Turn ideas into spellbound web experiences.
AI agents, custom web apps, and cybersecurity for small businesses. Built by a certified security analyst — not just a developer.
Packages
Simple, transparent pricing. No dark magic in the fine print.
Starter Spell
Perfect for small businesses launching their first site.
- 1–3 page responsive website
- Custom design based on brand
- Basic contact form
- Basic SEO setup
- Launch support
- Security Hardening Essentials – +$350 one-time
- Pro Security Review – +$750 one-time (for handling user data or forms)
Growth Grimoire
Great for growing brands and lead-gen funnels.
- Up to 7 custom pages
- Conversion-focused copy & layout
- Blog or case study section
- Integrations (Email, CRM)
- On-page SEO best practices
- 1 month post-launch support
- Security Hardening Essentials – +$350 one-time
- Pro Security Review – +$750 one-time (recommended)
- Ongoing SOC-style Monitoring – from $500/mo
Arcane Web App
For custom web apps, dashboards, and MVPs.
- Custom web app development
- Modern UI design system
- API integrations (Stripe, etc.)
- Performance & security focus
- Ongoing support plans
- Security Hardening Essentials – +$350 one-time
- Pro Security Review & Threat Modeling – from $950 one-time
- Ongoing SOC-style Monitoring – from $750/mo (pricing depends on traffic & complexity)
We'll also assess how much security you actually need – so you're not overpaying.
Security consulting for modern web apps
Get guidance from a certified Security+ & CySA+ SOC analyst so your product is secure, not just good-looking.
Productized security services
Fixed-scope engagements. Clear deliverables. No surprise invoices.
WordPress Malware Removal & Incident Response
- Full malware + backdoor scan and eradication
- Database cleanup (spam content, injected rows, suspicious users)
- Credential and access reset; admin and FTP/SFTP hardening
- Post-cleanup verification scan
- Written incident report + 30-day follow-up scan
Best for: Site hacked, defaced, hosting suspended, or showing spam in Google results.
Site Hardening Package
- Vulnerability scan and plugin/theme audit
- File permission and wp-config hardening
- Brute-force, login, and XML-RPC protection
- WAF and security plugin configuration
- Hardening checklist and walkthrough doc
Best for: Site is fine today, you want to keep it that way.
Reputation Recovery
- Google Search Console review and reconsideration request
- Blocklist delisting (Google Safe Browsing, McAfee, Norton, Sucuri)
- Cleanup verification and resubmission
- Status report with timeline expectations
Best for: Browsers are warning visitors, or your site is flagged unsafe.
Email Authentication (SPF / DKIM / DMARC)
- DNS records configured for SPF, DKIM, DMARC
- DMARC reporting tool setup
- Send-test verification across Gmail, Outlook, Yahoo
- One-page summary doc for your team
Best for: Your business email lands in spam, or you want to stop spoofing.
All engagements include a written report and a 30-day follow-up. Emergency same-week starts available for malware/IR.
Security Retainer
from $397/moMonthly hardening checks, monitoring review, patch cadence, and one emergency call/month. For SMBs that want a security partner on retainer instead of waiting for the next incident.
Advisory & consulting
For teams that want strategic guidance, not just a one-time fix.
Security Strategy Session
2-hour consulting call + written action plan
Perfect if you're launching a new app, migrating infrastructure, or just want to know how exposed you really are. We review your stack, risks, and quick wins in one focused session.
- Discovery: quick intake on your business, tech stack, and data sensitivity.
- Architecture review: DNS, SSL/HTTPS, hosting, auth, and high-level infrastructure.
- Risk & gaps: identify the most likely ways you could be attacked or disrupted.
- Action plan: prioritized recommendations you can hand to your dev or IT team.
Ongoing security consulting
Flexible hourly or retainer-based security guidance
Flexible hourly or retainer-based security guidance for teams that want a security partner on call.
- Help evaluating tools, vendors, and integrations from a security perspective.
- Review of new features before launch (auth, permissions, data handling).
- Support during incidents or suspicious activity (what to do first, who to notify).
- Periodic security check-ins and roadmap updates.
Optional retainer and incident-response engagements: $500–$2,500 depending on scope. Incident triage during business hours — this is consulting, not 24/7 monitoring.
Get in touchAll consulting is delivered personally by a certified Security+ & CySA+ SOC analyst with hands-on experience in monitoring, incident response, and securing web applications.
Not sure what you need? Book a general discovery call and we'll decide together if a security engagement makes sense.
Book a discovery callHow the magic happens
Discovery
We unpack your idea, goals, and users.
Design
We craft wireframes and high-fidelity UI.
Build
We develop a fast, secure, maintainable product.
Launch
We ship, monitor, and iterate with you.
Recent spells
A collection of our latest work.
Case studies
Real engagements. What broke, how we fixed it, and how we hardened it.
Tools in our spellbook
We choose modern tools that are fast, secure, and easy to maintain.
Frequently Asked Questions
Ready to cast your next spell?
Tell us about your project and let's create something magical together.