Approaching a website development project can be daunting if you’re unfamiliar with the process and unsure what to expect. In this article, we’ll provide a detailed overview of the web development process to help you understand what’s involved, making it easier for you to approach a project yourself and avoid any pitfalls.
Your Role as the Client
If you read our recent series of in-depth guides through the end-to-end process of web design, you’ll know that process will usually involve a lot of collaboration between you, your team members, and the agency you’re working with.
Once you’ve been through that process and your design is complete, you’ll need to move to the development stage of the project to bring your designs to life.
You’ll likely have less involvement in the development stage, and less collaboration will be required, so your role will primarily be to sit back and relax while a team of skilled developers do their thing.
Depending on the project size, complexity and project management approach, you may have some touch-points with your agency partner throughout the process. If you are taking an Agile approach, this may include sprint retrospective meetings, or if you are working in a different way, this may just include short demonstrations, walk-throughs of certain pieces of bespoke functionality, or it could just be allowing you to start familiarising yourself with different features as they’re being built.
A Smooth Handover from Design to Development
One of our core qualities here at SoBold is ensuring the design and development processes work closely together. That’s achieved by not only having a very integrated design and development team in the office, but also ensuring we hold a thorough, detailed handover meeting between the designers and the developers at this stage. This serves as a key aspect of every project we work on.
The purpose of this is to give the developers a full understanding of the website or platform they need to build before any work begins, reducing the risk of error and accelerating the delivery time.
Every agency will have their own approach to this. It should usually involve the project designer(s) and project manager(s) walking the development team through everything that took place during the design process and explaining the thought process behind the decisions they’ve made. They’ll also give suggestions and guidance for how the design might be best approached from a development point of view.
Any questions the developers have about their task at hand can be answered during the handover meeting, and at any time throughout the development process, allowing the development work to flow efficiently and effectively.
The Benefits of Working with a Full-Service Web Design and Development Agency
It’s so important to align your web designers and developers, because, more often than not, there are fundamental differences in how they think and approach their work. If you decide to work with an out-and-out web design agency to design your site, with a separate development agency building it, you may encounter gaps in understanding between the two processes.
Working with an agency partner that has specialist expertise for both disciplines in-house will ensure your website is delivered on time, within budget, and directly aligned with your requirements. Having designers and developers in the same team who can share knowledge throughout the processes will almost always result in the delivery of a higher quality project too.
Building Your Website
With the handover complete, the developers will begin building your website.
Most development agencies will likely start with setting up the base. This involves setting up the base styles of the site which includes and is not limited to default colours, typography styles and global components – including button and link styles.
Once the base is set up, your developers would typically move onto the navigation and footer set up before moving onto building out all the page templates and blocks in the design should they be taking a block based approach.
Part of this process will often involve integrating certain components of your site with other systems you use within your business.
Peer Reviews and Testing to Maintain High-Performance Standards
It’s important for your agency to review and test internally all the elements that have been built, so any bugs are identified and rectified as early as possible.
Again, different agencies will have differing approaches to this. Here at SoBold, we leverage the size and experience of our team to conduct a thorough peer review process on every single component we build.
Following this internal review process, you’ll usually be given a link to your site in a staging environment.
All your content will have likely been carried over from your existing site and redirects should also be in place so that when you push the site live, any old redundant links will be redirected to the appropriate page on your new site.
If you have any live marketing campaigns running, it’s important to ensure your development agency and your marketing team (or agency) are in regular communication prior to this, so they can keep your campaigns updated in line with your new site’s launch.
Smooth Sailing Post-Launch
Once your new website is live, you’ll likely have a period of time whereby your agency will be on hand to fix any bugs that relate to the content on the new site. Here at SoBold we work with our clients for a period of 30 days following the launch of their sites, and any ongoing support beyond this 30-day bug-fix window will require a separate maintenance agreement.
Your agency should also go through the back-end of your platform with you, so you know exactly how to make changes to your website. For the most part, agencies will understand how important it is for you to be able to manage the site yourselves internally, and this is something we believe is crucial for you to be shown in detail at the end of the development process.
