How we build
Marketing, IT and operations each sign off on a new platform for different reasons, so this page has a track for each. Every track answers the questions that team asks us, with evidence where we can show it.
Which team are you on?
Choose one to see what matters to your team. You can switch at any time.
Launch on schedule, edit without waiting on a developer, and keep the search traffic you have earned.
Publish without waiting on a developer
Your team edits words, images and whole pages in an editor built around your site, checks a live preview, and publishes. Sanity by default, or the CMS you already use.
Try it: change the headline.
Keep your rankings through the relaunch
Before launch we map every old address to its new home, then check every one on launch day, so links and search rankings carry across. When we relaunched this site, nothing broke.
old addresses still work after our own relaunch
- flarewebdesign.comChecking
- flarewebdesign.com/services
- flarewebdesign.com/services/web-development
- flarewebdesign.com/services/search-engine-optimization
- flarewebdesign.com/services/research-and-development
- flarewebdesign.com/services/support-and-upgrades
- flarewebdesign.com/contact
- flarewebdesign.com/privacy-policy
- flarewebdesign.com/cookies-information
Fast on the phones your customers use
Slow pages lose visitors and rank lower. We hold key pages to Google’s “good” Core Web Vitals before launch and keep watching them after.
Know what’s working
Analytics, conversion tracking and heat maps go live with your site on launch day, tested on a private copy of the site first. On Core and Accelerator, your monthly check-in brings what they show: where attention goes, where people leave, and what we would change next.
Measured. The heat shows what visitors look at. The scale beside it shows how far down the page they get.
No black boxes: a platform you own and can take anywhere, mainstream technology, documented code and standards you can hold us to.
Yours to keep. Ours to run, if you like.
We can host and maintain the platform for you on our AWS or Vercel, as a managed service, or set it up in your own accounts and work in them alongside you. Either way the code is yours, it is built on mainstream tools any good team could pick up, and if you leave, it goes with you.
Serves every page from servers close to your visitors, and builds a private preview of every change. Chosen for the product.
- Runs in
- Flare’s accounts, managed for you
- Flare
- Hosts, updates and monitors it
- If you leave
- It goes with you
Secure by default
There is very little to attack. No WordPress login to guess, no plugins to patch, no database panel on the web, and keys live in the host’s settings, not in the code. Anything the public can send, from a form to a sign-up, is checked first. Every response carries security headers, and we will work through your vendor security review.
Seen in thermal: Bots looking for a way in, turned away Real visitors, let in
Tried on this site/wp-login.php 403 · /wp-content/plugins/ 403 · /phpmyadmin/ 403 · /.env 404 · /.git/config 404
Every response carriesstrict-transport-security · x-content-type-options · referrer-policy · x-frame-options · permissions-policy
We go looking for vulnerabilities
Every platform we look after is checked against newly published security advisories. AI helps us sort what reaches your live site from what only touches build tools, an engineer confirms it, and the fix ships as a tested update. You don’t have to ask.
Checking all 634 packages your platform depends on against every published security advisory.
Every change tested before it ships
Automated tests guard payments, forms and sign-in. The Sanity editor is set up in the same code as the site, so its fields always match the pages and are tested with them. Each change gets its own preview to check before it goes live, and error monitoring runs from launch day.
- Change
- Tests
- Preview
- Review
- Live
Accessible, and auditable
WCAG 2.2 AA by default, stricter on request. We test with a keyboard and a screen reader, not just an automated scanner.
- 100Home
- 100Services
- 100Support & upgrades
- 100Pricing
- 100How we build
Tools your team can actually run, someone to call when it matters, and costs you can predict.
Know the cost before you sign
Sprint, build and plan prices are published. Discovery is credited to your build, the build is a fixed quote, and aftercare is a flat monthly plan you can pause or cancel.
Someone answers, fast
Aftercare comes from the engineer who built your platform, with response times in writing and outages handled first on every plan.
A date you can plan around
A timeline agreed before you sign, a review with the person building it every week or two, and a private link to the latest version in between, so launch day is never a surprise.
- Week 1
- Week 2Fixed quote
- Week 3
- Week 4Review
- Week 5
- Week 6Review
- Week 7
- Week 8Review
- Week 9
- Week 10Launch
- Weeks 1–2DiscoveryEnds with a plan and a fixed quote for the build.
- Week 3Your private link opensThe build starts. Open the link any day to see the latest version, with no status reports to wait for.
- Weeks 4, 6 and 8ReviewsYou go through the work with the person building it, every week or two.
- Week 10LaunchOn the date agreed before you signed.
Between reviews: open your link any day to see the latest version. No status reports.
Your team can run it without us
Admin tools designed with the people who use them, recorded walkthroughs for every routine task, and documentation kept with the code.
Bring your team’s questions to the first call
Marketing, IT and operations each get straight answers, and every build has a fixed price before it starts.
The full list
Every default in one place, for a vendor or security review. Anything stricter your organization needs goes into the proposal.
You own your platform
- Hosted and run by us, or in your own accounts
- No per-transaction fees
- No lock-in: if you leave, it goes with you
Security baseline
- Two-factor sign-in and least-privilege access, removed when work ends
- Secrets in managed environment settings, never in code
- Security headers and rate limits on public endpoints
- With an aftercare plan: dependency updates, and critical patches applied promptly
Your data, and if something goes wrong
- If something goes wrong, you hear from us as soon as we know, while we investigate
- Any personal data we hold is deleted when our agreement ends
- Any earlier release can be put back, and content keeps its edit history
Mainstream, well-supported technology
- Custom-built on Next.js, React and TypeScript, never a template
- Content, payments, email and realtime from established providers, picked for the project and named in the proposal
- Already have a CMS, payment provider or host? We can build on it
Accessibility
- WCAG 2.2 AA by default, stricter on request
- Tested with a keyboard and a screen reader, not just a scanner
- Color contrast and reduced-motion support
Performance on key pages
- Largest Contentful Paint under 2.5s
- Interaction to Next Paint under 200ms
- Cumulative Layout Shift under 0.1
Quality and reliability
- Automated tests on payments, forms and sign-in
- A preview deployment for every change
- Error monitoring from launch day
Search and migrations
- URL-by-URL redirect map
- Structured data and sitemaps
- Search Console and Bing Webmaster Tools set up
AI, used responsibly
- Everything AI helps make is reviewed by a senior engineer
- AI features answer from your own content and data
- Your data is never used to train third-party models
Documentation and handoff
- Setup and architecture documentation
- Recorded walkthroughs for your team
- A handoff session before launch