Find WordPress Development Projects on Upwork

We are looking for an experienced WordPress developer to implement a professional Consent Management Platform (CMP)—such as CookieYes or Cookiebot—integrated tightly with Google Tag Manager (GTM) on our high-performance mortgage lead-generation website.
Our goal is to execute a rigorous, enterprise-grade compliance and tracking architecture (matching major lenders) that guarantees complete legal privacy compliance without breaking conversion tracking or multi-step lead funnels across all acquisition channels (including paid and organic search engines like Google and Microsoft, social media networks like Meta and TikTok, and all other multi-channel traffic).
Key Responsibilities:
CMP Configuration: Install and customize a CMP plugin to handle the front-end cookie banner, cookie categories, and user preference center.
Google Consent Mode v2 Integration: Implement and verify Consent Mode v2 (both advanced and basic configurations) to ensure proper signal transmission and conversion modeling for ad networks.
Advanced Pixel Hard-Blocking: Configure Google Tag Manager triggers and tag-blocking rules to guarantee that all third-party marketing, retargeting, and social/search pixels are strictly hard-blocked and do not fire until the user explicitly grants marketing consent.
Lead-Gen & Gravity Forms Verification: Test and ensure our multi-step Gravity Forms submissions, UTM tracking parameters, and custom lead-generation data layers continue to function seamlessly post-consent.
Preference Center Trigger: Implement a persistent footer link or floating trigger that allows users to easily reopen their cookie preferences and update or revoke consent at any time.
Post-Implementation QA: Run a thorough audit using developer tools (Console, Tag Assistant) to prove that cookies are not dropping prematurely and consent signals are passing accurately.
Requirements:
Proven experience with WordPress, plugin configuration, and advanced front-end script management.
Deep, practical understanding of Google Consent Mode v2 and custom tag-blocking architecture via Google Tag Manager (GTM).
Experience handling strict compliance setups for financial services or high-intent lead-generation sites where tracking integrity across multi-channel campaigns is critical.
Summary for Project Budgeting & Upwork Posting:
Agreed Fixed Price: $100 (factoring in the expanded scope including GTM custom triggers, TikTok/Meta hard-blocking, both consent mode configs, and a complete multi-channel QA audit).

I use a website builder and need some minor changes doing to the txt on the home page. I will have some other pages to have text changed on once this has been completed.

I will go over the job in more detail when I hire.

This is a very small task.

Our website is looking pretty outdated and we’d like to give it a fresh, modern look.

We need someone who can clean up the overall layout, improve the navigation, make the sections easier to scan, and make sure everything looks good on mobile.

The main focus is:

Redesigning the header and hero section
Improving the services and content sections
Better spacing, fonts, and overall layout
Making the site responsive
Keeping the design clean and easy to use

We’re using WordPress + Elementor, so experience with both is important.


If you’ve done similar redesign work, please share a few examples.

for 5 page website redesign, share your fixed price and time

# WINDOWS ANTIVIRUS & EDR PLATFORM

## Complete Product, Architecture and Functionality Specification

### 1. PROJECT GOAL

I want to build a professional commercial Windows cybersecurity platform from the ground up, combining the capabilities of a traditional antivirus, EPP, EDR, network security, web security, email security, sandboxing, threat intelligence and automated incident response.

This should not be a simple antivirus that only performs manual file scans.

The goal is to create a complete security platform that continuously monitors relevant security events and automatically detects, blocks, contains and responds to threats.

The core security lifecycle should be:

**PREVENT → DETECT → ANALYZE → BLOCK → CONTAIN → QUARANTINE → RESPOND → RECOVER → LEARN**

The primary objective is to maximize protection against known, unknown and emerging threats through multiple independent security layers.

The product must not make unrealistic claims of 100% protection. Instead, it should use defense-in-depth, behavioral analysis, threat intelligence, sandboxing and multiple detection methods to maximize detection and containment.

---

# 2. MAIN PLATFORM COMPONENTS

The platform should eventually include:

1. Windows Endpoint Agent
2. Real-Time Protection
3. Malware Detection Engine
4. Signature Engine
5. Heuristic Engine
6. Behavioral Detection Engine
7. Anomaly Detection
8. Reputation Engine
9. Risk Scoring Engine
10. Process Monitoring
11. Memory Protection
12. Exploit Protection
13. Ransomware Protection
14. File Protection
15. Application Control
16. Identity Protection
17. Credential Protection
18. Network Protection
19. DNS Security
20. Web Protection
21. Anti-Phishing
22. Download Protection
23. Email Security
24. Attachment Analysis
25. URL Analysis
26. Sandbox
27. Threat Intelligence
28. EDR
29. Incident Response
30. Automatic Containment
31. Quarantine
32. Threat Remediation
33. Secure Update System
34. Anti-Tamper Protection
35. Integrity Monitoring
36. Cloud Backend
37. Security API
38. Device Management
39. Security Dashboard
40. Incident Center
41. Threat Center
42. Privacy Center
43. Enterprise Management
44. RBAC
45. Audit Logging
46. Security Research / Threat Intelligence Platform
47. Monitoring
48. Testing Infrastructure
49. Backup and Disaster Recovery
50. Secure Gateway / Privacy Network Functionality

---

# 3. WINDOWS ENDPOINT AGENT

The Windows Endpoint Agent will be the main component installed on the user's computer.

It should run continuously in the background and provide real-time protection.

The agent should be modular so that a failure in one component does not completely disable the security platform.

Suggested structure:

```text
endpoint/
agent/
realtime/
scanner/
process-monitor/
memory-monitor/
behavior/
ransomware/
exploit-protection/
network/
dns/
web/
email/
application-control/
identity/
credential-protection/
quarantine/
remediation/
updater/
anti-tamper/
integrity/
telemetry/
```

The agent should:

* Start automatically with Windows
* Use minimal CPU and RAM
* Monitor relevant security events
* Communicate securely with the cloud
* Receive signed updates
* Send appropriate security telemetry
* Continue providing basic protection when offline

---

# 4. REAL-TIME PROTECTION

The system should analyze security events in real time.

Example:

```text
File Downloaded
↓
File Hash
↓
Local Reputation
↓
Signature Detection
↓
Static Analysis
↓
Heuristic Analysis
↓
Behavioral Analysis
↓
Cloud Reputation
↓
Sandbox if Required
↓
Risk Engine
↓
ALLOW / WARN / BLOCK / QUARANTINE
```

Unknown files should not simply be executed on the user's computer for testing purposes.

If dynamic analysis is required, it should take place inside an isolated analysis environment.

---

# 5. THREATS THE PLATFORM SHOULD DETECT

The platform should be designed to detect and protect against as broad a range of threats as technically possible.

### Malware

* Viruses
* Trojans
* Worms
* Spyware
* Adware
* Backdoors
* Droppers
* Downloaders
* Infostealers
* RATs
* Botnet malware
* Cryptominers
* Fileless malware
* Memory-resident malware

### Ransomware

The platform should detect ransomware using both known indicators and behavioral detection.

Potential signals include:

* Unusual mass file modifications
* Large numbers of document changes
* Suspicious encryption-like behavior
* Attempts to disable recovery mechanisms
* Suspicious processes modifying protected folders
* Abnormal file-system activity
* Correlation with suspicious network activity

The objective is to detect ransomware behavior as early as possible and prevent further damage.

The system should support detection of known ransomware families such as LockBit, while also detecting ransomware behavior from previously unknown variants.

### Keyloggers

The platform should detect suspicious applications attempting to monitor user input or collect sensitive information.

Detection should consider:

* Process behavior
* Application origin
* Digital signature
* Reputation
* Permissions
* Network behavior
* Correlation with other suspicious activity

The system should avoid blocking legitimate applications simply because they use normal input-related APIs.

### Rootkits and Bootkits

The platform should include system integrity monitoring and mechanisms for detecting suspicious modifications to system and startup components.

### RATs

Remote Access Trojans should be detected through correlation of:

**PROCESS + NETWORK + BEHAVIOR + REPUTATION**

### Infostealers

The system should detect suspicious attempts to access protected user data, credentials or other sensitive information.

### Phishing

The platform should analyze:

* URLs
* Domains
* Reputation
* Certificates
* Redirects
* Domain similarity
* Website context
* Login forms
* Suspicious page characteristics

### Exploits

Exploit protection should monitor suspicious process, memory and application behavior.

### Botnets and C2

The system should identify suspicious command-and-control communication using:

* DNS information
* Domain reputation
* IP reputation
* Connection patterns
* Process-to-network relationships
* Threat intelligence
* Behavioral indicators

### Cryptominers

The system should detect unauthorized cryptocurrency mining based on process behavior, application reputation and abnormal resource usage.

---

# 6. DETECTION ENGINE

The Detection Engine should be the central detection component.

It should not rely on a single detection method.

Architecture:

```text
SIGNATURES
+
HEURISTICS
+
BEHAVIOR
+
REPUTATION
+
ANOMALY DETECTION
+
THREAT INTELLIGENCE
+
SANDBOX
+
ML / STATISTICAL ANALYSIS
+
CONTEXT
↓
RISK ENGINE
↓
SECURITY DECISION
```

---

# 7. SIGNATURE ENGINE

The Signature Engine should detect known threats using appropriate indicators such as:

* Hashes
* Detection rules
* File characteristics
* Metadata
* Known malicious patterns

Signature databases must be securely updated.

Updates should be cryptographically signed and validated by the endpoint before installation.

---

# 8. HEURISTIC ENGINE

The Heuristic Engine should help identify suspicious files that are not yet present in the signature database.

It can analyze:

* File structure
* Metadata
* Suspicious characteristics
* Application behavior indicators
* Combinations of suspicious properties

Heuristic results should contribute to the overall risk score rather than necessarily determining the final decision alone.

---

# 9. BEHAVIORAL DETECTION

Behavioral Detection should be one of the most important components.

The platform should analyze what applications actually do.

For example:

```text
Unknown Application
↓
Creates Child Process
↓
Modifies Many Files
↓
Changes System Configuration
↓
Contacts Suspicious Domain
↓
Attempts Privileged Operation
↓
High Risk
```

Individual actions may be legitimate.

The combination of multiple suspicious events can indicate malicious behavior.

The system should therefore create a behavioral profile for processes and applications.

---

# 10. ANOMALY DETECTION

The platform should identify activity that significantly differs from normal behavior.

For example, if an application that normally performs simple operations suddenly begins performing unusual system, file or network activity, its risk score should increase.

Anomaly detection should be an additional signal and should be carefully controlled to reduce false positives.

---

# 11. RISK ENGINE

The Risk Engine should combine signals from the entire platform.

Example:

```text
Signature Score
+
Heuristic Score
+
Behavior Score
+
Reputation Score
+
Network Score
+
Process Score
+
File Score
+
Sandbox Score
+
Threat Intelligence Score
+
Anomaly Score
+
Context
↓
FINAL RISK SCORE
```

Example scale:

```text
0–15 Safe
16–35 Low Risk
36–55 Suspicious
56–75 High Risk
76–100 Critical
```

The exact scoring model should be designed and validated by the security engineer.

---

# 12. REPUTATION ENGINE

Files, applications, domains and URLs should have reputation information where available.

Possible data:

* Hash
* Age
* Digital signature
* Publisher
* Detection history
* Domain history
* Infrastructure reputation

Reputation should never be the only detection mechanism.

A new legitimate application may naturally have little reputation data.

---

# 13. CLOUD THREAT INTELLIGENCE

The cloud should provide:

* Indicators of compromise
* File reputation
* Domain reputation
* IP reputation
* Detection rules
* Threat information
* New signatures
* Phishing intelligence
* Malware intelligence
* Security updates

The endpoint should benefit from cloud intelligence while maintaining local protection when offline.

---

# 14. SANDBOX

Suspicious files should be analyzed in a strongly isolated environment.

Example:

```text
UNKNOWN FILE
↓
STATIC ANALYSIS
↓
HEURISTICS
↓
REPUTATION
↓
SUSPICIOUS?
↓
SANDBOX
↓
BEHAVIOR ANALYSIS
↓
NETWORK ANALYSIS
↓
RISK SCORE
```

The sandbox should prevent analyzed applications from accessing the user's actual system.

