Central Valley · websites, security & automation
A website that performs, stays secure, and answers when you can’t.
I build fast sites people find on Google, lock them down so they don’t get broken into through some plugin nobody updated, and set up the automation that texts a missed caller before they try the next number. Shops, salons, clinics and trades across the Central Valley. Flat pricing, no lock-in, no agency runaround.
Or just call me: (209) 353-0887
- Fixed price, quoted upfront
- Most projects done in 1 to 2 weeks
- You own everything
I’m Mateo Rojas. One person, no account managers. I build it, I switch it on, and every login is yours from day one.
15 years in business IT and security before this. At my last job I was the point of contact for 60+ companies and held a 99% satisfaction rating. Same standard here.
What I do
Build it, secure it, automate the busywork. Small fixes and odd jobs get quoted per task. If you need something adjacent, just ask. I’ll tell you straight if it’s a fit.
Websites that earn their keep
A site that loads fast, reads well on a phone, and tells people what you do in five seconds. Custom layout, not a stock template, with hosting and domain set up for you.
- Mobile first
- Custom design
- Hosting handled
Security & hardening
Most small sites get broken into through one plugin nobody updated. I audit the live site, check the core files against the originals, and hand you a plain-language fix list, not a scary PDF. Full penetration testing where you own the site or have written authorization.
- WordPress audit
- Malware & intrusion check
- Pentest by authorization
Automation that answers for you
Speed-to-Lead texts a missed caller in under a minute, before they try the next number on the list. It qualifies them, hands you the details, and logs every one. Add booking, reminders, and workflows that tie your tools together and run around the clock.
- Missed-call textback
- Booking & reminders
- Custom n8n workflows
Google Business Profile tune-up
The free listing most businesses set up once and never touch. Categories, hours, photos and description rebuilt for how people actually search. Usually the fastest win available.
- Local search
- Review strategy
- 2 to 3 days
See what you’d be getting
Two demo sites, built the same way I’d build yours. Open them on your phone. They’re not real businesses, so poke at anything you like.
Emergency plumber
Built for the trade where the phone is everything. Tap-to-call in three places, a quote form above the fold, and the whole thing readable in one thumb.
Open the plumbing demo
Landscaping & yard care
Built around photos of finished work and monthly plans, because landscaping sells on what the yard looks like and on repeat customers.
Open the landscaping demo100 / 100 / 100
- Performance
- Accessibility
- Best practices
Google’s own Lighthouse test, run on a phone. Speed and accessibility aren’t a sales line here, they’re a number you can check yourself in about thirty seconds. Both demos, measured on mobile 5 August 2026. This site itself scores 99 / 100 / 100. Run any of them yourself at pagespeed.web.dev, then run the site of whoever else quoted you.
“He has made 3 business/e commerce websites for me and my wife.”
Oleg Volkov, Google Local Guide, 184 reviews. Read the full review on Google
“He was knowledgeable, helpful, and made sure everything was set up and working perfectly.”
jorge sanchez, on a custom PC build. Read the full review on Google
Three reviews, 5.0, every one a real name you can click.
1 business day From your form to a fixed quote in writing.
How it works
No discovery workshops, no 40 page proposals. Four steps and you’re live.
Step 01
You send details
Fill the form with what you need. A few sentences is plenty to start.
Step 02
You get a fixed quote
Within one business day: scope, price and timeline in writing. No pressure.
Step 03
I build it
You see a working preview link, not a flat mockup. Two rounds of revisions included.
Step 04
You go live
I handle launch and hand over every login. No lock-in, ever.
Straightforward packages
One price, quoted before any work starts. Half up front, half on launch.
Not sure which one you need?
Send your website and your Google listing and you’ll get a short written audit back: what’s broken, what it’s costing you in calls, and what each fix would run. No charge, no meeting, and no obligation to buy anything.
Get the free auditGoogle Business Profile only
Tune-Up
$349 one time
- Full profile audit and rebuild
- Categories, services, hours, photos
- Search-focused description
- One page review playbook
Where I’d start
Up to 5 pages, built from scratch
Starter Site
$1,500 starting at
- Custom design, mobile first
- Contact form and click-to-call
- Basic SEO and analytics wired up
- Google Business Profile tune-up included
- Two revision rounds, launch handled
Bigger builds and ongoing work
Growth Site
$2,800 starting at
- Everything in Starter Site
- Up to 12 pages or location pages
- Booking, payments or CRM hookup
- Copywriting for every page
- 60 days of post-launch fixes
Small fixes and odd jobs are quoted per task, typically $125 to $300. Ask and you’ll get a number, not a sales call.
Security & hardening
Most small sites get broken into through one plugin nobody updated, and the owner finds out when Google flags the site or the host pulls it down. I check the live site the way an attacker would, fix what’s open, and keep an eye on it after. Plain fixes, not a scary PDF.
Find out where you stand
Security Audit
$495 one time
- Live-site scan for known holes and exposed files
- Core files checked against the originals
- Plain-language report, ranked by what matters
- An exact fix for every finding
- Half-hour walkthrough call
Where I’d start
Audit, then close the holes
Audit + Hardening
$1,200 one time
- Everything in the audit
- Fixes applied: updates, 2FA, firewall, file permissions
- Off-site backups set up and tested
- Login and admin area locked down
- 30 days of monitoring after, then it’s your call
Already hacked? Start here
Hacked-Site Cleanup
$799 starting at
- Malware and backdoors found and removed
- How they got in, closed behind them
- Site restored and hardened so it doesn’t recur
- Blacklist and Google Safe Browsing cleanup
- Complex or store hacks quoted after a look
Ongoing security monitoring runs from $149 a month, folded into a care plan. Full penetration testing is quoted separately, and only on sites you own or authorize in writing. Every security tool and license stays in your name.
