Platform Engineering

Ongoing XenForo maintenance and support

A community platform needs someone who applies the update before it becomes urgent, notices when an extension stops being maintained, and can say what changed last month. That is a cadence, and it is what keeps an upgrade from becoming archaeology.

The problem

Forums drift because maintenance is invisible until it is urgent

Nothing about a community platform fails loudly in advance. Extensions stop being maintained silently, template modifications drift from templates that change underneath them, permissions accumulate, and the version gap to a supported release widens a release at a time. Each of those is trivial when it is one month old and a project when it is three years old.

  • Updates are applied reactively, usually after something breaks
  • Nobody knows which extensions are still maintained upstream
  • Small fixes wait behind larger work with no separate route
  • The person who understood the customisations has left
  • An upgrade is avoided because the last one caused problems
  • Changes reach production without anyone having a rollback
  • Nobody can state what was changed in the last three months
  • Members report problems before any monitoring does
Who this is for

The people who usually bring us this problem

A community owner with no technical staff

The forum matters and nobody is responsible for it between projects. You want that responsibility to exist before something fails.

An operator who inherited a platform

There is accumulated customisation you do not fully understand and you need it maintained while you learn what it is.

Someone who has been doing this personally

You have been keeping it running and you need it to be somebody's actual job, with documentation, before you take a holiday.

What it costs

What this costs while it goes unfixed

Engineering faults are rarely confined to the engineering layer. These are the commercial consequences we see most often.

An unmaintained extension is a future incident with a known cause

When a dependency stops receiving updates, it becomes a vulnerability on a schedule nobody controls. Unlike a defect, it does not surface on its own. It is found when it is exploited or when an upgrade refuses to proceed.

Reactive work costs more than the retainer it replaces

An incident is paid for in disruption to the community, emergency work at unsocial hours, and an improvised fix that becomes the next problem. The recurring cost of avoiding it is almost always lower.

Undocumented platforms cannot be handed over

When knowledge lives in one person's head, their absence is an incident. Documentation is not overhead, it is what makes the platform survivable.

Members notice before monitoring does

On a community the audience is present daily and reports problems faster than most alerting. That is a live detection system, but it is not a substitute for one, and it means every failure has already been experienced by people who matter.

What we do about it

Capabilities

Each of these is work we carry out, not an area we advise on.

Audited onboarding

Before maintaining anything, establishing what exists: platform version, extensions and their maintained status, template modifications, where customisation sits relative to the platform, and whether the backups restore. The assumption is that we are inheriting a state, not a setup.

Update and patch cadence

Platform and extension updates applied on a defined schedule, tested against a replica where the platform's configuration warrants it, with a rollback for each change. The commitment is the process; the interval is agreed per engagement.

Extension lifecycle tracking

Knowing which extensions remain maintained and which have been abandoned, and identifying conflicts before they surface during an update.

Customisation upkeep

Template modifications and bespoke functionality kept working as the platform moves, because a modification that is not maintained becomes the reason the next upgrade is deferred.

Triage and small development

A defined route for defects and small changes, so work that falls below the threshold of a project still gets done. Prioritisation is agreed in writing: what is included, how it is ordered, and what falls outside the agreement.

Backup verification

Confirming that backups complete and that a restore works. On a forum the attachment store usually dominates backup size, which makes its retention something to decide.

Incident response within the agreement

A stated escalation path and covered hours, with no advertised response time we cannot staff.

Reporting and change record

A recurring written summary of what was updated, what was found and what needs attention, plus a change log. Maintenance that is invisible is the first thing cancelled in a difficult quarter.

How we work

Engineering methodology

The sequence is deliberate. The order is usually what determines whether the work holds or has to be repeated.

  1. Audit before accepting responsibility

    We do not maintain a platform we cannot describe. The inventory is the first deliverable and it frequently changes the scope: an abandoned extension or an unrestorable backup is a finding.

  2. Establish the recovery path early

    A tested restore is confirmed before routine changes begin, because until it exists every update carries avoidable risk. This is the least visible part of the work and the one that most justifies it.

  3. Update on a cadence, with a way back

    A schedule, tested where the configuration warrants it, with a rollback available per change. Emergency updates happen and are always a signal that the cadence was interrupted.

  4. Keep the customisation boundary visible

    Where functionality has drifted into the platform's own files, that is recorded and progressively corrected, because it is the single thing that makes every future update harder.

  5. State the boundary in writing

    What is included, how requests are prioritised, what is excluded and how an out-of-scope request is handled. Most dissatisfaction with a maintenance arrangement comes from an unstated boundary.

  6. Report so the work is legible

    A recurring summary and a change log, because the value of maintenance is invisible when it works and the failure mode is a quiet quarter in which somebody decides it was never needed.

Deliverables

What an engagement produces

Documentation is part of what you receive. On most of these engagements a large part of the value is a defect report precise enough for another team to act on.