It should collect security telemetry such as:

* Process events
* File events
* System changes
* Network events
* Behavioral indicators

---

# 15. PROCESS MONITORING

The platform should monitor relevant processes.

Possible metadata:

* PID
* Parent PID
* Executable path
* Hash
* Digital signature
* User
* Start time
* Parent-child relationships
* Security events
* Network connections
* Risk score

The platform should generate process trees.

Example:

```text
Browser
└── Downloaded Application
└── Suspicious Child Process
```

This information should be available to the EDR and Incident Center.

---

# 16. MEMORY PROTECTION

The system should monitor suspicious memory-related activity and process interactions.

The goal is to detect behavior associated with malware and exploit activity while minimizing false positives.

---

# 17. EXPLOIT PROTECTION

The platform should include an exploit-protection layer.

When high-risk behavior is detected, the response could be:

```text
WARN
↓
BLOCK
↓
TERMINATE PROCESS
↓
CONTAIN
↓
CREATE INCIDENT
```

The exact response should depend on the confidence and severity of the detection.

---

# 18. RANSOMWARE SHIELD

The Ransomware Shield should protect important user data.

Features should include:

* Protected folders
* Process monitoring
* File activity monitoring
* Behavioral detection
* Suspicious-process blocking
* Automatic containment
* Quarantine
* Incident creation

Where technically safe and reliable, the product may support recovery mechanisms for affected data.

---

# 19. APPLICATION CONTROL

Applications should receive a trust classification:

```text
TRUSTED
KNOWN
UNKNOWN
SUSPICIOUS
MALICIOUS
```

Users should be able to manage appropriate allow/block rules.

Enterprise administrators should have centralized allowlisting and blocking policies.

---

# 20. ANTI-TAMPER

The platform must protect itself against attempts to disable or modify security components.

Protected components should include:

* Security processes
* Configuration
* Detection databases
* Policies
* Update mechanisms
* Security services

Administrative changes should require appropriate authorization.

---

# 21. SECURE UPDATE SYSTEM

Security updates are critical.

Every update should:

1. Be cryptographically signed
2. Be verified
3. Be downloaded through a secure channel
4. Be integrity checked
5. Be installed safely
6. Support rollback where appropriate

The update infrastructure should support:

* Versioning
* Staged deployment
* Rollback
* Integrity checking
* Update logs

---

# 22. NETWORK SECURITY

The platform should include network protection capable of:

* Monitoring security-relevant network activity
* Blocking malicious destinations
* Detecting suspicious connections
* Detecting C2 communication
* DNS protection
* Network isolation
* Integration with appropriate Windows networking/security controls

---

# 23. DNS SECURITY

DNS requests should be evaluated against:

* Malicious domains
* Phishing domains
* C2 infrastructure
* Malware infrastructure
* Suspicious domains

Example:

```text
DNS REQUEST
↓
DOMAIN REPUTATION
↓
THREAT INTELLIGENCE
↓
ALLOW / WARN / BLOCK
```

---

# 24. WEB SECURITY

Before opening a website:

```text
URL
↓
DOMAIN ANALYSIS
↓
REPUTATION
↓
PHISHING ANALYSIS
↓
REDIRECT ANALYSIS
↓
RISK SCORE
↓
ALLOW / WARN / BLOCK
```

---

# 25. ANTI-PHISHING

The system should detect:

* Fake login pages
* Suspicious domains
* Lookalike domains
* Malicious redirects
* Credential-harvesting pages
* Known phishing campaigns

Warnings should clearly explain why a website was blocked.

---

# 26. DOWNLOAD PROTECTION

Downloaded files should be analyzed before being allowed to execute when appropriate.

```text
DOWNLOAD
↓
HASH
↓
REPUTATION
↓
STATIC ANALYSIS
↓
HEURISTICS
↓
SANDBOX IF REQUIRED
↓
RISK ENGINE
```

Possible results:

**ALLOW**

**WARN**

**BLOCK**

**QUARANTINE**

---

# 27. EMAIL SECURITY

Email security should analyze:

* Sender
* Domain
* SPF
* DKIM
* DMARC
* URLs
* Redirects
* Attachments
* Reputation
* Phishing indicators

The system should help users identify suspicious messages before interacting with them.

---

# 28. ATTACHMENT SECURITY

Attachments should go through a security pipeline:

```text
ATTACHMENT
↓
HASH
↓
REPUTATION
↓
STATIC ANALYSIS
↓
HEURISTICS
↓
SANDBOX IF REQUIRED
↓
RISK SCORE
```

High-risk attachments should be blocked or quarantined.

---

# 29. IDENTITY PROTECTION

The platform should detect suspicious activity involving user identities and accounts.

It should provide protection against:

* Credential theft
* Phishing
* Suspicious applications
* Unauthorized access attempts

---

# 30. CREDENTIAL PROTECTION

The system should monitor suspicious attempts by unauthorized processes to access credential-related resources.

It should prioritize protection of sensitive authentication information.

---

# 31. EDR

EDR should collect and correlate security events.

Example:

```text
USER
↓
DOWNLOAD
↓
UNKNOWN FILE
↓
PROCESS START
↓
SUSPICIOUS BEHAVIOR
↓
NETWORK CONNECTION
↓
HIGH RISK
↓
PROCESS BLOCKED
↓
FILE QUARANTINED
↓
NETWORK CONTAINMENT
↓
INCIDENT CREATED
```

All related events should be presented as one security incident.

---

# 32. THREAT GRAPH

The dashboard should visualize relationships between:

```text
USER
↓
PROCESS
↓
FILE
↓
DOMAIN
↓
IP
↓
CHILD PROCESS
↓
FILE MODIFICATIONS
```

This should help analysts understand the complete attack chain.

---

# 33. INCIDENT RESPONSE

The platform should support automated response levels:

```text
LEVEL 0 — ALLOW
LEVEL 1 — MONITOR
LEVEL 2 — WARN
LEVEL 3 — BLOCK
LEVEL 4 — QUARANTINE
LEVEL 5 — CONTAIN
LEVEL 6 — NETWORK ISOLATION
LEVEL 7 — REMEDIATION
```

The response should depend on confidence, severity, context and organizational policy.

---

# 34. AUTOMATIC CONTAINMENT

For serious incidents the platform may:

* Stop suspicious processes
* Block malicious files
* Quarantine files
* Block malicious domains
* Restrict network connectivity
* Isolate a device
* Create an incident
* Notify the user or administrator

Every automated action should be logged.

---

# 35. QUARANTINE

Quarantine should securely isolate suspicious files.

The user should not be able to accidentally execute quarantined files.

The system should store:

* Hash
* Detection
* Source
* Date
* Risk score
* Action taken

---

# 36. REMEDIATION

Where technically safe, the system should be capable of:

* Removing detected malware
* Stopping malicious processes
* Removing malicious persistence
* Restoring security settings
* Performing follow-up scans
* Returning the system to a safer state

All remediation actions must be logged.

---

# 37. SECURITY DASHBOARD

The interface should be modern, clean and easy to understand.

Main sections:

```text
HOME
SECURITY
SMART SCAN
THREATS
INCIDENT CENTER
EMAIL
WEB
NETWORK
APPLICATIONS
RANSOMWARE
EDR
IDENTITY
DEVICES
QUARANTINE
ACTIVITY
PRIVACY
SECURE GATEWAY
ACCOUNT
SUBSCRIPTION
SETTINGS
```

---

# 38. HOME SCREEN

The home screen should display:

* Protection Status
* Security Score
* Last Scan
* Threats Blocked
* Protected Devices
* Real-Time Protection
* Network Protection
* Web Protection
* Ransomware Protection

Main action:

**SMART SCAN**

---

# 39. SECURITY SCORE

Example:

```text
PROTECTION SCORE
94 / 100
```

The score must be based on actual security configuration and status.

The system should explain what affects the score.

---

# 40. THREAT CENTER

Display:

* Recent threats
* Severity
* Device
* Date
* Detection
* Action
* Current status

Example:

```text
CRITICAL
Ransomware behavior detected
Action: BLOCKED + CONTAINED
```

---

# 41. INCIDENT CENTER

Every significant incident should have a detailed view containing:

* What happened
* When it happened
* Which process was involved
* Which file was involved
* Which user was involved
* Network activity
* Why the system reacted
* What actions were taken
* Recommended next steps

---

# 42. SMART SCAN

Scan options:

* Quick Scan
* Full Scan
* Custom Scan
* Deep Scan
* Startup Scan
* USB Scan
* Downloads Scan

Scanning should be optimized to minimize unnecessary system load.

---

# 43. GAMING MODE

Gaming Mode should reduce unnecessary background activity while keeping critical security protections active.

It should:

* Reduce CPU usage
* Delay non-critical scans
* Schedule intensive tasks intelligently
* Maintain essential real-time protection

---

# 44. PERFORMANCE MODES

Possible modes:

```text
QUIET
BALANCED
MAX SECURITY
GAMING
ENTERPRISE
```

---

# 45. PRIVACY CENTER

Users should be able to see:

* What security telemetry is collected
* Why it is collected
* What information is sent to the cloud
* Telemetry settings
* Privacy-related activity

The platform should follow privacy-by-design principles.

---

# 46. SECURE GATEWAY / VPN

An optional secure network gateway can provide:

* Encrypted traffic
* Secure DNS
* Malicious-domain filtering
* Threat intelligence
* Protection on untrusted networks
* Optional regional egress selection

Changing the public IP or egress region should not be described as physically changing the user's location.

This functionality is intended for privacy and security, not for evading law enforcement or bypassing security controls.

---

# 47. CLOUD BACKEND

The cloud architecture may look like:

```text
ENDPOINT
↓
SECURE API
↓
API GATEWAY
↓
AUTHENTICATION
↓
DEVICE MANAGEMENT
↓
THREAT INTELLIGENCE
↓
REPUTATION
↓
DETECTION SERVICES
↓
INCIDENT SERVICE
↓
TELEMETRY
↓
UPDATE SERVICE
↓
DASHBOARD
```

---

# 48. CLOUD SERVICES

Potential services:

```text
api-service
authentication-service
device-service
threat-intelligence-service
reputation-service
detection-service
telemetry-service
incident-service
notification-service
update-service
billing-service
admin-service
policy-service
```

The final service architecture should be selected by the technical lead.

---

# 49. DATABASE

The backend should use an appropriate database architecture.

Potential entities:

```text
Users
Organizations
Devices
Processes
Files
Detections
Incidents
Threats
Policies
Alerts
QuarantineEvents
NetworkEvents
EmailEvents
WebEvents
Updates
Subscriptions
AuditLogs
```

---

# 50. DEVICE MANAGEMENT

Each device should have:

* Device ID
* Operating System
* Agent Version
* Protection Status
* Last Seen
* Security Score
* Risk Level
* Assigned Policy
* Last Incident

---

# 51. ENTERPRISE MANAGEMENT

Enterprise customers should have centralized administration.

Roles:

```text
SUPER ADMIN
SECURITY ADMIN
ANALYST
AUDITOR
VIEWER
```

Administrators should be able to manage:

* Security policies
* Devices
* Detection levels
* Application policies
* Network policies
* Scan schedules
* Automated response

---

# 52. RBAC

Role-Based Access Control should restrict administrative actions.

Not every user should be able to:

* Change security policies
* Disable protection
* Isolate devices
* Delete devices
* View sensitive incidents
* Manage accounts

---

# 53. XDR

A later stage can extend EDR into XDR.

Potential data sources:

```text
ENDPOINT
EMAIL
WEB
NETWORK
DNS
IDENTITY
CLOUD
```

The system should correlate these signals into unified incidents.

Example:

```text
Phishing Email
↓
User Clicks Link
↓
Malicious Website
↓
Download
↓
Process Execution
↓
Network Connection
↓
Credential Theft Attempt
```

This should appear as one correlated incident rather than unrelated alerts.

