Websites, built like software
Your website is the first system people meet.
The team that takes AI into production also builds the website. Fast, findable by people and by the AI assistants that now answer for them, and with nothing left exposed to patch every month. I rebuilt mudagym.com and helionics.io this way.
Secure by default
Built so there is nothing facing the internet that needs patching every month.
Check where your current site stands →Makeovers that look premium and stay secure
Makeover
A redesign that says what you do in one screen, with the proof beside it and a phone layout that works.
Rebuild
Off ageing WordPress or custom PHP and onto a modern stack, with nothing facing the internet that needs patching every month.
Search and AI search
Pages that load as real HTML, structured data, clean URLs and content Google and AI assistants can read and cite.
Security check
A plain English review of what your current site runs, what is exposed and what to fix first.
Care plan
Monitoring, updates and a named person to call after launch.
Recent work
Sites we designed and built
Why now
PHP2Shell, in two minutes.
On 21 October PHP released emergency fixes for two critical flaws in PHP itself. PHP runs 69.2% of websites whose server language is known, according to W3Techs, and attacks started before many sites could update. In the Netherlands, DigiD and MijnOverheid went offline as a precaution. Updating WordPress or plugins does not fix it. Updating PHP does, and PHP has issued no release for 8.1 or older.
Read the full briefing, with the timeline, what ignoring it costs and what to do this week.
01
A crafted request
Sent to any page on the site. No login, no password, nobody on your side clicks anything.
02
PHP runs out of memory mid request
The attacker pushes PHP into a fatal error part way through handling it.
03
The clean up goes wrong
Half built data is treated as valid, and leftovers survive into the next request the same worker handles.
04
Attacker code runs on your server
With care, that confusion becomes remote code execution, with the website's own permissions.
Then within reach
- Customer database
- Checkout pages
- Email sending
- Backups and keys
- Other servers on the network
Care plans, so it stays that way.
A monthly plan for sites we build or take over. One fee and one named person, already on it when the next PHP2Shell arrives.
Hosting and backups
Fast, monitored hosting with daily backups you can restore from.
Patching
Security updates applied and tested, so the site never sits on unsupported software.
Monitoring
Uptime, security headers and search health checked, with alerts that reach a person.
Changes
Small updates each month, so new pages and fixes do not wait for a project.
A quarterly report
What changed, what was blocked, and what to improve next.
PHP2Shell exposure check
Four questions. Where you stand.
Runs in your browser. Nothing you choose is sent anywhere.
Answer the questions to see where you stand.
How a makeover runs
01
Check
What the site runs today, where it is exposed, and what it should be doing for the business.
02
Design
The offer, the proof and the pages, agreed with you before a line of code.
03
Build
Modern stack, real HTML for search engines, privacy friendly analytics.
04
Launch
Old addresses redirected, search console checked, nothing lost on the way over.
05
Look after
Updates and monitoring, with a person to call when something needs changing.
Questions
Do I have to leave WordPress?
Not always. If your team edits the site every week and needs a content system, we can harden, update and maintain it. If the site is a brochure with a contact form, a modern static build is usually faster, cheaper to run and has no PHP runtime to attack.
Can you just fix PHP2Shell on my current site?
Yes. If an update or your host's backport is enough, we say so and help you apply it. We only recommend a rebuild when the site is out of support or holding the business back.
Will a redesign hurt my Google ranking?
Handled properly, it should help. We keep your addresses or redirect them, carry over titles and descriptions, add structured data and check search console after launch.
Who looks after the site after launch?
You can run it yourself, or take a care plan that covers updates, monitoring and changes, with a named person to call.
How are makeovers priced?
A fixed price for an agreed scope, set after a short call. You know the number before anything starts.
A website that works as hard as the rest of your business.
Thirty minutes on what your site should be doing for you, what a rebuild would change, and how fast it can ship. If a lighter fix is all you need, you will hear that first.