell us what needs fixing — hosting, email, DNS, security, or all of the above. We’ll respond within one business day with a clear assessment and a plan that makes sense for your scale.

Mon–Fri · 9–6 PT support@aureoleintelligence.com Reply within 1 business day