Would you like these insights straight to your mailbox?
- Auto-updates – When your platform’s software is automatically updated, changes in the code can cause new security weaknesses to arise.
- Plugins – Using WordPress plugins from untrustworthy sources, or neglecting to update and maintain your plugins properly, can also cause security issues.
- Review the results and analysis of any previous tests (if there are any)
- Define the scope of the testing, including which tests will be performed
- Gather all necessary data and information on the system to conduct the testing
- Determine the criteria of success or failure for the tests.
- Use automated tools to scan for vulnerabilities and identify weaknesses
- Attempt to exploit the identified weaknesses
- Repeat the tests with different types of user roles and permissions
- Measure the outcomes against criteria for success or failure
- Create a report on the outcomes and results of the tests.
- Review the reports and analyse the results
- Remediate and resolve the vulnerabilities that were able to be exploited
- Re-test the vulnerabilities to ensure remediation was successful.
- Read our comparison between Sitecore and WordPress here.
- Read our comparison between Drupal and WordPress here.
Latest from agency
24 November, 2022
SoBold obtain Skilled Worker Sponsorship Licence
SoBold are delighted to announce that we have obtained a sponsor licence in order to sponsor international skilled workers to come and work at SoBold.
SoBold have always put heavy emphasis on hiring the best global talent for our needs, and we have strengthened our ability to do this by obtaining a Skilled Worker Sponsorship Licence.
With all sponsorship licences that the Home Offices grants they need to be reassured that the sponsors can live up to the “significant trust” that the department places in them. The Home Office further made checks that SoBold is a “honest, dependable and reliable” workplace, and capable of meeting the responsibilities that it expects from sponsors.
Since being granted our Skiller Worker Licence, we have been fortunate enough to put it to use to hire two new team members.
Anna de Moraes, joined SoBold, from Portuguese company, SpringParrot. Anna had been able to work remotely, and was living and working from the UK, when she got in touch with SoBold. Anna, who is natively from Brazil, said of the process:
“The steps were pretty clear and the whole process was quite simple. I’ve had friends waiting years for their visas to be approved while we were able to complete everything in a short period of time! I was already excited to start and, in a blink of an eye, I was finally part of the SoBold team!”
More recently, SoBold hired Santosh Gajera as a Back End WordPress Developer. Santosh has relocated from India in order to provide his services to SoBold. When asked about the process behind him getting his Skilled Worker VISA granted, Santosh said:
“To keep my IT career moving forward, I needed sponsorship from an organisation that sponsored my visa. SoBold has been an invaluable help in obtaining my Tier-2 (Skilled worker) visa. I am very thankful to their hard work and professionalism. My documents were handled very scrupulously by them, and they provided full support throughout the whole application process . I got my visa approved in two days, which is amazing, and they handled everything for me.”
SoBold worked with all-in-one digital platform, Nation Better in order to achieve our sponsorship licence and the process was streamlined, affordable and transparent.
SoBold already have a diverse talent pool, with staff from all over Europe, and with the help of Nation Better, we have been able to improve the way in which we hire international talent and open up opportunities further afield. We look forward to continue growing our team with exceptional overseas talent and have access to a wider talent pool.
SoBold Managing Director, Will Newland said:
We are absolutely delighted to welcome both Anna and Santosh to the SoBold team. Without our Sponsorship Licence we would be missing out on a large pool of talent that is the future of our business. We very much look forward to continuing to use our Sponsorship Licence to our advantage and giving skilled employees the opportunity to come and work here at SoBold.
For more information on what current vacancies we have, please visit our website careers page.
Would you like these insights straight to your mailbox?
Latest from agency
8 December, 2022
Sam Phillips and Will Newland interviewed by Cloudways
Technical Director, Sam Phillips and Managing Director, Will Newland were interviewed by Brent Weaver at Cloudways.
SoBold has been working with Cloudways since 2019 to help host development environments for all of their clients.
You can learn more about Cloudways, Managed Cloud Hosting services by visiting their website here.
See what they had to say in the video below.
Would you like these insights straight to your mailbox?
