Installnet IT & Technology Weekly

July 13 – July 19, 2026

Prepared by Aaron Weinberg, CTO
Covers: Facilitynet · Installhub · API · Notifications · Corporate IT

Platform Availability30 DAYS

99.84%

Worst production system (API) · target 99.9%

Prior 30 days: 99.80%

API stable since July 14

RoadmapSNAPSHOT

Active high-priority features, 2 nearing release

Last week: 6

No change

Portfolio MixSNAPSHOT

18%·59%·23%

Share of active investment: Grow · Do · Run (targets 25% · 50% · 25%)

Last week: 18% · 59% · 23%

Grow: 18% vs 25% target

Security FindingsSNAPSHOT

73% in SLA

46 open: 1 Critical, 10 High, 35 Med/Low

Last week: 66% · 50 open (2 Critical)

Improving; 1 Critical left

Recover — DR & BCPSTATUS

15 min RPO

Backups healthy; max data loss 15 minutes

M365 restore verified Jul 21; database test + DR drill open (Q3)

2 verification items open (was 3)

Operate — System Availability & Incidents

Uptime per production system (trailing 30 days) and every customer-visible incident of 5+ minutes in the last 4 weeks

Facilitynet99.95%

Installhub100.00%

API99.84%

Notifications100.00%

Marketing sites99.96%

One tick per day, June 20 – July 19. Green = clean day · faded green = brief blips, minutes total, site stayed up · amber = site-level outage · red = major outage (hours) · gray = planned maintenance. The API's faded-green run ends around July 14 — brief interruptions stopped after the platform fixes landed. Target: 99.9% per system; values exclude planned maintenance.

Date	System	Impact	Duration	Status
No new site-level incidents this week — the second clean week in a row.
06/30	Installnet.com	Planned hosting migration (GoDaddy) overran its window; monitored throughout	9h 41m	Resolved · planned
06/30	Ecoserv site	Same hosting migration; overran planned window, monitored	8h 57m	Resolved · planned
06/24	Ecoserv site	Site unreachable (last unplanned site outage, 26 days ago)	18 min	Resolved

Only site-level events appear here; single app-server issues absorbed by high availability show as faded-green days on the left, not incidents. The API interruptions that ran through early July have stopped: no downtime events since July 14, following the platform fixes (mod-72, mod-73) and the Notification Center performance work.

Build — Roadmap Delivery & Investment

Where development investment is going (Grow / Do / Run), and the active high-priority features

Grow the business18% (target 25%)

Do the business59% (target 50%)

Run the business23% (target 25%)

Grow is running at 18% of investment against the 25% target; Do is absorbing the difference. Based on 54 active scored features (April scoring baseline; full refresh at the start of August).

Feature	Owner	Stage	Target	Status
Company Pages - Hierarchy Updates (PROD-382)Do	Aaron	Final QA	Jul 27, 2026	In final testing
HubSpot Integration (PROD-480)Grow	Eric	In development	Jul 27, 2026	In development
Digital signature workflow (PROD-43)Do	Aaron	Ready to develop	Q4 2026	Queued
Project scope standardization (PROD-416)Do	Aaron	Ready to ship	Q3 2026	Ready to deploy
Market Segment tagging in SP Locator (PROD-513)Do	Aaron	Ready to develop	Q3 2026	Queued
Functions & Permissions Overhaul (PROD-536)Do	Aaron	In design	Q3 2026	In design

Chips show each feature's dominant investment bucket from its value scorecard. Project scope standardization is ready to deploy; Company Hierarchy is in final testing. Q3 value shipped: 0 points (quarter began July 1); this counter accumulates as features ship. Full Do/Run/Grow portfolio detail moves to the quarterly report.

Secure — Risk Posture

Open security findings across application code and third-party software, measured against the resolution SLA

Severity	Open	Past SLA	SLA Target
Critical	1	1	14 d
High	10	9	30 d
Medium	22	2	90 d
Low	13	0	180 d

Open findings: 61 → 50 → 46 over the last three weeks. Criticals: 6 → 2 → 1.

This week

Progress Down to a single open Critical (from six two weeks ago) and 73% of findings within their SLA window, up from 66%.

Attention The one remaining Critical (Installhub sign-in flow) has been open well past its 14-day target for nearly two months and still needs a fix date or a formal risk acceptance.

Third-party software: no newly exploitable items this week.

Server patching

On policy All servers current; no security patches overdue. Scanning went live this week. Last scan July 19.

Corporate IT & People — endpoints from June vendor reports; phishing and training live

Devices Protected	External Weak Points	Security Escalations	Phishing Test Failures	Training Complete	Systems Current
68 of 68 all devices protected	0 found in external scans	2 investigated · 0 needed action	3.4% July test · 2 of 58 staff clicked	100% monthly, all users	100% supported Windows 11 versions

Multi-factor sign-in is enforced for every account. Endpoint, protection, and escalation figures are from the June managed-security reports; phishing and training are live. July's phishing test click rate (3.4%) remains far below the ~30% untrained-organization benchmark.

Recover — Backup & Continuity Readiness

Can we come back from a bad day, and how much would we lose? Proven by tests, not job logs.

Asset	Owner	Backup Health	RPO	Last Verified Restore	Status
Production database	CTO	Daily full + 15-min log copies, offsite	15 min ✓	No recent test	Recovery test overdue
Server images	CTO	App servers weekly; database & utility monthly	Layer beneath live backups	No test on record	On schedule
Document storage	CTO / AWS	Versioned, continuous	Continuous	—	Healthy
M365 (email, files, Teams)	XPERTECHS / Datto	Automatic	Per Datto schedule	Jul 21, 2026	Restore verified
Disaster-recovery exercise	CTO	—	—	None on record	Schedule H2

RPO = maximum data loss if the system failed right now. The database is protected by daily full backups plus copies every 15 minutes to protected offsite storage (versioned, cannot be silently deleted); server images are a slower rebuild layer beneath that — weekly for the application servers, monthly for the database and utility servers. All scheduled backup jobs completed this week.

Decisions & Risks — What Needs Exec Attention

DRAFT — written from this week's data, pending CTO review

Progress: API stability much improved

The brief interruptions that ran through early July have largely stopped following the platform fixes and the Notification Center performance work. API has been mostly stable for users. Still working through some final points to get back to normal.

Decision needed: one Critical security finding remains, well past deadline

Security cleanup is nearly complete — down from six open Criticals to one over two weeks. The last one, on the Installhub sign-in flow, has been open close to two months against a 14-day target. Commit a fix date, or formally accept the risk with a documented rationale.

Heads up: database recovery test still to be scheduled

Backups are healthy and data-loss exposure is 15 minutes, but the full recovery procedure has not been timed recently. A timed test restore is planned as part of the H2 disaster-recovery exercise.