Web Audit & Rebuild - by OYE Creations
Drop your URL.
Get optimized.
Full SEO, security, performance, and accessibility audit - plus a clean rebuild that hits 100% across the board. One drop. No lock-in. You own everything.
10% of every project goes to a 501(c)(3) nonprofit of your choice. Drop Your URL →Built for local business
Real results. Zero lock-in.
We don't sell subscriptions or hold your site hostage. You own everything - the code, the domain, the hosting. We just make it excellent.
Audit
Drop your URL. We score every signal: SEO, Security, Accessibility, Performance, Best Practices. Every gap documented with a fix priority and plain-English explanation.
Rebuild
Plain HTML/CSS/JS - no WordPress, no page builders, no monthly platform fees. We don't ship until every category hits 100%.
Transfer
Your code, your GitHub, your Cloudflare account. We move everything into your name. No lock-in, no ongoing dependency on us.
Verify
Post-transfer audit confirms all scores are still 100% in your environment. You get the report. We're done.
Pricing - Give Back
Simple pricing. Built to give back.
Every paid project includes a charitable donation - 10% of the service fee goes to a 501(c)(3) nonprofit of your choice. If you don't pick one, it goes to TKF.
- Full scored audit report
- 1-page clean rebuild (HTML/CSS/JS)
- Cloudflare Pages deployment
- Handover docs & DNS setup
- Live 100% verification
- You own everything - no lock-in
- Everything in Audit Only
- Full clean rebuild (HTML/CSS/JS)
- Cloudflare Pages deployment
- Admin panel for content edits
- Handover docs & DNS setup
- Live 100% verification
- You own everything - no lock-in
- Everything in Standard
- Up to 10 pages or sections
- Contact form with KV storage
- Weekly automated audit reports
- GitHub Actions CI/CD setup
- Priority turnaround (5-7 days)
- 30-day post-launch support
- Everything in Professional
- Unlimited pages & sections
- E-commerce or booking integration
- Multi-language support
- API & Worker backend builds
- Ongoing maintenance available
Portfolio - Verified scores
Sites we've droptimized.
| 1 - Audit | 2 - Fixed | 3 - Verified | |
|---|---|---|---|
| SEO | ~75% | 92% | 100% |
| Security | ~67% | 100% | 100% |
| Accessibility | ~80% | 97% | 100% |
| Best Practices | ~75% | 92% | 100% |
| Performance | ~60% | 85% | 100% |
New OYE internal site audited at launch. Security gap: X-XSS-Protection legacy value, HSTS max-age 1yr vs 2yr, missing COOP/CORP headers. Inline scripts blocked a tight CSP - extracted to external files, removed unsafe-inline from script-src. Accessibility contrast failures on #888/#999 text on white - fixed to #767676 (passes 4.5:1). Scores verified live: SEO 92%, A11y 97%, Best Practices 92%, Performance 85% (Google Fonts CDN - font migration pending).
| 1 - Audit | 2 - Transfer | 3 - Pre-Launch | 4 - Verified | |
|---|---|---|---|---|
| SEO | ~75% | 92% | 100% | 100% |
| Security | ~58% | ~58% | ~92% | 100% |
| Accessibility | ~82% | 94% | 100% | 100% |
| Best Practices | ~85% | 92% | 92% | 100% |
Subdomain migration to standalone domain. Cloudflare's default robots.txt caused 2,064 SEO errors; missing security headers left the site exposed at 58%. Performance held at 96% - external Google Fonts CDN is the remaining gap, not a security or accessibility issue.
| 1 - Audit | 2 - Rebuilt | 3 - Pre-Launch | 4 - Verified | |
|---|---|---|---|---|
| SEO | ~84% | 100% | 100% | 100% |
| Security | ~38% | 100% | 92% | 100% |
| Accessibility | ~76% | 100% | ~86% | 100% |
| Best Practices | ~80% | 100% | 91% | 100% |
Worst security score in the portfolio at ~38% - the Next.js app had no CSP, no HSTS, and no CORP headers at all. Accessibility issues came from component library defaults that didn't meet WCAG AA contrast. Dynamic routes were missing canonical tags, holding SEO back. All rebuilt and verified at 100%.
| 1 - Audit | 2 - Rebuilt | 3 - Transfer | 4 - Verified | |
|---|---|---|---|---|
| SEO | ~65% | 100% | ~40% | 100% |
| Security | 0% | 100% | ~20% | 100% |
| Accessibility | ~70% | 100% | ~30% | 100% |
| Best Practices | ~75% | 100% | ~25% | 100% |
Unauthorized DNS and config changes during client-side handover tanked all scores. We stepped back in, fixed it, and closed at 100%.
| 1 - Audit | 2 - Rebuilt | 3 - Pre-Launch | 4 - Verified | |
|---|---|---|---|---|
| SEO | 91% | 100% | 94% | 100% |
| Security | 68% | 100% | 80% | 100% |
| Accessibility | ~82% | 100% | 91% | 100% |
| Best Practices | ~76% | 100% | 84% | 100% |
Incomplete security headers at audit - HSTS and CORP were missing, holding security at 68%. A late pre-launch config push partially reverted those settings, dropping security back to 80% right before go-live. Rebuilt from scratch with the full OYE header stack. All five categories closed at 100%.
| 1 - Audit | 2 - Rebuilt | 3 - Pre-Launch | 4 - Verified | |
|---|---|---|---|---|
| SEO | 100% | 100% | 100% | 100% |
| Security | 92% | 100% | 92% | 100% |
| Accessibility | ~79% | 100% | 88% | 100% |
| Best Practices | ~85% | 100% | 92% | 100% |
SEO started at 100% - strong existing domain signals meant no indexing work needed. Accessibility gaps were unlabeled interactive elements on chord cards and contrast failures on secondary label text. Security was one header short at audit and pre-launch. All closed at 100% after rebuild.
Live Report - Updated weekly
Current live audit.
Loading...
The standard - What's included
Everything at 100%. Once.
Audit Report
Every gap scored and ranked by impact.
Clean Rebuild
Hand-coded HTML/CSS/JS on Cloudflare Pages.
Admin Panel
Edit content without touching code.
Handover Docs
GitHub, DNS, Cloudflare - written for humans.
Verified 100%
Scores run live before we call it done.
You Own Everything
Domain, code, hosting - all in your name.
Ready?
Ready to see what your site is actually scoring?
Drop your URL below. Free preliminary audit - we'll tell you exactly where you stand and what it would take to hit 100%.