SERVICES
The web is the front door. We build it, host it, and keep it standing. Everything else here is the engineering that sits behind it.
BUILD YOUR QUOTE ↓Pick a package and see the price before you talk to anyone. Not sure what your site needs? Run the free site check.
What ISS offers
Web Design & Development
Hand-written sites in HTML, CSS, and JavaScript, designed from scratch or built from one of our own template designs. Intentional design systems, typography, color, fluid responsive layouts, and accessibility. Written by hand, with no page builders, no plugin sprawl and no monthly platform rent.
Learn more →Web Infrastructure & Hosting
Domain strategy, DNS, TLS, Cloudflare Pages deployment, edge workers, business email, contact and form pipelines, analytics, and SEO fundamentals.
Learn more →Web Applications
Authenticated web applications and internal tools built around real business data, not a templated dashboard. Rendered in a browser anyone on staff can use.
Learn more →Rapid Digital Presence Kits
A QR-linked page, matched social assets, and print pieces, produced through proprietary in-house tooling and hand-verified before delivery. Built for a business that needs to be reachable today, not a substitute for a full site.
Networking, AV & On-Site IT
Design, troubleshooting, and configuration at any scale, from a home network to a full business build. Video, phone, and audio systems. In-person installation and on-site support, scheduled and billed like any other engagement.
Learn more →Systems Integration & Automation
OT/IT convergence, ERP overhaul, production floor automation, monitoring, and data pipelines. Scripting in Bash, PowerShell, and C.
Process Automation & Data Entry Elimination
An audit of how information actually moves through your business, followed by the scripts, integrations, and a plain menu-driven interface that remove the manual re-typing sitting inside it. A scanned or paper record goes through OCR straight into the system that already tracks it, instead of a person retyping it by hand. Delivered as a working system, not a slide deck: proven internally first (see Skill Sets SK-04) before it's ever offered to a client.
Learn more →[ RESTRICTED ]
Product development, embedded platform work, and engagements requiring discretion. Disclosure on contact. Inquire directly.
Security Review & Hardening
A plain-language check of what is really protecting your business: accounts and MFA, backups, email, network segmentation and devices. Delivered as a written review and a ranked hardening plan, so the most important fixes happen first. Fixing the gaps is quoted separately.
Learn more →Site + Owner Dashboard
A custom site delivered with a private dashboard where the owner changes prices, hours and notices, tracks requests, and emails customers from a phone. Try working demos with sample data before you decide.
Learn more →Care Plan
Monthly plans that keep a site healthy and current: monitoring and a monthly update (Essential, $75), more updates, Google Business posts and an SEO check (Growth, $150), weekly activity, keyword reports and priority support (Authority, $350).
Learn more →Search & Social
Ongoing local SEO and social media for a business that knows it needs a presence but has no time to keep it up. Run with vetted specialists, reviewed by ISS before anything goes out, reported monthly in plain numbers.
See pricing →PRICING
// HOW WE COMPARE
More for less, and faster where it counts.
Our published prices, set against what the market charges for the same work. Every market figure comes from a public 2026 pricing guide, linked under the table.
| The work | Ice Streams | Typical freelancer | Typical agency | Site builder (Wix, Squarespace) |
|---|---|---|---|---|
| Small business website | $999 to $1,799one time, yours to keep | $1,499 to $2,999 | $1,999 to $4,999 | $16 to $159 a month, for as long as the site is up |
| Fully custom website | From $2,000priced by what it needs | $4,999 to $10,000+ | $10,000 to $20,000 | Limited to what the platform allows |
| Hosting, DNS, business email and the contact form | Includedwith every website | Varies by quote; ask what is included | Hosting included; a business email address usually costs extra | |
| Monthly upkeep | $75 to $350 a monthor nothing, and send changes when you need them | $50 to $500 a month | The subscription, and the updates are yours to do | |
| A custom tool for your business | $4,000 to $18,000scoped in writing | $15,000 to $40,000 for a simple internal tool | Not offered | |
| Home page weight | About 450 KBmeasured live on this site | 2,559 KB for the median home page on a phone | ||
| Live in | Within a weekStarter and Standard, from the day we have your content | Ask for a launch date in writing | Fast to start, but the writing and photos are still yours to supply | |
| Platform fees over three years | $0hosting is included; no platform subscription | Depends on the hosting they set up | $576 to $5,724, at $16 to $159 a month for 36 months | |
| Who owns it | You docode, domain and accounts in your name | Depends on the contract | The platform; leave and the design stays behind | |
More. Hosting, DNS, business email and a working contact form come with every site. On our own list those are worth $550 to $1,050.
For less. Our website prices start below the typical freelancer and well below a typical agency, and custom work costs a fraction of what both charge.
Faster. Our pages weigh about a fifth of the median web page, so they open faster on a phone, and Starter and Standard sites go live within a week of us receiving your content. Race this site against it →
Market figures: Seahawk Media, small business website costs (freelancer, agency and builder prices); UENI, website maintenance cost in 2026 (upkeep); Utsubo, custom web app budget guide (custom tools); HTTP Archive Web Almanac 2025 (page weight). Ranges vary by provider and change over time.