---

# 54. AI SECURITY ASSISTANT

AI can be used for:

* Explaining alerts
* Summarizing incidents
* Generating reports
* Answering administrator questions
* Suggesting remediation steps

Critical security decisions should not depend solely on AI.

Deterministic and validated security mechanisms should remain responsible for critical blocking and containment decisions.

---

# 55. THREAT INTELLIGENCE PLATFORM

The platform should maintain security intelligence regarding:

* Malware families
* Domains
* Hashes
* IP reputation
* Phishing campaigns
* Ransomware families
* Indicators of compromise
* Detection rules

All intelligence sources should be legitimate, appropriately validated and legally usable.

---

# 56. SECURITY RESEARCH LAB

A separate isolated research environment can be used for:

* Security research
* Malware analysis
* Detection development
* False-positive investigation
* Rule testing
* Update testing

This environment must remain isolated from production infrastructure.

---

# 57. FALSE POSITIVE MANAGEMENT

False positives are a major concern.

The platform should analyze:

* Detection reason
* Confidence
* Reputation
* Behavior
* Digital signature
* Context

The product should include mechanisms for reviewing potential false positives.

---

# 58. TELEMETRY

The endpoint should send only appropriate security telemetry.

Potential telemetry:

* Security events
* Detection results
* File hashes
* Process metadata
* Network security events
* Agent health
* Version information

Privacy and applicable regulations must be considered throughout the architecture.

---

# 59. AUDIT LOGGING

Important actions should be logged.

Examples:

```text
User changed policy
Threat blocked
Device isolated
File quarantined
Administrator logged in
Update installed
Detection rule changed
```

Logs should be protected against unauthorized modification.

---

# 60. SECURITY ARCHITECTURE

The entire platform should follow:

* Least privilege
* Zero Trust
* Defense in depth
* Secure defaults
* Encryption
* Signed updates
* Strong authentication
* RBAC
* Audit logging
* Secure secret management
* Secure coding practices

No single component should be trusted blindly.

---

# 61. REPOSITORY STRUCTURE

A possible repository structure:

```text
security-platform/

endpoint/
agent/
realtime/
scanner/
process-monitor/
memory-protection/
exploit-protection/
ransomware/
application-control/
identity/
credential-protection/
integrity/
anti-tamper/
updater/
telemetry/

detection-engine/
signatures/
heuristics/
behavior/
reputation/
anomaly/
ml/
risk-engine/

network/
firewall/
dns/
ids/
ips/
c2-detection/
monitoring/
isolation/

web/
url-analysis/
phishing/
safe-browser/
download-protection/

email/
sender-analysis/
spf/
dkim/
dmarc/
url-analysis/
attachment-analysis/

sandbox/
static-analysis/
behavior-analysis/
network-analysis/

cloud/
api/
authentication/
device-management/
threat-intelligence/
reputation/
telemetry/
updates/
incidents/
policies/
notifications/

enterprise/
rbac/
policies/
audit/
xdr/

gateway/
secure-tunnel/
dns/
filtering/
egress/

dashboard/
frontend/
backend/

admin-panel/

research-lab/

testing/

infrastructure/

security/

documentation/
```

---

# 62. TECHNOLOGY

The final technology stack should be selected by the lead engineer based on security, performance and maintainability requirements.

Potential endpoint technologies:

* Rust
* C++
* Native Windows APIs
* Windows security mechanisms

Potential backend technologies:

* Rust
* Go
* Java
* TypeScript

Potential infrastructure:

* AWS
* Azure
* GCP
* Appropriate private infrastructure

Potential database:

* PostgreSQL
* Redis or an equivalent caching system

Potential dashboard:

* TypeScript
* Modern frontend framework

Technology selection should be justified technically rather than chosen purely for convenience.

---

# 63. PERFORMANCE REQUIREMENTS

The product should have minimal impact on normal computer usage.

Important goals:

* Low CPU usage
* Low RAM usage
* Fast scanning
* Efficient caching
* Intelligent scheduling
* Minimal duplicate analysis
* Prioritized security events

The product should remain usable during gaming, productivity work and demanding applications.

---

# 64. OFFLINE PROTECTION

Basic security must continue when the endpoint has no Internet connection.

The local agent should maintain:

* Local detection capabilities
* Local signatures
* Heuristic rules
* Local Risk Engine
* Security policies
* Essential reputation information

Cloud services should enhance protection rather than being the only source of protection.

---

# 65. SELF-HEALTH MONITORING

The platform should monitor its own health.

Examples:

```text
Agent Running?
Protection Enabled?
Detection Database Current?
Cloud Connected?
Last Update?
Security Services Healthy?
```

If a critical component fails, the user or administrator should be notified.

---

# 66. SYSTEM INTEGRITY

The platform should continuously verify the integrity of its own important components.

Components include:

* Endpoint Agent
* Detection Engine
* Security databases
* Update system
* Policy engine
* Security services

If a component becomes corrupted, the system should attempt safe recovery where possible.

---

# 67. BACKUP AND DISASTER RECOVERY

Cloud infrastructure should include:

* Backups
* Redundancy
* Disaster recovery
* Database replication
* Monitoring

A single infrastructure failure should not result in complete loss of security data.

---

# 68. TESTING

The project must include automated testing.

Required categories:

```text
UNIT TESTS
INTEGRATION TESTS
SYSTEM TESTS
SECURITY TESTS
PERFORMANCE TESTS
REGRESSION TESTS
FALSE POSITIVE TESTS
UPDATE TESTS
RECOVERY TESTS
```

---

# 69. MALWARE TESTING

Testing should use controlled and legally authorized security test environments.

The testing system should measure:

* Detection
* Blocking
* Quarantine
* Containment
* Remediation
* Logging
* Recovery

Production systems must never be used as uncontrolled malware-testing environments.

---

# 70. RANSOMWARE TESTING

Safe ransomware-behavior simulators should be used where possible.

The test should verify:

```text
Suspicious File Activity
↓
Behavior Detection
↓
Alert
↓
Block
↓
Containment
↓
Incident Creation
```

---

# 71. PHISHING TESTING

Controlled phishing simulations should verify:

```text
URL
↓
Analysis
↓
Risk Score
↓
Warning / Block
```

---

# 72. CONTINUOUS SECURITY VALIDATION

The platform should continuously test:

* Detection quality
* False positives
* Update reliability
* Anti-tamper mechanisms
* Recovery mechanisms
* Performance
* Security boundaries

---

# 73. DEVELOPMENT PHASES

The project should be developed incrementally.

### PHASE 1 — ARCHITECTURE

Create:

* Technical architecture
* Threat model
* Trust boundaries
* Data model
* API design
* Endpoint architecture
* Cloud architecture
* Update architecture
* Telemetry architecture
* Security model
* Testing strategy

### PHASE 2 — CORE ENDPOINT

Build:

* Windows Agent
* Scanner
* Real-Time Protection
* Signature Engine
* Basic Heuristics
* Quarantine
* Secure Updates

### PHASE 3 — ADVANCED DETECTION

Add:

* Behavioral Detection
* Process Monitoring
* Risk Engine
* Reputation
* Anomaly Detection
* Ransomware Protection
* Application Control

### PHASE 4 — NETWORK AND WEB

Add:

* DNS Security
* Web Protection
* URL Analysis
* Anti-Phishing
* Network Monitoring
* C2 Detection

### PHASE 5 — CLOUD

Add:

* API
* Authentication
* Device Management
* Threat Intelligence
* Telemetry
* Reputation
* Incident Management

### PHASE 6 — EDR

Add:

* Process Trees
* Threat Graph
* Incident Correlation
* Investigation
* Automated Response
* Device Isolation

### PHASE 7 — EMAIL AND SANDBOX

Add:

* Email Security
* Attachment Analysis
* Sandbox
* Advanced URL Analysis

### PHASE 8 — ENTERPRISE

Add:

* RBAC
* Central Policies
* XDR
* Audit
* Enterprise Dashboard
* Organization Management

### PHASE 9 — COMMERCIALIZATION

Add:

* Subscription Management
* Licensing
* Customer Support
* Product Analytics
* Documentation
* Deployment infrastructure
* Compliance processes

---

# 74. IMPORTANT PRODUCT PRINCIPLE

The objective is not to create a product that simply contains thousands of detection signatures.

The objective is to create a layered security system where different technologies compensate for each other's weaknesses.

For example:

```text
Known Malware
→ Signature

Modified Malware
→ Heuristics

Unknown Malware
→ Behavior

Highly Suspicious File
→ Sandbox

Malicious Domain
→ Reputation / Threat Intelligence

Suspicious Process
→ EDR

Ransomware Behavior
→ Behavioral Detection + Ransomware Shield

Phishing
→ URL + Domain + Website Analysis

C2
→ Network + DNS + Threat Intelligence

Severe Incident
→ Automatic Containment + Isolation
```

---

# 75. FINAL OBJECTIVE

The final product should become a professional cybersecurity platform for individual users, businesses and eventually larger organizations.

The platform should combine:

**ANTIVIRUS + EPP + EDR + NETWORK SECURITY + WEB SECURITY + EMAIL SECURITY + SANDBOX + THREAT INTELLIGENCE + INCIDENT RESPONSE + ENTERPRISE SECURITY**

The system should be:

* Secure
* Fast
* Reliable
* Scalable
* Privacy-conscious
* Modular
* Easy to use
* Difficult to tamper with
* Continuously updated
* Capable of detecting both known and emerging threats

The first development step should **not** be writing random code.

Before development begins, I want the engineer/team to produce:

1. Detailed technical architecture
2. Threat model
3. Trust boundaries
4. Endpoint architecture
5. Detection architecture
6. Cloud architecture
7. Data model
8. API specification
9. Update architecture
10. Telemetry model
11. Security model
12. Testing strategy
13. Development roadmap
14. MVP scope
15. Estimated development time
16. Estimated budget
17. Long-term scaling plan

The final goal is to build a serious, commercially viable Windows cybersecurity platform with strong layered protection and the ability to continuously evolve as new threats emerge.

I have a WordPress site with a bug I need diagnosed and fixed properly (not just patched).
Issue: checkout page throws a 500 error.

Scope
- Diagnose the root cause
- Implement a stable fix and test it across browsers/devices
- Brief summary of the cause and fix

Requirements:
- Solid WordPress troubleshooting experience (PHP, MySQL, plugins/themes)
- Comfortable with hosting/FTP and browser dev tools
- Clear communicator, available to start soon

I'll Provide:
WP admin + hosting/FTP access

To Apply
Share similar bugs you've fixed, your time/cost estimate, and availability.

# Full-Stack E-Commerce Integration Engineer

### WordPress + Shopify + Modern Front-End Integration

**Engagement:** Contract
**Project:** E-commerce website modernization and platform integration
**Primary Stack:** Base44-generated front end, GitHub, WordPress, Shopify

## About the Project

We are developing a modern e-commerce experience using a newly designed front-end application that will be integrated with an existing WordPress environment and Shopify commerce infrastructure.

The front-end design and application experience will be developed separately from the underlying commerce and CMS integrations. We are seeking a strong Full-Stack E-Commerce Integration Engineer to take the completed front-end codebase, connect it to WordPress and Shopify, implement the required APIs and commerce workflows, and prepare the application for production deployment.

This role is primarily an **integration and implementation position**, not a visual-design position.

## Responsibilities

### Front-End Integration

* Take an existing front-end codebase from GitHub and integrate it into the production architecture.
* Review and refactor generated code where necessary for maintainability, performance, security, and scalability.
* Implement responsive behavior across desktop, tablet, and mobile.
* Connect front-end components to production APIs and data sources.
* Ensure consistent state management, error handling, loading states, and form validation.

### Shopify Integration

* Integrate Shopify Storefront APIs and/or Shopify Admin APIs as appropriate.
* Connect product catalogs, variants, pricing, availability, collections, and product information.
* Implement cart functionality.
* Connect customers to the appropriate Shopify customer/account functionality.
* Ensure checkout flows correctly transfer customers into the Shopify commerce environment.
* Implement order-related workflows and webhooks where required.
* Ensure Shopify remains the authoritative commerce/order system unless otherwise specified.
* Troubleshoot API, authentication, checkout, and order synchronization issues.

