A website that represents you well and does not leak
Your site is the first thing a patient family, a referring physician and a job applicant see. We build it to look professional, load fast, be usable by everyone, and meet a written security standard.
Professional on the surface, careful underneath
Design and build
Clear, calm, mobile-first design written in plain HTML, CSS and a little JavaScript. No database to hack, no plugin to go out of date.
Accessibility
Built to meet WCAG 2.2 AA: keyboard navigation, readable contrast, labeled forms and meaningful headings, because your patients and staff are not all the same.
Findable
Fast pages, structured data and clean headings, so families and referral sources find you when they search.
Hardened forms
Contact and job-application forms with rate limiting, bot traps, field limits, and uploads verified by content, not by file name.
Security headers
A strict content security policy, HTTPS only, and the full set of browser protections, checked automatically.
Hosting and care
Hosting, certificates, backups and updates handled for you, with small changes made the same day.
Three decisions that matter more than the color scheme
No tracking by default
Tracking pixels and analytics tags on healthcare websites have drawn regulatory attention and lawsuits. We build without them unless you choose otherwise, and explain the trade-off first.
A website cannot lock a door
A public site cannot safely hold a private page. For staff-only material we build a hidden “doorway” page that links to documents protected by your Microsoft 365 sign-in. The documents never sit on the public web host.
No PHI through the website
Forms say so plainly, and are built so a patient who ignores the warning does not leave a record in a mailbox nobody secured.
Tested after every change
Each site we build comes with an automated test suite that runs after every deployment and emails a report. It checks that:
- Every page loads and has the right title
- The security headers are present and correct
- Sensitive files (
.env, source control, configuration) are not reachable - Directory listings are off
- The contact form works, resists oversized and bot submissions, and rate-limits
- The sitemap, robots file and structured data are valid
This is the same suite that guards this website.
Website FAQ
Do you build for agencies that hire caregivers?
Yes. A careers page with a job-application form is a common request, and it is also the page attackers like to target with disguised resume files. Ours check uploads by content.
Can we update the site ourselves?
You can ask us, and most changes are done the same day. If you want to edit it yourselves, tell us at the start and we will build it that way, and we will explain what that costs you in security.
What about an existing WordPress site?
We can harden it, or move it to a static site. A plain HTML site has far less to maintain and far less to attack.