Once a business application is live, the question that comes up is rarely about features. It is about cost: what is a fair monthly amount to keep the system running, secure, and able to grow? The answer is often confusing, because quotes on the market can differ by a factor of ten for work that sounds identical.

This article covers the price ranges seen in Indonesia in 2026, the factors that actually determine the number, what you should receive at each price level, and how to get started without a large upfront commitment.

What maintenance costs on the market

Across the offers circulating in the Indonesian market this year, the pattern looks roughly like this:

  • Company profile sites that rarely change: a few hundred thousand rupiah per month.
  • Business applications that store customer data or process transactions: roughly IDR 1 million to IDR 5 million per month.
  • Core company systems with guaranteed response times and strict security standards: IDR 5 million to the mid teens of millions per month.

The range is wide because the word "maintenance" covers very different work. At one vendor, maintenance means renewing hosting and fixing typos. At another, it means someone monitors the server every day, patches security holes, confirms that backups can actually be restored, and steps in when the system fails in the middle of business hours. Comparing prices without comparing scope is almost guaranteed to mislead.

Six factors that determine business application maintenance cost

Six factors that set the price

  1. Type of application. Point of sale systems, finance systems, or customer portals that process transactions need far more attention than an informational site.
  2. State of the code at handover. A cleanly built, documented application is cheaper to maintain. One abandoned by its developer without notes needs time to understand first.
  3. Number of users and transactions. The more people depend on the system every day, the more expensive an hour of downtime becomes, and the tighter the monitoring has to be.
  4. Promised response time. "Answered within one business day" and "handled within one hour, weekends included" are two different services at two different prices.
  5. Routine change requests. If your business regularly asks for small adjustments, such as a new report format or an extra approval step, development hours belong inside the package.
  6. Infrastructure responsibility. Who looks after the server, domain, security certificates, and backups. When all of it is handed to the vendor, the scope grows accordingly.

When cheap turns expensive

A package costing a hundred thousand rupiah a month for an application that processes transactions usually means one thing: nobody is really looking after your system. The problem stays invisible until the day the server stops, data disappears, or someone who should not be there gets in.

This is not theory. When we take over applications that were not well maintained, the findings are almost always similar:

  • On an education system used by hundreds of people every day, we found and closed five security holes on day one, including debug mode still switched on in production and a server configuration page anyone could open.
  • On one client application server, system logs showed 149,890 failed login attempts in just seven days. Before we took it on, the server had no active firewall or automatic blocking.
  • In almost every case, the business owner did not know when data was last backed up, let alone whether that backup could be restored.

Closing gaps like these costs far less than a single day of downtime, or a customer data leak that has to be explained in public.

Real findings from taking over applications that were not maintained

XETUP application maintenance packages

We built these packages from the real work we do for clients whose systems are already running. The prices below are starting prices. The final figure depends on the state of your application after the audit.

  • Initial Audit, IDR 2.5 million one-time. A review of the server, code, account access, backups, and security. You receive a written risk report with a prioritised fix order. The audit fee is credited in full if you continue with a maintenance package for at least three months.
  • Guard, from IDR 1.5 million per month. For stable applications that rarely change. Uptime monitoring, daily backups, security updates, minor bug fixes, and a response within one business day.
  • Care, from IDR 3.5 million per month. The best fit for business applications used every day. Everything in Guard, plus 10 hours of small changes per month, a monthly system health report, and a response within four business hours.
  • Command, from IDR 7.5 million per month. For systems that carry day-to-day operations. Everything in Care, plus 25 development hours per month, a one-hour response, weekend standby, and a security scan every quarter.

Every package covers web applications, mobile applications, and internal systems, including those built by other teams.

Comparison of the Guard, Care, and Command maintenance packages

How to get started

We do not quote a final price before seeing the system. Guessing a price without reviewing the code is the fastest way to overpay, or to be promised something a vendor cannot deliver. The process is simple:

  1. Tell us about your application. What it does, who uses it, and what problem bothers you most right now.
  2. Initial Audit. We review the real state of the system and hand over a written risk report.
  3. Close the biggest risks. The most dangerous findings are handled first.
  4. Monthly maintenance. The system is looked after under the package you choose, with regular reports so you know exactly what was done.

If you are not sure whether your application is still worth rescuing or should be rebuilt, read our guide for applications abandoned by their developer.

Four steps from the initial audit to monthly maintenance

Checklist: does your application need maintenance now?

  • Nobody on your team can log in to the server or hosting account.
  • You do not know when your data was last backed up.
  • Small bugs sit for weeks because nobody knows how to fix them.
  • Domain, hosting, or payment gateway accounts are still registered to someone who no longer works with you.
  • Every new feature request gets the answer "not yet."

If two or more of these apply, your system is running without anyone watching it.

Frequently asked questions

Do package prices include server costs? No. Server, domain, and third party service costs are billed separately at actual usage, and stay in your business's name. We manage them, you own them.

Will XETUP maintain an application built by another vendor? Yes. Most of our maintenance work actually starts with applications built by other teams. The Initial Audit exists so we understand the system before we commit.

What if the audit shows the application is not worth keeping? We say so plainly in the report, with the reasons. The decision to repair or rebuild stays with you, based on evidence rather than guesswork.

Start with an Initial Audit

To keep every review thorough, we are opening five Initial Audit slots for October 2026. Tell us about your application on WhatsApp and we will reply with the next step.

Or explore our Maintenance & Support service first.