### WordPress Integration

* Integrate the front end with the existing WordPress environment.
* Connect WordPress content through appropriate APIs.
* Work with WordPress REST API and/or GraphQL where appropriate.
* Ensure existing WordPress content and administrative workflows remain functional.
* Preserve existing SEO requirements, URLs, metadata, and content structures where applicable.
* Avoid unnecessary changes to the existing WordPress installation.

### GitHub & Development Workflow

* Work directly from the project GitHub repository.
* Establish a clean branching and pull-request workflow.
* Maintain readable, documented, production-quality code.
* Create clear technical documentation for integrations and deployment.
* Use environment variables and secure credential management.
* Maintain separate development/staging/production configurations.

### Testing & Quality Assurance

* Test all major customer journeys.
* Test product browsing and product data.
* Test cart functionality.
* Test checkout handoff.
* Test order creation and order status flows.
* Test mobile and desktop experiences.
* Test API failures and edge cases.
* Identify and resolve integration defects before production deployment.
* Conduct regression testing after major changes.

### Security & Performance

* Follow secure API integration practices.
* Protect API keys, tokens, credentials, and customer information.
* Implement appropriate authentication and authorization.
* Validate and sanitize data appropriately.
* Minimize unnecessary API calls.
* Optimize application performance and page-load speed.
* Identify potential security vulnerabilities in third-party integrations.

## Required Technical Skills

### Required

* JavaScript / TypeScript
* React
* REST APIs
* GraphQL
* Git / GitHub
* Shopify development and Shopify APIs
* WordPress development
* WordPress REST API
* HTML5 / CSS3
* Responsive web development
* API authentication
* Webhooks
* JSON
* Debugging and troubleshooting

### Strongly Preferred

* Shopify Storefront API
* Shopify Admin API
* Shopify GraphQL API
* WordPress GraphQL / WPGraphQL
* Node.js
* Next.js
* Tailwind CSS
* Headless WordPress
* Headless Shopify
* Vercel or comparable cloud deployment platforms
* CI/CD
* Automated testing
* E-commerce architecture

## Ideal Candidate

The ideal developer has previously built or integrated **headless e-commerce applications** and understands that the front end, CMS, and commerce platform may operate as separate systems.

You should be comfortable taking an existing application from GitHub, understanding its architecture, connecting external APIs, debugging integrations, and bringing the complete system into production.

You should be able to independently answer questions such as:

* How should the front end communicate with Shopify?
* Where should product and inventory data originate?
* How should checkout be handled?
* How should orders be created and tracked?
* How should Shopify webhooks be implemented?
* How should WordPress content be exposed to the application?
* How should API credentials be secured?
* How should staging and production environments be separated?
* How do we prevent changes to one platform from breaking another?

## Deliverables

The selected developer will be responsible for delivering:

1. Production-ready front-end integration.
2. WordPress integration.
3. Shopify product/catalog integration.
4. Shopping cart functionality.
5. Shopify checkout integration.
6. Required order/webhook functionality.
7. Customer/account functionality where applicable.
8. Responsive mobile and desktop implementation.
9. API authentication and secure environment configuration.
10. Error handling and validation.
11. Cross-browser testing.
12. Performance optimization.
13. Production deployment support.
14. Technical documentation.
15. Final GitHub repository containing the completed implementation.

## Important

This project requires **working functionality, not simply completed screens**.

A successful deliverable must demonstrate that the customer can move through the intended purchasing journey and that the WordPress and Shopify systems communicate correctly.

Developers should provide evidence of completed integrations in a staging environment before production deployment.

## Application Requirements

Please provide:

* GitHub portfolio or relevant code samples.
* Examples of Shopify integrations you have completed.
* Examples of WordPress/headless WordPress projects.
* Examples of React/Next.js applications.
* Description of your experience with Shopify APIs and webhooks.
* Your availability.
* Estimated project timeline.
* Fixed project price or hourly rate.
* Any technical risks or dependencies you identify based on the project description.

**Bonus:** Experience integrating AI-generated or low-code-generated front-end applications into production environments.

I’m looking for an experienced WordPress developer to build a premium real estate website.

I already have the domain and hosting set up on Hostinger, along with the website content, logo, color palette, and reference materials. I mainly need someone who can take these materials and turn them into a polished, professional website.

What I Need
Premium, modern real estate website design
WordPress development
Property search and listing functionality
Responsive design for desktop and mobile
Property listing pages
Lead/contact forms
Clear calls-to-action
Basic on-page SEO setup
Fast and user-friendly experience
Connect and configure the existing Hostinger hosting
Recommend the best page builder, such as Elementor, WPBakery, or another suitable option
Recommend the best solution for managing and displaying property listings

I’m open to your recommendation on the best WordPress setup based on the website requirements. If you have experience with IDX or other real estate listing solutions, that’s a plus, but I’m open to recommendations if there is a better option.

I care more about the final quality, usability, performance, and maintainability than which page builder or listing system is used.


This can become an ongoing position after the initial website is completed.

I’ll need someone who can help with:

Adding and updating property listings
Website content updates
Property listing management
Adding new pages or sections when needed
Website maintenance
Fixing issues and keeping the site updated

if you have samples, share them please.

DNS, Hostinger, Porkbun & Google Workspace Migration Specialist Needed

I need an experienced specialist to safely complete the final stages of a website and email migration for a small photography business.

This is NOT a website design job. The website has already been migrated from InMotion Hosting to Hostinger and is currently being tested.

I need someone specifically experienced with DNS, nameservers, cPanel/hPanel, Google Workspace, email migration, and domain configuration.

CURRENT SETUP

Domain registrar: Porkbun

Current/old hosting: InMotion Hosting

New website hosting: Hostinger

Current email: InMotion/cPanel

New email: Google Workspace

Website: brightfocusphotography.com

The main goal is to complete the transition safely without losing website functionality, email, contact forms, or existing messages.

SCOPE OF WORK

1. Review and document the current DNS configuration before making any changes.

2. Verify that the migrated Hostinger website is configured correctly and ready for the live cutover.

3. Preserve InMotion as a temporary rollback/fallback until I confirm everything is working properly.

4. Point brightfocusphotography.com correctly to Hostinger.

5. After DNS propagation, verify that:

* Website loads correctly
* SSL/HTTPS works
* Main pages and galleries work
* Contact forms work
* Cloudflare/Turnstile works correctly
* There are no broken links or obvious migration errors

6. Set up Google Workspace for the primary business domain.

The initial setup will include:

* One primary owner/admin mailbox
* One separate shared business mailbox for an assistant

The assistant mailbox must remain separate from the owner’s personal/business mailbox.

7. Migrate existing InMotion email into Google Workspace without deleting the old InMotion mailboxes until the migration is confirmed complete.

8. Configure and verify all required email DNS records, including:

* MX
* SPF
* DKIM
* DMARC
* Any required TXT or CNAME records

9. Add and configure additional business domains and aliases as needed.

10. Configure Gmail aliases, labels, and filters so messages sent to different business addresses can be easily identified and organized.

11. Test sending and receiving for all important email addresses.

12. Confirm that everything is functioning properly before any old services are removed.

IMPORTANT RULES

* Do NOT cancel InMotion Hosting.
* Do NOT delete old email accounts or messages.
* Do NOT delete DNS records without first documenting the current configuration.
* Do NOT make major or irreversible changes without my approval.
* Preserve a rollback path until the website and email migration have been fully tested.
* I want the work performed carefully and methodically, not rushed.

REQUIRED EXPERIENCE

Please apply only if you have hands-on experience with:

* DNS and nameserver migrations
* Porkbun
* Hostinger / hPanel
* InMotion Hosting / cPanel
* Google Workspace administration
* IMAP/email migration
* MX, SPF, DKIM, and DMARC
* WordPress migrations
* SSL
* Cloudflare/Turnstile troubleshooting

WHEN APPLYING, PLEASE ANSWER THESE QUESTIONS DIRECTLY

1. Have you personally migrated a WordPress website from one hosting provider to another while preserving email at a different provider?

2. Have you personally configured Google Workspace with MX, SPF, DKIM, and DMARC?

3. Have you worked with Hostinger, Porkbun, and InMotion/cPanel? Please specify which ones.

4. How would you minimize the risk of website or email downtime during this migration?

5. What would you back up or document before changing nameservers or DNS records?

6. Approximately how many hours do you expect this project to require?

Please do not send a generic SEO or WordPress development proposal.

I am specifically looking for someone experienced with DNS, hosting migration, and Google Workspace email configuration.

I am open to either hourly or fixed-price proposals, but I value careful execution, relevant experience, and communication more than simply choosing the lowest bid.

Freelance WordPress Designer Needed to Complete Blog Website
I’m looking for an experienced WordPress developer/designer to complete and polish my blog website: Glowaura.cyou.

I have already started the website using WordPress CMS, so this is primarily a completion, customization, and optimization project, rather than building everything from scratch.

Project Requirements
Review the existing WordPress website and understand the work already completed.
Complete the website’s overall design and layout.
Create a clean, modern, professional, and visually appealing blog design.
Ensure the website is fully responsive on desktop, tablet, and mobile.
Improve navigation, menus, categories, widgets, headers, footers, and other relevant site elements.
Set up and properly format the blog/article pages and templates.
Optimize typography, spacing, colors, images, and overall visual consistency.
Configure essential WordPress settings and plugins where necessary.
Ensure basic SEO, site speed, security, and mobile-friendliness best practices.
Make sure all pages and links work correctly.
Ensure the website is easy for me to maintain and publish new articles on after completion.
Fix any existing design, layout, or technical issues you identify.
Ideal Freelancer
I’m looking for someone with:

Strong WordPress development and customization experience.
Good UI/UX and web-design skills.
Experience building and optimizing content/blog websites.
Knowledge of responsive design, SEO, performance optimization, and WordPress plugins.
Ability to work with an existing WordPress installation rather than insisting on starting over.
Good communication and attention to detail.
Deliverables
A complete, polished, functional, responsive WordPress blog website that is ready for publishing content and presenting professionally to visitors.

Please include examples of WordPress/blog websites you have built or customized in your proposal. Also briefly describe how you would approach taking an existing partially completed WordPress site and turning it into a finished website.

Skills: PHP, Website Design, SEO, WordPress, HTML, Blog Design, Website Optimization, WordPress Design, Web Design, Website Development

One of the website page is suddenly showing Bad gateway. Other pages are working. It must be data issue. To be checked

We’re looking for an experienced WordPress designer/developer to redesign and refresh an existing website for a New Zealand financial advice business.

The current website is live and functional, but it needs a significant visual and UX update to make it feel more modern, professional, trustworthy and easier to navigate.

The marketing strategy, website direction and core content will be provided. We are looking for someone who can take that direction and turn it into a polished, high-quality WordPress website.

Scope of work
Redesign the existing WordPress website
Improve the overall visual design and user experience
Refresh the homepage and key service pages
Improve navigation and page structure
Update team/adviser sections
Improve calls-to-action throughout the website
Ensure enquiry/contact forms work correctly
Create a strong mobile-responsive experience
Improve spacing, typography and visual hierarchy
Optimise general website performance
Ensure basic on-page SEO structure is in place
Maintain or redirect existing URLs where required
Make the website easy for our marketing team to update going forward

We will provide the content, imagery, website strategy and creative direction.

What we're looking for

Ideally, you have:

Strong WordPress experience
Excellent website design skills, not just development skills
Experience with service-based or professional businesses
Strong understanding of mobile-first design
A good eye for clean, modern layouts
Good communication and ability to follow a clear creative direction

Experience with financial services, insurance or professional services would be an advantage.

When applying

Please include:

3–5 examples of WordPress websites you have designed or developed
Whether you handle both design and development
Your estimated timeframe
Your fixed-price estimate
What WordPress builder/framework you recommend using

Please start your application with “WordPress” so I know you have read the full brief.

