Design · Build · Care · Secure

WordPress and Shopify sites that launch on time.
Kept secure after.

Design, build and maintenance for independent stores and brand sites on WordPress, WooCommerce and Shopify. One team from the first sketch to the monthly report.

Sites from $1,900 · Care from $129/mo · Security audit $490

Accepting 2 sites for December 2026 NDA-ready

One team

From first sketch to the monthly report.

Most site projects break where the designer, the developer and the person doing updates stop talking. We keep all four stages in the same scope.

01

Design

Layout, typography and product pages that look like your business, not a theme.

  • Home and product page design
  • Mobile and tablet layouts
  • Clickable prototype before build
See the website scope
02

Build

WordPress, WooCommerce or Shopify — built to load fast and survive updates.

  • WordPress or Shopify build
  • Payments, shipping and tax
  • Analytics and consent
See packages
03

Care

Updates, backups and uptime, with a monthly report you can forward.

  • Core, theme and plugin updates
  • Backups with restore checks
  • Monthly one-page report
See care plans
04

Secure

Hardening, malware cleanup and an audit when something looks wrong.

  • Security audit from $490
  • Malware removal and hardening
  • Hacked-site response
See care and security

What we hear

What site owners say on the first call.

If one of them is your week, the fix is usually smaller than you think.

01

“The site is slow and nobody knows why.” Usually a page builder, fifteen plugins and no cache — fixable without a rebuild.

02

“The plugins haven't been updated in months.” Plugin drift is a common way a working store becomes a breached store.

03

“Google flagged the site for malware.” Search Console warnings and host suspensions need a clean-up, not a new theme.

04

“We launch in three weeks and the developer disappeared.” A half-built site with no handover is the most expensive kind of unfinished.

05

“We need to change hosts without losing rankings.” Migrations go wrong at redirects, DNS and the first crawl — not at the file copy.

Three ways to start

Pick the piece you need first.

Each is fixed scope and fixed price. The rest can follow once the first piece ships.

Website

Starter Site

$1,900 · 10 business days

  • Five pages, designed and built
  • WordPress or Shopify
  • Forms, analytics and consent
  • Security baseline before go-live
  • One month of Care included
See what's included
Store

Store Build

$3,200 · 15 business days

  • Eight pages plus up to 30 products
  • WooCommerce or Shopify
  • Payments, shipping and tax
  • Checkout and speed checks
  • One month of Care included
See the store scope
Redesign

Redesign & migration

$2,400 · 10 business days

  • Keep your URLs and rankings
  • Move host, theme or platform
  • Redirects, DNS and crawl check
  • Speed and checkout fixes
  • One month of Care included
See the migration scope

Site already hacked or flagged? See malware removal and security audit

How it runs

The same team at every stage.

Security is a review inside each step, not a plugin installed at the end. Each step ends with something you keep.

01

Design

Page structure, design and a clickable prototype, agreed before anyone writes code.

→ prototype + page list
02

Build

WordPress, WooCommerce or Shopify, built on staging with weekly preview links.

→ staging site + content map
03

Launch

Security baseline, redirects, backups, rollback and a go-live checklist that has been tested.

→ launch checklist + access handover
04

Care

Updates, monitoring, malware scans and a monthly report. Security continues on a schedule.

→ monthly report + change log

Evidence, not adjectives

You can read the audit before you buy one.

Every finding has a reproduction note, a business impact and an owner. No 40-page tool dump with severity counts you can't act on.

  • A redacted sample audit is available to download, without a call
  • One template for every site, so reports are comparable
  • Findings ranked by what it costs you, not by scanner noise
  • Every audit ends with a retest and a written close-out
Read the sample audit
findings.pdf Sample · redacted
Admin login without two-factorHigh
Plugin with a known vulnerability activeHigh
Backups stored on the same serverMed
No HSTS on the checkout domainLow
Directory listing enabled on uploadsLow

5 findings · 3 closed in week one · 90-day plan attached · retest included

Ongoing care

After launch, someone still owns it.

Monthly plans with hard limits: sites, hours and response times. No “unlimited support” promises that turn into a queue.

Basic

One site, kept updated and backed up.

$129/month

No setup · 1 hour / month · 2-business-day response

  • Core, theme and plugin updates
  • Weekly backups with a monthly restore check
  • Uptime and SSL monitoring
  • Monthly one-page report
See plan details

Store Care

WooCommerce or Shopify Plus, with checkout monitoring.

$449/month

+ $199 setup · 4 hours / month · 4-business-hour response

  • Everything in Care
  • Daily backups and checkout monitoring
  • Product and content updates
  • Quarterly security review
See plan details

Compare all plans and one-off work

The stack

The platforms your next hire already knows.

No proprietary page builder. If we part ways, any WordPress or Shopify developer can pick it up.

Platforms

WordPressWooCommerceShopify

Build

PHPMySQLLiquidTailwind

Infrastructure

CloudflareNginxLinuxDocker

Design

FigmaDesign systems

Security

WazuhGreenboneOWASPBurp Suite

Analytics

GA4Search ConsoleConsent

Straight answers

What you should ask us before you sign.

If an answer here is vague, treat that as the answer.

Ask us directly
WordPress or Shopify?
WordPress and WooCommerce when you want to own the site, the data and the hosting costs. Shopify when you want the store, checkout and payments handled for you. We will recommend one on the first call based on your catalogue, payment needs and who maintains it after launch.
How long does a website take?
Starter Site: 10 business days from content and deposit. Store Build: 15 business days. Both assume content and product data arrive on the agreed day; if content is late, the launch date moves with it and we tell you the same week.
Do you write the content?
No. You supply the copy and product data; we structure it, edit for length and place it. Copywriting is quoted separately at $120 per page if you want it written.
What happens if the site gets hacked?
Care and Store Care clients can book the fixed-scope jobs: malware clean-up from $750 (isolate, find the entry point, clean, harden, document) or a hacked-site response from $950 with triage within one business day. Deeper forensics and rebuilds are quoted before work starts.
Can you take over a site someone else built?
Yes. We start with a short access and security audit, then take over maintenance. If the build is unsalvageable, we say so and quote a rebuild rather than billing updates on a site that will fail anyway.

Next step

Tell us about the site.

A written reply within one business day, including a no if we are not the right fit.