Proposal · Managed Strapi hosting and support

Managed Strapi hosting and support for Seeders

You manage content, appearance, forms and publishing. We run the engine: infrastructure, security, performance, and Strapi and dependency updates. One setup fee, then a fixed monthly package.

Prepared byArtkai
Prepared forSeeders
Date5 November 2026
StatusProposed

Overview

Two identical environments on AWS, fixed monthly support, and optional extras you can add when you need them.

One-time setup $11,700fixed

Staging and production on AWS, publishing pipeline, Claude access, Google sign-in, handover. Details in section 03.

Monthly support, from $1,500/month

Security, updates, performance, technical SEO, monitoring and a monthly report. Details in section 04.

AWS hosting ≈ $153/month

Staging and production together, paid to AWS at cost. Details in section 06.

What we build is yours to run, extend or hand off. The code lives in your GitHub, and the infrastructure is defined as code and runs in an AWS account you own. Optional extras are in section 05: WordPress content migration, website redesign and build, single sign-in licence, DigitalOcean instead of AWS.

Roles

As discussed on the call: we maintain the engine, you own the content.

Seeders

  • Content and publishing: what goes live and when
  • Appearance and pages, built from components in Strapi
  • Forms and their follow-up
  • SEO strategy
  • The new website and its design, unless you add option B
  • Content migration from WordPress, unless you add option A

Artkai

  • Infrastructure and hosting on AWS
  • Security and dependency maintenance
  • Strapi updates, checked on staging before production
  • Performance and technical SEO, including Core Web Vitals
  • Monitoring and incident response under the SLA
  • Monthly report on what changed

The team

RoleStatusWhat they do
Cloud / DevOps engineerProposedBuilds both environments, the publishing and deploy pipelines, security and monitoring. Runs the monthly maintenance.
Strapi engineerProposedProduction Strapi configuration, Claude access through API and MCP, admin sign-in, Strapi updates.
Project leadProposedKickoff, status, acceptance, and the monthly report. Your single point of contact.

Setup

One fixed fee of $11,700. Staging and production are built from the same code, so what you test is what goes live.

How publishing works

EditAn editor or Claude changes content in Strapi
PublishStrapi saves it and sends a webhook
RebuildThe static site is built and uploaded to S3
RefreshCloudFront clears its cache
LiveVisible to everyone in 5–7 minutes

Visitors get static files from the CDN and never reach Strapi. The admin stays closed to the public, the site stays fast, and the database stays small.

How Strapi updates reach production

Code in GitHubStrapi code and configuration live in your repository
BuildGitHub Actions builds the image
Deploy to stagingOne button. Schema migrations run here first
CheckAdmin, publishing, API and MCP
Deploy to productionOne button, with confirmation

What is included

Kickoff and review
Access to your GitHub. Review of your test Strapi: version (v4 or v5), plugins, content types, database, where media is stored. Frontend: framework, how the static build works, how long it takes. Domains and DNS.
AWS account and access
A new account handed over to you, or work in yours. Staff access through IAM Identity Center with MFA, audit logs, budget alerts, and keyless deploys from GitHub.
Infrastructure as code
One Terraform or CDK module builds both environments, so they are identical. VPC, subnets, security groups. Nothing is configured by hand in the console.
Strapi in Docker
Dockerfile and production configuration for Strapi, image in a private registry with scanning. Secrets (APP_KEYS, JWT, database password) in a vault.
Admin and API on ECS Fargate
Strapi on Fargate behind an HTTPS load balancer, on cms. and cms-staging. domains. Health checks and logs.
Database on RDS PostgreSQL
The smallest instance, because only the admin and the site build read it. Encryption, automatic backups, point-in-time recovery, reachable only from Strapi.
Media in S3
Strapi upload provider for S3, because Fargate has no persistent disk. Images served through CloudFront.
Site hosting
Private S3 bucket behind CloudFront. Your domain, HTTPS, compression, security headers, a 404 page, www redirect, and clean URLs.
Publishing pipeline
Webhook on publish, unpublish and delete starts the build, then upload and cache refresh. A queue, so ten publishes in a row do not start ten builds. An alert if a build fails. Changes visible in 5–7 minutes.
Deploy pipeline for Strapi
GitHub Actions with “Deploy to staging” and “Deploy to production”. Schema migrations are part of the deploy, with a rollback plan.
Security scans in CI
Image, code and infrastructure scans, and a scheduled OWASP ZAP scan. Set up once for the monthly checks in section 04.
Access for Claude
API tokens with minimal rights and an MCP connector to Strapi. Optional IP restriction for the API. No VPN. MCP in Strapi runs with an admin-level token, so we keep its permissions as narrow as possible.
Google Workspace sign-in
Google sign-in in front of the admin, limited to your organization. Strapi keeps its own password as a second step. Single sign-in without the second password needs a paid licence, see option C.
Basic protection
Firewall with managed rules and rate limits, S3 public access blocked, encryption, least-privilege IAM.
Monitoring and alerts
Alarms for ECS, RDS, 5xx errors and failed builds, uptime checks for the site and admin, alerts to email or Slack.
Backups and restore
Database snapshots and point-in-time recovery, S3 versioning. One test restore and a written procedure.
Copy from production to staging
A script that copies the database and media from production to staging, so Strapi updates are tested on real content.
Launch
DNS switch from WordPress to the new site, smoke tests, cache and HTTPS checks. 301 redirects from old URLs are part of option A. We can add them on their own.
Documentation and handover
Diagram, runbook for deploy, rollback, restore and secret rotation, a short publishing guide for your content team, and access handover.
Project management and QA
Calls, status updates and acceptance across the whole setup.
To hold the timeline we need