Contact me and I will send through the current website so you can review it before providing your proposal.

We are looking for a website that feels modern, premium, clear and trustworthy — not like a generic financial-services template.

A passion for Hawaiian culture and a deep respect for traditional Native bone carving are at the heart of this project. This first limited series of makau (Hawaiian hooks) is being created as both artifact and adornment, with additional series to follow. The website should reflect this by speaking to discerning collectors who cherish rare, meaningful pieces meant to be both displayed and worn.

Project Title
Refined WordPress + Elementor build for luxury artisan brand website (from supplied prototype)

Project Overview
Noho 'ana is seeking a developer with strong visual restraint and good design judgment to build a polished WordPress website using Elementor, based on an existing prototype, current assets, and supplied content.

This is not a mass‑market sales site or a complex web app. The site is intended primarily as a credibility, verification, and presentation platform for the Noho 'ana brand, the Arc of Life collection, and the artisan story behind the work. It should feel elegant, calm, image‑aware, and culturally respectful rather than loud, salesy, or overdesigned.

The ideal developer understands how to execute a refined design without adding unnecessary effects, clutter, or generic template styling.

Platform Requirement

This project must be built in WordPress with Elementor, as those services are already in place and paid for.

Please do not propose a rebuild in another platform unless there is a very compelling reason.

Project Goal
Turn an existing prototype/mockup into a working website that:

establishes legitimacy and trust for Noho 'ana

presents Arc of Life in a collector‑appropriate and visually polished way

communicates the artisan/story component with clarity and care

works well on desktop and mobile

includes basic technical SEO foundations without requiring a full SEO/marketing engagement

includes presentation of the five accompanying documentation cards (each card has printed content on both front and back, and the final site should allow visitors to view both sides of all five cards; this requirement is not fully reflected in the earlier HTML prototype and should be included in the final WordPress/Elementor build)

What Will Be Provided
The selected developer will receive:

existing HTML prototype/reference

current copy and brand text (locked/approved language)

logo reference files

product imagery and placeholder imagery

direction on page structure and visual tone

access to the existing WordPress / Elementor environment

Some assets may be refined or replaced after hiring, so the site should be built in a way that allows straightforward content and image updates.

Access and Workflow

The website already exists within WordPress / Elementor.

Developer access will be provided through a separate WordPress admin account, not through a personal master login.

A staging or otherwise careful workflow is preferred before changes are pushed live.

Scope of Work
Requested scope includes:

build the site in WordPress using Elementor

translate the supplied prototype/design direction into a live site

create a responsive layout for desktop and mobile

implement clean typography, spacing, and elegant image presentation

build core pages/sections such as homepage, brand/about content, collection/story content, and contact or inquiry section

work with supplied assets and placeholders where final assets are not yet fully locked

set up basic contact/inquiry functionality

implement basic technical SEO setup, including editable page titles, meta descriptions, heading structure, alt‑text support, and sitemap/indexing readiness

build a documentation/presentation section for the five accompanying cards, allowing visitors to view all ten printed sides (five cards, front and back) in a clean, collector‑appropriate format

leave the finished site organized enough for later updating

Design Expectations
This project requires taste. The right person should be able to build something that feels:

refined rather than flashy

premium rather than generic

restrained rather than overloaded

visually respectful of artisan work and storytelling

Please do not apply if your default style leans heavily on generic templates, excessive motion, oversized effects, or busy commercial design language.

Best Fit
This project is best suited to a developer who has experience with one or more of the following:

luxury product websites

artisan or maker brands

gallery, jewelry, or collectible presentation

editorially styled brand sites

thoughtful WordPress / Elementor builds that do not look templated

A good eye matters here as much as technical competence.

Deliverables
Please include in your work:

completed responsive WordPress + Elementor website build

implementation of supplied design direction

organized page structure and reusable editing setup

basic technical on‑page SEO foundation

contact/inquiry mechanism

clear handoff for future updates and content/image changes

visible, usable presentation of the five documentation cards (front and back)

Budget
Target budget: $800 to $1,000 for a realistic Phase 1 build.

Please explain clearly what can be completed within that range. If you believe certain refinements should be deferred to a later Phase 2, please identify that specifically rather than overpromising.

To Include in Proposal
Please respond with:

2 to 4 examples of relevant WordPress / Elementor work (ideally product, gallery, jewelry, or artisan/collector sites)

a brief note on why your style is a fit for this project

what you would include within the stated budget

your estimated timeline

whether you prefer working on staging or directly in WordPress with checkpoints

any questions you would want clarified before starting

Prototype Reference (sample HTML structure)

A current HTML prototype of the site structure and content will be provided as a reference after initial screening. It is there to show layout, copy, and general direction; it is for context, not for direct copy‑paste. The final WordPress/Elementor build should respect the structure and language of the prototype while also incorporating requirements not fully represented there, including the full two‑sided presentation of the five documentation cards.

noho‑ana‑web‑prototype‑1.html

Need a freelancer to fix issues on an existing WordPress Elementor website. The work includes troubleshooting layout problems, improving page responsiveness, resolving broken elements, and making small updates to improve overall site performance and user experience. Please share relevant experience with similar website fixes and examples of past work. This is a short-term project for someone who can work efficiently and communicate clearly throughout the process.

I am launching an asset-light waste coordination platform using a GoDaddy-hosted WordPress website and a Microsoft 365 Business ecosystem.I need an expert cloud automation engineer to build a real-time, automated backend logistics engine using Microsoft Power Automate, Microsoft Lists, OneDrive for Business, and the GoDaddy Payments API.The system must run 100% in the background via automated webhooks, cloud triggers, and financial APIs. My goal is to be entirely hands-off from administrative tasks, data entry, compliance paperwork, and routine customer/carrier communications so I can focus entirely on marketing and SEO.
Core Project Requirements & DeliverablesFlow 1: Webhook Customer Intake to Regional Carrier DispatchTrigger: Customer submits a clear-out request form on my WordPress website (enforcing mandatory image/video file uploads and distinct [Address] and [Postcode] text fields).Action 1 (Instant Email Auto-Responder): Parse the incoming client email address and fire an automated HTML confirmation email instantly: "We have received your clear-out request and photos. Our dispatch engine is currently checking live availability and negotiating a live price with our vetted local carrier network in your area. Your secure payment link will arrive via text and email within 5 minutes."Action 2 (Spreadsheet Logging): Catch the data payload via an HTTP Webhook and create a new tracking row in a Microsoft List spreadsheet called WasteTab Bookings (Status set to "NEW ENQUIRY").Action 3 (Photo Management): Stream the uploaded images/videos into a structured OneDrive for Business folder (/WasteTab/Job_Photos/[Job_ID]) and generate a public, view-only sharing link inside the Microsoft List.Action 4 (Smart Regional Filter & Dispatch): Read the isolated Postcode area, cross-reference my active carrier database, filter out incompatible haulers, and push a formatted alert text (containing the details and the OneDrive photo link) to a corresponding regional Microsoft Teams channel or WhatsApp gateway link (e.g., Twilio).Flow 2: Carrier Bidding & Smart SelectionTrigger: A carrier clicks the alert link and submits a short Microsoft Form containing: Company Name, Bid Price (£), and Earliest Arrival Time.Action: Power Automate must catch this submission, locate the matching Job ID row in WasteTab Bookings, drop the carrier's name and bid value live onto my screen, and lock onto the first acceptable quote to close the auction.Flow 3: One-Click Markup & GoDaddy Payment Link GenerationTrigger: I review incoming carrier bids on my Microsoft List and change a dropdown column status to "Send Quote".Action 1 (Fee Calculation): The flow must automatically calculate a 25–30% markup on top of the carrier's bid, and then apply a dynamic financial "gross-up" calculation to add GoDaddy's online payment processing fee (2.3% + 30p) entirely on top of the subtotal. My profit margin must remain completely untouched by transaction costs.Action 2 (GoDaddy Link & Delivery): Call the GoDaddy Payments API to dynamically generate an Authorization-Hold Pay Link for that exact calculated total, and instantly text and email that link straight to the customer's device. Change spreadsheet row tracking status to "QUOTE SENT".Flow 4: Post-Payment Dispatch & On-Site Completion LoopTrigger 4A (Payment Held): The customer inputs card details/Apple Pay. GoDaddy confirms the Authorization Hold.Action: Keep the customer's exact street address hidden from carriers until this step. Change the list row status to "BOOKED" and instantly text a Job Ticket straight to the winning carrier's phone containing the full address, contact number, access instructions, and the time slot.Trigger 4B (Site Completion): The carrier completes the clear-out, opens their WasteTab tracking link, and uploads Before & After photos.Action 1: Capture the completion images, attach them to the spreadsheet row, and trigger the GoDaddy Payment Capture step to finalize the funds into the bank account.Action 2 (Auto-Bookkeeping Ledger): Automatically track financial data in columns on the spreadsheet: Gross Revenue (what the client paid), Carrier Payout (what we owe the driver), and Net Profit (Revenue minus Payout) to maintain a live digital bookkeeping ledger.Action 3 (Dynamic WTN): Compile the transaction variables (Postcode, Carrier License, Waste Type) into a compliant digital UK Waste Transfer Note (WTN) PDF template [gov_uk_digital_waste_tracking]. Email a final closeout message to the property manager showing the Before & After photos with the legal WTN PDF attached as a permanent download [gov_uk_digital_waste_tracking]. Set row status to "COMPLETED".Emergency Operational Safety Valves (Required Exceptions)On-Site Excess Waste Surcharge (The Profit Protector): Create a 'Materially Different / More Waste' trigger inside the carrier's job ticket interface. Activating this must require the carrier to upload a photo of the extra waste before loading. The system must instantly pause the current workflow, calculate a standardized excess surcharge fee, call the GoDaddy API for a supplementary payment link, and text it directly to the customer. Implement a strict 10-minute automated countdown timer to clear the payment or decline the extra work.Carrier Breakdown Re-Auction: If a driver hits an emergency "Breakdown" button in their portal: instantly fire an automated apology text to the client, clone the job data to launch a priority re-auction to find a replacement driver within a day, and fire a high-priority SMS or push notification alert straight to my personal mobile phone.Customer Service & Dispute Loop: If a customer submits a complaint on our website /support form: instantly log the details into a separate spreadsheet tab named WasteTab Disputes, lock the carrier's payout status column to "On Hold", fire an automated message to the customer confirming an active investigation, and text the assigned carrier a demand to upload their on-site photographic evidence via a secure link within 24 hours.Late Cancellation Penalty: If a client requests a cancellation inside their user portal with less than 24 hours notice, calculate a fixed late-fee penalty and automatically capture it directly from the active GoDaddy card authorisation hold.

Project: Homepage Design + WordPress Build for Technology Advisory Firm

I’m looking for a strong WordPress designer/developer to redesign and build the homepage for Stratus Lifestyle Technologies, a boutique technology advisory firm serving homeowners and small businesses.

This is Phase 1 only. If the homepage goes well, there is likely follow-on work to design and build the remaining six pages of the website.

About Stratus

Stratus is not primarily a smart home installer, AV company, MSP, or low-voltage contractor.

We are positioning the company as a trusted technology advisory that helps homeowners and small businesses make confident technology decisions through:

Advisory and consulting
Technology assessments
Networks and connectivity
Business technology
Security and data protection
Professional implementation

Our philosophy is simple: advice and planning come first; implementation follows when appropriate.

The website should feel professional, modern, calm, approachable, and polished without feeling corporate or overly technical.

What already exists

A significant amount of strategy work has already been completed.

I will provide:

A detailed Website Blueprint
A completed Brand & Service Framework
Existing logo and brand assets
Current website for reference
Existing copy direction and page structure

I am not hiring someone to rediscover the brand or create a generic IT website.

I need someone who can take the strategy that already exists and translate it into a strong, polished homepage.

Scope for this project

Design and build the homepage in WordPress.

