SDG 2107
Avalon Beach NSW 2107 — established 2026

Most websites are quietly broken in ways the owner can't see.

I'm Scott, based in Avalon Beach. I build small business websites, fix the ones that have stopped pulling their weight, and look after them month-to-month. Shopify, Webflow, WordPress, hand-written — whatever the job needs.

Built. Looked after. Kept honest.

Start a conversation See what we do

No bots. No call centre. No "we'll get back to you in 3-5 business days." It's me, or it's no-one.

  • 1 Person who does the work.
    The one you speak to.
  • 900+ Dimensions in our website audit.
    Every claim reproducible.
  • $297/mo Starting price for monthly care
    of the sites we look after.
  • 2107 Avalon Beach postcode.
    Where the work happens.
What we do

Three jobs, in plain words.

Most relationships start with one of these and grow into the next. The honest answer is sometimes "you don't need us" — when that's true, we say so.

B

Build it.

New websites for businesses that need one done properly. Rebuilds where the existing site is unsalvageable.

The work covers brief, copy, design, build, content load, launch, and the first month of care free. Pricing scales with page count, content, and integrations. Everything is fixed-price before we start — no surprises.

  • ShopifyBoutique stores up to ~500 products. Theme-based or fully bespoke. Email flows, payment, shipping, reviews, search, the lot.
  • WebflowVisually distinctive marketing sites where the client wants to edit content themselves. CMS for blogs, case studies, products.
  • WordPressWhen the client has a real reason to use it. Modern stack, sensible plugins, monitored security, no bloat.
  • CustomHand-written HTML, Astro, or Next.js for sites where speed, accessibility, and clean markup are non-negotiable.
  • CopyPlain, owner-voiced copy that doesn't sound like AI wrote it — even when AI helped. Reviewed line by line.
  • BrandWordmarks, identity systems, photography direction. Modest scope, distinctive output.
  • EmailSPF, DKIM, DMARC at p=reject. Transactional email that lands in inbox. Klaviyo, Mailchimp, Shopify Email.
  • IntegrationsBooking systems, review widgets, search, payment, shipping calculators. Whatever the business actually needs.
M

Look after it.

Sites we own the ongoing relationship for. Updates, copy changes, new pages, security, eyes on it monthly.

The annuity. Most sites we build end up here. Most sites that come in via an audit eventually do too. Monthly retainer buys hours that we don't waste — content changes, new pages, the small stuff that adds up to this site is looked after.

  • Copy changesUpdates to product descriptions, hero text, about pages, FAQs. Usually same-day.
  • New pagesLanding pages, case studies, blog posts, seasonal campaigns. Written, designed, shipped.
  • ProductsAdding products, variants, collections, tags, images. Bulk imports via CSV when you need them.
  • Email flowsWelcome series, abandoned cart, post-purchase, win-back. Set up, tweaked, tested.
  • UpdatesPlugin and platform updates with a human looking. We test before pushing.
  • SecurityMonthly check on headers, certs, exposed paths, vendor CVEs. Quiet when there's nothing to report.
  • PerformanceCore Web Vitals stay green. Image sizes, caching, lazy loading, anything dragging it down.
  • Eyes on itUptime monitored. Forms tested. Email deliverability tracked. You hear from us when something needs attention.

Compliance tier — $497/month for health, legal, financial, real estate, childcare. Includes the regulator-specific checks (AHPRA, FBT, ASIC, ACL, CCYP). 12-month minimum.

A

Have an honest look first.

Not sure if you need a new site, or just need someone looking after the one you have? Start here.

Tell us your domain. Within a day or two we send three specific things on your current site that are worth knowing about — each one verifiable in seconds, each one sourced (the statute, the standard, the published figure). No sales pitch attached.

If you want the full report — 15 to 30 findings, with methodology, remediation, severity, and consequences — there's a paid version for prospects who want the deliverable before committing. Read what's in it →

How we work

A short, deliberate path. No surprises.

Every engagement follows roughly this shape. We send a written summary at the end of each step so there's no ambiguity about what's been agreed.

  1. 01

    Conversation

    A 20-minute call. What you sell, who you sell it to, what the current site does well, what it doesn't. We listen more than we talk.