// BUILD YOUR QUOTE
Pick a package, add what you need, and see the estimate before you ever talk to anyone. Send it over and it arrives with your selections attached. Starter, Standard and Growth sites are built on a design you choose first: let the matcher find your look or browse the library.
The quote builder needs JavaScript. Every price is listed below.
Published, upfront ranges rather than quote-only pricing. These aren't the cheapest numbers you'll find for web work, and that's intentional: this is hand-written code you own outright, with no page builder and no ongoing platform fee required to keep it running.
Starter Website$999Up to five pages, built for phones first, with tap to call, directions and your Google Business Profile set up. Hosting, DNS, business email and the contact form are included.
INCLUDES
- Live within a week of us receiving your content
- Up to five pages on one of our custom template designs, tuned to your colors and type
- One round of revisions
- Responsive from a 360 pixel phone to a wide desktop
- Tap to call and directions buttons, and a working contact form
- Google Business Profile set up and linked
- Page titles, descriptions, social previews and local business structured data
- Hosting on Cloudflare Pages, DNS and business email routing set up, with no monthly hosting fee
- Accessibility checked with automated scans and by keyboard
- A plain handoff guide: what was built, where it lives, how to change it
GOOD FIT
A local business that needs to be found, called and trusted, or one that only has a social page today.
NOT INCLUDED / EXTRA
A CMS, copywriting from scratch, and the domain registration itself (registrar cost passed through at no markup, plus a $50 setup fee).
Standard Website$1,499Pick one of our custom template designs and we build it out across up to ten pages, or we faithfully recreate the site you have today on our setup. Visitor analytics, speed work and two rounds of revisions.
INCLUDES
- Everything in the Starter Website, also live within a week of us receiving your content
- Up to ten pages on one of our custom template designs, tuned to your colors and type
- Or a faithful recreation of your current site: the same look and pages, rebuilt on our setup, with every old address forwarded so saved links and search results keep working
- Visitor analytics (GA4) set up
- Speed and image optimization, page by page
- An accessibility pass
- Two rounds of revisions
GOOD FIT
A business with more to say: several services, a menu, a team, or news worth posting.
NOT INCLUDED / EXTRA
Layout changes beyond the design you pick (that is a Custom Website), a page for every service and area you serve (see the Growth Website), an owner dashboard, and ongoing edits (see the Care Plans).
Growth Website$1,799Standard, built to be found: a page for each main service and the area you serve, directory citations, review requests and a 90 day ranking check-in.
INCLUDES
- Everything in the Standard Website
- A local SEO foundation: a page for each main service and a service area page, each with its own title, description and canonical link
- Structured data per page: business, service, breadcrumbs and FAQ where it fits
- Citation submissions to the directories that matter for your trade
- Review request setup, so happy customers can leave one in two taps
- A 90 day ranking check-in, written up
GOOD FIT
A business with several services or locations that wants each one findable on its own.
NOT INCLUDED / EXTRA
A guarantee of rankings, which nobody can honestly give.
Custom WebsiteFrom $2,000Designed from scratch around your business, with three rounds of revisions and a design review call. One feature of $300 or less is included, and a second is half price. The price follows what it needs: build yours in the quote builder above, confirmed in writing.
INCLUDES
- Everything in the Standard Website
- A design made from scratch, not a template, with its own design system and components
- Three rounds of revisions and a design review call
- One feature of $300 or less from the quote builder included, and a second at half price: booking, payments, a second language, illustrations, an outside system connected, or the words written for you
- Reduced motion support and keyboard access for anything interactive
GOOD FIT
A brand that needs to stand out, a product launch, or a site where the experience is part of the pitch.
NOT INCLUDED / EXTRA
Animation (subtle motion or a signature piece), larger features, video production and photography.
A site-builder job typically costs less upfront because you're paying to arrange someone else's components and then renting the platform on an ongoing basis. This pricing reflects different work: custom code you own outright, with no recurring platform fee required to keep it running.
Template Release$249 to $499Build it yourself. Choose one of our template designs or a look from the matcher and we hand over the finished files and brand kit, ready for you to host. $249 up to five pages, $399 up to ten, $499 with local SEO pages.
INCLUDES
- The template as plain HTML and CSS, tuned to your colors and type
- A matching brand kit: logo, favicon, business card and palette
- A short guide to hosting it yourself
- A credit for the full price toward Launch Help for 90 days
GOOD FIT
Developers and web designers building for their own clients, and owners who are comfortable setting up their own hosting.
NOT INCLUDED / EXTRA
Hosting, domain, business email and the contact form setup, revisions, and anything else that comes with a full website. Releases are not refundable.
Build your site in the browser → Start a release in the quote builder →
Launch Help$750 to $1,300Built it yourself and want us to take it live? Pay the difference to the full website price: Starter $750, Standard $1,100, Growth $1,300. Your release fee is credited in full, so the total is the same as buying the website outright.