The page should include:

Responsive desktop and mobile design
Navigation/header
Hero section
Clear explanation of what Stratus does
Residential and Business pathways
Technology Advisory / service overview
Process / how we work
Resource or educational content section
Trust-building elements
Final CTA
Footer

The homepage should use real copy, not lorem ipsum.

Visual direction

The website should feel:

Professional
Premium, but not flashy
Calm
Modern
Organized
Approachable
Human
Consulting-led

Please avoid:

Generic MSP templates
“Cybersecurity” stock imagery
Technicians staring at servers
Excessive gradients
Overly corporate layouts
Generic stock-photo businessmen shaking hands
Smart-home imagery that makes the company look like an AV installer

Image selection matters a lot for this project.

I want imagery that supports:

Modern homes and workspaces
Technology being used naturally
Consultation and planning
Organization and simplicity
Reliable, well-integrated environments

I am specifically looking for someone with enough design judgment that I do not have to personally select every image or fix the visual direction afterward.

Platform

The current site is WordPress and hosted through Hostinger.

I’m open to your recommended WordPress builder/theme approach as long as:

The site is maintainable
I retain full ownership and admin access
Another developer can reasonably take over later
There are no unnecessary proprietary dependencies

Please tell me what builder/theme system you recommend and why.

Deliverables

For this first phase, I expect:

Complete homepage design
WordPress implementation
Desktop and mobile responsiveness
Image sourcing/selection
Basic performance optimization
Clean, professional layout
1–2 revision rounds
Final page ready to launch
Important

This is not a “copy my instructions pixel by pixel” project.

I have already done the strategic work, but I expect the freelancer to bring professional design judgment.

I do not want to finish the project by replacing half the images, fixing spacing, correcting mobile layouts, or redesigning sections myself.

The goal is to reach a point where I can say:

“This is good enough to launch as-is.”

Follow-on work

If the homepage is successful, I expect to continue with the remaining website pages:

Technology Advisory
Residential Technology
Business Technology
Resources
About
Contact

When applying
Please include:

2–4 examples of websites you personally designed and built, especially professional-services, consulting, technology, or similar businesses.
Which WordPress builder/theme system you recommend for this project and why.
A short explanation of how you approach image selection for a professional-services website.
Confirmation that you are comfortable working from an existing brand framework and website blueprint rather than starting from scratch.
Your estimated timeline for completing the homepage.

Please do not send a generic proposal. I am specifically looking for someone who can understand the positioning of the business and translate it into a polished visual experience.

The attached Website Blueprint covers the full planned website. For this contract, focus only on the homepage requirements. The Brand & Service Framework is included so you understand the company’s positioning and long-term direction.

WordPress Website Setup for Professional Painting Company (SEO-Ready)

Job Description:
I’m looking for an experienced WordPress developer to build the initial structure for a professional painting company website. This project is focused on setup and functionality, not heavy design. I will continue adding content and images after the initial build.

Scope of Work:

design our project case studies and post them to our website. This person needs to be able to take the photos, video and text provided and present a pleasing and professional layout that attracts readership. edit photos and video to create interesting layouts that can be sent and used to social media accounts. I want to have pages created that represents each area that we work in so we can get credit in searches in each of the cities.

What I’m NOT Looking For:

Custom coding or overly complex design

Long-term management (this is an initial setup project)

Generic templates with no SEO structure

Requirements:

Proven experience building WordPress sites for service-based businesses

Strong understanding of local SEO best practices

Ability to explain plugins and setup clearly

Clean, organized work that I can easily manage after handoff

Nice to Have (Not Required):

Experience with contractor or home service websites

Local SEO or Google Business Profile knowledge

Deliverables:

Fully functional WordPress site structure

Plugins installed and configured

Simple handoff instructions so I can manage content and photos myself

Budget:
Open to fixed-price proposals — please include examples of similar WordPress sites you’ve built.

Looking to clean my site www.clearcutfunding.com making sure nothing is lost in the process. It has malware detected on the site. Also, my other site www.lmsprinklers.com is on the same host. Want to make sure both sites are optimized and clean of any malware. Thank you

Hi, I need some help cleaning up our website, allstarfencespokane.com. Some of the pages don’t match very well—the spacing, fonts, buttons, headers, and image sizes are inconsistent. I’d like the vinyl, chain link, wood, and ornamental pages to follow the same general layout, look good on mobile, load quickly, and include a simple quote form so we can use each page for its own Google Ads.
The main navigation header also needs improvement. It should look cleaner, be consistent across every page, and make it easy for customers to call us or request a free quote—especially on mobile. The overall load speed needs improvement too, and the site takes too long to reach the thank-you page after someone submits the contact form. Can you also check for oversized images, broken links, redirects, old pages, and plugin conflicts that may be slowing things down?

We’re looking for an experienced WordPress Developer & Designer to build a modern, professional website for a fitness business.

We have the general direction for the website and are looking for someone who can turn that vision into a polished, responsive WordPress website with a strong visual design and easy-to-use experience.

Reference Website: https://www.tonal.com/

Please send 2–3 WordPress websites you personally designed or developed, preferably modern websites similar to the type of fitness website we’re looking to build.

We’re looking for someone who can take the website direction and turn it into a professional final product while also making smart design and UX improvements where necessary.

To show that you’ve read the post, please start your proposal with “DESIGN.”

There is potential for additional WordPress work after successful completion.

Fixed price: $10

The website will consist of 3 pages in total, animated, built to reflect the client's brand with consistent design language throughout. SEO configuration including meta titles, descriptions, and structured headings required across all pages.

Requirements:
- Divi or Bricks Builder proficiency
- WooCommerce setup and configuration
- Clean, professional WordPress website design
- Mobile responsive across all devices
- Basic on-page SEO setup
- Fast loading and performance optimized


Please share relevant portfolio examples of similar WordPress, Divi, Bricks Builder, and WooCommerce builds you have completed.

I’m looking for an experienced web designer and WordPress developer to design and build a modern website for an English tutoring/education business in the UK.

I’m looking for someone who can handle the project from Figma design through to the finished WordPress website — not just install a theme and make basic changes.

What I need
Modern, professional and trustworthy education-focused website
Custom Figma UI/UX design
Fully responsive design for desktop, tablet and mobile
WordPress development from the approved Figma design
Elementor / Elementor Pro or another suitable WordPress builder
Clear navigation and strong user experience
Tutor / teacher information and profiles
English tutoring services and course information
Student/parent enquiry or booking functionality
Contact and enquiry forms
Testimonials / reviews section
About, Services, Tutors, FAQs, Contact and other required pages
Basic on-page SEO and good page speed
Easy-to-manage WordPress backend
Clean and maintainable implementation
Design direction

I want the website to feel premium, modern, friendly and trustworthy, while still looking appropriate for a UK education brand.

Please don't use a generic template design. I want someone who understands UI/UX, typography, spacing, conversion-focused layouts and responsive design.

Ideal freelancer

You should have:

Strong Figma + UI/UX experience
Excellent WordPress development skills
Experience with Elementor/Elementor Pro
Previous education, tutoring, school or professional service website experience is a plus
Good understanding of responsive design
Strong attention to detail
Ability to communicate clearly and suggest improvements when something can be done better

Please send 2–4 relevant websites you've personally designed/developed, preferably education, tutoring or service-based websites.

I’m looking for someone who can take the project seriously and deliver a polished website rather than simply putting together a basic WordPress template.

If the first project goes well, there is potential for ongoing website/design work.

Please include your estimated timeframe and fixed-price or approximate project cost when applying.

Requirements:
- create a completely new website using an existing template. Contents will be provided in full.
- website must be created within my company's Wordpress account
- Add 2 DNS records (TXT and CNAME) for my other existing app
- All hosting, WordPress, theme, plugin, analytics, image, backup and security accounts must be created in my company’s name. The developer will receive individual access and must not be the sole account owner or recovery contact.
- The developer will assign ownership of all newly created bespoke text, graphics, design work and custom code to my company following payment. Every third party component and licence must be disclosed and approved before use.
- At completion, my company must receive the complete website files, database, editable design files, custom source code, licence register, configuration documentation and a tested restorable backup. My company must be free to appoint another developer without further permission or charges beyond any disclosed continuing third party licence costs.
- Final acceptance and payment will depend on successful handover, restoration testing, accessibility, mobile, privacy, cookie and security checks.
- In the longer term, I am also looking for a reliable website developer/engineer to maintain my website

We are building OZIL (ozilparts.com), a new global B2B brand specializing in forklift spare parts. The website already exists on WordPress, but we need it professionally redesigned and restructured — not simply made more visually attractive.

Our two main objectives are:

1. Generate qualified RFQs and inquiries from international forklift parts buyers, distributors, dealers, workshops and companies.
2. Build a strong SEO foundation capable of ranking organically on Google for forklift parts, brands, models and individual part numbers.

The website must be designed from the beginning to scale to thousands of products and part numbers without becoming difficult to manage or damaging SEO.

We need:

• Professional global B2B industrial design with strong brand credibility.
• Clear website architecture for forklift brands, models, product categories and individual parts.
• A scalable product database structure suitable for thousands of future SKUs/part numbers.
• Powerful search allowing buyers to find parts by part number, keyword, brand, model or category.
• SEO-friendly URLs, categories, breadcrumbs and internal linking.
• Proper technical SEO, schema markup, sitemap, indexing and crawlability.
• Optimized product/category page templates designed for Google search visibility.
• Fast loading and excellent Core Web Vitals on mobile and desktop.
• Strong RFQ system throughout the website — we are primarily B2B, so the objective is inquiries and quotations rather than a standard retail checkout experience.
• RFQ functionality allowing customers to inquire about one or multiple parts easily.
• WhatsApp/contact options without making the website look like a small local business.
• Google Analytics and Google Search Console setup/tracking.
• WordPress backend structured so our team can easily add new brands, models, categories and thousands of parts later without rebuilding the site.

SEO is a major part of this project. We do NOT want someone who will simply install an SEO plugin and call the website “SEO optimized.” We need proper keyword architecture, technical SEO and scalable page structure from the beginning.

The long-term goal is for OZIL to compete internationally for searches such as forklift parts, forklift spare parts, specific forklift brands/models, product categories and especially individual OEM/part-number searches.

Before beginning development, we expect you to review ozilparts.com and propose:

• Recommended site architecture
• Product/part-number database structure
• SEO strategy and URL structure
• RFQ/conversion strategy
• Recommended WordPress/Elementor/WooCommerce/ACF or other technical stack
• What should be retained, changed or rebuilt from the current website

Please do not start by selecting a template. Architecture, SEO scalability and conversion strategy should be agreed first.

We are looking for someone who can build the technical foundation correctly now so that OZIL can grow into a large international forklift-parts website without requiring another complete rebuild later.

I need an experienced WordPress plugin developer to build "Smart Contact Inbox" — a plugin that turns the WordPress admin into an email-style inbox for Contact Form 7 (CF7) submissions.

Overview:
Every CF7 submission should be automatically captured, threaded by sender email, and displayed in a clean, Gmail-like interface — fully self-contained, no external services, no SMTP plugin, no paid add-ons.

Core Features Required:
1. Centralized Inbox - All CF7 submissions in one place, grouped by form name
2. Threaded Conversations - Auto-group messages from same email into threads
3. Chat-style Thread View - Visitor messages left-aligned, admin replies right-aligned, with timestamps
4. Direct Reply - Reply to visitors from wp-admin using native wp_mail() (no SMTP plugin dependency)
5. Status Tracking - New / Read / Replied status indicators
6. Unread Badge - Real-time admin menu + admin-bar notification badge
7. Tags - Custom labels (Lead, Support, Spam, etc.) with one-click tag filtering
8. Saved Filters - Save & re-apply filter combos (form + tag + email + search)
9. CSV Export - Export current filtered inbox view
10. Filter & Search - By form name, tag, sender email, or keyword
11. Pagination - Performance for large inboxes
12. Bulk Delete - Multi-select conversation deletion
13. AJAX Replies - Send/save replies without page reload
14. Spam Shield - Silent honeypot trap (no CAPTCHA) + block domains/keywords
15. Settings Page - Toggle reply feature, customize reply subject format, override From email
16. Debug Page - Show CF7 raw field data, system status, one-click inbox test

Requirements:
- Proven experience building WordPress plugins (show past plugin work)
- Strong knowledge of Contact Form 7 hooks/filters (wpcf7_mail_sent, etc.)
- Experience with WordPress admin UI development, AJAX, and custom database tables
- Clean, well-documented, secure code (proper sanitization/nonces)
- Must be compatible with standard WordPress + CF7 setup, no third-party dependencies

Deliverables:
- Fully functional plugin (.zip, installable)
- Basic documentation/readme
- Code walkthrough or comments for future maintenance

Please share links to similar WordPress plugins you've built when applying.

