We build static websites. We don't do WordPress.

Why we don’t build on WordPress

WordPress started life as blogging software in 2003. Today it runs a huge share of the web, and that popularity is exactly the problem: it’s the most attacked website platform in the world.

The weak point is rarely WordPress itself. It’s the plugins. A typical small business WordPress site runs 15 to 30 of them, each written by a different developer, for forms, sliders, SEO, caching, galleries, security and backups. Security firm Patchstack recorded more than 11,000 new vulnerabilities in the WordPress ecosystem in 2025, and the overwhelming majority were in plugins.

Every one of those plugins needs updating, sometimes weekly. Miss a few updates and the site becomes an easy target. Update everything at once and something often breaks. Either way, someone has to keep watching it. For most tradies, brokers and small businesses, that someone is nobody, until the site gets hacked, starts redirecting customers to spam, or Google flags it as dangerous.

We decided our clients shouldn’t carry that risk. So we don’t use WordPress, at all. You can read the full comparison in our guide, WordPress vs static websites.

How a static website works

Think of the difference between cooking every meal to order and having it ready on the pass.

When someone visits a WordPress page, the server runs code, queries a database, loads the theme, runs the plugins, assembles the page and sends it. That happens on every visit, which is why WordPress sites need caching plugins and decent hosting to feel quick.

A static website does all of that work once, when the site is built. The result is a set of finished pages that are copied to a global network of servers. When someone in Penrith or Perth visits, the nearest server sends the finished page straight away. There’s nothing to assemble and nothing to query.

What you get with a static site

Speed you can feel. Pages typically load in well under a second on a good connection. On a phone in a car park with patchy reception, that difference decides whether someone waits or hits the back button.

Security by design. There’s no admin login on your public site for bots to guess, no database to inject into and no plugins with known holes. Hosting on Cloudflare adds protection against traffic floods and bad bots on top.

Reliability. Static files served from a global network don’t crash when a few hundred people arrive at once from a radio ad or a Facebook post.

Lower running costs. No premium plugin licences, no managed WordPress hosting, no monthly maintenance retainer. Our hosting is $12 a month, including SSL, security and backups.

Longevity. A static site doesn’t depend on a particular version of PHP or a plugin developer staying in business. It keeps working.

“But can a static site do everything I need?”

Yes. Modern static websites hand the dynamic parts to small, secure services that do one job well:

• Forms go to a secure form handler that emails and texts you, blocks spam and keeps a copy in your lead inbox.
• Bookings use a booking calendar that syncs with your Google or Outlook calendar.
• Payments go through Stripe, so card details never touch your site.
• Calculators (quotes, borrowing power, repayments, solar savings) run right in the visitor’s browser.
• Reviews can be pulled from your Google Business Profile.
• Client areas and document uploads use secure, separate services with proper logins.

See some of these working on our what we can build page.

Static vs WordPress at a glance

Already on WordPress?

We can rebuild your existing WordPress site as a static site, keep your page addresses so you don’t lose Google rankings, and set up redirects for anything that moves. See website redesign for how that works.

Start your brief and get a website you’ll never have to patch.