Culture, Ethics, Logistics, & Technology (The "SEC" Way)

⌘K
  2. Home
  4. Culture, Ethics, Logistic...
  6. Web Development & Ho...
  8. Starting From Zero

Starting From Zero

At SEC Marketing Group, we don’t just optimize existing assets; we build them. Whether it’s a microsite for a niche lead-gen campaign or a fresh start for one of our 50+ future clients, you need to know how to build the foundation.

In the world of SEO, a “clean” installation is the difference between a site that scales and one that breaks under its own weight. Here is the SEC standard for starting from zero.

Phase 1: The Foundation (Domain & Hosting)

Before a single line of code is written, we need a home for the site.

  1. Domain Acquisition: Ensure the domain is registered under the client’s designated account (never a personal one).
  2. DNS Configuration: Point the “A Record” to our preferred hosting provider.
    • Critical: Always check if the client has existing email (GSuite/Outlook) before changing DNS to ensure we don’t “kill” their inbox.
  3. The “SSL First” Rule: Never install WordPress on an insecure http protocol. Provision the SSL certificate (Let’s Encrypt or similar) before the WP installation to avoid “Mixed Content” errors later.

Phase 2: The WordPress Installation

We use the “One-Click” installers provided by our hosting environment (cPanel/Plesk/Managed WP), but we never use the default settings.

1. The “Clean” Install Checklist:

  • Site Title: Use the Client’s Brand Name (can be changed later).
  • Admin Username: Never use “admin”. Use a unique string or SEC_[ClientName].
  • Password: Use the built-in generator. Immediately copy this into the Client Work Log.
  • Admin Email: Use the designated SEC internal alias (e.g., web@secmarketing.com).

2. The “Search Engine Visibility” Toggle:

During development, go to Settings > Reading and check the box: “Discourage search engines from indexing this site.”

Warning: You must log a task in the Work Log to uncheck this upon launch. Launching a site that is “hidden” from Google is a High-Severity error.

Phase 3: The “SEC Standard” Cleanup

Default WordPress installations come with “bloatware.” We strip it down to the essentials immediately.

  1. Delete Default Content: Delete the “Hello World” post, the “Sample Page,” and the “Hello Dolly” plugin.
  2. Permalink Structure: Go to Settings > Permalinks. Change the structure to “Post Name.” SEO-friendly URLs are non-negotiable (e.g., /services/ instead of /?p=123).
  3. Timezone Sync: Set the site timezone to the client’s local time. This ensures scheduled posts and analytics data align with their business hours.

Phase 4: Core Plugin Stack (The SEC “Starter Pack”)

We keep plugins to a minimum to maintain site speed (Core Web Vitals). Every site starts with these four:

Plugin TypePurpose
SEO SuiteYoast or RankMath (for Schema, Sitemaps, and Meta Data).
SecurityWordfence or Limit Login Attempts (to prevent brute force).
Caching/SpeedWP Rocket or LiteSpeed (for performance).
BackupUpdraftPlus (scheduled weekly backups to an external cloud).

Phase 5: The “Source of Truth” Update

The installation is not “finished” until the Work Log is updated.

  • Log the Installation: [Date] - Installed WordPress v.X.X on [Domain].
  • Log the Credentials: WP Admin URL, Username, and Password.
  • Log the Hosting Access: SFTP/FTP details and Database logins.

Pro-Tip: The “Golden Rule” of Builds

Treat this new site like it’s your own business. If you take a shortcut now (like using a weak password or ignoring a plugin update), it will come back to haunt the team when we hit 50 clients. Do it right, do it once.

How can we help?