Big websites for small law firms
We build law firm sites on Astro: plain HTML on a global CDN, no plugins to patch, SOC 2–compliant intake, and every URL you already rank for kept exactly where it is.
- No WordPress plugins
- SOC 2 intake
- Every URL kept
- Schema + llms.txt
A fast, secure website you don't have to babysit.
I've been in legal marketing for 14 years and seen all sides of it, including hanging my own shingle. The web is changing fast, and small firms can compete like never before, as long as they have the right tools.
I'm moving all my clients to Astro. It's a rocket ship, it plays well with AI, and we can easily add SOC 2–compliant intake.
Most WordPress websites have security holes nobody is paid to fix.
Firms chose WordPress because it's "good for SEO." Then the site gets built with a pile of small plugins, each doing one job a few lines of code could do. Plugins get switched off but never deleted, and switched-off plugins stop getting security updates.
Agencies rarely fix it, because patching doesn't move a marketing KPI. Meanwhile, AI is making old vulnerabilities faster to find.
“A deactivated plugin is not a removed plugin.”
ABA Model Rule 1.6(c) requires reasonable efforts to prevent unauthorized disclosure of client information. Comment 8 to Rule 1.1 puts technology competence inside the duty of competence. Your contact forms have been collecting client information for years.
Fast, AI-compatible websites, designed to drive new cases.
Static Astro site
Every page is pre-built HTML served from a CDN. No database, no PHP, no plugin updates, and no JavaScript unless a page needs it.
SOC 2–compliant intake
Contact and intake forms go to a SOC 2–compliant intake system, not a plugin table in your web database.
Every URL kept
We inventory every live URL first. Pages keep their exact address; anything that has to move gets a planned 301. Your rankings don’t reset.
Built for search and AI
One linked schema graph per page (firm, attorneys, offices, articles, FAQs), clean canonicals, a sitemap of indexable pages only, and an llms.txt guide for AI tools.
Checked on every change
Every edit runs automated checks before it goes live: broken links, missing pages, URL coverage, noindex on staging. A failed check blocks the change.
Maintained by an agent
Ongoing updates (titles, internal links, new pages) run as Work orders in Associate, not a retainer you pay whether or not work gets done.
When hackers found a flaw, old sites never got the fix.
In October, a major security flaw hit millions of websites. Most sites got a fix within days. SPU's old site was too outdated to ever receive one: its software hadn't been updated in over a decade.
Your website collects client inquiries. Keeping it secure is part of protecting client information. So we didn't patch SPU. We rebuilt it on a modern platform with nothing to hack and nothing to update.
As reported by Reuters and The New York Times.
8 seconds to 1 second to load. Nothing to patch.
Is your firm's site this out of date? Get a free site review →Five steps. Nothing breaks at launch.
The site stays hidden from Google until the day we switch it on. One setting controls indexing, so a staging copy can never compete with your live site.
Inventory every URL
Sitemaps plus a full crawl. Each URL gets mapped to a new page or a planned redirect before any design work.
Import your content
Pages, posts, authors, dates, SEO titles and images come over through the WordPress API. Image paths stay the same.
Build and check
Your design, your attorneys, your offices. Every change runs the link, URL and indexing checks before it merges.
Launch with a switch
Flip indexing on in production, submit the sitemap, and recheck every old URL against the live site.
Keep it current
New pages, internal links and title updates run as Work orders. You approve; the agent does the routine work.
Straight answers.
Will I lose my Google rankings?
Not from the move itself. Every page keeps its exact URL, and anything that has to change gets a 301 we plan before launch. We check every old URL against the new site before and after the switch.
Is WordPress really that bad?
No. A well-maintained WordPress site is fine. The risk is the plugins nobody maintains, and on most firm sites, nobody does. If you’d rather stay, we can scan your install and patch or remove what’s outdated.
Where does intake data go?
To a SOC 2–compliant intake system, not your website’s database.
Does llms.txt actually matter?
It’s cheap insurance. Few AI crawlers request it widely yet, but it gives AI tools a clean summary of your firm, and on ohiotiger.com it took Lighthouse’s agentic browsing score to 3/3.
The thinking behind it.
Find out what's hiding in your plugins folder.
We'll scan your site for outdated and unsupported plugins, check speed and indexing, and send you a plain-English report. No obligation.
We'll review and send the report to .