What is a software update?

The notification saying an update is available, which most people postpone for months, is statistically the most valuable click in a small company's security posture. An update replaces parts of a program with versions the vendor has corrected: a small patch closes a newly discovered vulnerability, a minor release fixes bugs, a major upgrade changes how features work. The uncomfortable pattern behind most compromised business websites is not a sophisticated attacker but a publicly documented hole, known for months, left unpatched while automated scanners swept the internet looking for exactly that version. So for your company the question was never whether to update, but who does it in a controlled way. An update applied blindly can break a working feature, which is why the correct procedure always includes a backup taken before and a functional check taken after — the two steps you are actually buying when you pay for a maintenance retainer rather than a fire brigade.