Services
Everything that can be programmed.
And the part that comes after.
We build websites, web applications, desktop programs and internal systems for companies where carelessness costs more than care. By hand, without a page builder and without a bought template. Once it is live, we keep it running: servers in Germany, attack protection, updates, backups.
- Price
- On request. Every project is costed on its own; the fixed quote follows the first conversation. Payable in full, with a deposit, in instalments or deferred.
- Timeline
- Two to six weeks until launch, depending on scope and counted from a complete brief.
Services 01 · Catalogue
Eight areas, one workshop.
The list shows what comes up regularly. It is not a boundary: if it can be programmed, it can be built.
01
Websites and web applications
From a single page to an application with sign-in, roles and logic of its own.
- Company sites and landing pages
- Applications with user accounts and permissions
- Several languages, each with its own address
- Accessibility and load times as a part, not an afterthought
02
Programs for desktop and phone
When the browser is not enough: standalone programs for the platform in question.
- Apps for iOS and Android
- Programs for Windows and macOS
- Tools for data processing and recurring routines
- Sync between web, phone and desktop
03
Shops and payments
Selling, booking, taking money, with the checks in the right places.
- Shops and product catalogues
- Connections to payment methods (card, PayPal, invoice)
- Reservations and bookings, in hospitality for example
- Confirmations by mail, automatic and traceable
04
Systems for the day-to-day
Software built around how you work, rather than the other way round.
- Data models made to measure
- Software for sales and staff
- Sign-in and permission management
- Interfaces to the programs you already run
05
Customer portals and admin areas
One place for enquiries, customers and projects, and one for your customers.
- Portals with sign-in, order and project tracking
- Admin areas for enquiries and master data
- Document areas for contracts, quotes and invoices
- Messages between you and your customers
06
Design in any direction
No house look. The visual language follows the brand, not a template.
- A visual language of your own instead of bought themes
- Design for web, app, program and print
- Motion and depth from code, without outside libraries
- One brand world across every channel
07
Being found, by AI as well
Search engines are only half of it now. The other half are answer engines.
- Technical and editorial search engine work
- Visibility in AI answers
- Your own visitor statistics, without Google Analytics
- Continuous measurement instead of a one-off pass
08
Operation, security and GDPR
The part a page builder does not include, and the one you only miss once it is gone.
- Hosting in Germany, encrypted connections, daily backups
- Protection against automated attacks
- Updates and security fixes, continuously
- A GDPR-compliant build including the legal texts
Services 02 · Running it
Almost anyone can build now. Running it is the work.
Producing a site has never been easier. Every reachable server on the internet, though, is scanned by automated software around the clock. Protecting it, keeping it current and backing it up is not a step — it is a standing condition. The four figures below come from outside sources.
51 %
of global web traffic in 2024 was software, not people. The majority for the first time in ten years.
Source: Imperva Bad Bot Report 2025
37 %
of all web traffic was malicious software, looking specifically for weak spots, logins and open doors. In 2023 it was 32 percent.
Source: Imperva Bad Bot Report 2025
45 %
of the code produced by language models contained security flaws. Tested across more than 100 models.
Source: Veracode GenAI Code Security Report 2025
28.65 million
sets of credentials sat exposed in public source code in 2025. That is the first thing the machines look for.
Source: GitGuardian State of Secrets Sprawl 2026
Section A A
The same five layers, cut open.
A section is the drawing you make when the elevation stops explaining things. Hatching means there is material here. A dashed edge means there is nothing. Send an automated request through both versions and watch where it stops.
No request sent yet.
01Visitors
- Where it goes wrong
- In more than half of the cases there is no person here at all, but software working through every reachable address.
- What runs against that
- We change nothing here. Traffic arrives the way it arrives.
02Connection
- Where it goes wrong
- With no limit in place, a script can try logins by the million. Real visitors never notice a thing.
- What runs against that
- Encrypted connections and layered protection against automated requests. This is where the vast majority ends.
