Every technical term, in plain language

Core Web Vitals are the three metrics Google uses to judge your site's user experience: how fast the main element appears, how quickly the page responds to interaction, and how stable the layout stays while loading. They factor into your ranking.

• Fast to appear (LCP) — main image or text within 2.5 seconds
• Responsive (INP) — clicks and typing feel immediate
• Stable layout (CLS) — nothing jumps around while loading

HTTP/3 is the newest version of the protocol browsers use to fetch pages. It recovers faster from unstable connections, which matters most on mobile. SSL/TLS is the encryption behind the padlock in the address bar; those certificates are managed and renewed proactively.

• Faster on mobile — less delay when signal fluctuates
• Always encrypted — certificates renew automatically
• Modern standard — good for SEO and for trust

IP here means intellectual property: the source code of your platform. On delivery the complete, clean codebase is transferred to your own environment (GitHub, AWS or Azure). You own it, you can continue with any partner and you are never locked in.

• Full source code — readable React/TypeScript, no black box
• Into your environment — pushed to your own repository or cloud
• No vendor lock-in — any developer can carry on

Data residency is about where your data physically lives. With us the site, database, back-ups and log files stay inside the European Union. That keeps GDPR compliance simple and avoids debates about transfers to third countries or US legislation.

• Stored in the EU — database, files and back-ups stay European
• No Cloud Act exposure — no US jurisdiction over your data
• Demonstrable — usable in your GDPR register and audits

MCP (Model Context Protocol) is the open standard that lets AI assistants talk to your systems safely. Your platform exposes its data and actions through that standard, so an AI agent can query data or run tasks within strict permissions — no custom integration per tool.

• AI reads your data — an assistant can consult your own records
• Autonomous sync — recurring data tasks run without manual work
• Role-based access — each agent only sees what is allowed
• Future-proof — new AI tools connect without a rebuild

A WAF inspects every request to your site before it arrives. Known attack patterns — SQL injection, cross-site scripting, exploitation of software flaws — are blocked at the network edge, ahead of your application.

• Injections blocked — attempts to manipulate your database
• Known exploits — rules are updated continuously
• Logging — every block is traceable for audits

Rate limiting caps how many requests one visitor or system may make per time window. Your site stays available to real customers even when someone spams a form, guesses passwords or tries to scrape your data.

• Anti-abuse — form and login spam is throttled
• API protection — integrations stay within agreed volumes
• Smart rules — limits per path, IP or user group

An API integration lets your website exchange data automatically with another business system, without copy-paste. "Active" means the connection runs permanently and is monitored: a change in one system appears in the other within seconds. Two such integrations are included. The examples below are illustrative.

• Recruitment system (ATS) — vacancies and applications in sync automatically
• CRM — leads and customer data pushed both ways
• Inventory or ERP — prices and stock live on the site
• Monitoring included — failures are detected, logged and recovered

A large share of internet traffic is automated. Bot Management tells the difference: search engines and monitoring get through, while scrapers, spam bots and AI crawlers copying your text are stopped.

• Content protected — unwanted AI scrapers are kept out
• Clean statistics — bot traffic does not pollute your analytics
• Google still welcome — legitimate crawlers pass through

In a DDoS attack thousands of infected machines flood your site with requests until it becomes unreachable. Mitigation recognises that pattern at the network edge and filters the malicious traffic out while real visitors carry on.

• Automatic — attacks are neutralised without intervention
• Unlimited volume — even large-scale attacks are absorbed
• Real visitors stay — filtering happens ahead of your servers

Frequently visited pages are stored as ready-made copies on servers close to your visitor ("the edge"). That copy is served instantly without hitting your database every time — faster for visitors and up to 90% less load during traffic peaks.

• Instant loading — the page comes from the nearest server
• Less database work — lower cost and more stability under peaks
• Automatic refresh — new content replaces the copy immediately

Deliverability is the chance your email actually lands in the inbox instead of spam. It depends on correct domain settings (SPF, DKIM, DMARC) and on the reputation of the sending IP address. A dedicated IP means you do not share that reputation with unknown senders.

• Inbox, not spam — domain authentication configured correctly
• Own reputation — dedicated IP, not shared with third parties
• Insight — opens, clicks and bounces are measurable

SEO gets you found in Google. GEO does the same for AI answer engines such as ChatGPT, Perplexity and Gemini: your information is structured and phrased so those models can cite your business correctly as a source.

• Structured data — schema.org so machines understand context
• Citable answers — clear question-and-answer blocks per topic
• Accessible to AI — correct crawl instructions and attribution

The network detects where your visitor is before the page even loads and serves the right version immediately: language, currency, pricing or branch. This happens at network level, so no slow redirect and no flicker.

