Design, build, optimise,and secure your site.

The first step is a free consult, you outline your needs, budget and rough timeline, and I assess feasibility and direction and give you a ballpark quote. The consult costs nothing; a formal quote and contract come only once we agree to proceed (web projects usually take a 50% deposit).

Web work is quoted per project, a brand site takes roughly 1–3 weeks, custom systems vary by feature. Security work has set starting prices: Web scan from NT$18,000 / URL, host scan NT$15,000 / 10 IPs, health check NT$2,000 / machine, social engineering from NT$30,000 / up to 300 people, with reports usually delivered within days to two weeks. A free consult gets you exact figures and a timeline.

It starts with a full audit: heading structure, meta, canonical, sitemap, prerendering and load performance, plus structured data (Organization, FAQPage, BlogPosting and so on) so both search engines and AI engines can read the site. Then long-tail keyword research and a content-gap analysis, delivered as a list of topics worth writing. If you would rather I write them, the monthly content service is NT$4,000 per article per month. Technical fixes get re-indexed within days; rankings build over weeks to months, and I won't promise a specific position. From NT$15,000 per site.

Every assessment requires signed written authorization first and runs only within the authorised scope. Scans are non-destructive, no denial of service or data tampering, can be scheduled off-peak, and you should back up beforehand. What to prepare: Web scan, the URL and a test account; host scan, an IP list; social engineering, the recipient list and mail-gateway allow-listing (results can include per-recipient open/click records, owned by the commissioning organisation); health check, admin access to run the tool (remote or on-site).

It checks web-application weaknesses against the OWASP Top 10, injection, broken authentication and access control, security misconfiguration and so on, grading each finding by risk level and impact. Every finding is manually verified to rule out false positives and comes with concrete remediation advice, plus one re-scan once you've fixed them. From NT$18,000 / URL; subcontracting for peers welcome.

It scans the host OS, service versions and open ports for known vulnerabilities, rates each by CVSS score (0–10), then weighs whether it's externally exploitable and how far the impact reaches to order the fixes. The report puts the high-risk, act-now items first, so you know what to patch immediately and what can be scheduled. From NT$15,000 / 10 IPs.

A vulnerability scan uses tools to broadly inventory known weaknesses and surface issues fast, good for regular check-ups. A penetration test is a human deeply simulating an attack, chaining flaws to actually break in, pricier and slower. Most SMEs are well served starting with a scan; consider a pentest for compliance or high-risk systems. What I offer is OWASP Top 10-based scanning.

I can help, but let me be clear on scope: I restore from your clean backup, find and patch the vulnerability that let them in, and harden the basics so it doesn't recur, common on WordPress. If there's no clean backup, or you need deep forensics or data recovery, that's more specialised, I'll assess honestly rather than overpromise. Note that data created after the last backup usually can't be recovered, which is why regular off-site backups matter. Don't delete files yourself; preserve the state and contact me.

Monthly work: system and plugin security updates, twice-monthly off-site backups and uptime monitoring. Fully managed needs only DNS access and your site content (or a backup); ops-only needs host admin access (ideally a dedicated account, you keep host ownership and billing). See the Service Level Agreement for details.

Anywhere in Taiwan. Web work and most assessments are fully remote; for host scans and health checks on an internal network, I can work over VPN or arrange an on-site visit (travel charged for other counties).

I work under individual professional-practice income, so no uniform (VAT) invoice is issued; your company handles withholding (10% income tax and 2.11% NHI supplement where the threshold applies). I provide a signed service-fee receipt as your expense voucher, with details on the quote.

I hold ISO 27001 Lead Auditor and CompTIA Security+ credentials, and can share de-identified sample reports for security work; for web projects we can start small or in stages so you can verify quality at low risk.