Access to your GitHub and test Strapi, a decision on sign-in, access to DNS, and a frontend that builds to fully static files. These four set the pace more than our own work does.

Monthly support

Starts at $1,500 per month for the basic maintenance package. Every update is tested on staging before it reaches production.

What the package covers

Dependency updates Monthly
Strapi and plugin packages, Node.js LTS, base Docker image. Dependabot or Renovate reports and npm audit.
Strapi updates Monthly
Minor and patch releases: we read the release notes, update, test on staging (admin, publishing, API, MCP), then deploy to production.
Code security analysis Monthly
Static analysis of the Strapi code, linting, Terraform checks. We fix what the scans find.
Dynamic scanning Monthly
OWASP ZAP against the admin and API on staging and the public site. Fixes and a security headers check.
Image and cloud scanning Monthly
Container image scans, findings from Security Hub and GuardDuty when enabled, firewall log review.
Infrastructure updates Monthly
RDS minor versions, Fargate platform, Terraform providers, drift checks, and anything that does not renew itself.
Monitoring and incidents On event
Response to alerts, failed publishing builds, and an unavailable admin or site, under the SLA below.
Performance and technical SEO Monthly
Core Web Vitals and Lighthouse checks, CDN cache hit ratio and cache headers, sitemap and robots. Fixes inside the site’s frontend code are quoted separately.
AWS cost control Monthly
Budgets, anomaly alerts, and right-sizing of resources.
Backup restore test Quarterly
A test restore of the database on staging.
Access and secrets review Quarterly
Admin users, API tokens for Claude, IAM review, key rotation.
Staging data refresh Quarterly
A copy of production data and media on staging before large updates, so we test on real content.
Questions and small changes On request
“Can we install this plugin?” and small configuration changes, up to 4 hours a month.
Monthly report Monthly
What we updated, which vulnerabilities we closed, uptime, and AWS spend.

Not in the basic package

  • Design and frontend changes
  • New content types and other development in the CMS
  • Content entry and SEO strategy
  • Major Strapi upgrades, for example v5 to v6, estimated separately
  • 24/7 on-call for P1 issues, quoted on request
  • Questions beyond 4 hours a month, quoted before we start

SLA

Support hours: Monday to Friday, 9:00–18:00 CET.

PriorityExampleResponseResolution or workaround
P1 · CriticalSite or admin unavailable, critical vulnerability1 hour4 working hours
P2 · ImportantPublishing, API or part of the admin does not work4 working hours1 working day
P3 · NormalQuestions, advice, small configuration changes1 working day5 working days

Options

Add them now or later. Each one is priced on its own and stays out of the base package.

A · WordPress content migration

$2,600–5,000one-time

You plan to migrate content yourselves. We can do it for you; the final price is fixed after the inventory.

  • Inventory: post types, taxonomies, custom fields, media, volume
  • Mapping from the old structure to your new content types
  • Export and transform scripts: HTML and shortcode cleanup, components and dynamic zones
  • Media transfer to S3 and link replacement
  • Pilot with a few records of each type, then your review
  • Final import, count check and spot checks
  • Map of 301 redirects from old URLs to new ones

Sized for roughly 100–300 records. We reprice if the volume is larger.

