Skip to content
Red and blue glass and ceramic content blocks snapping into a browser window

WordPress expertise

Custom WordPress sites, secured on AWS

We design and build WordPress sites for healthcare groups, investment firms and consultancies. Then we host and maintain them on AWS: anti-DDoS, web application firewall, tested backups, 24/7 monitoring and application maintenance.

Work

WordPress sites in production

Healthcare, private equity, consulting: a selection of WordPress sites built by VOID, which also hosts and maintains them. Hover over a screenshot to scroll through the whole page.

(hover to scroll the page)

Elsan Prévention Entreprises website, home page on a computer
Elsan Prévention Entreprises website on a smartphone

Workplace health

Elsan Prévention Entreprises

The Elsan group's workplace health prevention offer for companies: awareness sessions, health checks, screening and vaccination, with an online quote request.

Hosted and maintained by VOID

  • WordPress
  • Elementor
  • Online quotes
Visit the website Elsan Prévention Entreprises
Montaigne Santé, Elsan website, home page on a computer
Montaigne Santé, Elsan website on a smartphone

Premium health checks

Montaigne Santé, Elsan

A tailored health check centre in Paris 8th, for companies (executives, expatriates) and private patients.

Hosted and maintained by VOID

  • WordPress
  • Medical centre
  • Paris
Visit the website Montaigne Santé, Elsan
Mérieux Equity Partners website, home page on a computer
Mérieux Equity Partners website on a smartphone

Healthcare private equity

Mérieux Equity Partners

A European private equity firm specialised in healthcare: team, portfolio, investor relations, sustainability and news.

Hosted and maintained by VOID

  • WordPress
  • Elementor
  • English-language site
Visit the website Mérieux Equity Partners
Ex4 website, home page on a computer
Ex4 website on a smartphone

Management consulting

Ex4

An independent management consultancy that makes brands more robust. The site is published in four languages: English, French, Spanish and Chinese.

Hosted and maintained by VOID

  • WordPress
  • Elementor
  • 4 languages
Visit the website Ex4
IMSS, Institut Médical Sport Santé website, home page on a computer
IMSS, Institut Médical Sport Santé website on a smartphone

Sports medicine

IMSS, Institut Médical Sport Santé

Health through sport: a network of medical centres (care, rehabilitation, check-up centre, training), with appointment booking, a practitioner directory and a professional area.

Hosted and maintained by VOID

  • WordPress
  • Elementor Pro
  • Multi-site network
Visit the website IMSS, Institut Médical Sport Santé
Pôle de cancérologie du Finistère website, home page on a computer
Pôle de cancérologie du Finistère website on a smartphone

Care pathways

Pôle de cancérologie du Finistère

The cancer care pathways of CHP Brest, C.F.R.O and HAD du Ponant, organised by organ, from prevention to follow-up support.

Hosted and maintained by VOID

  • WordPress
  • Elementor
  • Patient pathways
Visit the website Pôle de cancérologie du Finistère

Security and hosting

WordPress, protected layer by layer

Because it is so widespread, WordPress is a prime target for automated attacks. We do not rely on a security plugin: we protect the site at every level, from the network edge down to the backups, on AWS infrastructure that we run.

Exploded glass view: a hosting grid, a layer of red modules and a browser window, crossed by a line of blue light
  1. Anti-DDoS and CDN

    The site is served through CloudFront: the cache absorbs traffic spikes and AWS Shield protects against network and transport-layer DDoS attacks. Sensitive pages are rate-limited per IP address.

    • CloudFront
    • AWS Shield
    • Route 53
  2. Web application firewall (WAF)

    AWS managed rules for WordPress and PHP, blocking of SQL injection and XSS, brute-force protection for the login page and XML-RPC.

    • AWS WAF
    • WordPress rules
    • Rate limiting
  3. Hardened WordPress

    Two-factor authentication for administrators, least-privilege roles, file editor disabled, XML-RPC closed when unused, security headers (CSP, HSTS), secrets kept out of the code. A small, carefully chosen set of plugins.

    • 2FA
    • Secrets Manager
    • TLS (ACM)
  4. Controlled updates

    Core, theme and plugins are updated on staging first, tested, then deployed. We track published vulnerabilities for the plugins you run.

