One clinic website, taken apart and rebuilt
A short film. A 2016 dental clinic homepage separates into its layers: the page, 38 images, 27 visible plugins with 31 known vulnerabilities, 41 scripts and WordPress 5.8.3 on PHP 7.4.33. A scan passes through each layer. Its logo, colours and best sentence are kept, the rest falls away, and the page is rebuilt as Harbor Dental: Google's performance score on a phone goes from 23 to 100, and the main content appears in 1.3 seconds instead of 6.4.
That was theirs.Want your next website?
Free, in under a minute. The 2016 site is the specimen in our sample report; the new one is Harbor Dental, live.
Your website, checked in a minute and rebuilt in ten days.
Type your address and we'll read what any visitor can see: the platform, every plugin against the public vulnerability catalogue, the load time on a phone, and the accessibility problems a machine can find. Then we rebuild your homepage from your own logo, colours and words.
Free, takes under a minute, and only reads what any visitor can see.
What the scan reads, and what we build instead
- Security
The platform and its version, the PHP version, every plugin we can see and its known vulnerabilities, the security headers, and whether the admin login is open to the internet.
52.8% of WordPress sites run a plugin with a known vulnerability1, and the median time from disclosure to mass attack is five hours2.
Instead
Pages built in advance and served as files: no PHP, plugins or database to attack, and the editor behind two-factor sign-in.
- Speed
When the main content appears on a phone, from Google's Lighthouse and, where Chrome has the data, from real visitors; the page's weight, scripts and first byte.
38.4% of WordPress sites pass Google's Core Web Vitals on mobile3. Pages that load in under two seconds convert 57% better than pages that take three to four4.
Instead
Pre-rendered pages from Cloudflare's network in over 300 cities, with a Lighthouse score of 95 or more written into the contract.
- Accessibility
Form fields without labels, faint text, images without descriptions, zoom switched off and buttons too small to tap, with the checks a machine can't make marked for a person.
Automated testing finds about 57% of accessibility issues5. Over 5,000 digital accessibility lawsuits were filed in the US in 20256.
Instead
WCAG 2.2 AA from the first day: checked by machine on every page and by a person, with a keyboard and a screen reader, before launch.
- Search and AI
Structured data that tells Google and AI assistants who you are, where you are and when you're open; page titles, descriptions and social previews.
Google organic clicks fell 21.8% year on year by August 2026, as answers moved into AI Overviews and assistants7.
Instead
Structured data on every page, and every URL that ranks kept or redirected, so its search history follows it.
- Upkeep
The page builder and theme, and how many plugins someone has to keep updated.
Agency care plans for WordPress run $199 to $499 a month, mostly spent patching plugins8.
Instead
A visual editor your staff can use without training, and your content and the site's code to export at any time.
Eight sites we built, one for each kind of business we rebuild
The businesses are fictional; the sites are real and live. Booking, prices and forms, a 500-page catalogue, and three Signature sites with a live 3D scene. Every page loads fast on a budget phone.
Harbor DentalDental and medical clinics in San Diego, CA
Calder & WynneLaw and professional firms in Chicago, IL
Northstar Home ServicesHome services and trades in Austin, TX
The SaltmarshHotels, inns and restaurants in Cape Porpoise, ME
Meridian Fluid SystemsManufacturers and distributors in Tulsa, OK
Westlight ResidencesReal estate developments in Santa Monica, CA, on the Signature tier
Nunatak LodgeRemote lodges and resorts in Neacola Mountains, AK, on the Signature tier
OndineAesthetic medicine in New York, NY, on the Signature tier
Compare all eight, with their speed and accessibility scores
From scan to launch in ten days
Day 0
Scan and quote
We scan your site, map every URL, and send you the findings with a fixed quote.
Days 1 to 2
Extraction
Content, images, metadata and structured data are pulled out and cleaned. Every ranking URL gets a redirect.
Days 3 to 7
Build
Prompt engineers and AI generate; a senior engineer reviews every line. Design is bespoke, not a theme.
Day 8
Preview
You click through the real site on a private link and edit it yourself before it goes live.
Day 10
Launch
DNS moves to Cloudflare. The old server can be switched off, along with its plugins and PHP.
Fixed prices, with hosting included
The scan comes with a fixed quote. Hosting on Cloudflare is free. Care adds monitoring, monthly edits, and a human on call. Prefer your own host? You get the site's code and a one-page runbook. No lock-in.
Launch
Up to 10 pages. Clinics, studios, practices.
Includes bespoke design, visual editor, every URL redirected, WCAG 2.2 AA and Lighthouse 95+ in the contract.
from $2,900
Practice
Up to 40 pages, forms, booking, multi-location.
Includes everything in Launch, booking and CRM wiring, location pages, AI-search structured data and content migration.
from $6,500
Catalogue
Hundreds to thousands of product or listing pages.
Includes everything in Practice, catalogue import from PHP/SQL, instant site search, spec sheets and downloads and staff roles in the editor.
from $12,000
Care
Optional, after launch: monitoring, monthly edits and a person on call.
Without it, hosting on Cloudflare stays free.
$149 a month
What owners ask us first
Will we lose our Google rankings?
Nobody can honestly promise rankings, and rankings often wobble for a few weeks after any move. What we control: we map every URL that has earned traffic, keep titles, descriptions and structured data, redirect anything whose address changes, and watch Search Console for 90 days. If pages drop out of Google's index because of the move, we fix it free.
Can we edit the site ourselves?
Yes, and that is the point. You get a visual editor: click text, change it, press publish. There are no plugins to update and no WordPress admin exposed to the internet: the editor sits behind two-factor sign-in, every edit is saved as a versioned draft you can roll back, and publishing rebuilds the site in under a minute.
What does 'free hosting on Cloudflare' actually mean?
Static sites run on Cloudflare's free tier, served from over 300 cities with no bandwidth bill. There is no server to maintain. If you outgrow it, the paid tiers are inexpensive, and we will tell you before you do.
What if we want to host it ourselves?
You can export your content and your site's code at any time, and it runs on any static host: Cloudflare, Vercel, Netlify, S3, or your own server. We hand over a runbook. The design kit it is built on is licensed to you for that site, permanently. Our visual editor stays on our platform, but the exported site is a standard Astro and React project that any web developer can edit.
Forms, bookings, payments, shops?
Forms run on serverless functions with spam protection. Booking tools embed cleanly. For e-commerce we pair a fast storefront with Shopify or Stripe rather than rebuilding a cart.
Is a site built with AI any good?
AI does the typing; people do the judgement. Every line is reviewed by a senior engineer, and Lighthouse 95+ and WCAG 2.2 AA are written into the contract as acceptance criteria. If we miss, we fix it free.
Start with your own site
The scan is free and takes under a minute. If you'd rather talk first, write to hello@nextwebsite.co.
Sources
- 1.GuardingWP, State of WordPress Security 2026
- 2.Patchstack, State of WordPress Security in 2026
- 3.PageSpeed Matters, CWV by CMS (3.7M sites), May 2026
- 4.Conversionlab, page speed and conversion, Jul 2026
- 5.Deque, Automated Accessibility Coverage Report
- 6.UsableNet, 2025 Year-End Digital Accessibility Lawsuit Report
- 7.SEOcrawl, AI traffic vs Google organic (16,661 sites)
- 8.Redefine Web, dental website management tiers 2026