• Right language instantly — no redirect, no wrong first impression
• Regional content — pricing, terms or branch per country
• Fast — decided at the network edge, not in the browser

With SSO your staff sign in using the corporate account they already have (for example Microsoft Entra ID or Okta). No extra passwords, and when someone leaves the company their access to your platform ends automatically.

• One login — the same account as mail and intranet
• Automatic offboarding — access ends the moment someone leaves
• Matches IT policy — including your organisation's two-factor setup

AVIF and WebP are modern image formats delivering the same quality at a fraction of the file size. Your photos are converted automatically and scaled per screen at the network edge — up to 70% faster loading with no visible quality loss.

• Automatic format — each device gets the fastest image type
• Right dimensions — no desktop-sized photo on a phone
• No manual work — you simply upload the original photo

By default the internet does not always pick the fastest path between visitor and server. Smart Routing continuously measures network routes and sends each request along the fastest one — up to 30% faster loading, especially on mobile and from abroad.

• Shortest route — traffic travels via the nearest network hub
• Avoids congestion — busy or slow internet exchanges are bypassed
• Stable on mobile — less packet loss and stuttering on 4G/5G
• Measurable result — visible in your Core Web Vitals report

A score and checklist showing how ready your data and platform are for AI. In practice: is your content structured, are relationships between records explicit, and are permissions properly set? The higher the score, the faster you can add an AI assistant later without a costly migration.

• Structured data — information lives in fields, not loose text
• Clear relationships — customer, order and document are linked
• Permissions in order — an AI agent only sees what it may
• Quarterly report — you see where the gains are

The OWASP Top 10 is the international reference list of the ten most common web application security risks, from injection to broken access control. We build and test against that list and document the results for your compliance file.

• Built to the standard — the ten risks are structurally covered
• Tested — penetration tests and automated scans
• Documented — audit trail for ISO and GDPR files

A new version is built and tested alongside the live site first. Only when everything checks out is traffic switched over in one move. Visitors never see a maintenance page and active sessions are not interrupted.

• No offline windows — updates are possible during business hours
• Tested before live — every release runs in a copy environment first
• Instant rollback — the previous version returns within seconds

5 page types, no page limit. Every type is a template: one Services template can serve an unlimited number of service pages, one News template an unlimited number of articles. So you choose 5 kinds of page structure — how many pages you create within them is up to you. The examples below are illustrative; the actual templates may differ per business.

• Home — landing page with your core offer and USPs
• About us — story, team and local roots
• Services / Range — one template, unlimited service or product pages
• News / Updates — one template, unlimited articles and updates
• Contact & Opening hours — directions, form and current hours

10 page types instead of 5 — and still no page limit. Every type is a template that serves unlimited pages: one region template can carry dozens of local landing pages, one FAQ template hundreds of questions. The examples below are illustrative; the actual templates may differ per business.

• Home — landing page with your core offer and USPs
• About us — story, team and local roots
• Services / Range — one template, unlimited service or product pages
• News / Updates — one template, unlimited articles
• Contact & Opening hours — directions, form and live hours
• Region / local landing page — e.g. "Bakery in Hasselt" — unlimited cities or districts
• FAQ / Knowledge base — Q&A template, strong for Google and AI search engines
• Work / Portfolio — projects, cases or photo reports per item
• Careers / Vacancies — one template, unlimited open roles
• Request / Order module — quote, booking or order page connected to the database

A heavy integration is a realtime, bidirectional connection with a business-critical system, including data mapping, error handling and monitoring. Four are included. The examples below are illustrative; the right connections differ per organisation.

• ERP (SAP, Microsoft Dynamics) — realtime sync of items, stock, pricing and orders
• CRM (Salesforce, HubSpot Enterprise) — leads, accounts and pipelines connected both ways
• ATS / HR (Teamtailor, Recruitee, SuccessFactors) — vacancies and applications automatically in sync
• PIM / DAM — product data and media managed centrally, served automatically
• Accounting & invoicing (Exact, Odoo, Teamleader) — quotes, invoices and payments without manual work
• Identity & SSO (Entra ID, Okta) — secure sign-in aligned with your IT policy
• Scheduling, logistics or custom API — bookings, tracking or an internal system via API or MCP

A headless CMS is a content system decoupled from the website itself. Your text, images and pages live in a separate, editor-friendly environment and are delivered to the site through an API. The benefit: editors work in a visual preview, developers keep full control over design and performance, and the same content can later feed an app, kiosk or AI assistant. The points below are illustrative; the actual setup differs per organisation.

• Separate editing environment — content is managed outside the code, with no risk of breaking the design
• Realtime visual preview — editors see exactly how a page looks before publishing
• API-first delivery — the same content powers website, app or AI assistant
• Roles and workflow — drafts, revisions and approval per editor or team
• Multilingual content — translations managed side by side in one structure
• No vendor lock-in — your content model and exports stay yours, independent of the vendor