Case studies
Six projects,
start to finish.
Three hacked WordPress sites cleaned and locked down, a website rebuild with SEO for a US installer, and two products we built ourselves: a custom AI application and a WordPress security plugin.
WordPress hack recovery case studies
Malware, spam pages and backdoors removed, then the way back in closed. If your own site is showing signs, start with hacked WordPress site help.
Wone8 Estates
Hundreds of injected spam pages removed from the database and files, the site locked down, and Google asked to re-crawl.
Read the case study Malware removal AI scanFound what a manual search missedSafety-training provider
A fake Google CAPTCHA locked every visitor out. A manual search missed the script; an AI-assisted scan found it.
Read the case study Backdoor removal 9 + 7Hidden shells and fake admins founddb89foundation.com
A WordPress backdoor in three places: nine disguised PHP files, seven administrator accounts the owner never made, and a login token in the database. Found by checking every file against WordPress.org's official copies.
Read the case studyWebsite redesign and SEO case study
A full rebuild planned around what buyers search for, done as part of our website redesign service.
Products we built ourselves
Not client work, and labelled that way: a custom application and a WordPress security plugin, built, tested and run in-house.
AI outreach platform
An AI system that researches a business, writes to it and reads the reply, and throws away any fact it can't trace back to its source.
Read the case study Our own product 13Attack checks that prove each protectionSecureLite Security
The free WordPress security plugin we built and published on WordPress.org: 529 bad reviews of other plugins read, a cloud service deleted, six of our own bugs fixed, and a scanner rebuilt after a real hack.
Read the case study Your siteYour site could be the next one.
Every engagement starts the same way: a free written assessment of where your site stands today, and what would make the biggest difference first.
Get the free assessmentResults at a glance
Website maintenance case study results,
with the source of every number.
Every figure below is already published in its case study. Where we don't have an exact count, the table says so.
| Case study | Problem | What we did | Result | Where the number comes from |
|---|---|---|---|---|
| The Stairlift Company | A site that only showed up for its own name | Rebuilt it for older readers and planned it around local searches | Impressions 364 → 16,900 and clicks 9 → 103, last six months vs the six before | The client's Google Search Console |
| db89foundation.com | A WordPress backdoor in three places | Checked every file against WordPress.org's official copies, then the users table and the database | 9 disguised PHP files and 7 administrator accounts the owner never made, found | File checksums against WordPress.org; the site's database |
| Wone8 Estates | Japanese keyword hack: fake product pages indexed under the domain | Cleaned the database and the files, closed the ways back in, asked Google to re-crawl | Hundreds of spam pages removed | Google's index of the domain; not an exact count |
| Safety-training provider | A fake Google CAPTCHA locked every visitor out | An AI-assisted scan of the site's source, after a manual search found nothing | The hidden script found and removed | The scan of the site's own files |
| AI outreach platform | Our own product | Built a system that researches a business, writes to it and reads the reply | Any fact it can't trace to its source is thrown away | Built and run in-house; not client work |
| SecureLite Security | Our own product | Built a free WordPress security plugin and published it on WordPress.org | 13 harmless attacks fired at the site to prove each protection | The plugin's own attack checks; built in-house |
The format
What every case study
shows you.
If we can't show these things, the case study isn't published here.
See how we work
The services behind
these results.
Who you're dealing with
A name and a face,
not a contact form.
You're handing someone the keys to your website. You should know who they are.
Naveen Kumar
Founder & lead engineer · Based in Chennai, India, working 9am–6pm US Eastern with clients across the US, UK, Europe and Australia
I built and ran WordPress, WooCommerce and custom-coded sites for clients directly for years before starting PixelGravitas — writing the code, managing the servers, staying on call when something broke. If your site goes down, you're talking to the person who fixes it, not a support queue. More about how I work →
Questions, answered
Website maintenance case studies:
common questions.
Are these website maintenance case studies about real clients?
Yes. Each client study is one real engagement. Clients are named with their permission, or described by sector when they asked not to be. Two of the six studies are about products we built ourselves, the AI outreach platform and the SecureLite plugin, and both are labelled that way.
Where do the numbers come from?
From the client's own Google Search Console, from checking every file against WordPress.org's official copies, or from the site's database. Each study and the results table above name the source. Where we don't have an exact count, we say so instead of guessing.
Why are two of the case studies your own products?
Because they show how we build and test software, not only how we clean up after others. SecureLite's scanner was rebuilt around what we found in the db89foundation.com backdoor cleanup, and the AI outreach platform drops any fact it can't trace to a source.
Can my site be a case study?
Only with your permission, and only after the work is done and measured. Every engagement starts with the free website assessment.