B · Website redesign and build

$24,000–29,000one-time

We understand your team is building the new site. If you want us to do it, we redesign the site and build the frontend.

  • Redesign of the website
  • Frontend build, exported as fully static files
  • Integration with Strapi components and your publishing flow
  • Final price within the range after we agree the page count and scope

C · Single sign-in licence

≈ $195/month, paid to Strapi

Strapi Growth with the SSO add-on: Google sign-in directly in Strapi, no second password.

  • 3 seats included, extra seats are priced by Strapi
  • Includes Content History (14 days), Releases and Live Preview
  • Without Content History, an unwanted edit by a person or by Claude can be undone only by restoring the database

D · DigitalOcean instead of AWS

+$3,000–4,500to setup

Same architecture on your DigitalOcean contracts: App Platform, managed PostgreSQL, Spaces with CDN, Cloudflare as the firewall.

  • Infrastructure ≈ $65–90 a month for both environments, instead of ≈ $153 on AWS
  • Google sign-in in front of the admin is not available here, so you choose the licence from option C or a community plugin
  • Monthly support price stays the same

Hosting on AWS

Two environments, staging and production, identical in code. AWS bills you directly for what they use.

Cost by service, $ per month

ServiceProductionStaging
Strapi container, ECS Fargate, 0.5 vCPU / 1 GB, ARM14.4214.42
Public IP for the container3.653.65
Load balancer with two public IPs24.3124.31
Database, PostgreSQL, single zone, 20 GB13.9813.98
Firewall, 5 rules10.30—
CloudFront flat-rate plan15.000.00
Secrets, logs, storage, container registry5.604.10
Per environment≈ 87≈ 60
Shared by the account: DNS, threat detection, audit log, budgets≈ 5
Both environments, per month≈ 153

AWS list prices for us-east-1, November 2026, a month counted as 730 hours. A European region adds 10–20%. On the call we mentioned $25–30 per environment. That figure covered only the container service and the database, without the load balancer, firewall and CDN plan. GitHub Actions minutes for builds in your private repository are billed by GitHub.

Sizing

Lean≈ $125–130

One load balancer shared by staging and production, split by domain. The environments are less isolated.

Recommended≈ $153

Two separate environments as in the table: no NAT gateway, no multi-zone database, firewall on production.

High availability≈ $300

NAT gateway, multi-zone database, 1 vCPU / 2 GB, a separate firewall on CloudFront. More than an admin without public visitors needs.

Timeline

About 4–6 weeks from access to launch. Dates are confirmed at kickoff.

1
Week 1
Kickoff and accessReview of your test Strapi and frontend build. AWS account, GitHub access, decisions on sign-in and region.
2
By about week 3
Staging liveStrapi, database, media, site hosting and the publishing flow running on staging.
3
Weeks 4–6
Production and launchSecurity, monitoring and backups in place. DNS switch from WordPress. Monthly support starts at launch, with closer attention in the first two weeks.
4
A month after launch
CheckpointWe review the first monthly report together and decide what comes next.

Next steps

Tell us a kickoff date and answer the questions below. Short answers are enough.

What we need to start

  • A kickoff date
  • Access to your GitHub and your test Strapi
  • AWS or DigitalOcean, and an AWS account decision
  • Access to your DNS, and who handles 301 redirects from the old site
  • Who writes the requirements for the content model and acceptance
Prices in this proposal

Setup is a fixed fee. Support is a fixed monthly package. AWS hosting is paid to AWS at cost. Options are priced on their own. Options A and B get a final price within their range after we agree the scope.

Questions for you

  1. Which framework is the new frontend built in, and who builds it? Can it export fully static files, and how long does a build take? Who fixes the build if it fails because of frontend code?
  2. Where should form submissions go? Do you need draft preview before publishing?
  3. Do editors work only in production, with staging used to check updates? Or do you need a staging → review → production flow?
  4. Which Strapi version (v4 or v5), plugins and database does your test environment use? Do we move it to AWS as is?
  5. AWS or DigitalOcean? A new AWS account that we hand over to you, or your existing one? Which region, and are there rules on where data is stored?
  6. Is Google sign-in in front of the admin plus a Strapi password fine, or do you want single sign-in with the licence from option C?
  7. How does Claude connect: claude.ai, Claude Desktop or Claude Code? Do you want API access restricted by IP?
  8. What do you expect from the SLA: hours, response time, time zone?
  9. When do you plan to launch, and who handles 301 redirects from the old WordPress URLs?