Digital Partner Our take

The hidden cost of managing five vendors for one website

Domain here, hosting there, a freelancer for the site, an agency for ads, nobody for security. What five vendors really cost, and what one owner changes.

3 minread 649words last updated

Our position, stated plainly

The typical setup

PieceWho does itWho is responsible when it breaks
DomainRegistered years ago by a former employee or the first agencyNobody knows
DNSWhoever set up the email lastNobody, until email stops
HostingThe freelancer’s account, or a shared plan from 2019The freelancer, if reachable
WebsiteThe freelancer who built itAvailable if they have time
MarketingAn agency running campaignsThe agency, for the campaigns only
SecurityNobodyNobody, until an incident
AnalyticsSet up by the agency, owned by the agencyThe agency, and you cannot log in

Each supplier does their piece competently. The problem is the table’s right column.

Where the hidden cost sits

  1. Coordination. Every change touches two suppliers, and the owner is the messenger. Explaining the same thing twice, forwarding emails, being the person who knows which vendor holds what.
  2. The gaps. Renewals, monitoring, security updates, backups. Work that belongs to nobody because it was never in anyone’s brief. The gaps are where incidents happen.
  3. Incidents. The domain that expired. The form that stopped sending for three weeks. The plugin nobody updated. Each one costs hours, sometimes revenue, and each one is followed by an argument about whose job it was.
  4. Decision delay. A landing page needs three suppliers to agree on a date. The campaign starts without it.
  5. Lock-in by accident. Accounts spread across five names. Leaving any one supplier means an archaeology project first.

What one accountable partner changes

Not one supplier for everything. One party that is responsible for the whole working, that holds the documentation, runs the monitoring, owns the gaps, and coordinates the specialists you keep. The marketing agency still runs campaigns. The difference is that the platform they run on has an owner, and that owner is not you.

BeforeAfter
Five logins, five invoices, five contactsOne contact, one report, specialists behind it
Gaps belong to nobodyGaps belong to the partner, in writing
The owner coordinatesThe partner coordinates
Incidents followed by blameIncidents followed by a fix and a note in the report
Accounts in five names, nobody knowing whichOne documented list of which account sits where, and what moves it

What this means for you

Count your vendors and count your hours. If the right column of the first table above looks familiar, the problem is not any one supplier; it is that nobody owns the whole. Fix the ownership first, keep the specialists who earn their place, and give the coordination to someone whose job it is.

Written by the CivSec S.M.A.R.T team

We build and run websites, software and AI systems for businesses. We write about what we see in that work, in plain language, and we update articles when things change.

Last checked . Spotted something outdated? Tell us.

Frequently asked questions

Isn't it risky to depend on one partner?

It is risky to depend on any party that holds your accounts and code. With everything in your name and documented, one partner is easier to replace than five vendors with five contracts and five logins nobody wrote down. The risk is in ownership, not in the number of suppliers.

We like our marketing agency. Do we have to drop them?

No. Keep specialists where they add value. A partner runs the platform and is accountable for it working; the agency runs campaigns on that platform. The change is that someone owns the whole, and the agency has one technical contact instead of three.

How do I calculate what the current setup costs?

Add the invoices, then add the hours you and your staff spent last month on vendor calls, chasing, forwarding, explaining the same thing twice, and fixing things that fell between two suppliers. Multiply those hours by what your time is worth. The sum is almost never done.