Hand me the website. I'll look after it from here.
I build websites with nothing on them to hack, and I look after the ones people already have. Either way, I take the website and the risk around it off your hands, and I stay, so someone always picks up the phone.
The Nothing-to-Hack Website.
It's what I build for most people who call me: built from scratch, by hand, with no plugins, no login page, and no database, so there's nothing on the server to break into and nothing for you to keep updated.
A typical site, and one of mine
Your site today
- A CMS with a dozen plugins or more to keep updated
- A login page anyone can find
- A database holding whatever the forms collected
- Fonts and scripts loaded from other companies
- Backups nobody has tested
Your new site
- No plugins. Nothing goes out of date.
- No login page.
- No database.
- No outside scripts.
- The backup is the code. Rollbacks are instant.
- No more "update available" emails, and no missed update that opens the door.
- Nobody can sign in to your website as you.
- You own the code. Take it anywhere, with anyone.
It costs less because there's less to it: a site with nothing on it takes less to build and far less to look after. Every price is on the Pricing page, and you can build your own in about a minute.
For the site you already have.
Each step takes a little more off your hands, and I stay with you whichever one you choose. Plenty of people stop at the first. All of it works whatever your site runs on.
Most people start here
Site Care Plus
Hands-on time on your site, every month.
One time
The Site Audit
A close look at the site you have, written down in plain English.
When search drives the work
Search and SEO
Easier to find, and described correctly.
The summit
An expert on call
For the site, the domain, the email, and the accounts behind them.
Site Care Plus: a security engineer in your corner.
You hand me the website, and I look after it every month with real, hands-on time, for as long as you want me. WordPress, Squarespace, something a nephew built in 2016. It doesn't matter.
Most people who hire me for this don't have a problem yet. They're just tired of being the only person responsible for the website. I'm Tim, and by day I work in cybersecurity: 7 years building security software for large organizations, and more than 100 small businesses, nonprofits, and schools helped personally. On a site I built, care takes the place of upkeep.
Every month, on your site
Support and content updates
Up to one hour a month of changes, fixes, and “can you just look at this.” You email me. I do it.
Security, backups, and recovery
Updates applied and watched, backups checked rather than assumed, and recovery help where your hosting allows.
Speed and images
Performance reviewed and tuned, with images optimized where the platform supports it.
Mobile checks
The site keeps working on phones and tablets, where most of your visitors already are.
The first month opens with a full review of your site, with written recommendations. Month to month, and you can cancel by email.
Nonprofits and schools have their own rate for care. See nonprofit rates
The Site Audit: find out exactly where your site stands.
I take the guessing about your site off your plate, and I stay to talk you through what I find. No account and no sales call first. You pay, fill in a short intake, and I get to work.
1 of 4
A plain-English report, ranked the way you'd work through it: fix now, fix soon, fine as is. In 5 business days.
2 of 4
Rough costs beside each fix, whether I'd be the one doing it or not.
3 of 4
A straight answer on whether a Nothing-to-Hack rebuild makes sense, or whether you should stay put for now.
4 of 4
A 45-minute walkthrough a few days later, so you can argue with it and ask what any of it means.
It doesn't fix anything, clean up an active compromise, or try to break in; it's an inspection. The free call is a glance from the street. The audit is me, inside, with a flashlight.
Everything I check5 groups, 23 checks
Security
- Your CMS, theme, and plugins, against versions with published issues
- Admin accounts, MFA, and old users nobody closed
- Backups, and whether a restore has ever been tested
- Hosting and server basics
- TLS and security headers
- Signs that something has already happened
Domain and email
- SPF, DKIM, and DMARC
- Registrar lock and DNSSEC
- Who really controls the domain and the DNS
- How easy it is to send email that looks like you
Performance
- Core Web Vitals and PageSpeed, mobile and desktop
- How heavy your images are
- Every third-party script, and what it is doing there
Search and AI visibility
- Indexing and Search Console health
- Titles, descriptions, and headings
- Structured data
- Your name, address, and phone across listings
- How AI assistants describe you today
Basics
- Mobile layout
- Broken links
- Forms that don't actually deliver
- A quick accessibility pass
- Disclosures that match what the site really does
Run a nonprofit or a school? The audit has a nonprofit rate, with the same report and the same credit. Book at the nonprofit rate
Search and SEO: easier to find, and described correctly.
SEO, in plain terms: I make your site clear and easy for search engines and AI assistants to read, and keep your facts consistent everywhere. Nobody can honestly promise rankings or AI mentions, so I write down where you stand before anything changes.
Every site I build has the basics done right already. The setup is the active work, and it works on WordPress too. If search really drives your business, Search Growth keeps at it month to month, and if a month goes by with nothing worth improving, I'll tell you to pause it.
An expert on call, not just for the website.
Some clients don't want a project. They want a number to call when something looks wrong, and someone who already knows how their setup fits together.
Every quarter I write a review of the site, the domain, the email, and the accounts around them. It isn't a promise that nothing will go wrong. It's a promise that I'm looking, and that you can reach me.
Some jobs aren't websites at all: an internal tool, some automation, a form that has to talk to something you already run. I've spent my career writing software, so I take these on when the fit is right and scope each one on its own.
Questions people ask.
- Can I edit it myself?
If you need to, yes. I'd rather build the one thing you actually change than hand you a system with 25 windows to keep locked. Most people send the change to me instead, and it's live within two business days; with upkeep, that's Site Care Plus. An editor that writes your changes straight into the code is in progress and not offered yet.
- I'm on WordPress. Can I move?
Yes. I ran WordPress for years and managed well over a hundred sites on it, so this isn't a case against it. Your search rankings come with you: a redirect for every old address, your titles and descriptions carried over, and Search Console connected. Not ready to switch? Interim hardening is a 90-day bridge for the site you have, credited toward a rebuild within 12 months. Both are on the Pricing page.
- Who hosts it, and do I own it?
I host it, as part of upkeep. You own the domain and the Git repository, so there's no lock-in. If your organization needs its own hardware, I'll set that up and harden it.
- What happens to my email?
Nothing. Email lives in your DNS, not your website, and I handle the DNS at launch so nothing drops.
Start with a phone call.
Thirty minutes, free. Tell me what the new site has to do, or what's been bothering you about the one you have. I'll tell you which step makes sense, even if it's the free one, and I'll still be here after.
Warmly,
Timothy MorganOwner & Web Consultant, Sasaron Web Solutions248.245.2796 · [email protected]I reply within one business day.