AI-Native Full-Stack Product Engineer — Next.js, Node/NestJS, Shopify & WordPress

About Webb9

Webb9 is building an AI-first technology platform for small and growing businesses.

We develop websites, business dashboards, SaaS tools, AI-powered business solutions, e-commerce products, integrations, mobile applications and other software designed to help businesses manage their operations and grow.

Our products connect areas such as websites, customer enquiries, leads, bookings, jobs, scheduling, invoicing, payments, reviews, messaging, AI receptionists, AI chatbots and business operations.

In addition to the Webb9 platform itself, we develop:

SaaS and business dashboards
Shopify apps
Shopify themes
WordPress plugins
WordPress themes
E-commerce products
AI-powered business tools
Web applications
APIs and integrations
Mobile and PWA products
Internal and commercial software products

We are now looking for an AI-Native Full-Stack Product Engineer to become an important part of our product development team.

This Is an AI-First Engineering Role

This is not a traditional development position where we expect the engineer to manually type every line of code.

Webb9 makes extensive use of advanced AI coding tools and development agents.

AI may perform a very large percentage of implementation work, including generating code, creating components, implementing features, writing tests, debugging, refactoring, generating documentation, reviewing code, creating database schemas, building APIs and assisting with deployment.

Your role is therefore much more important than simply producing code.

You will be responsible for directing, supervising, validating and improving the work produced by AI and ensuring that everything ultimately delivered by Webb9 is secure, maintainable, scalable and production-ready.

You must know enough about software engineering to recognise when AI-generated code is wrong even when it looks correct.

We are looking for someone who combines strong software-development fundamentals with an AI-first approach to building products quickly.

What You Will Work On

1. Webb9 Business Platform and Dashboards

Develop and maintain SaaS dashboards and business-management systems using technologies such as:

React.js
Next.js
TypeScript
JavaScript
Node.js
NestJS
PostgreSQL
REST APIs
WebSockets where required

Examples of functionality may include:

Leads and CRM
Customer management
Booking systems
Job and work-order management
Scheduling
Dispatch
Quotes
Invoicing
Payments
Reviews
Analytics
Messaging
Team management
Roles and permissions
Reporting
Notifications
AI-powered features
Third-party integrations

These products are intended for real businesses and must therefore be production-quality.

2. Shopify Development

You may work on both Shopify apps and Shopify themes.

Responsibilities may include:

Shopify app development
Public and private or custom Shopify apps
Shopify Admin API
Storefront API
Shopify webhooks
OAuth
Billing and subscriptions
Shopify extensions
Embedded applications
Liquid
Shopify theme development
Shopify Online Store 2.0
Sections and blocks
Theme customization
Theme performance
App and theme compatibility
Publishing and maintenance

Experience developing commercial Shopify apps or themes is highly desirable.

3. WordPress Development

You may also develop and maintain:

WordPress plugins
WordPress themes
Custom WordPress functionality
WooCommerce integrations
WordPress APIs
Gutenberg blocks
Admin interfaces
Third-party integrations
Commercial themes and plugins
Performance and security improvements

We are particularly interested in developers who understand how to build WordPress products properly rather than only modifying existing templates.

4. APIs and Integrations

Webb9 connects with external platforms and business tools.

You may work with:

Payment gateways
Accounting systems
CRM systems
Messaging platforms
Email services
AI APIs
Google services
Social platforms
E-commerce platforms
Telephony systems
Webhooks
OAuth integrations
Third-party REST and GraphQL APIs

You should be comfortable reading API documentation and using AI to accelerate implementation while independently verifying that the integration is correct.

5. AI-Powered Products

You will help us develop products where AI is part of the actual software, including tools for:

Customer support
Business automation
AI receptionists
Chatbots
Lead qualification
Content generation
Business intelligence
Workflow automation
Data analysis
Other industry-specific AI tools

Experience integrating LLM APIs or AI services is an advantage.

Your Most Important Responsibility: AI Code Supervision

We want someone who is very comfortable using AI for software development.

You may use tools such as:

ChatGPT and Codex
Claude Code
Cursor
GitHub Copilot
Other coding agents
AI testing tools
AI design-to-code tools
Automation, no-code and low-code tools where appropriate

However, blindly accepting AI-generated code is unacceptable.

You will be expected to:

Write clear instructions, prompts and specifications for coding agents
Break large requirements into manageable implementation tasks
Inspect AI-generated code
Verify that requirements were actually implemented
Detect hallucinated or incomplete implementations
Identify bugs
Review architecture
Review pull requests
Detect security vulnerabilities
Check authentication and authorization
Review database design
Identify inefficient queries
Identify performance problems
Detect unnecessary dependencies
Remove duplicated or dead code
Ensure correct error handling
Identify missing edge cases
Verify responsive behaviour
Check accessibility
Ensure tests are meaningful
Run and review automated tests
Add missing tests
Review migrations
Verify APIs
Debug integration problems
Refactor poor AI-generated code
Verify builds before deployment
Review production logs
Investigate regressions
Ensure documentation remains accurate

AI should accelerate you.

It should not replace your engineering judgment.

Required Technical Skills

You do not need to be the world's leading expert in every technology listed below.

However, you should have strong full-stack fundamentals and be capable of learning unfamiliar technologies quickly with AI assistance.

Strong experience is expected in most of the following:

JavaScript
TypeScript
React.js
Next.js
Node.js
REST APIs
SQL
PostgreSQL or similar relational databases
Git
GitHub
Responsive web development
HTML
CSS
Authentication
Role-based permissions
API integration
Testing
Debugging
Deployment

Strongly Preferred

Experience with several of the following will substantially strengthen your application:

NestJS
Shopify app development
Shopify theme development
Shopify Liquid
WordPress plugin development
WordPress theme development
WooCommerce
Redis
Docker
CI/CD
Linux
VPS or cloud deployment
WebSockets
Queues and background jobs
Stripe or other payment systems
Firebase
AWS, GCP or Azure
Third-party API integrations

Python

Our current primary stack is largely JavaScript and TypeScript-based.

However, we intend to use more Python in the future.

Experience with any of the following is therefore an advantage:

Python
Django
Django REST Framework
FastAPI
AI and ML development using Python

Python experience is preferred but is not mandatory for an otherwise excellent candidate.

Additional Technologies — Advantage, Not Requirement

Experience with any of the following would also be useful:

Chrome and browser extension development
Google Workspace applications and add-ons
Google Apps Script
Desktop application development
Electron
Tauri
Progressive Web Apps
Flutter
Kotlin
Swift

You are not expected to be an expert in all of these.

Product Engineering Mindset

This role is not simply about completing tickets.

We want someone who asks questions such as:

Does this feature actually solve the requirement?

What happens when the API fails?

What happens when there are 100,000 users?

What happens if a user has the wrong permission?

Is this implementation secure?

Is this database design sensible?

Is there already functionality that does the same thing?

Is the AI introducing unnecessary complexity?

Are important edge cases missing?

Will another developer understand this six months from now?

Is this actually ready for production?

You should be comfortable challenging AI-generated solutions and proposing a better approach.

Quality Standards

Before considering work complete, you should be able to verify:

Functional correctness
Code quality
Security
Performance
Responsiveness
Accessibility
Cross-browser behaviour
Proper error handling
Proper validation
Database integrity
API correctness
Automated tests
Regression risk
Deployment readiness
Documentation

AI says it is complete is not a definition of done.

The product must actually work.

Location

We are primarily looking for candidates based in India.

Candidates located anywhere in India are welcome to apply.

Kerala

Being based in Kerala is a strong advantage, particularly candidates around:

Kochi and Ernakulam
Thiruvananthapuram
Kozhikode
Thrissur
Kottayam
Or elsewhere in Kerala

However, being located in Kerala is not mandatory.

This position can initially be performed remotely.

Webb9 intends to expand its technology operations in Kerala, so an excellent Kerala-based candidate may have the opportunity to work more closely with our local team or potentially join our Kerala operation in the future.

Candidates elsewhere in India will still receive full consideration.

Working Arrangement

We are looking for someone interested in a long-term relationship, not merely completing one small project.

Initially, the engagement will be through Upwork.

For the right person, this can become an ongoing position working across multiple Webb9 products.

We anticipate approximately 30 to 40 hours per week depending on experience, productivity and project requirements.

There may also be an opportunity for a future longer-term or full-time relationship.

Who We Are Not Looking For

Please do not apply if:

You cannot independently understand code without AI
You accept AI-generated code without reviewing it
Your experience is limited to page builders
You only know how to customize existing WordPress themes
You rely entirely on copy and paste development
You cannot debug without asking AI for every answer
You cannot explain code generated by your AI tools
You are uncomfortable reviewing a large existing codebase
You have no understanding of testing
You have no understanding of Git
You regularly mark incomplete functionality as finished
You are interested only in completing isolated tasks rather than understanding the product

We welcome extensive AI usage.

We do not welcome blind AI usage.

Who Will Thrive Here

You are likely to do well if you:

Enjoy building products
Use AI heavily
Are technically curious
Learn new frameworks quickly
Can supervise coding agents
Think logically
Have strong debugging skills
Pay attention to details
Test your own work
Take ownership
Communicate clearly
Admit when something is unclear
Ask good questions before implementing something incorrectly
Can work independently
Understand product requirements, not just code
Care about production quality
Are excited about shipping many different software products

Application Instructions

Please begin your application with:

WEBB9 AI ENGINEER

This helps us distinguish candidates who have actually read the job description.

Then answer all of the screening questions below.

Please do not send only a generic agency introduction.

We are primarily interested in understanding what you personally have built and what you personally know.

Screening Questions

1. Your Core Stack

Rate your current practical ability from 1 to 10 in each of the following and include your approximate years of experience:

JavaScript
TypeScript
React.js
Next.js
Node.js
NestJS
PostgreSQL
Shopify apps
Shopify themes and Liquid
WordPress plugins
WordPress themes
WooCommerce
Python
Django
Docker
Linux and server administration

Please be realistic. We do not expect 10 out of 10 in everything.

2. AI Development Experience

Which AI coding tools do you currently use?

Examples include ChatGPT, Codex, Claude Code, Cursor, GitHub Copilot or other coding agents.

Explain:

Which tools you use
How frequently you use them
What you allow AI to do
What you always verify yourself
How AI has changed your development workflow

3. AI Makes a Mistake

Give us a real example where an AI coding tool generated code that looked reasonable but was actually incorrect, insecure, incomplete or poorly architected.

What was wrong?

How did you identify it?

How did you fix it?

4. Reviewing a Large AI-Generated Codebase

Imagine you inherit an application containing more than 500 files, much of which was created using AI.

The application appears to work, but management wants to know whether it is genuinely production-ready.

Describe the process you would follow to audit it.

Be specific.

5. Shopify

Describe your Shopify development experience.

Have you personally developed:

Shopify apps?
Shopify themes?
Shopify extensions?
Shopify API integrations?

Please provide links to examples where possible and explain exactly what you personally implemented.

6. WordPress

Describe your WordPress development experience.

Have you personally developed:

Plugins from scratch?
Themes from scratch?
WooCommerce extensions?
Gutenberg blocks?
WordPress API integrations?

Please distinguish actual development from installing or configuring existing plugins.

7. SaaS and Dashboard Experience

Show us the most technically substantial SaaS platform, dashboard, CRM, ERP or business-management product you have worked on.