INCLUDES
- Everything in the matching website package that a release leaves out
- Starter: hosting, DNS, business email routing and the contact form, set up and written down
- Standard adds visitor analytics, speed and image work, an accessibility pass and two rounds of revisions
- Growth adds the local SEO foundation, citation submissions, review request setup and a 90 day ranking check-in
GOOD FIT
Someone who started with a release and decided they would rather not do the technical side.
NOT INCLUDED / EXTRA
The credit applies to the same package, within 90 days of the release. After that, the full website price applies. Domain registration is passed through at cost plus a $50 setup fee.
QR Link Page$450 to $750One branded page: call, directions, save-contact and social buttons, hours, and a QR code that points straight at it. Produced through proprietary in-house tooling, then hand-verified: the QR code is decode-tested under blur, rotation, low light, and heavy compression before it ships, not just eyeballed on a screen.
INCLUDES
- One branded page with call, directions, save-contact and social buttons, and hours
- A QR code that points straight at it
- QR decode testing under blur, rotation, low light and heavy compression before delivery
- Print-safe QR file and a web version
GOOD FIT
A business that needs to be reachable today: a truck, a stall, a counter card, a new location.
NOT INCLUDED / EXTRA
A full website, social profile images, and printing.
Digital Presence Kit$900 to $1,500A QR Link Page plus a full matched social asset set: profile pictures and cover banners sized exactly to each platform's current published spec, not one image stretched to fit everything. Every color pairing is contrast-checked before delivery.
INCLUDES
- The QR Link Page
- Profile pictures and cover banners sized to each platform's current published spec
- Color pairings contrast checked before delivery
- Matching file set named and organized for upload
GOOD FIT
A business setting up or refreshing its social profiles and wanting everything to match.
NOT INCLUDED / EXTRA
Posting and account management, and printed pieces (see the Full Launch Kit).
Full Launch Kit$1,800 to $2,800A Digital Presence Kit plus print: a business card and a one-page flyer or table tent, brand-matched, print-ready, carrying the same QR code across every piece. Includes a one-page leave-behind for a trade show table or an in-person pitch.
INCLUDES
- The Digital Presence Kit
- A brand matched business card and a one page flyer or table tent
- The same QR code carried across every piece
- A one page leave-behind for a trade show table or an in person pitch
- Print ready files
GOOD FIT
A new business or a rebrand that needs everything to launch together.
NOT INCLUDED / EXTRA
Print runs. The files are print ready and you choose the printer.
On-Site Build+$150 to $300Built live, at your location, rather than delivered after the fact. Priced as a premium, not a discount: it means committed time on-site with no do-over if something changes mid-build.
INCLUDES
- The kit built live at your location
- Changes made while you watch, so approval is on the spot
- Committed time on site, with no do over if something changes mid build
GOOD FIT
Owners who want to decide in the room and walk away with everything.
NOT INCLUDED / EXTRA
Travel beyond the scheduled area is quoted separately.
This isn't a cheaper substitute for a full site, it's a different job: something reachable today from a sign, a card, or a table, while a full site gets built properly alongside or after it. The speed comes from proprietary production tooling built in-house specifically for this, not from cutting corners. Every QR code ships decode-tested against two independent readers under nine simulated real-world conditions, and every social asset ships sized to each platform's actual current spec rather than a guess.
Domain, DNS & Hosting Setup$150 to $300Domain acquisition or transfer, DNS configuration, Cloudflare Pages deployment, TLS. One-time.
INCLUDES
- Domain acquisition or transfer, in an account that you own
- DNS records configured and written down
- Cloudflare Pages deployment and TLS
- Redirects from the old address and the www version
- A one page list of every account and record
GOOD FIT
A business with a domain registered under an old email, or a site that needs to move.
NOT INCLUDED / EXTRA
Domain registration fees (paid to the registrar, not to ISS), and the website itself.
Business Email Setup$100 to $250Cloudflare Email Routing or a full mailbox provider, matched to volume and budget.
INCLUDES
- Either Cloudflare Email Routing or a full mailbox provider, matched to volume and budget
- SPF, DKIM and DMARC records so mail is trusted and stays out of spam
- Addresses such as service@ and info@ created and tested
- Sending from your phone and from the web checked
GOOD FIT
A business using a personal Gmail address on its cards and invoices.
NOT INCLUDED / EXTRA
Mailbox subscription fees from the provider you pick, and migrating years of old mail (quoted if needed).
Contact / Form Pipeline$300 to $500Serverless edge function, honeypot filtering, server-side validation, transactional email dispatch. The exact pipeline running on this page's own contact form.
INCLUDES
- A serverless edge function that receives the form
- Honeypot spam filtering and server side validation
- Transactional email dispatch from a verified domain
- Locked to your site so other sites cannot post to it
- Secrets stored in the platform, never in the code
GOOD FIT
Any site where a customer request has to reach a person reliably.
NOT INCLUDED / EXTRA
Storing requests as jobs with stages. That is the Owner Dashboard (see Web Applications).