Onboarding audit

  • Platform and extension inventory with maintained status
  • Template modification and customisation review
  • Backup configuration reviewed and a restore tested
  • Environment and staging assessment
  • Written scope, cadence, prioritisation and exclusions

Recurring work

  • Platform and extension updates on the agreed cadence
  • Testing against a replica and a rollback per change
  • Customisation upkeep as the platform moves
  • Backup completion monitoring and periodic restore testing
  • Defect triage and small changes within the agreed boundary
  • Incident response within covered hours and the escalation path

Records

  • Recurring written report of updates, findings and risks
  • Change log, attributed and dated
  • Standing list of known issues and deferred work with the reason
  • Documentation maintained as the platform changes
Under the hood

Architecture and technology

What a XenForo maintenance agreement covers

  • Updates applied on a schedule, tested and reversible
  • Extension lifecycle tracked
  • Customisation kept working as the platform moves
  • Backups restored and verified
  • A defined route for defects and small changes
  • Reporting and a change log

What it does not cover

  • Unlimited development: larger features are scoped separately
  • Round-the-clock cover unless separately contracted
  • A lifetime support commitment, which we do not offer
  • New feature work, which is a development engagement
  • Hosting or infrastructure provision, which is separate
  • Recovery from a compromise, which is an incident engagement
Related work

Where we have done this

Engagements where this capability was the substance of the work.

Online communities

Spain's largest forum

Since 2019, Soludome has managed infrastructure and platform operations for one of Spain's largest online communities. The work covers server and performance optimisation, CDN architecture, load balancing and site security under sustained traffic.

Since 2019continuous engagement
Online communities & specialist publishing

GuzziTech & RideMalibu

Since 2021, Soludome has managed infrastructure, site performance and technical SEO across GuzziTech and RideMalibu as a connected web estate. The engagement includes dedicated infrastructure and continuing operational ownership.

Since 2021managed infrastructure, performance and SEO
Adjacent problems

If this is not quite your problem

These overlap at the edges. Sending you to the right page is more useful than having you work it out.

The platform needs bringing current

A staged upgrade path for a deferred installation.

XenForo installation and upgrade

You need new functionality

Extensions and templates built to survive future upgrades.

XenForo development

The platform needs operating

Infrastructure, capacity and monitoring for a production community.

Managed XenForo hosting

The forum has become slow

Performance diagnosis against production-scale data.

XenForo performance optimisation
Client proof

What clients say, and where to verify it

Our client reviews are published on our public Google Business Profile. We reproduce them verbatim, with attribution, so you can read the original feedback and verify it at the source.

5.05 out of 5 stars15 Google reviewsReviews are hosted on our Google Business Profile.
  • 5 out of 5 stars

    Soludome recently handled a critical database migration for us, and we couldn't be more impressed with their professionalism, excellent communication, and timely execution. Highly recommended!

    Michael Bovaird
  • 5 out of 5 stars

    We reached out to this company when our website was hacked, and we are incredibly grateful for their prompt assistance in securing our project. They also provide regular, timely updates and invaluable support with other aspects of our platform.

    Swood

Read all client reviews

Questions

Frequently asked

What is included in a maintenance agreement?

A defined cadence of platform and extension updates, customisation upkeep, backup verification including restore testing, defect triage within an agreed boundary, incident response during covered hours, and reporting. What is not included is stated in writing alongside it, because a maintenance agreement is defined as much by its exclusions as by its scope and the exclusions are the part buyers tend to skip.

Are feature requests included?

Small changes are, within a boundary agreed in writing. Larger development is scoped and priced separately, which is the honest arrangement for both sides: an agreement described as unlimited development is either mispriced or quietly limited. What matters is that you know which category a request falls into before you make it, not after it.

Do you offer lifetime support for work you build?

No. We do not offer lifetime support, and we will not describe an arrangement in those terms. What we do is state the maintenance position at delivery: what is covered, for how long, and what extending it would take. An add-on or customisation with an unclear maintenance position is one that quietly stops being maintained, and a clearly stated end is more useful than an implied permanence nobody can honour.

How do you prioritise between requests?

It is agreed, not inferred: platform-breaking issues first, then anything affecting members' access, then defects, then improvements. Where several items compete within a band, priority follows impact on the community, not on the requesting party. It is written into the agreement so the ordering is not renegotiated at the moment something urgent arrives.

We have no monitoring. Is that a problem?

It means members are the detection system, which works but is expensive in trust. Onboarding includes establishing what can be observed and routing it somewhere a human reads. On a community this usually means availability, response time, error rate and database health as a minimum, and the alerting goes to an address somebody actually monitors, because alerts nobody reads are indistinguishable from no alerts.

Bring us the problem you have not been able to fix

Describe what is happening. If we are not the right people for it, we will say so.