Service · Websites and web applications

WordPress websites

WordPress has two reputations at once: effortless to use and a security headache. Both are true, and which one applies depends on who sets the site up and who looks after it afterwards. The same software can power a quick site where the front office publishes a post in five minutes, or a tangle of forty add-ons that nobody dares to update. That outcome is settled before any code is written. Suppose a tax advisory firm in Graz with twelve staff wants to publish short guides on employee tax refunds, offer an English version for clients from abroad and let prospects book a first consultation online. Once those requirements are written down, a bespoke theme and a handful of well maintained plugins are enough. Anything beyond that needs a reason.

10 plugins at most
as a guideline for a service business site
Three roles
author, editor and administrator kept apart
Licences
registered to the company and a shared mailbox
Update log
who updates what, and how often

Everything this covers

These are the building blocks of a WordPress site from Apply. Nothing outside this list gets installed without a written justification.

Settle the details with an engineer

Block theme in your house style

We code blocks for the Gutenberg editor: service overview, team page, price table, appointment notice, download list. Your staff assemble new pages from them without a page builder and without breaking the mobile layout.

Roles and sign-off

We define in WordPress who writes, who reviews and who may touch plugins. Drafts wait for approval, and settings stay in the hands of a small group.

Languages without the mess

German as the main language, English or Italian as a second one via Polylang or WPML, a separate URL for each language and correct hreflang tags so search engines match the versions properly.

Legal notices and consent

An imprint under section 5 of the E-Commerce Act including the media law disclosure, a privacy notice and a cookie banner that only loads analytics and embedded videos after consent, as section 165 TKG 2021 requires.

Forms and appointment booking

Contact forms with a data protection notice, spam filtering without annoying picture puzzles and, where needed, a booking flow that reads free slots from Microsoft 365 or Google Calendar.

Baseline protection from day one

Two-factor sign-in for every admin account, limited login attempts, caching, images in WebP and a daily backup stored away from the web server.

Our working method

The schedule is rarely driven by the coding. It depends on how many different page types the site needs and when the copy is ready.

01

Content inventory

Before anyone talks about colours, we use a video call to list what your team publishes today and plans to publish: news, job ads, events, expert articles. That list defines the blocks we build.

02

Build and try the blocks

The theme takes shape on a test environment. You create two or three real pages there yourself and quickly see whether the blocks work in daily use.

03

Content and connections

Copy is moved over or entered fresh, forms are connected to your mailbox or CRM, language versions are linked and redirects from old addresses are prepared.

04

Handover

Go-live with 301 redirects, every account transferred to your company, a training session over Teams or Google Meet and a short document stating who applies which updates and how often.

Once a paid plugin licence lapses, the plugin carries on running while its security patches quietly stop. We come across this constantly on WordPress installations at smaller firms. A form builder or SEO add-on was purchased long ago with the card of an employee who moved on, the yearly charge bounced, and the site kept going unpatched for months. To avoid that, each licence we buy is tied to your firm and to a generic mailbox such as office@ at your domain, and its renewal date is written into the handover notes.

Frequently asked questions

It can, as long as someone takes care of it. Security releases for the core appear regularly. Trouble usually comes from add-ons their authors have given up on, guessable passwords and patches left waiting. Keep the add-on list short, switch on two-factor sign-in and name one person in charge, and WordPress holds up as well as comparable systems.

We check that first. If the theme is lean and the plugins are current, the site can be modernised step by step. If everything hangs on a heavy page builder or an abandoned commercial theme, a new theme is often cheaper. Either way we keep your copy, images and URLs.

Only if you actually sell online. For a law firm, a medical practice or a trade business without a shop, WooCommerce is dead weight that still needs maintenance. If a shop becomes relevant later, it can be added without rebuilding the theme.

With a provider of your choice running data centres in Austria or the EU, for example managed hosting or your own VPS. The contract is in your company name. We can set up the server or work with your existing host as long as it offers current PHP versions and SSH access.

That depends on the number of page types, languages and integrations. After the first video call you receive a quote based on effort, split into phases. Later changes are billed at €110 per hour plus VAT.

Tell us about your WordPress site

Briefly describe what the site should do and whether one already exists. We will reply within one working day with questions and a suggested call time.

Availability
Monday to Friday, 8:00-17:00 Austrian time (CET/CEST), reply within one working day
Meetings
By video on Microsoft Teams or Google Meet

We only use cookies that are technically required: to run the website and to remember the location you picked. There are no advertising or tracking cookies. Details are in the privacy notice.