All three are included with every website package above. These prices are for a business that wants them on their own, without a new site.
The Cloudflare-native stack has near-zero ongoing infrastructure cost, so there's no recurring hosting subscription built into the price. This is priced as one-time setup labor, and the low ongoing hosting cost is reflected honestly rather than padded into a monthly fee.
Essential Care$75/moUptime, certificate and DNS monitoring, one content update a month, a quarterly Google Business Profile review and an annual security check.
INCLUDES
- Uptime, certificate and DNS monitoring
- One content update a month
- A quarterly Google Business Profile review
- An annual security check
- Up to 1 hour of work a month
GOOD FIT
A site that is mostly set and forget, but should never quietly break.
NOT INCLUDED / EXTRA
New features and new pages beyond the plan, quoted separately. Billed on the 1st, cancel with 30 days written notice.
Growth Care$150/moEverything in Essential, plus two content updates a month, a monthly Google Business Profile post, a quarterly SEO check and support within 24 business hours.
INCLUDES
- Everything in Essential Care
- Two content updates a month
- A monthly Google Business Profile post
- A quarterly SEO check
- Support within 24 business hours
- Up to 2 to 3 hours of work a month
GOOD FIT
A business that wants to keep showing up in search and keep its profile active.
NOT INCLUDED / EXTRA
New features and new pages beyond the plan, quoted separately. Billed on the 1st, cancel with 30 days written notice.
Authority Care$350/moEverything in Growth, plus weekly Google Business Profile activity, a monthly keyword report, a new page or post each quarter and same day priority support.
INCLUDES
- Everything in Growth Care
- Weekly Google Business Profile activity
- A monthly keyword report
- A new page or post each quarter
- Same day priority support
- Up to 4 to 6 hours of work a month
GOOD FIT
A business competing hard for local search in a crowded trade.
NOT INCLUDED / EXTRA
New features and new pages beyond the plan, quoted separately. Billed on the 1st, cancel with 30 days written notice.
Optional. A site built by ISS keeps running without a plan; the plan is for owners who would rather not think about it.
Local SEO$300 to $500/moGoogle Business Profile management, directory citations, on-page fixes and rankings tracking, with a monthly report in plain numbers.
INCLUDES
- Google Business Profile managed: posts, photos, questions and categories
- Directory citations kept consistent: name, address, phone
- On-page fixes to titles, headings and local markup
- Rankings tracked for the searches that bring you customers
- A monthly report
GOOD FIT
A local business in a market where people search for what it sells.
NOT INCLUDED / EXTRA
Ranking guarantees, which nobody honest gives. Paid ads. New pages for search, $100 to $200 each. We turn down SEO work where the search volume does not justify the cost. Billed on the 1st, cancel with 30 days written notice.
Social Content Only$150 to $300/moA month of posts written and designed for you to publish yourself.
INCLUDES
- Posts planned around your business and its seasons
- Graphics sized for each platform
- Captions and hashtags written
GOOD FIT
An owner who is happy to post but has no time to make the content.
NOT INCLUDED / EXTRA
Posting, comments and messages. Billed on the 1st, cancel with 30 days written notice.
Social Starter$300 to $450/mo8 posts a month on 2 platforms, with graphics, captions and a monthly report.
INCLUDES
- 8 posts a month on 2 platforms (Facebook, Instagram or Google Business)
- Graphics and captions
- A content calendar you see ahead of time
- A monthly report: reach, engagement, followers
GOOD FIT
A business that needs to look open and active online.
NOT INCLUDED / EXTRA
Paid ads, boosted posts and video production. Billed on the 1st, cancel with 30 days written notice.
Social Standard$450 to $750/mo12 to 16 posts a month on 3 platforms, custom graphics, and comments and messages watched.
INCLUDES
- Everything in Social Starter
- 12 to 16 posts a month on 3 platforms
- Custom graphics
- Comments answered and messages passed to you
GOOD FIT
A business whose customers ask questions on social media.
NOT INCLUDED / EXTRA
Paid ads, boosted posts and video production. Billed on the 1st, cancel with 30 days written notice.
Social Active$750 to $1,200/mo20 or more posts a month on up to 4 platforms, with priority response.
INCLUDES
- Everything in Social Standard
- 20 or more posts a month on up to 4 platforms (LinkedIn optional)
- Priority response on comments and messages
GOOD FIT
A business where social media is a real sales channel.
NOT INCLUDED / EXTRA
Paid ads, boosted posts and video production. Billed on the 1st, cancel with 30 days written notice.
Social Setup$200 to $400 one timeProfiles created or cleaned up, with branding, bios and links that match your site.
INCLUDES
- Profiles created or cleaned up on the platforms you use
- Profile and cover images matched to your brand
- Bios, contact details, hours and links
GOOD FIT
A business starting out on social media, or one whose profiles have drifted.
NOT INCLUDED / EXTRA
Ongoing posting, which is one of the monthly plans above.