03Application
- Where it goes wrong
- The page looks signed in but never checks the permission on the server. Add to that components whose fixes were never applied.
- What runs against that
- Every permission is checked where it counts: on the server. Updates and security fixes run continuously.
04Data
- Where it goes wrong
- Set up wrongly, the database is reachable from the internet and the credentials sit in the source code. No attack required.
- What runs against that
- The database is not reachable from outside, credentials live apart from the source code, and they get rotated.
05Backup
- Where it goes wrong
- Without one, the last working copy decides whether a failure costs hours or weeks.
- What runs against that
- Regular backups and monitoring that tells us what has failed before you notice.
The five layers are common industry categories, not a description of one particular system. How far the other direction can be taken is written up as its own case: our showpiece ships under default-src none, the strictest rule a browser knows — the page is not allowed to load anything by itself. The huliguli case →
And the other way round, so nobody reads this as a threat: build things, try things, learn. Anyone running a site in public does take on responsibility for the data passing through it, both their own and the data customers hand over. More than two thirds of all breaches come down to a human factor, not to a break-in of the kind films show.
Sources: OWASP Top 10:2025 (A01, found in 100% of the applications tested) · Cloudflare, State of Application Security 2024 (around 209 billion threats blocked per day) · Verizon Data Breach Investigations Report 2024 (68% human factor)
Services 03 · Support
One login that shows where things stand.
Build with us and you get a portal of your own. It is not an add-on product but the place where the project, the messages and the paperwork meet.
- The current state, any time
- The portal says what is being worked on right now. Every step carries a state: open, in progress, done.
- A direct line
- Messages go to the person who handles your account. No chat window with a canned reply.
- Several projects, one place
- Each one with its own state, its own order of work and its own history.
- Four hours a month included
- Per project and month, for questions, requests and advice. The work that follows is billed separately.
- Every document, any time
- Contracts, quotes and invoices sit in the portal and download as PDFs.
- The account is yours
- Set notifications, review sign-ins, change the password. Your password is not something we can see.
Services 04 · Questions
What people ask before the first conversation.
If your question is missing, just ask it. An answer comes within one working day, from the person who does the building.
- What does a project cost?
- On request. Every project is costed on its own, by scope, features and design. After the first conversation you get a fixed quote listing the work and the payment terms. Payment in full, a deposit with the balance later, instalments or deferred payment are all possible. Imprint, privacy policy and terms are always included.
- How long until a website is online?
- Two to six weeks, counted from a complete brief and depending on scope. Larger projects such as apps, shops or custom software are planned with fixed interim stages that you follow in the portal.
- Do you build unusual one-off requests?
- Yes, that is what we are here for. The list above shows what comes up regularly, it is not a limit. If it can be programmed, we build it: from a tool for one trade to an interface into your inventory system.
- Could I not just build a website with AI myself?
- Building it, yes — that part has become surprisingly easy. The difference is in running it. Tested across more than 100 language models, AI-generated code contained security flaws in 45 percent of cases (Veracode 2025). That is not an argument against AI; we use it deliberately ourselves. It is an argument for someone who knows what to look for afterwards and who stays responsible for the running system.
- Does anyone even attack a small company site?
- Yes, though not personally. More than half of the traffic on the internet consists of software that works through every reachable address looking for known weak spots (Imperva 2025). To that software a small site is not too unimportant a target, it is simply another one.
- Who takes care of updates and backups?
- We do, continuously and without you having to act. Components are kept current, security fixes are applied and backups are taken regularly. Nobody serious promises one hundred percent on the internet. We treat security as ongoing work and put our name to it.
- Do you take over existing websites?
- Yes. We look at what is there, carry over content and data, and rebuild it technically and visually. Address and content move across without visitors noticing an interruption.
- Do you work in line with the GDPR?
- Yes, throughout: hosting in Germany, our own visitor statistics instead of Google Analytics, clean consent and legal texts. On our own pages there are zero requests to third parties, fonts included.