A safer, simpler way to run a small business website.
Why we've stepped back from WordPress for most small business sites, and what our service looks like now.
Where we've landed
WordPress got harder to justify for a small business site.
Over the last few years, the security picture around WordPress has quietly climbed to a point where the risk and the ongoing cost of keeping a small business site safe are out of proportion to what the site actually does. Hundreds of new plugin, theme and core vulnerabilities are disclosed each year, patches arrive on their own timeline, and either the site is paid to be looked after on a monthly rhythm, or the risk of a compromise slowly builds in the background.
For a farm gate, a workshop or a boutique tour operator, that is a lot of ongoing risk and cost to carry for a website whose job is really to look good, be found on Google, and take enquiries. The risk to reward calculation stopped adding up for the businesses we care most about.
What we do instead
A safer platform, and a simpler way to make changes.
The answer, for us, came in two parts. On the platform side we now build on Jigsaw. There is no database, no plugins, and no application code running when a page is requested, so the usual ways in are simply not there and the monthly patch cycle disappears with them.
On the service side, we removed the dashboard. Every site we host comes with someone at the other end of an email. You tell us what needs changing, we make the change, usually the same day. No login, no block editor, no wrestling with a page builder to move a paragraph.
How it feels day to day
Changes become an email, not a chore.
The shift is not a philosophical one. It is a practical one you feel every week. New staff photos for the About page? Send them across, they will be live before the day is out. A price update, a Christmas closure notice, a fresh testimonial? Same thing.
Once a month a short note lands in your inbox, in plain English, covering what we changed, what we noticed, and anything worth thinking about before next month. No dashboards to open, no notifications to dismiss, no login you keep forgetting.
Who this suits, and who it doesn't
Small businesses that would rather run their business.
This way of working suits the aspiring small businesses we spend our days with, owners who want a genuinely good website looking quietly after itself in the background, freeing them up to get on with the actual business. It does not suit sites that need editing hourly by a large in-house team, or web applications with logins and complex data behind them.
If you are already on WordPress, we still take those sites on under a separate WordPress management plan. Where it fits though, we will usually suggest a Jigsaw conversion instead. Ongoing management sits at a materially lower monthly cost, and the recurring security risk that comes with WordPress simply goes away.
Where to from here
If this sounds closer to how you'd rather run things.
The delivery layer we now build on is explained in more detail on our Jigsaw page. Or, if it's easier, just book a short chat.