Eleven services covering design, build, integration and the things that keep software running afterwards: web design, application development, e-commerce and payments, AI integration, billing automation, systems integration, server maintenance and security, email deliverability, platform migrations and software licensing. Every one of them is quoted to your project rather than sold from a shelf, with a written scope and a fixed price agreed before anything starts — and what gets built is yours at the end, documented for whoever maintains it next.
Site X-ray
DNS Where your site and mail point
Awaiting domain
TLS Issuer and days remaining
Awaiting domain
Response Real round trip, measured
Awaiting domain
On-page Title, headings, alt text
Awaiting domain
Passive checks only — the same things a browser does.
How We Work
Custom web, app and AI work, quoted to your project rather than sold from a shelf. Every engagement starts with a written specification and a fixed price against it, so you know the cost before anything is built and there is no hourly meter running in the background.
What gets built is yours. The code, the database and the deployment belong to you at the end — nothing is written to make leaving expensive, and nothing depends on a service only we can operate. We will host it if you want that, or hand the whole thing over to your own infrastructure.
The work runs from a rough idea through specification, build, staged deployment and launch, with documentation written for whoever maintains it next. If your project is closer to a question than a brief, the quote conversation is the right place to start.
Software We Have Actually Shipped
HostCommerceAI
You are using it right now
The storefront, cart, checkout, account area, invoicing and admin panel around this page. Underneath it: recurring billing with dunning and proration, hosting provisioned onto real servers, domains registered through a registrar integration, SSL certificates issued, and a licensing engine that binds a copy to a domain. We sell it as a product, which is why you can look at the whole thing rather than a screenshot of it.
150 products live in this catalogue
160 billing plans behind them
474 of 580 domain extensions on sale
Billing, provisioning, registrar, SSL and licensing, in one system
A real-time market application: streaming prices, portfolio and options tracking, sentiment scoring, backtesting and an assistant that reads live records rather than describing them. Two always-on services sit beside the site — one holding the market-data key server-side so it never reaches a browser, one scoring news as it arrives. Different problem, different shape, same team.
118 classes across 70 public pages
Two always-on background services
Live market data streamed to the browser without exposing the key
Built on the same stack as this site, with no framework
A Python agent that runs unattended on its own server, under its own isolated system user. It gathers data, reasons about it through a model API, and every decision it reaches passes a risk gate — position caps, a daily loss halt and an approval queue — before it is allowed to act. This is the shape of work most people mean when they say "AI agent" and very few have actually built.
Runs unattended on a schedule, with no operator present
Isolated system user, and the broker connection never leaves localhost
Every decision gated before it can act
Reasoning, risk and execution kept as separate parts
What Each Service Involves
💻
Web Development
You own the code6–12 weeks
Custom builds for the cases a plugin cannot reach.
The detail
There is a point where an off-the-shelf theme stops saving you time and starts costing it — where every new requirement means another plugin, and the plugins begin to fight each other. That is the point at which a custom build is the cheaper option, not the expensive one.
We write software to be read. Prepared statements throughout, input validated at the boundary, and the reasoning left in the code rather than in one person's head — because whoever maintains this in two years may not be us, and should not need to be.
Version control, staged deploys, and a rollback path that has actually been tested rather than assumed.
What Web Development includes
Custom application code, not theme-and-plugin assembly
Database design that matches how your business really works
Prepared statements and input validation throughout
Version control, staged deploys and a tested rollback path
Documentation written for whoever maintains it next
Usually six to twelve weeks. If you are not sure whether you need custom, say so — sometimes the honest answer is that you do not.
Design that starts from what your business needs to say, not from a template that needs filling.
The detail
We work out who each page is for and what it has to achieve before anyone opens a design tool. That means asking the uncomfortable questions early: who is this actually for, what do they need to believe by the end of it, and what happens if they leave without doing anything.
Then a real system — type scale, colour, spacing, components — rather than a set of one-off page designs. That is what keeps the tenth page as considered as the first, and what lets you add pages next year without them looking bolted on.