Development
14 July, 2023
A Guide to Penetration Testing: Strengthen Your Website Security and Minimise Risk
Penetration testing, often abbreviated as pen testing, is an essential process to ensure you maintain a safe and secure website. But what exactly does pen testing involve, and how can you rest assured your agency partner is covering all potential vulnerabilities for you?
This article will provide a detailed guide to penetration testing, helping you minimise your security risks and ensure your website is fully protected.
In a recent series of articles published in our resource library, we provided an in-depth explanation of the end-to-end process of building a high-performance, enterprise-grade website. (If you’d like to read that series first before learning about pen testing, you can start here).
After you’ve worked with your agency partner to successfully build your website, you’ll also need to ensure your site is protected from cyber security threats. With that in mind, you should understand the important role that pen testing plays in effective website security and maintenance.
What is Penetration Testing?
Penetration testing is a form of website testing that’s used to identify security vulnerabilities When conducting pen testing on your site, your agency will simulate a range of cyber attacks that could be used by cyber criminals or malicious software (malware).
The purpose of this is to identify security weaknesses within your site and take action to prevent them from being exploited in the real world. This approach goes beyond basic tests, as it doesn’t just list the vulnerabilities, it examines how they could be exploited and helps to prevent that from happening.
Why is it Crucial for an Agency to Conduct Penetration Testing?
Website security is critical in today’s digital business landscape. Cyber security threats have become highly intelligent and sophisticated, now capable of penetrating even the strongest security networks.
For instance, global technology giant Acer was the victim of a cyber security attack that demanded a ransom of $50 million USD in recent years.
The outcomes of a cyber attack on your website could be catastrophic, either through sensitive data being stolen, lengthy losses of business continuity, or even reputational damage.
Remember, your site’s security isn’t just vital to you as a business, it’s also something your clients need assurance with when they agree to work with you. You should be taking as many proactive steps as possible to ensure your security measures are rigorous enough to match high levels of risk.
Covering All Bases for Robust Security (in WordPress)
It’s useful to be conscious of the common security weaknesses and pitfalls cyber criminals typically aim to take advantage of.
Security vulnerabilities can be created when your website is running on outdated versions of your platform, or if something hasn’t been configured or integrated properly. Other common pitfalls include weak authentication measures and insufficient protection from the perspective of your users.
With platforms like WordPress, there are some areas in which less experienced agencies could allow security vulnerabilities to creep in as well. For instance:
This is one of many reasons why it’s important to work with an experienced agency partner who has proven platform-specific knowledge and expertise. Your agency should know your CMS of choice inside out, and should therefore be well aware of all the most common security pitfalls and targets for cyber attacks.
What Does Effective Penetration Testing Involve?
To conduct pen testing, your agency’s security experts will run through a process that attempts to penetrate your site’s security measures.
This is usually done in stages, as follows:
1 – Planning and Preparation
2 – Running the Tests
3 – Post-Testing
The Benefits of Thorough Penetration Testing
Working with an agency partner who can support you with ongoing pen testing is a necessary step towards gaining enterprise-grade security for your website.
Technology changes so quickly today. Your platform receives updates regularly, your site is always growing, and cyber criminals are constantly finding new ways to breach your defences and gain access to your data. Penetration testing allows you to keep the pace with new emerging vulnerabilities.
Conducting regular pen testing can also help improve client relationships and create competitive advantages as well. In certain industries, a demonstrable commitment to security will be greatly appreciated by your target audience. This can help to differentiate you from the competition and provide the trust required to attract more prospective clients to work with you.
Website Security is a Never-Ending Battle
While every business with a website faces tremendous security risks today, this is a proven process that can help to minimise that risk and give you the confidence you need in your site’s security.
Any agency partner you work with should have the knowledge and expertise to understand the importance of pen testing, and should insist on making this an integral, ongoing part of your site’s maintenance.
Would you like these insights straight to your mailbox?
Digital Business
5 January, 2023
WordPress vs Umbraco – Comparing Both Content Management Systems
When you’re tasked with selecting a content management system (CMS) for your business, you’ll likely appreciate that the number of viable options available can make things complicated. From Drupal, to Umbraco, to WordPress, there are plenty of quality technology platforms to choose from.