    ~ 20 min · free · no obligation
  2. 02

    Look

    We run our audit on your current site (or the competitor sites you mention). You get a written 3-finding summary within 48 hours — every claim sourced, every observation reproducible.

    ~ 48 hrs · free
  3. 03

    Quote

    A written quote with scope, price, timeline, and what's explicitly not included. Fixed price for builds and projects; monthly for care. You decide; we don't chase.

    ~ 3 business days · free
  4. 04

    Do the work

    Builds take 2–6 weeks depending on scope. You see progress weekly. Care work happens continuously. We invoice on milestones for builds, monthly in arrears for care.

    2–6 wks build · ongoing care
  5. 05

    Look after it

    Once it's live, we keep it that way. Monthly retainer, eyes on the site, copy and content updates as you need them. The first month after launch is free.

    monthly · 30 days notice either way
Our own scorecard

It would be hypocritical to charge for this if our own site failed it.

Here's what running the same 900+ dimension audit against sdgservices.com.au currently returns. Every line is reproducible from any internet-connected host.

sdgservices.com.au last checked 21 May 2026
  • HTTPS · HSTS · preload-eligible A+
  • Content-Security-Policy strict, self only
  • SPF · DKIM · DMARC all configured, p=reject
  • schema.org markup ProfessionalService, valid
  • Core Web Vitals (mobile) LCP 1.2s · CLS 0.02 · INP 64ms
  • Accessibility (WCAG 2.1 AA) passing
  • Third-party trackers none
  • Information disclosure no .git, .env, readme exposed

How the audit works → · See a real audit deliverable → · We built, audited & fixed a real client site →

A piece of work

What an engagement actually looks like.

Names changed; the work is real. This is the kind of audit-led engagement most relationships start with.

Client
Dental practice
Where
Northern Beaches NSW
Sector
Health · APP-covered
Engagement
Audit + rebuild + care
Audit findings
27 across security, compliance, content
Headline issues
WordPress 5.5.18, no privacy policy, no AHPRA disclosure
Rebuild scope
10 pages, content lift, schema, security headers
Care tier
Compliance, $497/month
Time
3 weeks audit + build, 12-month care commitment
Year
2026

We started with the audit. Three of the findings were urgent enough that they paid for the audit fee in attention alone — a long-EOL WordPress install with publicly-disclosed user enumeration, three named practitioners without their AHPRA registration numbers on the site, and patient contact forms across 15 pages with no accessible privacy policy.

The practice principal asked the same question every owner asks at that point: how did this happen? The honest answer: their previous web developer moved on three years earlier and nobody had taken over.

We rebuilt the site rather than patching the WordPress one, mostly because the audit had surfaced enough plugin-level risk that fixing felt slower than starting fresh. The new site is hand-written, has the compliance disclosures the National Law requires, and is monitored monthly.

Who you'd be working with

One person. In Avalon Beach.

I'm Scott Gilbert. I built and maintain this site. I run SDG from Avalon Beach on Sydney's Northern Beaches. If you commission anything — an audit, a build, a month of care — I'm the person who does the work and the one you speak to.

I won't have the bandwidth of a 20-person agency — that's the trade-off. When I'm at capacity I'll say so and recommend someone else rather than overcommit and disappoint you.

From Palm Beach to Manly I'll drive. Further afield in Sydney is a phone or a Zoom. If you're outside Sydney we can still work together — most of what I do isn't location-specific — but the local-first thing is deliberate. Coffee in Avalon if you're local.

Name
Scott Gilbert
Based
Avalon Beach NSW 2107
Email
[email protected]
Phone
+61 403 501 581
Coffee
South Avalon Beach kiosk, most mornings

If your site might be quietly costing you money…

…it's worth 20 minutes to find out. Tell us your domain. Within 48 hours we'll send three specific things worth knowing. No sales pitch attached.

Start a conversation

Or if you'd rather just have a coffee in Avalon, say so — that's how most of these start anyway.

SDG operates on the unceded lands of the Garigal people of the Eora Nation. We acknowledge their continuing connection to land, waters and culture, and pay respect to Elders past and present.