Run with vetted specialists ISS works with, and reviewed by ISS before anything is published: one point of contact and one invoice. Separate from the care plans, which look after the site itself. Growth and Authority Care already include lighter search work, so with Local SEO, Essential Care is usually all the site needs.
Owner Dashboard / App Layer on a SiteFrom +$1,500A private, signed-in layer added to a site you already have or are buying: change hours, closures and a notice bar yourself. Add only what the business needs: a menu or price list, editable page text, photo galleries, an events calendar, documents, a staff directory, job postings, staff sign-ins, request tracking, customer email, a booking calendar and reports. The price follows what you pick, and the quote builder above has starting setups for restaurants, shops, salons, schools and nonprofits.
INCLUDES
- A private sign in for named users
- Editing screens for the content or records it manages
- Requests from the site landing as jobs, with an email to you as well
- Customer email from templates, where it applies
- Backup download and undo of the last change
- A short guide for the person who uses it
GOOD FIT
An owner who wants to change prices, hours, notices or requests without calling a developer.
NOT INCLUDED / EXTRA
The website itself (see the packages above). Several roles, many kinds of records or heavy reporting are the application tiers below.
See it working first: try the demo owner dashboards with sample data →
Simple Authenticated Application$4,000 to $6,500A standalone internal tool: two to four user roles, a handful of record types, a basic workflow and an audit log.
INCLUDES
- Two to four roles with their own permissions
- Three to five kinds of records and the screens to manage them
- A basic workflow and an audit log of who changed what
- Sign-in through Cloudflare Access: no passwords stored by ISS
- Cloudflare Pages, Workers and D1, with no hosting fee at typical size
- Handoff documentation and account ownership transferred to you
GOOD FIT
A small team that has outgrown a spreadsheet: requests, scheduling, intake, inventory.
NOT INCLUDED / EXTRA
Real-time features and integrations (see the next tier), and licenses for third party services you choose.
Multi-User Application, Database-Backed$6,500 to $10,000Multiple roles or several companies on one system, five to ten kinds of records, real-time features and integrations.
INCLUDES
- Everything in the Simple Authenticated Application
- Multiple roles, or several client companies kept apart
- Five to ten kinds of records with real business logic, written and tested for your process
- Real-time features where people work on the same records
- Integrations with the services you already use
GOOD FIT
A team that shares records and needs accountability: scheduling, orders, inventory, case tracking.
NOT INCLUDED / EXTRA
Hosting costs and licenses for third party services you choose.
Compliance-Driven Application$10,000 to $18,000+Complex workflows, multiple integrations and formal documentation, built for an environment an auditor will look at.
INCLUDES
- Everything in the Multi-User Application
- Complex workflows with approvals and an audit trail
- Multiple integrations
- Formal documentation: architecture, access model, data handling
GOOD FIT
A business whose software has to stand up to a customer, insurer or assessor review.
NOT INCLUDED / EXTRA
Certification itself, and requirements ISS has not delivered against before, which are assessed individually.
Data Pipeline / OT-IT IntegrationCustom quote, $6,000 floorBridging a factory floor, an ERP, or another live operational system into a web front end.
INCLUDES
- A site walk or system review to scope the real data sources
- A connection between the floor or ERP and a web front end
- Scripting in Bash, PowerShell or C where it fits the machine
- Monitoring and a way to see when a feed stops
- Documentation handed over with the source
GOOD FIT
A plant or shop that needs live numbers out of a machine, ERP or spreadsheet and in front of people.
NOT INCLUDED / EXTRA
New machine controls or electrical work, quoted separately. Starts at a $6,000 floor.
Fixed-price projects: 50% deposit before work begins, the balance on delivery. Projects over $3,000 can pay 40% / 30% / 30%, and applications over $6,000 default to it. New hourly clients prepay four hours.
This tier draws on manufacturing and OT background alongside web development skills, a combination most web shops don't offer.
Operations Automation Audit$400 to $900A walkthrough of how work actually moves through your business, not a questionnaire: where the same number gets typed more than once, what's still tracked on paper that doesn't need to be, and what a script or a form removes outright. Delivered as a written findings report, each item costed against the hours it currently takes. Credited toward the build below if you move forward.
INCLUDES
- A walkthrough of how work actually moves, not a questionnaire
- A list of places the same number is typed more than once
- A list of what is still tracked on paper that does not need to be
- A written findings report with each item costed against what it removes
GOOD FIT
Any business that suspects people spend hours retyping the same information.
NOT INCLUDED / EXTRA
The build itself. The audit tells you whether it is worth building.
Workflow Automation Build$1,500 to $6,000+The scripts, integrations, and a plain menu-driven interface identified in the audit, built and handed over, running on hardware you already own where that's possible. You get the source, not a black box someone else has to maintain.
INCLUDES
- The scripts, integrations and a plain menu driven interface found in the audit
- Runs on hardware you already own where that is possible
- Source code handed over, not a black box
- Tested on your real data before handoff
- Documentation for whoever maintains it next
GOOD FIT
A business that has the audit findings and wants the repetitive work removed.
NOT INCLUDED / EXTRA
Replacing your core software. The goal is to connect what you have.