But finding the CMS that’s most suitable for your specific business is an important process that requires careful consideration and a lot of research. Of course, devoting sufficient time to this can be difficult when you have dozens of other priorities on your mind.
To ease this challenge for you, this article will make the process of choosing between two popular CMSs much simpler. In this new content series, we’re providing direct, objective comparisons between some of the leading options for CMSs today.
This second article of the series will look at the comparison between Umbraco and WordPress, and you can find links to the rest of the articles in this series at the bottom of this page.
The Platforms
A CMS is a software-based technology platform upon which you can build and manage websites and applications. While most CMSs are similar in terms of their fundamental functionality, they each have varying levels of complexity and development requirements.
Umbraco
It’s important to start by noting that Umbraco is a platform intended specifically for developers with a certain level of technical proficiency.
When you first set up Umbraco, it won’t be approachable for the average marketing manager or any other non-technical users. Initially, much of the key functionality expected from a CMS will be missing. The purpose of this is to encourage you to spend time and money developing the platform. Often, this has been known to rule out Umbraco as a viable option for a lot of businesses.
To get full value out of Umbraco, you’ll almost certainly need to hire someone – either an agency partner or an in-house developer – to help you get things up and running.
Having said that, no matter which CMS you choose, you’ll be significantly better off working with a platform-specific web development agency supporting you. For most businesses, an agency plays a crucial role in helping you implement your new system and develop your site (but more on that later).
WordPress
WordPress is the polar opposite of Umbraco, in the sense that it’s designed so that anyone – even if you have no previous content management experience – can use it easily. That’s why it’s the most popular CMS available today, with around 45% of all websites on the Internet built using the platform.
Almost everything you need to manage the day-to-day responsibilities of your website comes readily available in the software, making it much more suitable for a wider range of businesses.
This allows you to begin building immediately and facilitates a quick time-to-market for your websites and applications. WordPress’s rich, dynamic features that come pre-existing with the platform “out-of-the-box” are to thank for that.
Content Management and Usability
You should consider ease-of-use as a key indication of whether or not you want to invest in a CMS. If a CMS doesn’t offer simple, intuitive usability, you’re probably better off avoiding it.
Umbraco’s Usability
As mentioned above, in its initial state, Umbraco can be very difficult to work with for the average user. It’s mostly intended for more technical users who have coding skills or some development experience to build the infrastructure.
However, once you’ve invested sufficient time and money into tailoring the platform to your own preferences, it becomes a great tool for publishing and editing content on a website. Umbraco has a wealth of features that allow you to create high quality websites and dynamic web pages.
On a side note, if you’re a Microsoft user, you’ll be pleased to see some similarities in the structure of Umbraco’s user interface (UI).
WordPress’s Usability
WordPress is far more straightforward when it comes to usability. It provides you with a convenient, efficient user interface (UI) that allows seamless publishing, management, and editing of content on your sites.
It’s simple editing content on a page-by-page basis in WordPress, which saves you valuable time, with a handy block-based design.
The ease-of-use makes it possible to share responsibilities across your team, even if some of you don’t have any previous experience with a CMS, unlike the more technical Umbraco platform.
Customisation
Customisation with Umbraco
Umbraco is known for being highly customisable and flexible. It’s best used as a clean slate for developers to tailor to the business’s requirements. However, this isn’t easy to do for the average user.
As mentioned earlier, Umbraco isn’t suitable for the average CMS user in its initial state. Unlike most CMSs, you’re required to spend some time customising Umbraco in order to make it into a platform that’s approachable and easy-to-use. Once you’ve done that, however, Umbraco can become an excellent CMS with great content editing capabilities.
Customisation with WordPress
WordPress allows you to customise it to your own liking as well. The difference here is that you don’t need to change much about WordPress’s set of tools and features before you can begin using it comfortably.
This allows you to create quality content from day one, with the freedom and flexibility to make adjustments to the platform as and when you require. WordPress is also an easier platform to upgrade with custom features due to the quality of its community-sourced plugins.
How Secure is Each Platform?
