A German WooCommerce shop: theme migration and hack clean-up
I moved a small shop off an abandoned theme to Flatsome. Two years later I found a hack hidden since 2019 and cleaned it out with the catalogue intact.
Service
Speed, security & accessibility
I check this on every site I build. And I take it as a separate job when a site is slow, was hacked or has to meet the BFSG.
I’m not a security firm or an SEO agency. I build and run sites, and a slow, hacked or inaccessible site loses visitors and money. So I check all three on every job, and measure before and after.
Where this comes from
- A black-hat SEO attack that had run since 2019 in an online shop’s database. I traced it and removed more than 24,000 spam categories, spam posts, attacker accounts and a malicious redirect. The real catalogue stayed untouched.
- A museum’s videos made about 87% lighter. I built a media pipeline on AWS S3, and the videos look as good as before.
- WCAG 2.1 / BFSG audits for German shops and corporate sites.
Result
What you get
-
A clean, hardened site
I remove malware, spam pages and attacker accounts without touching your real content. Then I close the way in and write down what happened.
-
A faster site, with numbers
I measure where the time really goes: images, video, scripts or hosting. I fix that and measure again.
-
An accessibility audit you can act on
WCAG 2.1 / BFSG, page by page. Each finding names the element and how to fix it.
In practice
Where I did this: 23 clients
A plugin with a critical security hole removed, then an update plan
I removed a backup plugin with a critical vulnerability from a small business's WordPress site, connected the site to the agency's management service and gave the agency an ordered update plan.
A holiday-rental site made fast and fixed on iPad
On iPad the main photo was missing and the home page weighed 13 MB. I found both causes, brought the page down to about 2 MB and removed the need for a cookie banner.
Why contact-form mail went to spam, and the DNS fix
The mail records had been added in a DNS zone the world never read. I wrote the exact changes for the live zone, and the SPF and DMARC records are now live as written.
ExpertSure & Ecopreneurist: WordPress sites, plugins and a store
Since 2023 I've been the developer of a UK publisher's comparison sites: merged installs, custom plugins, fixes and a domain store.
A manufacturer's old WordPress site, new TYPO3 site and domain move
I looked after a metalworking company's old WordPress site, filled and tested its new TYPO3 site, and moved the domain to the new site with the mail intact.
A new site for an earthworks company, from Figma to Elementor Pro
I built an eight-page site from a Figma design, with a mobile layout the design didn't have, and moved it to the client's host.
Forms that failed now and then, fixed at the cause
Contact and referral forms failed now and then. I found the page cache behind it and fixed both form pages, while the rest of the site stayed cached.
FAQ
What clients ask me
Our site was hacked. How fast can you look?
Send me the address and what you noticed. I start by taking a copy and finding how far it goes, so nothing is lost while it is cleaned.
Do we need to comply with the BFSG?
Since 28 June 2025 the German Accessibility Strengthening Act (BFSG) applies to many online shops and services sold to consumers. I audit against WCAG 2.1 and fix what the audit finds.
Is this separate, or part of development?
Both. Every site I build gets the same checks. For a site someone else built, it is an audit and a fix on its own.
Jobs start at €100. For a site I don't know yet, a Site check is €100, and it counts toward the work.
See prices →Contact
Tell me what you need.
Use the form or message me on LinkedIn.
Already working with me on Upwork? Write there.