Document Digitization / OCR Pipeline$800 to $2,500Paper or scanned records read automatically and transposed into whatever already holds that data, a spreadsheet, a database, an ERP, instead of retyped by hand.
INCLUDES
- Paper or scanned records read automatically
- The text and numbers transposed into a spreadsheet, database or ERP
- Checks that flag unclear reads for a human instead of guessing
- A repeatable process, so the next batch is the same steps
GOOD FIT
Setup sheets, work orders, invoices and logs that someone currently types in by hand.
NOT INCLUDED / EXTRA
Scanning hardware, and handwriting that is not legible. Quoted after sample documents are reviewed.
An hour a day of manual data entry, at $20/hour, is roughly $5,200 a year, every year, for as long as someone keeps doing it by hand. Most of what this replaces costs less than one year of that, once.
Remote Consultation / Troubleshooting$125/hrDiagnosis, configuration review, or a one-off support call handled remotely. Billed in clean increments, no minimum call-out.
INCLUDES
- Diagnosis, configuration review or a one off support call by phone or screen share
- Billed in clean increments with no minimum call out
- A short written summary of what was found and changed
GOOD FIT
A problem you can describe: a network that drops, a printer, a firewall rule, a configuration question.
NOT INCLUDED / EXTRA
Work that needs hands on the hardware. That is an on-site call.
On-Site Service Call$175 first hour, $125/hr afterIn-person diagnosis, repair, or install. Covers travel and setup; scheduled like any other engagement, not a same-day drop-in rate.
INCLUDES
- In person diagnosis, repair or install
- Travel and setup covered in the first hour rate
- Scheduled like any other engagement, not a same day drop in rate
- A short written summary afterward
GOOD FIT
A fault that needs someone in the room, or an install that is smaller than a full build.
NOT INCLUDED / EXTRA
Parts, which are quoted before purchase.
Small Network Design & Install$600 to $1,500A home or small office build: router and firewall, a handful of switches and access points, basic segmentation, and documentation handed over at the end, not kept in someone's head.
INCLUDES
- Router and firewall setup
- A handful of switches and access points
- Basic segmentation, for example guest and devices apart from work
- Documentation handed over at the end
- Tested before handover
GOOD FIT
A home office or a small office that has outgrown a consumer router.
NOT INCLUDED / EXTRA
Cabling beyond a handful of runs, and the equipment itself unless agreed.
Business Network Build$2,500 to $6,000+VLAN segmentation, managed switching, wireless design, firewall policy, and full documentation. Built security first, at whatever scale the business actually needs.
INCLUDES
- VLAN segmentation with inter-VLAN firewall rules, default deny
- Managed switching and wireless design
- Firewall policy written down and tested
- Full documentation: diagrams, addressing, accounts, change notes
- Security-first design, scaled to your size
GOOD FIT
A business with several kinds of devices, staff and guests that should not share a flat network.
NOT INCLUDED / EXTRA
Structured cabling at scale and AV (see the next line). Scoped on a walkthrough.
AV & Telephony Installation$500 to $2,500+VoIP or PBX phone systems, conference room AV, structured audio and video wiring, intercoms, digital signage. Range reflects device count and wiring runs; scoped on a walkthrough, not guessed over the phone.
INCLUDES
- VoIP or PBX phone systems
- Conference room AV, structured audio and video wiring
- Intercoms and digital signage
- A scope set on a walkthrough, not guessed over the phone
GOOD FIT
An office adding a conference room, a phone system, or signage.
NOT INCLUDED / EXTRA
Range reflects device count and wiring runs. Equipment is quoted separately.
Managed Network Support$150 to $400/moMonitoring, patching, and a priority response window for network hardware, phone systems, and AV, on retainer rather than billed per incident. The MSP arrangement, without a call center in between.
INCLUDES
- Monitoring of network hardware, phone systems and AV
- Patching on a schedule
- A priority response window
- Billed monthly on retainer, not per incident
- No call center in between
GOOD FIT
A business that wants someone responsible for the network without a full time hire.
NOT INCLUDED / EXTRA
Large projects and new installs, which are quoted on their own.
This isn't priced at commodity IT rates. It's built to a security-first standard: proper documentation, real segmentation, and a system someone else could pick up later without guessing.
Security ReviewBy consultationAccounts, MFA, backups, email, network and devices checked against what is really configured, not what anyone assumes. Delivered as a written report in plain language. Scope depends on the number of people, devices and locations, which is why this is set on a short call.
INCLUDES
- Accounts and access, sign-in protection and MFA
- Backups, including a test restore
- Email spoofing protection and phishing exposure
- Firewall, Wi-Fi, guest access and segmentation
- Device updates and encryption
- A written report: what is covered, what is missing, what each gap risks
GOOD FIT
A small business, office or manufacturer that wants an honest read on its security, or one that just received a security questionnaire from a customer or insurer.
NOT INCLUDED / EXTRA
Fixing the gaps, which is quoted separately once the review defines what is needed.