Cyber security is becoming a greater concern each day for businesses. Choosing a platform that delivers robust security should be a top priority, so you can have full confidence in the protection of your data.
Umbraco’s Security
Umbraco comes with a high level of in-built security. The software is based on Microsoft’s .NET platform, which gives it support from Code Access Security (CAS). Working alongside that CAS, Umbraco provides identity-based security, and that makes it considerably more secure than the average CMS.
Having said that, you shouldn’t let this act as an excuse for your agency partner to take security for granted. Every web development project should be approached with security at the core, no matter what in-built protection the platform has.
It’s also important to note that Umbraco is an open-source platform, meaning a community of developers regularly creates updates and new features within the software. This means that any new additions should be tested carefully for security in case they create new vulnerabilities.
WordPress’s Security
While it is generally very secure, WordPress is another open-source platform backed by an active developer community. It’s important to be cautious of the raft of new features, updates, and plugins that are regularly released.
From a security perspective, be mindful of plugins, both in terms of where they come from and ensuring they’re correctly tested, maintained, and updated. For any CMS, these issues are best left to an experienced agency partner who has the expertise to minimise these risks for you.
Aside from that, WordPress does offer enterprise-grade security, with organisations like globally renowned pharmaceutical company Hutch Med and leading venture capitalist firm Balderton Capital using it today.
How Scalable is Each Platform?
Scalability should be another important part of your criteria when selecting a CMS. Fast, agile expansion is crucial for the platform, just as they are for your business as it grows.
Therefore, you need your digital infrastructure to be able to scale cost-effectively with more pages, additional functionality, and perhaps even more sites.
Scalability with Umbraco
Umbraco’s scalability is one of its strengths. With Umbraco, your site can seamlessly evolve as your business grows and your requirements change.
It’s especially useful for teams that need to manage a high volume of pages simultaneously, making it very suitable for large businesses.
Scalability with WordPress
In the past, WordPress mistakenly had a reputation among some for being most suitable for smaller businesses. However, its excellent scalability proves that to be nothing more than a myth.
Just like Umbraco, WordPress is agile and scalable enough to grow alongside your business and adapt to your changing requirements.
Cost and TCO
A CMS is a big investment, and should be considered a long-term one. In order to ensure you’re achieving a strong return on investment (ROI), it’s helpful to find a platform that offers good value and a low total cost of ownership (TCO).
When assessing this, it’s important to factor in costs such as hosting, licenses, agency fees, maintenance, bespoke development, and more.
Umbraco’s Up-Front Work and Ongoing Costs
Because it’s open-source, Umbraco can be free-to-use.
However, as mentioned earlier, it’s a platform that requires a great deal of technical expertise and initial development work. That will typically involve longer timelines with your agency than other CMSs, which inevitably mean high costs. Because it’s a complex platform, you’ll also face higher costs whenever you need to develop new functionality or work on integrations.
WordPress Value and TCO
WordPress comes with a far lower TCO than most other CMS options. Its ease-of-use and flexibility out-of-the-box make it a very cost-effective platform.
WordPress licenses are free, so your implementation costs would be limited to just hosting, agency fees, and post-deployment support.
Any plugins or extensions you want to apply to the platform will be licensed and paid for separately, but it’s unlikely you’ll need to add many new capabilities because it’s such a feature-rich platform by itself.
Developer Communities
If a technology platform is supported by a strong community of developers, that will be highly beneficial to your business. Dedicated users from around the world work hard to continuously create improvements, additions, and updates to help the software become the best it can be.
Umbraco’s Community
Umbraco has been around since the year 2000, making it one of the oldest CMSs. That means it’s had a long time for a large, skilled community of developers to grow around it.
As touched on earlier, Umbraco is built on a Microsoft-based infrastructure, using a C# framework, and is the most popular platform of this kind.
However, it’s important to note that Umbraco is facing some decline. More popular platforms, like WordPress, gaining widespread adoption have seen developments with Umbraco slow down in recent years.
WordPress’s Community
WordPress has a healthy global community devoted to constantly improving the platform.
