The Nothing-to-Hack Website.
It's what I build for most people who call me: built from scratch, by hand, with no plugins, no login page, and no database, so there's nothing on the server to break into and nothing for you to keep updated.
A build starts at $1,000, plus $75/mo for upkeep and hosting, and I look after it from then on. You can price your own below in about a minute, with no account.
The safest part of a website is the part that isn't there.
Most sites carry parts that need looking after every week. Mine leave them out.
A typical site, and one of mine
Your site today
- A CMS with a dozen plugins or more to keep updated
- A login page anyone can find
- A database holding whatever the forms collected
- Fonts and scripts loaded from other companies
- Backups nobody has tested
Your new site
- No plugins. Nothing goes out of date.
- No login page.
- No database.
- No outside scripts.
- The backup is the code. Rollbacks are instant.
What it means for you.
- No more "update available" emails, and no missed update that opens the door.
- Nobody can sign in to your website as you.
- Your site never holds your customers' information, which makes insurance forms easier.
- If something goes wrong, it's undone before most people notice.
- You own the code. Take it anywhere, with anyone.
It costs less because there's less to it.
Most professionally built small business sites run $3,000 to $8,000. Mine start at $1,000, because a site with nothing on it takes less to build and far less to look after.
Starting points
- Starter3 pages: home, about, contact.
- $1,000plus $75/moStart with Starter
- StandardEverything in Starter, with 5 pages instead of 3, plus keep your search rankings.
- $1,550plus $75/moStart with Standard
- Protectedthe one I recommendEverything in Standard, plus email and domain protection and watch over it.
- $2,000plus $165/moStart with Protected
- PracticeEverything in Protected, plus safe patient or client form and connect to your existing portal.
- $2,900plus $165/moStart with Practice
Monthly prices cover upkeep, hosting, and anything you add. Each one is a starting point; change anything below.
One client, after we built his company's site:
“The final product is what we wanted and the look was professional.”1
Price your site.
Pick what you need and the price adds up as you go. The whole build lives in the link, so you can share it, come back to it, or send it to me. Nothing is stored.
Step 1 of 7: Start from
Four starting points, or build it up yourself. You can change anything afterwards.
Step 2 of 7: About you
What kind of business?
I pre-selected what most clients like you take. Change anything you want.
Do you have a website now?
I added “Keep your search rankings” so the move does not cost you your place in Google, and opened up interim hardening under Extras.
Step 3 of 7: Size
3 pages: Home, about, contact. 5 pages: Adds two service or team pages.
Existing copy carried over. Up to ten here; more than that is worth a conversation.
Step 4 of 7: Protect it
The parts that carry my security work. Pick what fits; none of it is required.
What’s this?
Email & DNS authentication
SPF, DKIM, and DMARC set to reject, plus MTA-STS, DNSSEC, CAA, and a registrar lock. Other people can no longer send email that looks like it came from you.
What’s this?
Security monitoring
Alerts for certificate problems, DNS changes, and exposed credentials, plus a quarterly outside scan. Alerts come to me; I handle them.
What’s this?
Secure intake form
A hardened intake form that delivers straight into the system you already use. Because nothing is stored on the website, the site stays out of scope for HIPAA and the FTC Safeguards Rule.
What’s this?
Compliance evidence package
Your controls documented for insurance renewals and, for CPA firms, the written security plan the FTC asks for. Evidence, not certification. Needs email protection and monitoring in place first.
Insurance-ready security summary needs “Email and domain protection” and “Watch over it” in place first, so I added both.
I took “Insurance-ready security summary” back off. It needs “Email and domain protection” and “Watch over it” in place.
Step 5 of 7: Keep it running
Every site includes upkeep and hosting. Most people send me the change instead of running a CMS.
What’s this?
Required. Patching, certificates, DNS, uptime alerts, off-provider copies of every deploy, yearly re-baseline.
What’s this?
Content changes
Up to 3 requests or 2 hours a month. Overage $100/hr. Together with upkeep this is Site Care Plus: $200 a month total. If all you ever change is one thing, like a monthly blog post, ask me: I can engineer a simpler way to publish just that.
Upkeep and edits together are Site Care Plus · $200/mo: one price for hosting, patching, your changes, and an hour of my time each month.
For nonprofits and schools, Ongoing Website Care is $75 a month with an hour of my time included and $50 an hour after that. The Site Audit is $295.
Step 6 of 7: Extras
What’s this?
SEO preservation
A crawl of your current site, redirects for every old address, sitemap and robots files, titles and descriptions carried over, Search Console connected, and a 30-day watch for broken links. Over 30 pages adds $150.
What’s this?
Wire to existing portal
Sign-in, scheduling, or payment links pointed at the portal you already have, so nothing sensitive ever touches the website.
What’s this?
Dedicated server
For organizations that require it. Server cost is passed through from $150 a month.
What’s this?
Interim hardening (90 days)
A compromise check, updates, a plugin cull, MFA on every account, and a firewall. I do not take over your hosting. If the site turns out to be already compromised, cleanup is a separate job. Bought on its own first, the fee is credited toward a rebuild within 12 months.
Step 7 of 7: Timing
When your content is ready and I have confirmed the week.
What happens next.
Step 1: A free 30-minute call
We talk through what you picked and what you actually need.
Step 2: Scope confirmed in writing
I write down what I am building and what it costs, before any work starts.
Step 3: Built in about two weeks
You look it over, tell me what to change, and it goes live.
Rather talk it through now? Call me: 248.245.2796
Questions people ask.
- Can I edit it myself?
If you need to, yes. I'd rather build the one thing you actually change than hand you a system with 25 windows to keep locked. Most people send the change to me instead: "Edit it through me" is $125/mo, and with upkeep that's exactly Site Care Plus. An editor that writes your changes straight into the code is in progress and not offered yet.
- I'm on WordPress. Can I move?
Yes. I ran WordPress for years and managed well over a hundred sites on it, so this isn't a case against it. Your search rankings come with you: a redirect for every old address, your titles and descriptions carried over, and Search Console connected, for $350. Not ready to switch? Interim hardening is a 90-day bridge for $750, credited toward a rebuild within 12 months.
- Who hosts it, and do I own it?
I host it, as part of upkeep. You own the domain and the Git repository, so there's no lock-in. If your organization needs its own hardware, that's $400 to set up, plus the server from $150/mo.
- What happens to my email?
Nothing. Email lives in your DNS, not your website, and I handle the DNS at launch so nothing drops.
- Can you fix the site I have instead?
Yes. That's a care plan, and there's no pressure to rebuild. About Site Care Plus.
Or start with a phone call.
Tell me what the site has to do, and I'll tell you what it would take. The first call is free.
Warmly,
Timothy MorganOwner & Web Consultant, Sasaron Web Solutions248.245.2796 · tim@sasaron.comI reply within one business day.