Accessibility
Your site has to be usable by people using screen readers, keyboards and magnification, and you have to be able to show that it is.
What this actually requiresArrives as a demand letter
Managed website operations
Your website is a legal surface. We run it like one.
WebSpark keeps business websites secure, fast and continuously compliant, and produces the evidence. No admin panel, no plugins, nothing to patch.
- Accessibility
- WCAG 2.2 AA
- Content policy
- CSP enforced
- Consent
- Verified
- Uptime · 90d
- 99.99%
001 / What you're carrying
Four obligations most owners don't know are theirs.
Each one arrives as a letter, a questionnaire or a complaint, usually to somebody who assumed their web developer had it covered.
Privacy
What you collect, what you disclose, and what loads before someone agrees to it. Your policy has to describe the site you actually run.
What this actually requiresArrives as a regulator's notice
Security
Unpatched software is the common cause, and so is a plugin somebody installed once and forgot. Breach notification runs on a legal clock.
What this actually requiresArrives as an incident
Data rights
A member of the public can ask what you hold about them and require you to delete it. The deadline starts the moment they ask.
What this actually requiresArrives as a deletion request
Most business websites are one unpatched plugin, one missed disclosure, or one demand letter away from a problem the owner didn't know they had.
We run the site so those problems don't start, and we document it so you can prove it.
002 / The loop
Publishing, without a content management system.
There is no admin area, because an admin area is a login page on the public internet. Changes are asked for in plain language and approved on a private preview.
- 001
Ask for the change
In an email, on a call, in a document. No ticket format, no software to learn, and no password to reset because you last logged in six months ago.
- 002
We prepare it
The change is made and checked automatically for accessibility, speed and broken links before anybody on your side spends a minute on it.
- 003
You see it privately
A private link shows the finished page, working, on any device you want to open it on. Nothing is public until you say so.
- 004
You approve it
Approval publishes it in minutes. Who asked, who approved and what changed is recorded, so a year later it is possible to say why a page says what it says.
003 / What you get
A dated record, every month.
What was checked, what it found, and when. When a lawyer, funder, insurer or enterprise customer asks, you send the document.
- Accessibility: axe, every route
- Pass:0 violations
- Contrast matrix: declared token pairs
- Pass:42 / 42 pass
- Content Security Policy
- Pass:enforced, 0 reports
- Consent gate: EU geo, pre-consent requests
- Pass:0 third-party
- Largest Contentful Paint: p75, field
- Pass:0.9 s
- Data requests: received / answered in time
- Pass:3 / 3
- TLS certificate: earliest expiry
- Warning:renews in 19 d
- Dependency advisories: production
- Pass:0 open
Every value on this panel is emitted by the build that produced the site.
004 / The platform
What runs, continuously.
Security is ours to run
We remove the parts of a website that get attacked and keep the rest current. No login page, no plugin list, no admin area for anybody to find.
How it worksAccessibility you can evidence
Every page is tested before it goes live and you get a dated record of it. When somebody asks whether your site is accessible, you send the report.
How it worksPrivacy handled for you
Consent that matches what the site actually does, policies that describe it accurately, and requests answered inside the legal deadline.
How it worksFast, and steady when busy
Quick for visitors wherever they are, and it holds up on the day you send a campaign. Page speed is also the single biggest thing search engines reward you for.
How it works005 / What we replace
What each alternative is good at.
Every one of these is the right answer to some question. In each case the obligation itself stays with you.
Managed WordPress hosting
Running WordPress well: fast servers, staging, backups and automatic core updates. That is a real and useful job.
Leaves with you: Accessibility, privacy disclosures, consent, and answering data requests. Hosting plans are scoped to infrastructure.
WordPress maintenance plans
Keeping plugins and themes updated and taking backups on a schedule, usually for a modest monthly fee.
Leaves with you: Everything beyond the update itself. The plugin surface remains, and so does every obligation that turns on something other than software versions.
Squarespace and Wix
Getting a good-looking site published quickly, with hosting and templates included and no developer required.
Leaves with you: The compliance work, and the evidence. Both publish accessibility guidance for site owners to act on themselves.
A web design agency
Design, strategy and building the thing in the first place. For a redesign, an agency is usually the right call.
Leaves with you: What happens on the other 355 days. An agency sells projects; ongoing operations is a retainer negotiated separately, if at all.
Accessibility overlays
Installing in minutes, and offering visitors a toolbar of display preferences such as larger text and higher contrast.
Leaves with you: The underlying markup, which is what assistive technology reads. The US Department of Justice has stated that it does not certify or approve any product as bringing a site into compliance.
006 / Plans
Simple pricing, based on coverage and requirements.
Core
$300
per month
For smaller business and informational websites.
- Security and platform updates
- Accessibility testing
- Performance monitoring
- Monthly record
Small business sites, landing sites, modest traffic
Pro
$500
per month
For organizations where the website is an important business asset.
- Everything in Core
- Accessibility governance
- Privacy and cookie consent
- GDPR and CPRA request handling
- Publishing for your whole team
Professional services, finance, nonprofits, teams that publish their own updates
Business
$800
per month
For larger, higher-traffic or business-critical websites.
- Everything in Pro
- More than one site
- Security questionnaires answered for you
- Data processing agreement
- Priority support
High traffic, larger organizations, regulated businesses, multi-site
Find out what your site is currently carrying.
Tell us the address and we will look at it properly: performance, security headers, and what loads before anyone consents. You get the findings whether or not you ever become a client.
Get a site assessment