Custom websites and web apps, built by a defender.

I’m Colin. For five years I’ve built sites and data-driven tools for people whose projects don’t fit a template. I’m also a blue-team cybersecurity student and a back-to-back Minnesota state CCDC champion, so what I ship is built to hold up when someone pushes on it.

Async by design: send a written brief, get a written reply within two business days.

Self-test

This page, checked live in your browser.

Encrypted connection
—
HTTPS enforced (HSTS)
—
Content Security Policy
—
Clickjacking protection
—
Cookies set
—
Third-party requests
—
Page weight
—
Ready in
—

Turn on JavaScript to run the self-test.

Three kinds of work, one way of building

Pick the one that sounds like your project. If none of them do, that’s usually the interesting kind, and you should still get in touch.

Business and marketing sites

Fast, credible sites for small businesses and organizations, on a platform your team can actually update.

WordPress or hand-builtMost projects $1,500–$4,000

Web apps and dashboards

Tools for data or processes that have outgrown a spreadsheet: dashboards, client portals, booking and tracking systems.

SvelteKit, APIs, databasesMost projects $4,000–$12,000

Community and interactive platforms

Maps, trackers, leaderboards, and tools built around how a community, club, or event actually runs.

Custom buildsMost projects $2,000–$8,000

Illustrated map of Duluth, drawn like a circuit boardStreets drawn as traces along the Lake Superior shoreline, with gold pads marking light displays. Click or tap the land to drop a pin and see its coordinates.Lake Superior

Click the map to drop a pin.

Duluth Lighting Challenge

A holiday lights contest needed a way for people to find every display in town.

Entrants submitted an address. The site converted each one to latitude and longitude and pinned it on an interactive map, so anyone in Duluth could find the competing light shows. Hand-built in HTML, CSS, and JavaScript.

The map here illustrates the idea in this site’s style. It isn’t the original.

Read the case study

Built like it’s going to be attacked

In competition, my team inherits a network, keeps its services running, and holds it while a professional red team tries to take it apart. That habit carries over into every website I build.

Locked down by default

Strict security headers, current software, admin accounts with multi-factor sign-in, and nothing installed that the site doesn’t need. Fewer moving parts means fewer ways in.

The right tool for the job

Plain HTML when that’s all you need. WordPress when your team wants to edit it. SvelteKit when the site has to think. If a template would do the job, I’ll tell you.

Yours from day one

Your domain, your hosting account, your code, and plain-language notes on how it all fits together. No lock-in, and no login you have to ask me for.

Fast and quiet

No bloat and no trackers following your visitors around. This site is the sample: the self-test at the top of the page is checking it right now.

How a project runs

Five checkpoints, all in writing, so you always know where things stand.

  1. TP1

    Brief

    You describe the project in a short written form.

  2. TP2

    Proposal

    Scope, timeline, and price, agreed in writing before work starts.

  3. TP3

    Build

    A private preview link and a written update every week.

  4. TP4

    Review

    You test it on your own devices. I fix what you find.

  5. TP5

    Launch

    Hardened, documented, and handed over in your name.

See the full process

Have a project a page builder can’t handle?

Send a brief. It takes about five minutes, and you’ll get a written reply within two business days.