<1 minute From a missed call to a text back, day or night.
Speed-to-Lead
A missed call is a job that went to whoever picked up next. This answers for you in under a minute, day or night, and keeps answering until you can pick it up yourself. Built on your existing number, tested on real calls before it goes live. Same job whether the phone rings while you are under a sink, mid-haircut, or with a patient in the chair.
One time, everything set up and tested
Build and switch-on
$1,500 one time
- Missed caller gets a text within seconds
- Questions written for your trade, answers sent to you
- Works with the number you already have
- Web form and after-hours calls handled the same way
- Carrier registration filed and tracked for you
- The account and number are in your name
Where I’d start
Monitoring and changes, month to month
Kept running
$149 per month
- Watched daily, fixed before you notice
- Every missed call and reply logged
- Weekly plain-English summary of what came in
- Wording and hours changed whenever you ask
- Texting runs about $10 a month, paid direct
Everything above, plus the booking and the follow-up
Booked and logged
$299 per month
- Everything in Kept running
- Caller gets a booking link, not a promise to call back
- Appointment reminders, so fewer people forget to show
- Quotes chased on a schedule you set
- Every job written into your calendar or CRM
- Finished jobs asked for a review, same wording every time
Switch-on takes 2 to 3 weeks.
US carriers have to approve any business sending automatic texts. Nobody can speed that up. Cancel the monthly any time and the number, the account and the setup stay yours.
Want me to keep it running?
Optional monthly work, once the one-off job is done. A tuned Google profile drifts and missed calls never stop coming. Month to month, cancel anytime.
Keeps the profile active and answered
Essentials
$149 per month
- Weekly post to your profile
- Every review answered within 48 hours
- New photos added monthly
- Hours kept current, holidays included
- One page monthly report
For businesses competing in a crowded category
Active
$299 per month
- Everything in Essentials
- Two posts a week, seasonal offers written for you
- Q&A seeded and monitored
- Directory listings kept consistent
- Competitor tracking and a quarterly call
- 30 minutes of site edits included
No contract, no cancellation fee, no notice period. Stop whenever it stops being worth it, and the profile and every account stay yours.
Common questions
A Starter Site is usually 1 to 2 weeks from the day I have your content. Growth Sites run 3 to 4 weeks. A Google Business Profile tune-up is done in 2 to 3 days.
Send whatever you have and I’ll shape it. If you have nothing, Growth Site includes full copywriting, and I can add copy to a Starter Site for a flat fee.
You do. Domain, hosting, analytics, Google profile, all of it in your name with your logins. If you ever want to move on, nothing’s held hostage.
Most small sites I build run on hosting that costs nothing to about $15 a month, paid by you directly to the provider. I set it up and show you how it works.
Usually yes. WordPress, Squarespace, Wix, Shopify and plain HTML are all fine. Tell me what’s broken and I’ll quote the fix.
Half up front to book the slot, half when the site goes live. Small jobs are billed once on completion. Card or bank transfer, invoice every time.
No. Every package is a one-off and works fine on its own. Monthly management is there because a Google profile drifts if nobody touches it, not because I need you on a plan. It’s month to month with no contract, and you can stop any time without losing anything.
Yours. The texting account is opened in your name with your card, and I’m added as a user you can remove whenever you like. Your existing business line stays with your current carrier and never changes hands. If we part ways you keep the number and it all keeps working.
US carriers make every business register before it can send automatic texts, and that review runs 10 business days to 3 weeks. Nobody can speed it up, me included. My part is a couple of hours. The rest is waiting, and I’ll tell you where it stands rather than going quiet on you.
No. One text when you miss a call, one nudge an hour later if they never replied, then it stops for good. There are no promotions or sales blasts in it, and anyone can reply STOP and never hear from it again. It only ever replies to people who called you first.
No. The audit is read-only, run from outside your site the way an attacker would look at it. I don’t change a thing until you’ve seen the report and approved the fixes. Full penetration testing goes deeper, and I only do it on a site you own or authorize in writing.
That’s the cleanup job. I find the malware and how they got in, remove both, restore the site and lock it down so it doesn’t come back, then clear any Google or host blacklisting. Store or complex hacks get quoted after a look. Either way, the first job is getting you clean.
Hi, I’m Mateo Rojas.
Central Valley Web Co. is me. When you send that form, I’m the one who reads it, quotes it, builds it and answers the phone six months later when you want a page changed. There is no account manager, no ticket queue and nobody handing your project to a junior.
I came to this from 15 years in IT, most of it at managed service providers supporting small and mid-sized businesses across California. At my last one I was the point of contact for 60+ companies and held a 99% satisfaction rating. That’s the standard I hold myself to here.
I work with small local businesses because that’s where a good website still moves the needle. I keep the pricing flat and the scope written down so you always know what you’re paying for, and I hand over every login at the end because your business shouldn’t depend on staying in touch with me.
Mateo Rojas · (209) 353-0887 · mateo@centralvalleywebco.com
Tell me what you need
A couple of sentences is enough. You get a reply from me, not a bot, with a fixed price within one business day.
Rather talk? (209) 353-0887 · mateo@centralvalleywebco.com
- Reply within one business day. From me, not an auto-responder.
- Fixed price, quoted upfront. No hourly surprises, no retainer.
- 15 years supporting business IT. 60+ companies, 99% satisfaction.
- You own everything. Domain, hosting and logins in your name.