    • Staging
    • Vulnerability watch
  5. Backups and recovery

    Automated backups of the database and media, stored off the server and versioned. We restore them regularly to check they work, following a documented recovery plan.

    • AWS Backup
    • Versioned S3
    • DR plan
  6. 24/7 monitoring

    Uptime, errors and performance tracked continuously, detection of suspicious activity on the AWS account, alerts and on-call support.

    • CloudWatch
    • GuardDuty
    • On-call

This operation builds on our AWS expertise: Well-Architected design, managed services and FinOps. See our AWS Cloud expertise (in French), AWS managed services (in French) and managed web hosting (in French).

Services

What we do with WordPress

  • Custom theme

    A theme built for your brand, lightweight and maintainable, instead of a generic theme loaded with features you do not need.
  • Elementor or Gutenberg

    Elementor to compose pages freely, Gutenberg blocks for a stricter framework: we choose with your teams and deliver ready-to-use templates.
  • Multilingual sites

    Several languages on one site, like Ex4's four languages. See also our Arabic, French and English multilingual websites.
  • Conversion journeys

    Quote requests, appointment booking, forms connected to your tools (CRM, email).
  • SEO, performance and accessibility

    Markup, speed and Core Web Vitals with our SEO expertise, and an RGAA and WCAG 2.2 accessibility audit.
  • Headless WordPress

    WordPress as the back office with a Next.js front end when performance or integrations require it, with our React and Next.js expertise.
Ceramic and glass interface components laid out on a table: colour swatches, buttons, cards and columns

Choosing

WordPress or Drupal?

We build with both. The right choice depends on your content and your teams, not on a preference.

WordPress

A corporate, brand or service website that your teams update every day. Fast launch, simple editing, large ecosystem.

Drupal

Highly structured content, complex permissions and approval workflows, many integrations, several sites on one platform. See our Drupal expertise.

Read more in our guide Drupal or WordPress as a headless CMS.

Method

From scoping to launch

  1. Scoping

    Goals, audiences, content, features and technical constraints, choice of editor.
  2. UX/UI design

    Site structure, journeys and mock-ups approved before development, with our UX/UI team.
  3. Theme development

    Custom theme and templates, plugins chosen and documented.
  4. Content and migration

    Content migration, redirects from old URLs, training for your teams.
  5. Acceptance testing

    Functional, performance, accessibility and security tests before launch.
  6. Launch and maintenance

    Hosting on AWS, monitoring and updates as part of our application maintenance service.

FAQ

Frequently asked questions

Why choose WordPress for a company website?

WordPress suits corporate, brand and service websites well: your teams publish on their own, the ecosystem is huge and launch costs stay under control. The condition is to treat it as a real application: a clean theme, carefully chosen plugins, secure hosting and ongoing maintenance.

How do you protect a WordPress site from attacks?

In layers, not with a single plugin: CloudFront and AWS Shield against DDoS attacks, AWS WAF with rules specific to WordPress and PHP, a hardened WordPress (two-factor authentication, limited roles, XML-RPC closed, security headers), updates tested on staging, off-server backups restored regularly, and 24/7 monitoring.

Do you host the WordPress sites you build?

Yes, on AWS, as a managed service: we run the infrastructure (CDN, firewall, servers, database, backups, monitoring) and provide on-call support. The sites shown on this page are hosted and maintained by VOID. We can also work on your existing hosting after an audit.

How do backups work?

The database and media are backed up automatically, stored off the server and versioned. A backup that has never been restored proves nothing: we run regular test restores and document the recovery plan.

Can you take over an existing WordPress site?

Yes. We start with an audit: core and plugin versions, known vulnerabilities, theme quality, performance and hosting. We fix the urgent issues, upgrade the site, then maintain it.

WordPress or Drupal: which one should I choose?

WordPress for a corporate or brand site that your teams need to keep alive quickly. Drupal when content is highly structured, permissions and approval workflows are complex, or the site integrates with many systems. We work with both and advise you based on your project.

Do you work with companies in Europe?

Yes. Several of the sites on this page belong to French companies. Our team is based in Morocco, works in French and English, and is at most one hour away from Paris time.

A WordPress site to build, take over or secure?

Tell us about your project: we will come back to you with an initial analysis and a proposal.

Explore more

Discover our other complementary areas of expertise.