Starter Site
$1,500 A small, fast, professional site for a business that needs to look credible online now: up to three pages, built on the same stack as our larger builds, live in about two weeks.
- Up to three pages (typically home, services, and contact) on your own domain
- Mobile-first build with the on-page SEO basics handled: real page titles, meta descriptions, sitemap, and robots.txt
- Click-to-call and click-to-email that work properly on a phone, plus a contact form that reaches your inbox
- Google Business Profile and schema markup wired up so you're findable in local search
- Two rounds of revisions, then handover. The same maintenance plan is available if you want it
What that price covers Up to three pages, with text and photos supplied by you, and two rounds of revisions inside a two-week window.
What changes it
- Pages past three, which moves this into the full Website Design build below
- Copywriting or photography, if you don't have usable text and images ready
- Online ordering, booking, or payments: any of those is a full build, not a starter
- Custom brand or logo design, as opposed to applying branding you already have
Website Design & Maintenance
$3,000 – $9,000 + $199/mo A fast, professional website built for your business: clean design, mobile-ready, and actually maintained after launch so it stays current and doesn't break.
- Custom design scoped to your business: brochure sites (5–10 pages), service sites, and landing pages
- Mobile-first, performance-optimized build with fast load times, proper SEO meta, and clean HTML
- Built as static files, which removes an entire class of attack rather than defending against it: no plugins to exploit, no database to breach, no admin login to brute-force. The compromise we find most often on local business sites, a hidden block of spam links injected into an out-of-date WordPress install that is invisible to visitors and indexed by Google, is not something that can happen to a site built this way
- Technical SEO health check: canonical tags, duplicate-host (www vs. apex) and redirect-chain audits, sitemap/robots.txt validation, the kind of misconfiguration that quietly tanks Google Search Console indexing without ever throwing a build error
- Owner-managed blog and content editing: a branded editor on your own domain, so your team writes and publishes posts themselves in a browser: no code, no WordPress, no waiting on us. Publishing is the deploy: a post is live in about a minute
- Publishing guardrails most CMS setups don't have: drafts generate no page at all rather than an unlisted one anybody can guess, images are resized and converted automatically before they're ever stored, posts are validated at publish time so a malformed one fails the build instead of shipping broken, and every edit is a tracked revision that can be rolled back
- Ongoing maintenance plan: security patches, plugin/dependency updates, uptime monitoring, recurring Search Console health checks (not just a one-time launch audit; misconfigurations like this can sit invisible for weeks between checks), and one content refresh per month
What that price covers $3,000 covers a five-page site on an adapted layout. $9,000 covers up to fifteen pages with a fully custom design and the owner-managed blog. Maintenance is $199/mo on either, billed monthly and cancellable.
What changes it
- Page count, and whether the design is adapted from a layout or drawn from scratch
- Copywriting and photography, versus working with content you supply
- E-commerce, booking, or payment flows, which carry their own testing and compliance work
- Integrations into a CRM, POS, or booking system you already run
- Multi-language or multi-location versions of the same site
Website Security Hardening & Monitoring
$1,800 + $199/mo monitoring Keep the site you already have, and close the holes in it. We set up and configure proven security tooling on your existing site: firewall, vulnerability patching, tested backups, and monitoring that tells us before it tells your customers.
- Cloudflare in front of the site: WAF rules, bot filtering, forced HTTPS, and DNS moved onto a setup we can actually manage
- Platform hardening: two-factor on every admin account, removal of unused plugins and dormant admin users, locked-down file permissions, disabled file editing from the dashboard
- Automated off-site backups, with a restore tested once in front of you, because an untested backup is a guess, and the moment you need it is the worst moment to find out
- Vulnerability monitoring on the plugins and core you run, so a newly-disclosed exploit is something we hear about rather than something you find out about from Google
- A written record of what was changed, which accounts exist, and where the backups live, so this is maintainable by someone other than us
What that price covers One site, on hosting that gives us admin and DNS access. $1,800 covers the setup; $199/mo covers ongoing monitoring, patching, and backup checks. Assumes the site is currently clean. See below.
What changes it
- A site that is already compromised needs cleaning first, and that is not part of this engagement. Malware removal is quoted separately and is usually best done by your host or a dedicated vendor who warranties the result. A firewall filters traffic coming in; it does not remove a backdoor already inside the install. Ourfalian & Ourfalian sits behind a paid WAF and the injected spam is still in its page source today
- Additional sites, each with its own hosting and DNS to bring under management
- Hosting we can't get real access to, or a platform with no plugin/update model to monitor
- Compliance evidence (HIPAA, PCI, SOC 2), which is a documentation exercise well beyond hardening
- Incident response with a response-time commitment: monitoring tells you quickly, but a guaranteed callout window is a different service and priced as one
Web Portal Creation
$20,000 – $45,000 A custom web portal your customers or staff actually log into: client dashboards, internal tools, and self-service portals built for SMB scale, not enterprise budgets.
- Scoping session to define user roles, data sources, and core workflows before any code is written
- Authenticated portal with role-based access: client views, admin views, and team management
- Live data integrations connecting to your existing CRM, billing system, or database
- Dashboard, reporting, and document/file management features scoped to your use case
- Full handover with documentation, hosted on your infrastructure, no lock-in to us
What that price covers $20,000 covers two user roles, one integration, and a standard dashboard and document area. $45,000 covers up to five roles and three integrations with custom workflows.
What changes it
- Number of distinct user roles, since each one is its own permission surface to build and test
- Number of live integrations, and whether those systems have usable APIs
- Real-time features: live notifications, presence, or collaborative editing
- Compliance requirements (HIPAA, SOC 2) that have to be evidenced, not just implemented
- Native mobile apps, as opposed to a portal that works properly in a mobile browser
