Website Services

Overview

Most small-business websites run on autopilot — outdated software, weak admin passwords, no backup tested in years, and a host that has not been competitive for half a decade. CGetty handles the practical work of getting a site stood up correctly, migrated cleanly, kept up to date, and hardened against the attacks that actually hit small-business sites. Work spans WordPress (the most common platform we support), Wix, Squarespace, GoDaddy Website Builder, and plain HTML sites — whichever platform you are already on or want to move to. Not included: original visual design, custom theme or plugin development, SEO or paid ad management, copywriting, e-commerce, or membership site builds — that work belongs with a design agency or marketing firm.

Website Setup & Migration

Stand up a new website or migrate an existing one off a slow, insecure, or end-of-life host. Migration covers the full path — domain and DNS configuration, SSL/TLS certificates, email authentication (SPF, DKIM, DMARC) to keep your domain off spam blacklists, content and asset migration, staging-environment validation, and a hardened baseline before the new site goes live. Setup for new sites includes choosing a sensible host and platform, configuring a clean default template (or one you have already picked), publishing your initial content, and walking you through editing it yourself if you want to.

Typical Work

• Migrating between platforms — WordPress, Wix, Squarespace, GoDaddy Website Builder, or hand-coded HTML
• Moving from an aging managed host to a faster modern one
• Standing up a new site from scratch for a sole proprietor or small office
• Domain transfers, DNS cleanup, and email deliverability (SPF/DKIM/DMARC) fixes
• Pre-launch security and performance baseline before the site goes live

Billed as a one-time fixed-quote project. Scope and price are agreed up front — no hourly meter, no surprise add-ons.

Website Maintenance & Support

Ongoing operational care for an existing website so it stays current, secure, and online. Software updates are tested before they hit production, with rollback if something breaks. Backups are configured and verified by periodic restore testing — not just “backups exist” but “backups actually restore.” Uptime monitoring catches outages before your customers do, and when something breaks, you have a direct line to a real technician — not an agency support queue.

Typical Work

• Routine software updates — plugins, themes, CMS core, and platform changes (with backup-before-update and rollback)
• Content edits — page updates, new posts, image swaps, contact-form changes
• Backup configuration and quarterly restore validation
• Uptime and SSL-expiry monitoring
• DNS and email-authentication (SPF/DKIM/DMARC) maintenance
• Direct technician support for site issues

Available as a recurring monthly plan or bundled into Managed IT & Security. No long contracts.

Website Security Hardening

Lock down an existing website against the attacks that actually hit small-business sites. The threat model is not sophisticated nation-state actors — it is automated scanners hammering admin login pages, supply-chain compromises in popular plugins or extensions, and pharmacy-spam injections that quietly poison your SEO. Hardening work removes the low-hanging vulnerabilities, monitors what remains, and gives you a written remediation plan if anything is already compromised.

Typical Work

• Admin lockdown: enforced strong passwords, MFA where available, restricted admin access where appropriate
• Plugin or extension audit: identifying abandoned, vulnerable, or unnecessary add-ons and replacing or removing them
• File integrity monitoring so unauthorized file changes are detected quickly
• Hardened CMS configuration — file permissions, configuration files, API limits, and legacy endpoints where applicable
• Compromise assessment: if the site is already infected, identifying the entry point, removing malicious files, and producing a written remediation report
• DNS and email-authentication (SPF/DKIM/DMARC) to prevent your domain from being spoofed for phishing

Available as a one-time engagement or as part of an ongoing monthly plan.