WordPress Development & Design

It depends who edits the site. If marketing staff build new landing pages every month, a page builder with locked global styles saves developer time. If the site changes rarely, a custom block theme is lighter and has fewer moving parts. Page builders also add another major plugin to keep updated, and switching away later is close to a rebuild. We weigh those trade-offs with you rather than defaulting to one.

Usually. We take a copy of the infected site for reference, replace compromised files from clean sources, check the database for injected content and rogue admin users, rotate every password and key, and update or remove the plugin that let the attacker in. Then we check Google Search Console for security warnings and request a review if one was issued. Hardening and regular updates afterwards reduce the chance of a repeat.

At minimum: core, theme and plugin updates tested before they go live, off-site backups that have been test-restored, uptime monitoring, security scanning and a regular check that forms and tracking still work. Updates that break something should be rolled back before visitors see the problem. If someone in-house can do this reliably, you may not need a plan, and the tools can be set up for them instead.

It varies. Rescuing an existing site might take a few hours; a new custom theme with integrations is a full project. The main drivers are the number of templates, whether content needs writing or migrating, and how many plugins or integrations are involved. Care is priced monthly by site size and update load. Our budget guide shows how website costs sit alongside SEO and ads.

Yes, from the outside. The audit checks speed, mobile layout, enquiry forms, indexing and on-page SEO, and flags visible signs of an outdated theme or plugin conflicts. A full plugin and security review needs admin access, which is scoped separately. You still get a prioritised checklist you can hand to whoever manages the site. Request your free audit and checklist.