WordPress Development & Care

WordPress works well for a corporate site or blog you will grow yourself, a WooCommerce store with a medium catalogue, a content service with multiple authors, or a multilingual site. It is also unbeatable on cost for simple builds — a proven ready-made theme lets you launch in two weeks on a reasonable budget. I advise against it when you need custom business logic, advanced permissions, ERP integrations, or tens of thousands of products — Laravel or a dedicated e-commerce platform fits better there.

A ready-made template is the fastest and cheapest route — I pick licensed, regularly updated ones and configure them around the brand, not the other way round. A custom theme makes sense when the design is unusual, performance requirements are strict, or the template generates too much dead code and scripts. In both cases I work on child themes so updates never wipe your changes — the most common mistake I see in inherited projects.

When taking over a site, I start with a security audit: WordPress, PHP and plugin versions, administrator accounts, file settings and security headers. I remove unused plugins and themes, enforce strong passwords and two-factor login, restrict panel access and disable file editing from the dashboard. Updates run on a copy of the environment, never directly on production — and every update is preceded by a backup you can roll back from within minutes.

An infected site is not just embarrassing — it leaks customer data and earns a Google penalty for hosting malicious code. I remove malware, backdoors and redirects, clean the database and files, close the infection vector and restore the site to Google index. Afterwards I deploy preventive security: strict access rules, file integrity monitoring and automatic off-server backups. If data was breached, I help assess your notification duties under GDPR.

WooCommerce is a good choice for medium-catalogue stores when you want full ownership and no sales commission. I build stores with payment gateways (Przelewy24, PayU, Tpay, Stripe), shipping integrations (InPost, DHL, DPD), invoicing and stock synchronisation with marketplaces. I also configure Omnibus compliance and WCAG accessibility. For larger catalogues and complex integrations I recommend PrestaShop or a custom build — WooCommerce performance has its limits.

WordPress is not inherently slow — added plugins, heavy themes and missing cache are. I start optimisation with measurement, not with installing more plugins: I check what actually blocks rendering and what accounts for the largest contentful element (LCP). In practice it is server-level cache, WebP and AVIF image conversion, lazy loading, fewer third-party scripts, database hygiene and correct cache headers. The result is LCP under 2.5 s on mobile — measured, not claimed.

I take over sites from previous contractors, from agencies that disappeared, and from failed builds. I start with an inventory: what is inside, who holds access, where the backups are and whether the site belongs to the client. Then I clean up hosting and domain, verify plugins, fix errors and move to ongoing care. I migrate to another host or from another system without downtime, preserving URLs and 301 redirects — so you do not lose earned Google positions.