WordPress developers are renowned for their creativity, producing a wealth of innovative new themes and plugins that can be used by any business with ease.
The WordPress community also regularly holds free events to help people learn more about how to use the platform. For instance, WordCamp is a non-profit event that has been running since 2006 across several continents.
The Important Role of an Agency
As touched on throughout this article, another factor which will influence the success of any projects with your chosen CMS is a development agency.
When finding the right CMS is such a challenge by itself, many businesses underestimate the importance of finding the right agency partner to support you with your CMS.
But as mentioned earlier, how well you handle critical aspects of the platform like security, testing, usability, and even your TCO are often determined by your agency.
With Umbraco, all the platform’s functionality has to be custom coded, which makes development time in the back-end longer than most businesses expect. This also makes Umbraco difficult to work with internally, as well as for any maintenance and updates. When working with an agency, this will see your costs increase when compared to WordPress technology.
Whichever CMS you pick, they’re all considerably easier to use, and to achieve healthy ROI, with a specialist partner supporting you. Finding an agency with the right experience and expertise to help you unlock the full potential of your platform should be another important part of your overall decision.
Making Your Decision
So, how do you take all these comparisons and decide which CMS is right for your business?
In all honesty, both Umbraco and WordPress are both good options that would work well for most businesses. Although, it is generally accepted that Umbraco is a less approachable platform than WordPress unless you have technical skills within your team.
In order to determine which one will be more suitable, it’s useful to look at each of the characteristics listed in this article in relation to your unique requirements and business needs.
Remember that every business, and every web development project, is different. Think carefully about your specific strategic objectives, budget, users, technical specifications, and any other important factors. That should make it clear which CMS is the better choice to deliver what you’re looking for.
If you need more help in your evaluation of the various CMS options:
Would you like these insights straight to your mailbox?
Latest from agency
3 August, 2022
Celebrating 3 years with Leonardo Esposito
A fresh-faced Leo joined SoBold in August 2019, with a big booming smile and speaking in broken English. It was immediately clear how driven he was to learn and pick up new skills and it was a no-brainer to offer him a job to join our development team.
For much of his first year at SoBold, Leo was glued to Google Translate to try and properly understand the tasks he had been set, but each and every time the output of his work would be the same, outstanding.
As Leo’s English picked up, as did his confidence and skill-set and he made it clear that he wanted to focus on Back-End Development and he really wanted to take SoBold forward. Leo championed innovation in our development approach and much of the workflow we do today has been driven by Leo’s desire to set the highest of standards.
He is a key figure at SoBold and we are very fortunate to have him.
We caught up with Leo to find out more about what he get’s up to in his day-to-day life!
At what point in your life did you decide to become a developer?
During middle school, I tried to learn how to make games, which led me to development. I started exploring different languages and realized I really liked learning the syntax of as many languages as I could. Eventually, I got into web development, and since then I have tried to expand my knowledge of web development languages, trying out new frameworks, and both front and back end sides.
Describe your typical day
As of now I’m trying out double gym days, which means an early wake up (5.30am), gym at 6am, and finishing at around 8am. Then I go to work, have my day, and when I finish I go home and back to the gym. When I get back home it’s circa 8.30pm, so I have dinner, watch something on Netflix (not too much otherwise I end up snacking), then go to my room, and if there’s time and I’m not too tired I play piano, otherwise I go to bed ready to do it all again.
What’s your favourite project to date
Favourite project to date is Rede partners
Any advice for junior developers?
Never stop learning, be curious, and be always ready to challenge yourself, and question what you do. Change your way of doing things if someone else out there is doing it better.
If you had to change careers what would you do instead?
Theoretical Physicist or Volleyball coach
What was your most recent challenge and how did you overcome It?
Hit a plateau in terms of motivation, but managed to overcome it by getting less on my plate, and focusing on meaning, eventually, it became better.
What’s your favourite thing to do outside of work?
Workout, play music (piano, guitar), play video games (fav ones are Skyrim, Horizon Forbidden West and Fallout)
How do you think the designer/developer relationship could improve?
The main thing is communication and chemistry, once those are there the relationship improves by itself.