A platform whose original vendor has left
A company relies on a platform built by a vendor that is no longer available; we take over the code and infrastructure, document and stabilize them, then move into regular support and development.
NAssurance & Care
Maintenance & Technical SupportLaunch is day one, not the finish line.
We take long-term responsibility for the software that runs your business: fixing what breaks, watching what matters, patching what ages and building what your users need next.
- Code
- N
- Practice
- Assurance & Care
- Scope areas
- 7
- Delivery phases
- 6
Overview
Bug fixes, monitoring, security updates and continuous improvement that keep your software healthy after launch.
Most of a system’s cost, and most of its value, accrues after launch. Frameworks reach end of life, dependencies publish security advisories, cloud bills drift upward, integrations change their contracts, and users ask for improvements the original scope never imagined. Software that is not actively maintained does not stand still; it decays quietly, accumulating risk until an outage or a security incident makes it visible.
For organizations in Saudi Arabia and beyond, that risk now carries operational, regulatory and customer-trust consequences. Many teams also inherit systems whose original developers have moved on, with thin documentation and no monitoring at all. Dependable support is more than a ticket inbox: it requires real observability, disciplined change management, continuous security hygiene and a roadmap that balances fixes with improvements that matter.
AMA GROUP provides lifecycle support for systems we build and for systems we inherit. We begin with a structured technical onboarding to understand the code, infrastructure and risks, then operate within an agreed engagement model (such as a monthly retainer, a bank of support hours or a service-level agreement), with priorities, response targets and reporting written into the contract rather than assumed. Throughout, our aim is to leave every system easier to run and better documented than we found it.
Scope of work
What this service can cover. Most engagements combine several of these areas.
Bug fixes & incident resolution
Severity-based triage, root-cause analysis, a regression test with every fix, and post-incident reviews for significant issues so they do not recur.
Operational monitoring
Uptime, application performance, log and error monitoring, with alerts routed to the right people and dashboards that expose capacity and cost trends before they become problems.
Continuous feature delivery
A steady cadence of enhancements prioritized with your product owner and delivered through the same review standards and CI/CD pipelines as new development.
Security updates & patching
Dependency and operating-system patching, scanning for known vulnerabilities, support for secret and key rotation, and a structured response to advisories affecting your stack.
Modernization
Incremental upgrades of frameworks, runtimes and databases, refactoring of the most fragile areas, and phased migration away from legacy components without taking the service offline.
Software lifecycle support
Release management, backups with regular restore testing, up-to-date documentation, environment hygiene and early planning for component end-of-life before it becomes a liability.
Onboarding inherited systems
A code and infrastructure audit, consolidated access, runbooks and a risk register for systems built by others, completed before we take on responsibility for supporting them.
Typical use cases
Representative scenarios where organizations need this service: examples of the need, not past client engagements.
Post-launch hypercare
An organization that has just launched a new ERP or service portal needs an intensive support period in the first weeks before moving to a steady-state operating model.
Continuous improvement for an online store
An online retailer runs monthly improvement cycles, with heightened monitoring during seasonal campaigns and regular updates to payment and shipping integrations.
A framework at end of life
A business system built on a framework or language version that no longer receives security updates is upgraded in measured phases, with tests protecting existing functionality.
Mobile apps that keep pace with the stores
An organization with apps on the App Store and Google Play needs to keep up with new iOS and Android releases and changing store policies so updates are not blocked or rejected.
Internal system with a small IT team
An organization running an internal HR or finance system with a small IT team uses us as an extension of that team for maintenance and development without permanent hiring.
Delivery approach
Clear phases with defined outputs, so you can follow progress and make decisions at every stage.
- Step 1
Technical onboarding & audit
We review the code, infrastructure, dependencies, access rights and backups, and produce a prioritized register of risks and technical debt.
- Step 2
Stabilize
We address critical defects first, put monitoring and alerting in place, and verify that backups can actually be restored before any new development begins.
- Step 3
Agree on the engagement model & service levels
Together we define priority classifications, response and resolution targets, coverage hours, communication channels and escalation paths, and document them in the contract.
- Step 4
Operate
Continuous monitoring, ticket triage, fixes and security patches, all passing through disciplined change management with clear rollback plans.
- Step 5
Improve & modernize
A roadmap of enhancements and modernization work, with a dedicated share of every cycle reserved for paying down technical debt so it does not accumulate.
- Step 6
Report & review
Regular reports on incidents, fixes, patches and enhancements, plus periodic reviews to recalibrate scope and priorities against your business needs.
Technical capabilities
Tools and platforms we select from, based on your context, constraints and existing stack.
Observability & monitoring
- Grafana
- Prometheus
- OpenTelemetry
- Sentry
- Elastic Stack
- Datadog
Security & dependency management
- Dependabot
- Renovate
- Trivy
- Snyk
- OWASP Dependency-Check
Delivery & change management
- GitHub Actions
- GitLab CI
- OpenFeature
- Blue-green / canary
- Jira Service Management
Stacks we support
- Laravel
- Node.js
- .NET
- Java / Spring
- Python / Django
- React / Next.js
- Flutter
- PostgreSQL
- MySQL
Technologies listed are capabilities and ecosystems we work with, not partnerships, certifications or endorsements.
Deliverables
What you receive during and at the end of the engagement. The exact set depends on the agreed scope.
- Technical onboarding report covering architecture, risks and a technical debt register
- Monitoring and alerting setup with operational dashboards
- Runbooks for deployment, rollback, backup and restore, and incident handling
- Documented engagement model defining priorities, response targets and escalation paths
- Regular maintenance reports on incidents, fixes, patches and enhancements
- Security patching and dependency-update log
- Modernization roadmap with a phased upgrade plan
- Up-to-date technical documentation maintained alongside the code
Yes, following a technical onboarding and audit. We need the source code and access to environments and infrastructure, and we may recommend a short stabilization phase before committing to specific service targets, so our commitments rest on a real understanding of the system.
Related industries
Sectors where this service is commonly needed.
Retail & E-commerce
Unified commerce platforms that connect online stores, apps, branches and fulfillment in one experience.
Financial Services & Fintech
Secure digital banking, payments and analytics platforms engineered for trust and scale.
Healthcare
Patient-centered digital health platforms, from booking and telehealth to interoperable clinical data.
Education & Training
Learning platforms, campus systems and AI tutoring that make education more personal and measurable.
Government & Public Sector
Citizen-centered digital services, interoperable platforms and Arabic-first experiences for public entities.
Related services
Services that often work alongside this one.
QA & Software Testing
Test strategy, automation and performance engineering that let teams release often without releasing risk.
Cloud & DevOps
Secure, scalable cloud foundations, automated delivery pipelines and full observability on AWS, Azure and Google Cloud.
Security Engineering
Security built into architecture, code, and delivery pipelines from day one, not bolted on after launch.
Enterprise Software
ERP, CRM, HR and finance systems shaped around how you work: integrated, adaptable and built to grow with you.
Tell us what you are building.
Share your goals for Maintenance & Technical Support. We will come back with a clear approach, a proposed team shape and practical next steps.