How do I edit the site without a developer?
You ask Claude: “change the opening hours on the contact page”. The change lands as a pull request. Every change gets its own preview link from Cloudflare (or Vercel on its Pro plan), and you publish it with one click. If your team prefers a panel, a git‑based CMS is an add‑on.
What about my plugins, Rank Math and IndexNow? Do I have to do that myself?
No. What plugins did on every page view now happens once, when the site is built and deployed: titles and descriptions, Open Graph, schema, sitemap, robots.txt, llms.txt, redirects and compressed images. After each deploy the changed addresses are sent to IndexNow automatically. Ongoing SEO, audits and internal links are work for Claude with open skills such as
marketingskills. And with no plugins there is no plugin update that can bring malware in.
What does it cost?
A brochure site with no add‑ons is 4 to 8 hours. Pick the size and the add‑ons in the
configurator to see the price and the start date before we talk.
Is updating WordPress not enough?
It is the minimum, and I can do it as first aid. But every patch is a race against the next exploit. In October 2026 two critical flaws were found in PHP itself, and exploits were shown on current WordPress, Drupal and phpBB before the fix was out. A static file has no PHP to exploit. Making WordPress faster does not change that.
Will search rankings drop after the move?
Every old address gets a 301 redirect to its new page, titles and descriptions move with it, and you get a sitemap. Static pages also load faster, which search engines measure.
Do you run security audits or scans?
No scanners and no security audits as a product. I remove the attack surface by moving the site, and in an emergency I patch and lock the old one by hand. If you want a person to read your code, that is the one‑week code audit on
pricing.
What about WooCommerce or a members area?
Out of scope for this offer. A shop or logins is a separate project, and we can talk about it on the call.
Our WordPress may already be infected. Does the backdoor move with it?
No. I export the content only: texts, images and addresses. No PHP, theme or plugin is carried over, so whatever was planted stays on the old server, which is switched off after the move.
What happens to our email?
Mailboxes stay where they are. I copy every DNS record (MX,
SPF,
DKIM,
DMARC, autodiscover), keep the mail records unproxied and send a test message before and after the switch.
WordPress has a plugin for everything. What do we lose?
A company site usually needs a form, analytics, SEO tags, a map and maybe search. All of that works without plugins. Bookings go through a calendar such as Cal.com. A shop, a members area or a large editorial team are a fair reason to stay on WordPress, and then first aid and monthly care still make sense.
We have a blog with several authors. What about roles, approval and scheduling?
Accounts, login and roles come from GitHub: each person has their own account and access to the repository, and every change has an author and can be reverted. A site’s code is public anyway, so the repository can be public too, and then even the free plan lets you require an approval before anything is published. A private repository needs GitHub Team for that. A post with a future date goes live on the next scheduled build. Decap CMS adds a draft, review and ready workflow in a panel. For a newsroom publishing all day, WordPress may still be the better tool, and I will say so.
Can whoever has access to Claude change the whole site?
Access is granted and taken away on GitHub, person by person. Changes from Claude arrive as a pull request, and nothing goes live until someone approves it. The CMS panel can only edit the content fields I give it, while the layout and code stay protected.
Will it look the same as in Elementor? Can I still move blocks around?
The look is rebuilt one to one, or refreshed if you want. Texts, prices and photos you change yourself. New sections and layout changes are a request to Claude or to me, so drag and drop is gone, and that is what keeps the site fast.
What if you disappear? Are we locked in?
The repository, the Cloudflare account and PostHog belong to your company. The site is plain HTML and Markdown, so any developer, or Claude, can keep working on it without me.
What about cookies and GDPR?
PostHog can run in its EU cloud and count visits without cookies until someone consents. The map uses no tracking cookies. If you use other tools that need consent, the banner stays.
What comes after?
Often the next problem: quotes that take a day to write, an internal app without company login, a form that should start an automation. See
quote automation and
company login.
Do I have to upgrade PHP for WordPress in 2026?
If your host runs PHP 8.2 or older, security fixes stop on 31 December 2026 or have stopped already (
PHP). WordPress itself will keep running, so nothing forces the upgrade except risk (
WordPress requirements).
Is hosting a static site on Cloudflare free?
Requests to static assets on Workers are free and unlimited (
Workers pricing). The limits that matter are file counts per version and the 2,000‑rule cap on _redirects (
Cloudflare docs).
WordPress plugin vulnerability: is my site at risk?
Patchstack counted 11,334 new WordPress vulnerabilities in 2025, 42% more than in 2024, and 91% of them were in plugins. For heavily exploited ones, the weighted median time to the first exploit was 5 hours. I move the site to static files on Cloudflare, with no plugins, logins or database left to attack. A brochure site usually takes 4 to 8 hours. When two critical WordPress core vulnerabilities went public in July and September 2026, I flagged each to the team the same evening, then checked whether the company site was exposed and asked for it to be updated.