Everything is designed mobile-first, because that is where most of your visitors already are, and accessible by default: contrast that passes, and keyboard navigation that actually works.
What Web Design includes
Discovery: who each page is for, and what it has to achieve
A full type, colour and spacing system — not one-off page designs
Responsive layouts designed mobile-first
Accessible contrast and keyboard navigation as standard
Source files and a documented component set that stay yours
Typically three to six weeks. Best value when there is real content to design around rather than placeholder text.
From a rough idea through specification, build and launch.
The detail
Web applications, internal tools, customer portals, dashboards — software that does one specific job for one specific business, rather than a general product bent into an awkward shape.
We start by writing down what it must do and what it deliberately will not. Scope agreed at the start costs a fraction of scope discovered halfway through, and the second list matters just as much as the first.
You see working software early and often rather than a demo at the end, because changing your mind is cheapest while something is still being built.
What Web Application Development includes
A written specification agreed before any code
A working prototype early, so you react to something real
Accounts, permissions and audit trails where they are needed
Built to run on your own infrastructure, not locked to ours
Handover including the code, the data and how to run it
Typically eight to sixteen weeks to a first release. Built to run on your infrastructure, not tied to ours.
Card details go straight to Stripe or PayPal and never touch your server. That is a deliberate architectural decision rather than a convenience: it keeps you clear of the heaviest compliance burden by design rather than by luck.
The real work is in the awkward cases that break off-the-shelf carts — baskets mixing one-off and recurring items, tax that changes by country, staged fulfilment, and products that need configuring before they can be bought at all.
And in the parts nobody demonstrates: refunds, partial refunds, failed webhooks, and reconciling what your system believes happened against what the payment provider says happened.
What E-commerce & Payments includes
Hosted, tokenised payments — card numbers never reach your server
Stripe and PayPal live, including refunds and verified webhooks
Real-time tax by jurisdiction rather than hardcoded rate tables
Discounts, bundles, and mixed one-off / subscription baskets
Order, invoice and fulfilment records that actually reconcile
Typically six to fourteen weeks, depending on catalogue complexity and how many systems it has to talk to.
Assistants that read your real records and act on them, rather than producing confident text about nothing.
The detail
We give the model genuine access to your data through defined tools, so an answer is grounded in what your system actually holds rather than in what sounds plausible.
Anything irreversible stays behind a human or a deterministic rule. The AI drafts, summarises and triages; it does not charge cards, delete records or suspend accounts on its own judgement. That line is where most AI projects go wrong, and it is drawn before anything is built.
Cost is designed in from the start: prompt caching so repeated context is not paid for twice, token logging, and a hard spend cap. An AI feature with no meter on it is an invoice waiting to happen.
What AI Integration includes
Tool-calling against your real data, not a generic chatbot
Prompt caching, so repeated context is not paid for twice
Token and cost logging from day one, with a hard spend cap
Human approval required on anything irreversible
Defined fallback behaviour when the model is slow or down
Typically three to eight weeks. Works best attached to a system that already has clean data worth reading.
Recurring invoicing, renewals, reminders, and what happens when someone stops paying.
The detail
This is the unglamorous machinery that quietly decides whether a subscription business works, and it is where most builds are weakest. The happy path is easy. The dunning sequence is not.
We build the whole ladder: a renewal invoice raised ahead of the due date, a reminder, a grace period, suspension, cancellation, and the reinstatement that follows payment. Plus the awkward middle nobody plans for — proration, upgrades, downgrades and credit notes.
And reporting you can reconcile against the payment provider, because a billing system you cannot audit is one you cannot trust.
What Subscription Billing & Dunning includes
Renewal invoices raised automatically ahead of the due date
Full dunning ladder: remind, grace, suspend, cancel, reinstate
Proration, upgrades, downgrades and mid-term changes
Credit notes, refunds and account credit
Reporting you can reconcile against the payment provider
Typically six to twelve weeks. We run exactly this in production ourselves, which is where the detail comes from.
