Your CS-Cart store in steady hands from people who know it inside out
We update the core and add-ons, review your store's security on a regular schedule, check the code of new add-ons before they go live and help when something breaks. You pay a fixed monthly plan with a pool of hours instead of hunting for a developer at every outage.
We have been building CS-Cart and Multi-Vendor add-ons since 2006. More than 160 of them run in stores across Europe and beyond. We work in English and Polish.
Why ongoing care beats fixing one outage at a time
A CS-Cart store is a core, a theme and a dozen or more add-ons from different authors. Updating any of them can break the checkout, payments or order export, and the problem usually surfaces at the worst moment, such as the pre-holiday rush. Someone who looks after the store all the time knows its history and changes, so they diagnose faster and never start from scratch.
More and more store owners write simple add-ons themselves with Claude, ChatGPT or another AI assistant. It is a quick way to get a change done, but that code rarely gets reviewed. Veracode's 2025 study found that in 45% of tasks, AI-generated code contained a vulnerability from the OWASP Top 10. An add-on that looks fine at first glance can open the store to SQL injection or a customer data leak, and it may stop working after a CS-Cart update.
Our plans cover both: we keep the store up to date and secure, and we review the code that goes into it, whoever wrote it.
What store care covers
The scope depends on the plan, and you spend the pool of hours on whatever the store needs at the moment.
Core and add-on updates
We install security fixes for CS-Cart and our add-ons, and on higher plans new engine versions too. On the Business and Marketplace plans we test every update on a copy of your store first: checkout, payments and key integrations. Only then do we move it to the live store.
Regular security review
We compare core files with a clean CS-Cart release, look for foreign scripts and backdoors, and check administrator accounts, failed logins, file permissions and directories that should not be reachable from the internet. You get a report with a list of recommendations.
Add-on code review, AI-written included
Before a new add-on reaches your store, we check it for SQL injection, XSS, missing form protection, permissions and compatibility with your CS-Cart version. This applies to third-party add-ons and to the ones you wrote yourself with AI.
Incident help
When the checkout stops working, a payment does not update the order status or the admin panel shows an error, we trace the cause in the code and logs instead of guessing. Response time depends on the plan.
Performance and small changes
From the pool of hours we make small fixes in templates, settings and add-ons and look at what slows the store down before customers and search engines notice.
Multi-Vendor and vendors
On Multi-Vendor marketplaces we also watch vendor panels, commissions and payouts, because an error there affects many businesses at once.
Plans
Monthly prices net of VAT per installation, invoiced in PLN and paid in advance. Response times count on business days, 9:00 to 17:00 CET. Unused hours do not carry over.
Monthly plan
- Start Response within 48 hours, 2 hours of work per month, security updates for the core and SoftSolid add-ons, a quarterly security review
- 790 PLN / month
- Standard Response within 24 hours, 4 hours of work, a monthly security review, one engine version upgrade per year
- 1,290 PLN / month
- Business Response within 4 hours, 8 hours of work, a monthly security review, two engine version upgrades per year, every update tested on a copy of the store
- 2,290 PLN / month
- Marketplace Response within 3 hours, 16 hours of work, every released engine version, testing on a copy, a security review with a report, a dedicated contact and a monthly work summary
- 3,900 PLN / month
To start or one-off
- Store review before the plan CS-Cart version, add-ons, core modifications, security status and a list of urgent fixes. Deducted from the first months when you sign up for a plan
- from 1,200 PLN
- Add-on code review One add-on, including one written with AI: security, compatibility with your CS-Cart version, a report with fixes
- from 900 PLN
- Work beyond the pool of hours Urgent mode 375 PLN per hour
- 250 PLN / hour
- For a quote, send the store address, the CS-Cart version and whether it is a store or a Multi-Vendor marketplace. We confirm the plan after the review, because a store with years of changes needs more work than a fresh installation.
How we start
- 1
Call
We learn what the store does, which integrations it has and what tends to break.
- 2
Review
We look at the store on its server and write down its state, versions, add-ons and urgent issues.
- 3
Clean-up
We fix the most urgent problems and, on plans with update testing, prepare a copy of the store.
- 4
Ongoing care
We work within your plan, and every month you get a short summary of what we did.
What we do not promise
We do not run a 24/7 on-call service, and we do not guarantee that nobody will ever break into the store. A security review lowers the risk and helps spot traces of an intrusion quickly, but it does not replace hosting backups, strong passwords and care when installing add-ons from unknown sources.
We are not responsible for other authors' add-ons and themes the way we are for our own. We can review and fix them, but when the author releases a new version, you make the final call on updating, and we advise based on a test on the copy.
Worth a look
CS-Cart add-on written with AI
The most common security mistakes in add-ons written with AI and what to check before launch.
CS-Cart add-ons
More than 160 add-ons for CS-Cart and Multi-Vendor, from payment integrations to invoicing.
Multi-Vendor marketplace development
Building and extending marketplaces on CS-Cart Multi-Vendor.
MCP server for CS-Cart
Connect your store data to an AI assistant without handing over admin access.
Frequently asked questions
Can you look after a store someone else built?
Yes. We start with a review that checks what was changed in the core and theme and which add-ons are installed. We confirm the final plan price after that.
I wrote an add-on with AI. Is it worth reviewing?
Yes, especially if it touches orders, payments, customer accounts or accepts form data. AI assistants write code that works but often skip security measures and CS-Cart conventions, such as form protection, admin permissions and separating vendor data in Multi-Vendor. The review points to the exact places to fix.
Do you need server access?
For updates and security reviews, yes, ideally over SSH or SFTP plus an administrator account in the admin panel. We store access details encrypted and never pass them on to third parties.
What about backups?
Backups are usually provided by the hosting company. We check that they run and that the store can be restored from them, and we take our own copy of files and database before every update.
Can I cancel the plan?
Yes. The contract is open-ended with a 30-day notice period, and when we part ways we hand over documentation of the changes we made.
Tell us which store to look after
Send the store address, the CS-Cart version and what worries you most. We will reply with a proposed review and plan.
office@soft-solid.net · +48 661 661 964
SoftSolid · ul. Sportowa 14, 62-090 Rokietnica
NIP PL8421361047