Services
Three things, done properly, rather than a long list done thinly.
Website Design
A site built for what your business actually does. That starts with a conversation about who needs to find you and what they need to do when they arrive — not with a template.
- Responsive layouts that work on a phone as well as a desktop
- Hand-written HTML and CSS — no page builder, no plugin sprawl
- Fast by default, because there is very little to load
- Accessible markup: real headings, labelled forms, keyboard navigation
Secure Hosting
Your site runs on infrastructure hardened to published benchmarks rather than to somebody's habit. Concretely:
- Operating system hardened to the DISA STIG, the US Department of Defense baseline, and measured against the CIS Ubuntu Benchmark control by control
- Web server measured against the CIS NGINX Benchmark, control by control, including the TLS configuration
- Where the two baselines disagree, the stricter one is applied — and the difference is written down against the control number rather than quietly resolved
- Host firewall default-deny; only the ports a website needs are open
- Security patches applied automatically, unattended
- Automated intrusion prevention on the administrative path
- Audit logging of privileged activity, with the rule set locked against tampering
- Application code reviewed against the OWASP Application Security Verification Standard, and every automation script checked with ShellCheck
- Daily snapshots, with restores actually tested rather than assumed
If that reads like more than a small business website needs — it is the same infrastructure either way, so there is no reason to run it any other way.
Ongoing Care
The part most cheap sites skip. A website is not finished when it launches.
- Content updates when your business changes
- Certificate renewal handled before it expires, not after
- Monitoring, so a problem is noticed by us rather than reported by a customer
- A named person who answers — not a ticket queue