Getting your systems to talk to each other, and to everyone else.
The detail
Registrars, hosts, payment providers, CRMs, carriers, messaging — including the ones whose documentation disagrees with what the API actually returns.
We verify against the live service rather than trusting the documentation, because a wrong assumption in an integration usually fails silently: an empty result that looks exactly like a legitimate answer. Those are the bugs that survive for months.
Retries, timeouts and idempotency so a network hiccup is not a duplicate charge. Webhooks with real signature verification. Clear failure states instead of a quiet nothing.
What API & Systems Integration includes
Verified against the live API, not only against the documentation
Retries, timeouts and idempotency, so a hiccup is not a duplicate charge
Webhook handling with real signature verification
Clear failure states instead of silent empty results
A written record of every endpoint and quirk found along the way
From two weeks for a single integration. Often the thing that stalled somewhere else.
Hardening, patching, monitoring and backups on servers we keep running rather than hand over and forget.
The detail
Backups are verified by actually restoring them. An untested backup is a belief rather than a backup, and the moment you find that out is the worst possible moment to find it out.
Monitoring that alerts a person rather than a dashboard nobody opens — uptime, certificate expiry, disk, and the specific things that tend to break on your particular stack.
When something does go wrong, you reach someone who already knows how your system is put together, instead of starting the explanation from scratch while it is still down.
What Server Maintenance & Security includes
Hardening, firewall rules and managed patching
Uptime and TLS certificate monitoring with alerts that reach a person
Off-server backups, with restores tested rather than assumed
Malware scanning, and a defined incident response
Access control and audit logging
A monthly retainer, priced on how many servers there are and how much of the stack we look after.
SPF, DKIM, DMARC, reverse DNS, HELO alignment and sender reputation — the unglamorous records that decide whether your invoices, password resets and campaigns land in the inbox or the spam folder.
Most businesses discover this only after something important has been silently failing for months. There is no bounce, no error and no complaint — just a quiet drop in replies that gets blamed on something else entirely.
We fix the records, wire bounce and complaint handling back into your list, and score campaigns before they go out rather than after.
What Email Deliverability (SPF, DKIM, DMARC) includes
SPF, DKIM and DMARC configured and validated end to end
Reverse DNS and HELO aligned to the sending IP
Bounce and complaint handling wired back into your list
Pre-send scoring, so a campaign is checked before it goes out
Reputation monitoring and blocklist remediation
Usually one to three weeks for an audit and fix. A small job that prevents a large and very quiet problem.
Moving off a platform you have outgrown without losing data, history or search ranking.
The detail
Old host to new, legacy stack to current, or an abandoned build left behind by somebody else.
The risky part is never the new system — it is the cutover. So that gets planned first, rehearsed, and given a rollback that genuinely works. The old platform stays live until the new one has proved itself under real traffic.
Every old URL gets a redirect, because ranking you built over years should not die in an afternoon.
What Platform Migration includes
Full data audit and field mapping before anything moves
Redirects for every old URL, so ranking transfers instead of dying
A rehearsed cutover with a genuine rollback plan
The old system kept running until the new one is proven
Post-move verification of data, mail and search visibility
From two weeks to several months, depending entirely on what is being left behind.
The detail that matters is the grace period. A licence check that fails closed will lock out a paying customer the moment your own server has a bad afternoon — so it has to fail safe, and that has to be a decision made deliberately rather than a behaviour discovered later.
Rare work, with very few people offering it, and we run exactly this in production for our own product.
What Software Licensing & Packaging includes
Licence issue, renewal, revocation and expiry
Domain or machine binding with a sensible grace period
Phone-home validation that fails safe rather than closed
Update and download delivery tied to licence status
Optional code protection before distribution
Typically four to eight weeks, plus optional code protection before distribution.
Hosting is a convenience here, not a condition. We will run what we build for
you — on the same platform this page is served from — or hand the
code, database and deployment to your own infrastructure and never touch it
again. If you would rather it lived here, this is what that looks like.
