Services

A business application, an API or an interface written for your need, rather than a generic product bent to fit it. PHP (Laravel, Symfony, CakePHP) or Python (FastAPI) on the backend, Angular, Next.js or Astro on the front, PostgreSQL or MySQL. Before anything starts, the quote lists the screens, the business rules and what stays out of scope. On delivery you get the code, the tests and a setup procedure that lets you run it somewhere other than my machine. The repository is in your name from the first commit.

Putting what has been written online, and making it hold. Domain name, certificates, reverse proxy, containers, backups, monitoring and alerts on what goes down. Backups are restored at least once in front of you, on a copy, to check that they really read back. You leave with the access, the written restore procedure and the list of what to watch. Taking over a badly deployed project falls within this scope.

Non intrusive surface audit, or a deeper test under written mandate. I look at authentication, authorisation, what comes back from the browser into your pages, secrets, dependencies and the container. The report is readable by a decision maker: every finding carries its exploitation chain, its fix and its cost, ranked by severity. It also says what is done well, so nobody undoes it thinking they are simplifying, and which false leads were already ruled out and why.

A site produced by an AI or by a previous supplier, which needs to be made reliable or taken further. What almost always has to be redone: API keys shipped to the browser, routes that act on someone else’s resource without checking, no backup and no way back, text and figures nobody can verify. What is often kept: the component structure and the choice of technologies. The quote starts with a short paid audit that returns an inventory ranked by severity and a cost per batch. Nobody quotes a fixed price on a project they have not opened.

What belongs to the code: page structure, indexing, structured data, performance, several languages with the canonical and hreflang tags that go with them. The judgement is on the served HTML and not on the source, because that is what a search engine reads. You get the before and after measurements, and the detail of what was changed. Editorial SEO and link buying are not part of it.