Hardening PlanBy consultationEvery finding turned into a ranked to-do list with owners and target dates, so the work that removes the most risk happens first, whoever ends up doing it.
INCLUDES
- Fixes ranked by risk and effort
- Owners and target dates for each item
- Rough cost for each fix
- Written so your own people can work from it
GOOD FIT
A business that wants to close its gaps in a sensible order, or show a customer or insurer what is being done.
NOT INCLUDED / EXTRA
The fixes themselves, quoted separately. Can be done by ISS or by your team.
Priced after a short call on purpose: a security review priced before anyone knows how many people, devices and locations are involved is not a meaningful estimate. The call is free and takes twenty minutes.
QUESTIONS
The technical answers, for anyone who wants to know how the work is done before it starts.
Why Cloudflare Pages instead of WordPress or a site builder?
A static site is just files served from Cloudflare's network close to the visitor. There is no database or PHP to patch and no admin login on the public site to attack.
UNDER THE HOOD
- Pages are plain HTML, CSS and JavaScript deployed by drag and drop or from a repository, so a deploy is a file upload.
- Cost is very low for a small business site, and there is no per-plugin or per-seat platform fee.
- Trade-off: anything dynamic, such as a form or a dashboard, needs a small Worker next to the site. That is exactly what the Contact / Form Pipeline and Owner Dashboard are.
What is an edge worker, and what does yours do?
A Cloudflare Worker is a small JavaScript function that runs in Cloudflare's network instead of on a server you manage. It receives a form post, checks it, and sends the email.
UNDER THE HOOD
- Server side validation of every field, plus a hidden honeypot field that bots fill in and people do not.
- Requests are accepted only from your site's origin (CORS locked), so other sites cannot post to it.
- Email goes out through the Resend API from a domain you have verified. The API key lives in an encrypted environment secret, never in the code or the repository.
- The Worker is stateless: it answers each request and keeps nothing between them unless it writes to KV.
Where does a dashboard keep its data?
In Cloudflare Workers KV, a key-value store. Content such as prices and hours is stored as small JSON documents, and each job or reminder is its own record.
UNDER THE HOOD
- The previous published version is kept, which is how Undo last publish works.
- KV is eventually consistent worldwide, so a publish shows up for visitors within about a minute, not instantly.
- A backup you can download is built into the dashboard, and restoring from a file is one click.
- KV is great for documents and queues. It is not a relational database, which is why larger applications use one (next question).
When do you use a real database?
When many people share records that relate to each other, such as orders to customers to invoices, or when reporting and audit history matter.
UNDER THE HOOD
- A relational database such as PostgreSQL behind an application server, with nginx in front.
- Schema migrations kept in version control, and backups scheduled and tested by restoring them.
- Authentication, roles and an audit trail where the process needs accountability.
- This is the Multi-User Application tier in pricing.
Why hand-written HTML, CSS and JavaScript with no framework?
Nothing is shipped that the page does not use. There is no build step to break, no dependency to go out of date, and no JavaScript bundle to download before the page works.
UNDER THE HOOD
- Pages are readable and usable with JavaScript off. Scripts only add behavior, such as menus, forms and animation.
- The code stays small enough that the next developer can read all of it in an afternoon.
- Trade-off: very large, highly interactive applications are better served by a framework, and the Web Applications tier uses one when the job calls for it.
How do you keep pages fast?
By not loading things that are not needed, and by loading what is needed efficiently.
UNDER THE HOOD
- Fonts are self-hosted WOFF2 subsets, preloaded, with font-display: swap, so there is no request to a third-party font service.
- Images are resized to the sizes actually displayed, served with srcset, and given explicit width and height so the layout does not jump.
- No analytics or advertising scripts by default. Anything third party, such as a Facebook post, loads only when the visitor asks for it.
- Static files get long cache lifetimes, and Cloudflare serves them over HTTP/2 and HTTP/3 from nearby.
How is accessibility checked?
With automated scans on every page and a manual pass, at desktop and phone width.
UNDER THE HOOD
- axe-core scans for contrast, labels, heading order, landmarks and focus problems, run on each page at 1280 and 390 pixels wide.
- A keyboard-only walk through every menu, form and dialog, with visible focus and a skip link.
- Reduced motion is respected: animation stops, and content is shown as plain lists.
- Automated tools catch only part of the problem. A screen reader test on real devices is recommended before launch and is not something a scan can replace.
Which browsers are supported?
Current versions of Chrome, Edge, Firefox and Safari, on desktop and phone.
UNDER THE HOOD
- The sites use plain modern CSS and JavaScript, with no transpiling, so very old browsers are not a target.
- Because pages work without JavaScript, an old or locked-down browser still gets the content.
How is an owner dashboard secured?
The password is checked by the Worker, which then issues a signed, short-lived session token.
UNDER THE HOOD
- The password is compared in constant time, and wrong tries are rate limited per address (for example six wrong tries locks that address out for fifteen minutes).
- The session token is HMAC-signed with a secret that only the Worker knows, and it expires after about twelve hours.
