The paperwork, before you sign it.

You own everything. Always.

The domain is registered in your name and your business's name, not mine. The files, the code, the words, and the photos are yours. Every password and every account login gets handed to you at launch, written down, whether or not you ever plan to use them.

This holds if you stop paying, if you hire someone else, or if you simply stop liking me. There is no version of this where your website is held hostage, because there is no version where I hold the keys alone.

The price is fixed, in writing, first.

Before any work starts you get a written quote naming the exact scope, the exact price, and the payment schedule. There is no hourly meter running in the background and no invoice that arrives larger than the number you agreed to. If the work changes because you want something new, you get a new number to approve before I build it.

Revisions and timeline live in that quote.

I am not going to print a number of revision rounds or a turnaround time on this page and pretend it fits every job. A one-page site for a barber and an online store for a florist are not the same work. Your quote spells out how many rounds are included and what the schedule is, in writing, before you say yes. Ask me to explain any line of it and you will get a straight answer.

What the audit covers, and what it never does.

Ticking the authorization box on the request form means two things: you own or manage the site, and you are giving me written permission to examine it. That permission matters. Looking at someone's website properly without it is not something I will do, which is why the box is required rather than buried in fine print.

What I check

• Your public pages, used the way a customer would use them, mostly on a phone.
• Whether your domain resolves, your certificate is valid and current, and your site actually loads over a secure connection.
• The security headers your server already sends, and whether your site is publicly announcing outdated software with known problems.
• Public records about your business: DNS, email authentication, your Google listing, and how you appear in local search.

What I never do

• Break into anything. No password guessing, no bypassing a login, no exploiting a weakness I find.
• Anything destructive or disruptive. No load testing, no deleting, no changing a single thing on your site.
• Touch private data, customer records, or anything behind a login.
• Test systems that are not yours, including your hosting provider or any third-party service you use.

If I find something that looks genuinely risky, you hear about it privately and first. I do not publish it, and I do not use it as a sales threat. Findings go to you and nobody else. Withdraw the authorization whenever you like and I stop immediately, delete what I hold, and send no invoice.

What I need from you.

Your content: hours, services, prices, photos if you have them, and access to your domain and any existing accounts. This is the part that usually decides the schedule. If those things take three weeks to arrive, the launch moves three weeks. I will tell you that plainly rather than quietly slipping the date.

The care plan is month to month.

Hosting, security patches, content updates, SSL renewal, and a human who answers. Cancel any time, effective the next billing month. If you cancel, the site keeps running and you take over hosting with a plain-English checklist from me. Nothing gets switched off to punish you for leaving.

If we part ways.

You keep the domain, the files, the content, and the passwords, and I hand over anything you do not already have. No exit fee, no data held back, no contract that renews itself while you are not looking.

Questions before you commit.

That is what the free audit is for, and it costs nothing and obligates nothing. Email info@laurelwebstudio.com or call (724) 201-9103. You will get a person.