Explain:

The technology stack
What the product did
Your role
What you personally implemented
The hardest technical problem you solved

8. Debugging

A customer reports:

The dashboard sometimes creates duplicate invoices when the network is slow, but we cannot reproduce it consistently.

Explain how you would investigate this problem.

We are interested in your reasoning, not simply the final solution.

9. GitHub and Portfolio

Please provide:

GitHub profile
Portfolio
Live products
App, Shopify or WordPress marketplace links
Relevant repositories

For team projects, tell us exactly what you personally contributed.

Private or commercial work that cannot be shared publicly is understandable. Describe it instead.

10. Location and Availability

Please tell us:

City
State
Whether you are currently based in India
Whether you are based in Kerala
Hours available per week
Current notice period, if any
Whether you would be interested in potentially working with a Webb9 team in Kerala in the future

Being outside Kerala does not disqualify you.

Selection Process

Our hiring process is intended to test practical engineering ability rather than interview memorization.

Shortlisted candidates may go through the following stages.

Stage 1 — Application Review

We review your technical background, products, GitHub or portfolio and responses.

Stage 2 — Video Interview

We discuss:

Your projects
AI-assisted development
Architecture
Debugging
Code review
Shopify and WordPress experience
Product development
Availability

Stage 3 — Paid Technical Assessment

Strong candidates may be offered a paid assessment.

This is not intended to be unpaid production work.

You may be provided with a small existing project or AI-generated implementation and asked to audit it.

You will be allowed and encouraged to use AI tools.

We may ask you to identify:

Bugs
Security problems
Architectural issues
Incomplete requirements
Performance problems
Poor database decisions
Missing tests
Accessibility issues
Edge cases
Deployment risks
Unnecessary complexity

You may then be asked to correct a limited number of the issues.

We are deliberately allowing AI because we want to evaluate how effectively you direct, review and control AI, rather than measuring how quickly you manually type code.

Stage 4 — Long-Term Engagement

The strongest candidate will be offered an ongoing Upwork engagement and will begin working across Webb9 products.

What Success Looks Like

We are looking for someone who can take a requirement such as:

Build this feature end-to-end

and reliably turn it into:

Requirement to architecture to AI implementation to review to testing to corrections to documentation to deployment-ready product

without management having to discover afterwards that half of the requirements were missed.

We value quality, speed, ownership and intelligent use of AI.

If this sounds like how you prefer to build software, we would like to hear from you.

We are seeking an experienced Word Press website maintenance person to ensure plug ins, security and any template updates are completed.
•WordPress core updates — install minor/major version updates including security patches promptly
•Plugin updates — update all active plugins; check changelogs for breaking changes before updating
•PHP version checks — confirm your hosting PHP version stays current and compatible with WP/Avada requirements
As needed
•Image optimization — compress images (especially important for a speaker site with lots of photos/headshots)
•Broken link and 404 error fixes / checks — internal and external links, especially important on brochure-style sites where old event/press links accumulate
• Content updates— schedules, videos, access to gated (after entering email) content
•Form updates and testing — contact forms, speaker inquiry forms, membership signup (especially on EGA site)
• EGA membership pricing / tilbuds and Stripe integration checks — updated and test payment flow periodically, confirm webhooks are working

WordPress Expert Needed Urgently – Recover Latest Website Version, Migrate from Manus to WordPress + Long-Term SEO

We are looking for an experienced WordPress developer who can urgently recover our company website Safe-Xpert.de and migrate the latest version of the website to WordPress.
Current situation
Our company website is currently offline.
The website was previously created, redesigned and continuously updated using Manus AI. We want to preserve the latest design and content, but we do NOT want the future website to depend on Manus.
Our goal is to transfer/rebuild the latest version of the Manus-created website in WordPress, so that we have permanent and independent access to the entire website and can edit pages, text, images, blog posts and other content ourselves through WordPress.
The final website must therefore be a proper, maintainable WordPress website and must not depend on Manus AI continuing to exist or provide its current services.
IMPORTANT: We have a server backup / root directory
Before the website went offline, we downloaded the complete root directory from cPanel.
We can provide these files to the selected freelancer.
The website was updated several times before it went offline. Therefore, it is extremely important that you do NOT simply restore an older version or overwrite files without first analyzing the available data.
We need the latest version that was actually live before the website went offline.
Before making destructive changes, you must:
Create a safe backup of the current hosting environment
Analyze the provided cPanel/root-directory backup
Check available files, timestamps, databases and existing website versions
Determine which files/version represent the latest production version
Preserve all relevant content, images, URLs and SEO information
Never overwrite or delete the original backup
Preferably perform restoration/migration first in a staging environment
Only deploy to the live domain after the recovered version has been verified
Data loss or accidentally restoring an outdated version is not acceptable.
Phase 1 – URGENT: Get Safe-Xpert.de back online
Today is Saturday.
Our priority is to have a functional and professional version of Safe-Xpert.de online by Monday.
The first task is to investigate the existing files/backups and determine the safest and fastest recovery method.
The freelancer should:
Analyze why the website is currently offline
Analyze the provided cPanel/root-directory backup
Recover the latest available version of the website
Restore the main website as quickly as possible
Verify that the recovered version is actually the latest version available
Make sure important pages, images and functionality work correctly
Check desktop and mobile functionality
Protect the existing SEO structure during recovery
Phase 2 – Migrate the Manus website to WordPress
After or during the recovery, the latest website version should be transferred/rebuilt as a proper WordPress website.
The visual appearance should remain as close as reasonably possible to the latest Manus version.
Most importantly, we need to be able to manage the website ourselves through the WordPress backend.
We should be able to easily edit:
Pages
Text
Images
Buttons
Contact information
Blog posts
SEO titles and descriptions
Navigation/menu items
We do NOT want a solution where basic content changes require editing source code.
We must receive full WordPress administrator access and ownership of the website.
Technical requirements
The project should include:
WordPress installation/configuration
Migration/rebuild of approximately 9 core company pages
Responsive desktop/mobile design
Existing URL structure preserved wherever possible
Correct 301 redirects where necessary
Existing SEO titles and meta descriptions preserved
Contact form with reliable email delivery
WhatsApp contact button
SSL/HTTPS
XML sitemap
Search-engine-friendly configuration
Basic security and backup setup
Performance optimization
Full WordPress administrator access
SEO is important
The website was intended to be SEO-friendly from the beginning.
We already have SEO-focused articles/content prepared using Surfer SEO, which we want to publish step by step.
After the website is restored and migrated, we are interested in continuing with the same freelancer for:
Technical SEO
Publishing Surfer SEO articles
SEO landing pages
Internal linking
Google Search Console
Sitemap/indexing
Schema / structured data where appropriate
Core Web Vitals / performance
Image optimization
Ongoing WordPress improvements and maintenance
About Safe Xpert
Safe Xpert Service GmbH is a German company providing professional intervention, de-escalation and support services, particularly for organizations working in child and youth welfare.
The website is an important B2B company presentation and lead-generation channel.
Required experience
Please apply only if you have strong experience with:
WordPress
Website recovery
cPanel backups
PHP / MySQL
Website/database migration
GoDaddy hosting
DNS/domains
HTML/CSS
Responsive design
Technical SEO
301 redirects
WordPress security and backups
Experience recovering websites from server files/backups and converting existing websites into editable WordPress websites is particularly important.
Potential long-term cooperation
If the first project works well, we are interested in a long-term cooperation for SEO, new landing pages, Surfer SEO content, WordPress development, maintenance and further optimization.
Please answer these questions
Can you start immediately?
Can you work on the recovery this weekend and realistically have a functional first version online by Monday?
Have you recovered websites from cPanel/server backups before?
How would you determine which backup/files represent the latest live version?
How would you protect the existing data before making changes?
Have you migrated an existing/custom/AI-built website into an editable WordPress website before?
Do you have experience with GoDaddy?
How would you preserve existing URLs and SEO rankings during the migration?
Please send 2–3 relevant WordPress/recovery projects you personally worked on.
What would you charge for the first urgent recovery milestone?
Please start your application with the words “SAFE XPERT” so we know you have read the complete description.
We are ready to start immediately.


IMPORTANT: The entire website and all customer-facing content must remain in German. Existing German texts must be transferred accurately. Communication with us can be in English or German.

I manually made a33-page work-related website in WordPress for engineering services, 90% competed. I need to have it reviewed and tested. Most consultants want to redo from scratch AI-powered of not, charge $250 a month till the end of times, not interested. We would like to continue hosting ourselves. The task would be to review and test the new 33 page website, provide comments so that I can fix it on my time, test it for optimal performance so it is ready to launch.

I am looking for someone to make a relatively simple transition of my existing WordPress website rather than build a new website.

I have an existing website, LeveragePeople.us, and already own the domain. I have completely new website copy that I want inserted into the existing WordPress site while preserving the current design and structure as much as possible.

I also want to move the website to a lower-cost hosting provider and make sure my existing @LeveragePeople.us email continues to work without interruption.

Can you provide a fixed-price quote covering the website copy replacement, WordPress migration, hosting setup, DNS/domain configuration, SSL, email/DNS configuration, testing and final handoff?

Please also recommend the least expensive reliable hosting solution you would use and give me both the introductory and renewal pricing.

I am looking for someone to make a relatively simple transition of my existing WordPress website rather than build a new website.

I have an existing website, LeveragePeople.us, and already own the domain. I have completely new website copy that I want inserted into the existing WordPress site while preserving the current design and structure as much as possible.

I also want to move the website to a lower-cost hosting provider and make sure my existing @LeveragePeople.us email continues to work without interruption.

Can you provide a fixed-price quote covering the website copy replacement, WordPress migration, hosting setup, DNS/domain configuration, SSL, email/DNS configuration, testing and final handoff?

Please also recommend the least expensive reliable hosting solution you would use and give me both the introductory and renewal pricing. Note this is not a build of a website but an update on the copy in a site that already exists along with very small tweaks to the website (ie adding a section listing the companies I have supported as a consultant)

Senior WordPress Architect / Developer — Bilingual English/Spanish

PLAY STATE LLC is identifying a Senior WordPress Architect / Developer to be included as proposed key personnel in a university/public-sector RFP involving the redesign and migration of multiple websites into a standardized WordPress environment.

This opportunity is subject to contract award. We are currently building the proposed project team and need an experienced WordPress professional whose resume and qualifications can be included in the proposal.

Required experience

Strong senior-level WordPress experience
WordPress Multisite architecture and administration
Custom WordPress themes and reusable components
Custom plugins and plugin integration
PHP, MySQL, JavaScript, HTML and CSS
Complex website migrations
Content migration and validation
Staging, production and deployment workflows
Git / GitHub version control
WordPress security, performance and scalability
Integration with third-party APIs or external systems

Highly preferred

Experience with universities, government agencies, public-sector organizations or large institutional websites
Experience migrating multiple websites into a WordPress Multisite environment
Familiarity with WCAG 2.1 AA accessibility requirements
Experience working with distributed development teams

Language requirement

Professional working proficiency in both English and Spanish is required.

Project context

The anticipated engagement is approximately 3–6 months, depending on project award, final scope and implementation schedule. The architect would work with PLAY STATE LLC's Project Manager / Technical Lead and development team on architecture, WordPress Multisite configuration, template strategy, technical reviews, migration planning and implementation support.

Important — proposal-stage requirement

Candidates must be willing to:

Provide an updated resume/CV
Allow PLAY STATE LLC to include the resume and professional qualifications in a client proposal as proposed personnel
Confirm availability to participate if the contract is awarded
Participate in a brief interview before selection
Provide examples or references supporting relevant WordPress experience

Being included in the proposal does not constitute an immediate employment or payment commitment. Final engagement would occur only if the project is awarded and mutually acceptable contract terms are agreed.

Please include in your proposal:

Years of professional WordPress experience
WordPress Multisite projects completed
Examples of institutional, government, university or multi-site projects
English and Spanish proficiency
Current hourly rate
Availability over the next 3–6 months
Confirmation that you are willing to provide your CV within 24 hours if shortlisted

We are reviewing candidates immediately.