Services
Everything that can be done to keep a WordPress site running — from the server to the plugins. Content and marketing are not on the list, on purpose.
Operations
Outdated components, weak access control and misconfiguration widen the attack surface. Regular updates, monitoring and verified backups reduce the risk and limit the impact of incidents.
Core, plugins, theme and the PHP version kept current, tested, with a backup taken before each update.
What matters is not whether a backup exists but whether it restores. We test that regularly.
We check more than whether the site is up: whether the functions that matter actually work.
A separate environment where an update or a change can break before it reaches the live site.
Where we have access to the server, we keep that in order too: updates, services, security, capacity.
Security
Security is not a plugin but several layers: current components, hardened settings, monitored vulnerabilities, and a procedure for when something happens anyway.
WordPress and server defaults tuned to shrink the attack surface.
Known vulnerabilities in installed plugins and themes are watched continuously and dealt with before they become a problem.
File integrity monitoring and malware scanning, and when needed, removal of the infection together with the way in.
When something goes wrong there is a procedure: contain, investigate, recover, learn.
Who has access to the site and the server, and what happens when that changes.
Performance
Speed is not a plugin you switch on but the whole chain: PHP, database, cache, CDN, and what the browser actually loads. We measure, change, and measure again.
WordPress and the PHP runtime configured for the real load.
The database and the object cache tuned so WordPress stops waiting needlessly.
Page, object and browser caches plus a CDN, coordinated so they do not fight each other.
The user experience as Google measures it: loading, responsiveness, visual stability. Measured, improved, tracked.
So that search engines can read the site without technical obstacles. This is not SEO content and not link building — that is not our desk.
Infrastructure
Server, DNS, certificate, CDN, web server. Rarely visible, but everything else stands on them — and most mysterious faults start here.
WordPress, hosting or server migration without downtime, tested, with a way back.
The domain, the certificate and the edge, set up and monitored.
Linux, Nginx or Apache, PHP-FPM, MySQL, Redis — sized and hardened for WordPress.
A test environment matching the live site, where a change can be tried first.
Development
Custom plugins, WooCommerce extensions, integrations with external systems. Engineering work, not page-builder clicking: version-controlled, tested, documented.
What off-the-shelf plugins cannot do, or do only with too much baggage: a focused, lean solution.
CRM, PMS, invoicing, payment systems, warehouse — connected to the WordPress site, both ways.
Repetitive tasks handed to machines, single sign-on where several systems meet.
Cannot find what you need? Tell us what is going on: if it belongs to how the site runs, it is probably our desk.
Send us your site's address and we will decide which assessment level fits. The result is a written WPdoki Lelet — and if we then run the site, the fee is credited.
You decide what we may measure.
No advertising cookies, no third-party tracker, and nothing passed to anyone else — it all stays on our own server. What we measure is how the site is to use, so that we can make it better.