It depends almost entirely on scope, which is why there is no price list. The band you pick on the quote form tells us what is realistic to build; the quote tells you exactly what it costs. If your budget will not stretch to what you have described, we will say so rather than quietly quoting something you cannot afford.
Who owns the code at the end?
You do. Code, database and deployment. Nothing is built to make leaving expensive, because work that only holds a client through lock-in was never good enough to hold them any other way.
Do you take on small projects?
Some. A day of integration work or a deliverability fix is a perfectly good piece of work. What we are poor value for is a brochure site that a template would do just as well — if that is what you need, we will tell you.
How long does a project take?
It depends on which of the eleven you need. A single integration can be two weeks. Design work is typically three to six weeks, a custom build six to twelve, and a web application eight to sixteen to a first release. Migrations are the widest range of all — from two weeks to several months, depending entirely on what is being left behind. Each service on this page carries its own estimate; the quote gives you a real one for your actual scope.
Is the price fixed, or does it move as the work goes on?
Fixed. The scope and the price are agreed before anything starts, and there is no hourly meter running in the background. If you change what you want mid-build that gets quoted as a change, so you decide whether it is worth it — you are never presented with it afterwards as a number you already owe.
Do I have to host with you?
No. The work is built to run on your infrastructure rather than tied to ours, and handover to a server we have nothing to do with is a normal ending, not an awkward one. You can host it here if that is easier — plenty of people do — but it is a convenience, not a condition of the build.
What exactly do I get at handover?
The code, the database and the deployment, documented well enough for the next person to pick up. Not a login to something we own. Nothing is built to make leaving expensive, which is the same answer as who owns the code, for the same reason.
How is ongoing maintenance and security priced?
As a monthly retainer rather than per project, priced on how many servers there are and how much of the stack we look after. It is the one service on this page that is not quoted as a piece of work with an end, because keeping something patched and monitored does not have one.
Have you actually built anything substantial yourselves?
Yes, and you are using one of them. This platform — the storefront, cart, checkout, billing, provisioning, registrar and licensing around this page — is our own software, sold as a product. QuantumEdgeAI is a real-time market application with streaming prices and two always-on background services. There is also an autonomous agent that runs unattended under its own system user with a risk gate in front of every decision. Three systems, three genuinely different shapes, and the first one you can click around in right now.
Can you take over something somebody else started?
Often, and it is frequently the reason people call. An integration that stalled, a build that got most of the way, a platform somebody else set up and left. We will look at it honestly and tell you whether it is better continued or better restarted — those are genuinely different answers and the wrong one is expensive.
What does "AI integration" mean in practice?
Something grounded in your real data, not a chat box bolted onto a form. It works best attached to a system that already holds information worth reading — orders, tickets, documents, records — so the answers come from your data rather than from a model's general impression of your industry. If there is no clean data for it to read, we will say that is the thing to fix first.
Why would email deliverability need fixing at all?
Because it fails quietly. SPF, DKIM and DMARC are the three records that tell receiving servers your mail is really yours, and when they are wrong the mail does not bounce — it goes to spam, or vanishes, and nobody tells you. It is usually one to three weeks for an audit and a fix, which makes it a small job that prevents a large and very quiet problem.
What happens after it launches?
That is a choice, not an assumption. Some people take handover and run it themselves, which is a perfectly good outcome and what the documentation is for. Others keep us on a retainer for patching, monitoring and someone to call when something breaks at an inconvenient hour. Software nobody maintains starts decaying the day it ships, so the question is who does it, not whether it needs doing.
How do we start?
Describe the project on the quote form. It asks better questions than a contact form does, which is what makes a straight answer possible — and the band you pick tells us what is realistic to build. If what you have described does not need a custom build at all, we will say so rather than quote for one.
Not sure which of these you need?
Describe the problem rather than the solution — working out which
of these applies is part of what you are buying. If the honest
answer is that you do not need a build at all, we will say so.