SharePoint support: secure your farm now that 2016 and 2019 are out of support
SharePoint Server 2016 and 2019 left extended support on 14 July 2026, with no paid security-update programme to bridge the gap. We secure on-premise farms while you decide, then move them to SharePoint Online or SharePoint Server Subscription Edition.
Resolved in 14 minutes. Your team slept through it.
Why it matters now
An unsupported SharePoint farm keeps working, which is exactly why it is risky. No new security fixes are published for 2016 or 2019, so every newly discovered vulnerability stays open on servers that usually sit close to your most sensitive documents.
There are two supported destinations: SharePoint Online, which most organisations choose, and SharePoint Server Subscription Edition for workloads that must stay on-premise. Either way, the work is in the detail: custom solutions, workflows, InfoPath forms and permissions that need to survive the move.
Signs you need this
You still run SharePoint Server 2013, 2016 or 2019
Business processes depend on InfoPath forms or SharePoint Designer workflows
Nobody owns the farm day to day
Your auditors have asked about unsupported software
Network exposure reduced, access reviewed and monitoring added while the farm remains unsupported.
02
Inventory
Sites, lists, custom solutions, workflows, InfoPath forms and permissions catalogued.
03
Migration
Content and permissions moved to SharePoint Online or Subscription Edition in rehearsed batches.
04
Rebuilds
Workflows and InfoPath forms rebuilt in Power Automate and Power Apps, or as small web apps.
05
Cutover
Batches moved out of hours, with redirects and user communication planned.
06
Ongoing care
Subscription Edition farms patched monthly; Online tenants reviewed for permissions and sprawl.
Patching cadence
Exposure and access reviewImmediately, then monthly until decommissioned
Subscription Edition updatesMonthly
Permission reviewQuarterly
Security posture
Named-user access only, through your VPN, jump host or SSO
Credentials stored in a vault, never in email or tickets
Every change logged against a ticket, with a rollback step
NDA and data processing agreement before any access
Findings from your penetration tests fixed and documented
Service levels
Written into the contract. Mix tiers across your estate according to how critical each system is.
Example service levels by support tier
Essential
Business
Mission-critical
Critical (site down)
4 hours
1 hour
15 minutes
High (major feature broken)
Next business day
4 hours
1 hour
Normal
3 business days
1 business day
4 hours
Cover hours
Mon–Fri, business hours
7am–10pm, 7 days
24/7/365
Uptime target
99.5%
99.9%
99.95%
Named engineers
1
2
Dedicated team
How the takeover works
Weeks 1–2
Audit
Read-only access under NDA. Versions, risks, costs and a quote.
Weeks 3–4
Knowledge transfer
Runbooks, credentials vault and handover sessions with your current team or vendor.
Month 2
Stabilise
Urgent patches, monitoring and backups in place before anything else changes.
Ongoing
Run & improve
SLA-backed support, planned upgrades and a monthly report.
Free estate audit · 2 weeks
Get a written report on your SharePoint estate.
Read-only access, under NDA. Versions, end-of-support dates, security findings and a monthly quote. Keep the report either way.
SharePoint support: questions, answered
Will our SharePoint farm stop working?
No. It keeps running, but no new security fixes are published, so every new vulnerability stays open. That is why we reduce exposure first, then migrate.
SharePoint Online or Subscription Edition?
Most organisations choose SharePoint Online. Subscription Edition suits workloads that must stay on-premise for regulatory or integration reasons, and it needs Windows Server 2019 or later and SQL Server 2019 or later.
What happens to our InfoPath forms?
They need rebuilding, usually in Power Apps or as a small web form. We inventory them early because they are often the longest part of the plan.
Palm Leaves