Your website, fast and secure.

I look at your site from the outside, the way anyone can, and send you two pages on what's fine and what needs fixing. Free. If you want to go on, I tune it up with a tested backup and measurements before and after, and I keep an eye on it every month. WordPress first; Wix, Tiendanube and Shopify too.

Ask for the free check-up

I'm Federico. I spent two years rebuilding WordPress and Elementor sites for a consultancy, and I work alone: the person who replies is the one who checks your site.

No access, nothing installed
45 minutes
Report within two business days

Check-up · institution · 2 Oct 2026

5 of 7 lines need attention

Outdated software: Core from 2022, page builder from 2023.Known flaws, fixed long ago.
Fake emails possible: The email is missing one protection.Anyone can send mail that looks like it came from the institution.
Usernames exposed: Three usernames can be seen from outside.Half the work of guessing a password.
Slow to respond: Almost a second before anything shows.Nothing is kept ready to serve.
On a spam list: The domain is listed on Spamhaus.Emails that mention the site may bounce.

Fine: the browser padlock (valid for 65 more days) and Google, no warnings.

What I would do first Update everything with a tested backup first, and close the door on fake emails.

A real check-up from this month, name changed. Seven of thirty-nine lines, in 45 minutes, nothing touched.

What I find when I look at a site

All of this came out of real check-ups this year. None of it is rare.

The page builder is from 2023 and has thirty known, patched vulnerabilities.
Four people log into the admin panel with the same account and the same password.
The domain email has no DMARC: anyone can send mail that looks like yours.
Nobody has ever tested whether the backup restores.
The server takes almost a second to start responding because it caches nothing.
The domain sits on a spam list, and the institution found out because emails were bouncing.
The privacy policy is hosted on the previous agency's website.

What can't be seen from outside (users, backups, files) I only look at with your written authorisation.

Four ways to hire me, smallest first

Check-up

Free

45 minutes on my side, none on yours
I look at your site from the outside and send you a two-page report: what's fine, what needs fixing and in what order, and what I couldn't see without logging in. All you give me is the address.
- Secure connection, visible versions, exposed accounts, domain email, spam lists, speed on a phone, how Google sees you.
- No access, nothing installed, nothing touched.
- You get it within two business days.
Ask for the check-up
Tune-up

USD 300

list price 400 · one-off
I log in with an account in your name, take a full backup and test that it restores. Only then do I touch anything. Afterwards we measure again with the same tool and I show you both numbers.
- Internal diagnosis, one to two hours: users, backups, files, database, hosting.
- Updates tested on a staging copy before production.
- Named accounts and two-factor login for everyone who uses the panel.
- Cache, images, third-party scripts, PHP: what makes it load fast on a phone.
- Domain email with SPF, DKIM and DMARC.
- Before-and-after report in plain words, with a technical annex if you have an IT person.
- Four to eight hours of work, spread over one or two weeks.
- Internal diagnosis on its own: USD 100, deducted if you go on.
- Shops (WooCommerce, Tiendanube): 50% more, because there are payments and orders to test.
Guard

USD 60 a month

list price 80 · hosting not included
Every week I read the alerts and scan the site. Every two weeks I update, with a backup first. Every month I test that the backup restores, check who logged in, measure speed and send you one page on what happened.
- Downtime monitor around the clock, with alerts.
- One standard clean-up a year included, if someone gets in.
- Response during business hours, Monday to Friday.
- Doesn't include hosting or design changes; those are quoted separately if needed.
- Month to month, cancel whenever you like. Yearly: pay ten months for twelve.
Rescue

USD 300

list price 400 · up to eight hours
If you've already been hacked: I isolate the site, preserve the evidence, clean files and database, rotate every credential in the right order, harden and verify nothing is left. I explain what happened in one page, and in a longer one for whoever comes next.
- Anything past eight hours (rebuilding from a backup, dealing with the host) is billed at USD 40 an hour, with a cap we agree on before starting.
- Includes the first month of Guard, because the first week is when they come back.
- It may mean taking the site offline while I clean. I tell you first.

Launch prices for the first five clients or until 31 December 2026, whichever comes first. If you join at that price, Guard stays at that price for as long as you keep it.

How I work

I spent two years rebuilding WordPress and Elementor sites for a consultancy, in teams of more than five, and before that I made more than fifty sites for three agencies. I know where they break.

For this service I built my own method: 146 checks, each with where to look, what to look for, what to do if it fails and what not to touch. I run all of it, and the report is yours to keep.

This site passes its own check-up: top grade on Mozilla's header test, hardened secure connection and no third-party scripts. Measured on 3 October 2026.

More about how I work

Four rules I don't negotiate

Nothing gets touched without a full backup I've already tested.
Passwords don't travel by WhatsApp or email. You create an account in your name and delete it when I'm done.
I measure three times, with the same tool, before and after. You see the middle value, not the best one.
Without your written authorisation I only look at what anyone can see. Logging in without permission is a crime, and there's no need for it anyway.

One case

A hacked institution's site, back online

Educational institution · WordPress · 2026

BeforeThey got in with the password of a shared admin account, left code in the files and in the database, and the host blocked the site.

AfterDatabase restored from a clean backup, named accounts with two-factor login, host coordinated in writing, and the site back online.

Who it's for

Yes

Schools and institutions with a WordPress site an agency built and nobody maintains.
Small businesses with their own site that get enquiries or orders through a form.
Small shops on WooCommerce or Tiendanube.
Sites on Wix, Squarespace or Shopify: there I check the account, the domain, the email and the speed; the inside is the platform's job.

No

Shops that take card details in their own form, without a payment provider. That needs an audit of another size.
Design, content or new features. If needed, quoted separately, after the tune-up.
Hosting. I don't sell it; I tell you whether yours is any good.

Questions I get asked

Do I have to give you the site password?

No. You create an admin account in your name, I work with that one and you delete it when I'm done. For the free check-up no account is needed at all.

My site is on Wix. Is this for me?

The check-up is, and half of the tune-up: domain, email, speed, accounts and installed apps. Files and database are Wix's job, so there's nothing to clean there.

What if I get hacked while on Guard?

Guard includes one standard clean-up a year. If the case needs rebuilding from a backup or a fight with the host, that is billed by the hour with a cap we agree on first.

Can you make sure it never happens again?

No, and I'd be wary of anyone who says they can. What I can say: after the tune-up, getting in costs a lot more, and with Guard someone finds out the same day.

How long does it take?

The check-up, two business days. The tune-up, one to two weeks depending on how much needs updating. A rescue, as long as it takes to come out clean: usually two to five business days.

Which currency?

US dollars. In Argentina, pesos at the official rate on the day of the quote. Guard is paid month by month.

What if I don't go on after the check-up?

You keep the report. It's yours; give it to whoever you like.

Shall we talk?

Paste your site's address in the message and nothing else. Within two business days you have the two-page report, and only then do you decide whether we go on.

The tune-up is paid half up front and half on delivery, once we both see the before-and-after numbers. Guard, month by month.

Buenos Aires · I reply the same day · español / english