What was unclear before, and what state I’ve been responsible for since.

Since 2021:

Websites, security, maintenance, and technical consulting for the agreed systems, under one ongoing arrangement.

Found:

A critical vulnerability in a third-party system I was asked to review, documented before patient data was affected.

Result:

Stable evolution without permanent firefighting, and one accountable technical contact for every web question.

Boundary: The reviews are structured, but they are not a formal penetration test, not an ISO or SOC 2 audit, and not a HIPAA certification. Those are separate qualified fields.

Situation:

A content-heavy recipe site grown over years. Images, scripts, plugins, and hosting had hardened into a technically heavy foundation.

Implemented:

A full relaunch: automated image processing, cleaned-up code, removed plugin weight, a caching concept, and an optimized hosting environment.

Result:

Images, code, caching, and hosting were reorganized into a base that can carry the site’s hundreds of recipe pages going forward.

Boundary: Without an archived before-and-after report I don’t publish a specific performance number, and without released source data no ranking or lead figures.

Situation:

A fully built conventional online store never launched. B2B sales needs qualified inquiries, not a consumer checkout.

Implemented:

A static catalog with a self-hosted CMS: 606 SKUs per language across German, English, and French, 11 filter categories, full-text search, and an inquiry basket.

Result:

Complex B2B product data is searchable, filterable, and inquiry-ready, delivered as fast static pages instead of a heavy shop system.

Boundary: This is intentionally not a full ecommerce system. Product maintenance runs through the CMS, not a classic PIM.