Security updates unattended. A kernel reboot is a window.
Ubuntu, Debian, AlmaLinux, Rocky. The package update is the easy part. The reboot, the PHP version and the panel rebuild are the part that takes a site down.
Unattended security updates. Nothing that restarts the database.
unattended-upgrades on Debian and Ubuntu, dnf-automatic for security on AlmaLinux and Rocky. Feature updates stay out of that job.
Installed does not mean running. A reboot is scheduled, after a snapshot or a confirmed backup. We do not reboot because the package arrived.
Hestia, DirectAdmin CustomBuild and EasyApache update their own stacks. A distro PHP update beside them is how the vhost and the binary diverge.
A server last updated a year ago is not one apt upgrade
We list the held packages and the PHP version the sites need, then apply security updates in a window. A release upgrade is a separate agreement. CentOS 7 does not get a patch plan. It gets a move.
Inside the monthly plan, or €55 an hour once
Essential at €79 includes security updates. A catch-up on a neglected server is hourly, minimum 1 hour, and we say if it will be more before starting.
Pending updates, or a kernel that has needed a reboot for months?
Tell us the distribution and the panel. No root password in the first message.