Website development
Custom WordPress themes and WooCommerce stores. Clean code, semantic HTML, Core Web Vitals and SEO structure from day one.
Sužinoti daugiauECCC community memberPublic sector websitesElementor partner
Fast, secure websites backed by real cybersecurity expertise
We build WordPress and WooCommerce solutions, administer Linux servers, investigate cyber incidents and prepare reports for the Lithuanian NCSC and the EU CSIRT network. Code, infrastructure and compliance from one team.
0+years in practice
0+projects delivered
24/7security monitoring
$ bj-deploy --harden --audit
TLS A+ · HSTS · OCSP staplingWordPress hardened (CIS)WCAG 2.1 AA — 0 errorsMalware scan: clean$ eccc-verify --org bluejuice
ECCC membership verifiedWordPressWooCommercenginxNextcloudWCAG 2.1
ECCC community member
Incident reports to NCSC and EU CSIRT
WCAG 2.1 AA accessibility
webhostas.com infrastructure
What we do
Services
From the first line of code to an incident report — one team is accountable for the code, the server and the compliance paperwork.
Public sector websites
For state and municipal institutions and publicly funded bodies: compliance with general requirements for public websites, WCAG 2.1 AA accessibility, an accessibility statement and documentation fit for a public procurement procedure.
Requirements and processIncident response and NCSC reporting
Breach investigation, malware removal, evidence collection and reporting to the Lithuanian National Cyber Security Centre and the EU CSIRT network.
Sužinoti daugiauLinux server administration
Ubuntu, Debian, RHEL: nginx, PHP-FPM, MariaDB, Redis, fail2ban, UFW, TLS A+, automated backups and monitoring.
Sužinoti daugiauCloud and Nextcloud
A private cloud hosted in the EU: files, collaboration, tasks. Your data stays under your control.
Sužinoti daugiauDesign services
UI/UX in Figma, brand guidelines and accessible colour systems that meet contrast requirements.
Sužinoti daugiauPublic sector
For public institutions — built to the requirements, not around them
A public institution website is not judged on design. It is checked for structure, accessibility, publication rules and security. We treat that checklist as the technical brief.
- WCAG 2.1 AA accessibilityKeyboard navigation, contrast, text alternatives, semantic headings, labelled form fields. You receive an audit report and the text for your accessibility statement.
- Required structureMandatory sections, institutional structure and contacts, legal registers, data protection section, dated news archive.
- Foreign language versionA separate language branch with correct hreflang linking — not machine translation on the same URL.
- Security and complianceTLS, hardened configuration, logging, a backup policy and an incident procedure you can attach to internal rules.
- Handover and trainingDocumentation, administrator training and a maintenance agreement so your team can work independently.
AA
WCAG 2.1 conformance level
24 h
NIS2 early warning
72 h
Incident notification
1 month
Final incident report
ECCC
European Cybersecurity Competence Community
Areas of expertise: Incident Handling and Digital Forensics; Anti-forensics and Malware Analytics.
When it has already happened
A cyber incident: the first hours
Order matters. Cleaning up in a hurry destroys the evidence you will need for the report and the insurer.
- ContainmentWe isolate the affected system, close the active access channel and preserve the current state.
- Evidence preservationServer and access logs, file timestamps, a database snapshot — before any cleanup.
- AnalysisWe establish the attack vector, the scope, whether personal data was reached and whether the code spread further.
- NotificationWe prepare the report for the NCSC and, where applicable, the data protection authority and the EU CSIRT network.
- Recovery and hardeningA clean system, rotated credentials, closed gaps, monitoring and a final report.
Infrastructure
Code and server from the same hands
MB Bluejuice operates the hosting platform webhostas.com. When the same team writes the code and tunes the server, the familiar "that is not our side" stage disappears.
- Tuned for WordPressnginx, PHP 8.x FPM, Redis object cache, MariaDB — configured per project.
- The same security standardsWhat we recommend in audits is what we run ourselves.
- Backups and recoveryDaily backups, 30-day history, verified restores.
- Round-the-clock monitoringUptime and security log monitoring with alerts on anomalies.
$ systemctl status nginx php8.3-fpm mariadb redis
nginx active (running)php8.3-fpm active (running)mariadb active (running)redis-server active (running)$ bj-backup --verify --last
Backup verified · restore 4 minTLS A+fail2banUFWRedis
Ecosystem
Integrations
Payments, shipping, analytics, accounting, cloud — connected to what already runs your business.
Patvirtinta kompetencija
Europos kibernetinio saugumo kompetencijos bendruomenės narė
MB „Bluejuice“ yra oficialiai pripažinta Europos kibernetinio saugumo kompetencijos centro (ECCC) bendruomenės narė. Ekspertinės sritys pagal JRC kibernetinio saugumo taksonomiją:
- Incident Handling and Digital ForensicsIncidentų valdymas ir skaitmeninė kriminalistika — įskaitant pranešimų rengimą NKSC ir ES CSIRT tinklui.
- Anti-forensics and Malware AnalyticsApsauga nuo kriminalistinių metodų ir kenkėjiško kodo analizė.
Oficialus profilis ES atlase
FAQ
Frequently asked questions
If your question is not here, write to us — we reply within one business day.
Do you build websites for public institutions?
Yes. We work to the general requirements for state and municipal institution websites and to the WCAG 2.1 AA accessibility standard. You receive an accessibility audit report, the statement text, technical documentation and administrator training. We can also prepare the technical specification for a public procurement procedure.
What does "reporting to the NCSC" mean?
After a cyber incident we collect the facts — attack vector, timeline, affected data and impact — and prepare the report for the Lithuanian National Cyber Security Centre. Where NIS2 applies to the entity, we work to its deadlines: an early warning within 24 hours, an incident notification within 72 hours and a final report within one month. Where relevant we also work with the EU CSIRT network and the data protection authority.
How much does a website cost?
A brochure site starts from €800, a business website from €1,500 and a WooCommerce store from €2,500. Public sector projects are quoted separately because they include an accessibility audit and documentation. Maintenance and investigation work is €80/hour + VAT.
How long does a project take?
A brochure site takes 2–3 weeks, a business website 4–6 weeks, and a complex store or custom platform 8–12 weeks. Public sector projects need extra time for accessibility testing and documentation.
Will the site be optimised for speed and SEO?
Yes. We use semantic HTML, Schema.org structured data, correct hreflang linking across languages, canonical URLs and Core Web Vitals optimisation. The site is ready for indexing on launch day.
Can you migrate an existing website?
Yes — from Wix, Squarespace, Joomla, Drupal, static HTML and other platforms. We keep the URL structure or set up 301 redirects so existing search results are not lost.
Start with a conversation
Tell us what you have now and what you need. We will say whether it is a one-day job or a project — and what it costs.