- The token is kept in session storage, so closing the tab signs you out. The admin page is marked noindex and is not linked from the public site.
- Every change can be undone, and a downloadable backup is built in.
What security headers do your sites send?
A strict set, delivered by Cloudflare Pages from one headers file.
UNDER THE HOOD
- A Content-Security-Policy that allows scripts, styles, fonts and images only from the site itself, plus its own API address.
- nosniff, frame-ancestors none (so the site cannot be framed by another), a strict referrer policy, and a permissions policy that turns off camera, microphone and location.
- No inline scripts, which is what makes a strict policy possible.
Do you use tracking or third-party scripts?
Not by default. A small business site does not need an advertising pixel to do its job.
UNDER THE HOOD
- No analytics, no tag manager, no social widgets loaded in the background.
- Embeds such as Facebook posts sit behind a button and only load when a visitor presses it, so Facebook does not see people who never asked.
- If you want measurement, a privacy-friendly option can be added and should be named in your privacy policy.
Where do passwords and API keys live?
In encrypted environment secrets on the platform, never in files or in the repository.
UNDER THE HOOD
- Rotating a secret is changing one value in the dashboard, with no code change.
- Repositories are kept private. A public repository exposes every past version of every file.
- Accounts for the domain, hosting and email are created in your name, so you stay in control.
How do you keep email out of the spam folder?
By proving the mail is really yours with DNS records, and by sending from a verified domain.
UNDER THE HOOD
- SPF says which servers may send for your domain, DKIM signs each message, and DMARC says what to do with mail that fails both.
- Transactional mail, such as a form notification or an estimate, goes through a sending service from your verified domain, separate from your everyday mailbox.
- Reminder emails carry the standard one-click unsubscribe header and a visible stop link, and only go to people who opted in.
What happens if the email service is down when a customer submits a form?
In the dashboard builds the request is saved first and the email is attempted second, so the request is not lost.
UNDER THE HOOD
- The job appears in the dashboard even if the notification email fails.
- The failure is logged, so it can be seen and fixed.
- The visitor still sees a success message, because their request really was received.
What structured data do you add?
schema.org JSON-LD that describes the business and each page in a form search engines read directly.
UNDER THE HOOD
- The business type (for example a local business or professional service), address or service area, phone, and opening hours.
- A Service entry per service page, breadcrumbs, and FAQ markup that matches the questions visible on the page.
- A price list for the Specials or Prices page, kept in step with the dashboard when prices change.
- A sitemap, canonical addresses and social preview tags. Nobody can honestly promise a ranking, but this is the groundwork.
What is llms.txt?
A plain text summary of the site, written for AI assistants and crawlers, following the llmstxt.org convention.
UNDER THE HOOD
- It lists the pages and what each one is for, and the business details, in a format that is easy to read by machine.
- It costs nothing to keep, and it is generated from the same content as the pages.
Who does the SEO and social media work?
Vetted specialists ISS works with, chosen for local small business work.
UNDER THE HOOD
- ISS sets the plan with you and reviews what they make before anything is published.
- ISS stays your one point of contact and one invoice.
- Nobody honest guarantees a ranking, and ISS turns down SEO work where the search volume does not justify the cost.
How do you design network segmentation?
Devices are grouped by what they are and what they need, and traffic between groups is denied unless a rule allows it.
UNDER THE HOOD
- 802.1Q VLANs on managed switches, with firewalls such as OPNsense or MikroTik enforcing the rules between them.
- Typical groups: staff, servers, guest wireless, phones and AV, and anything industrial or sensitive.
- Addressing, rules and accounts are documented at handoff so the design does not live in one person's head.
Should anything sensitive live on the public website?
No. A public website should never hold sensitive business or customer records. Security work is about the internal systems that do.
UNDER THE HOOD
- Contact forms hand messages straight to email and store nothing on the public site.
- Sensitive data belongs on internal systems kept on their own network segment, with MFA and logging. That is what a Security Review checks.
How does an OCR pipeline work?
A scan is read by an OCR engine, checked by rules, and written into the system that already holds the data.
UNDER THE HOOD
- Capture: scanner or phone camera into a watched folder.
- Recognition: an OCR engine reads the text and numbers. Open source engines run on your own hardware, which matters when documents cannot leave the building.
- Validation: rules check ranges and formats, and anything unclear is flagged for a person to confirm instead of being guessed.
- Delivery: the clean values go into a spreadsheet, database or ERP, and the original scan is filed with a reference.
What do you script in?
Bash, PowerShell and C, chosen to fit the machine and the people who will maintain it.
UNDER THE HOOD
- Bash and PowerShell for administration, file handling and glue between systems.
- C where a small, fast program on constrained or industrial hardware is the right tool.
- Everything is handed over as source with documentation.
Who owns the code and the accounts?
You do. The site, the dashboard code and the accounts are delivered to you.
UNDER THE HOOD
- The domain, hosting and email accounts are created in your name.
- The code is plain files you can take to any developer, with no proprietary platform to leave.
- A short handoff guide and a design reference are part of the delivery.