When we host your site, we vigilantly monitor security issues and software updates. When a new vulnerability is disclosed for WordPress, Drupal, Backdrop, CiviCRM, PHP, or any other software running on your server, a GR developer will evaluate the update as it pertains to your specific site.
If we determine the update is urgent for your site, we'll apply the update right away in a testing environment, run through your site's test plan, and deploy the patch. If we determine your particular site is not at risk for exploitation, we will apply the update during your next regularly-scheduled round of security updates.