bonfire-studio

AEO for Financial Advisors: How to Get Cited by ChatGPT

Tue, 04 Aug 2026 17:47:56 GMT

Answer engine optimization (AEO) is the work of getting your firm named when someone asks an AI tool to recommend a financial advisor.

Right now, that mostly comes down to one tool.

ChatGPT accounts for 92% of the referral traffic that can be traced back to AI tools ( Search Engine Land / Previsible, July 2026 ).

"92% of AI referral traffic comes from ChatGPT."

Other tools are growing, Claude and Gemini among them, and that share will shift over time. But it tells you where to start.

So we studied what ChatGPT does when someone asks it to recommend a financial advisor .

We put 135 of those questions to it across five metro areas and logged every website it cited. That came to 1,048 citations.

When ChatGPT is asked to make a recommendation, it names specific firms. It's a referral. ChatGPT is telling someone who to hire.

Here's where we'd tell a financial advisory firm to focus their AEO efforts, in order of how much control you have over each one.

How Financial Advisors Get Cited by ChatGPT

1. Build a dedicated page for each specialty you offer

The questions in our study didn't ask for a financial advisor in the abstract. They named a practice area (retirement, estate, tax, high-net-worth, fee-only) five different ways.

Your odds of being the name ChatGPT returns go up when you have a page built around that exact practice area, in the language a prospect would use.

"Our study found that advisory firms' own websites were the largest single citation source in ChatGPT answers." (Source: Where ChatGPT Gets Its Answers When Asked to Recommend a Financial Advisor )

A single "Services" page that lists everything you do doesn't signal that you specialize in any one of those things.

So if retirement planning is a real part of your practice, there should be a dedicated page for it — not a bullet under services. Same for tax, estate, or whatever other services your firm provides.

This is the part you control completely.

Each specialty page should cover, near the top:

Who the service is for
What's included
Why your firm

2. Claim your professional association listings

The single most-cited domain in our entire study wasn't a firm, a news outlet, or a regulator.

It was napfa.org (the National Association of Personal Financial Advisors), with 76 citations. That's more than any individual advisory practice we recorded.

Membership and credentialing bodies carry weight with ChatGPT, and their directories get cited as a way to answer who's qualified in a given market.

If you belong to NAPFA, the CFP Board, the FPA, or a similar body:

Make sure your listing exists
Make sure your name, address, and phone number match how you appear elsewhere — your website, Google, other directories
Make sure it's current

If you're eligible and not listed, that's close to a free win. It's the fastest lever here that doesn't live on your own website.

3. Build durable credibility over time

In one city, we asked the same questions twice on the same day.

Between the two runs, only 53.6% of the individual firm names recurred — barely more than half.

"Which specific firm ChatGPT names at any given moment is volatile."

But the category held steady. Advisor-owned websites made up about 49% of citations in the first run and about 49% in the second.

The names inside the mix changed; the mix itself didn't.

There's little point, then, in optimizing to win one query, the result you'd be chasing keeps moving.

The steadier goal is to remain one of the firms ChatGPT can reach for at all.

That's what the rest of this list is really about: the listings, the mentions, and the clear, well-built pages that keep you in consideration.

4. Manage your off-site presence

A fair question at this point: does a newer firm stand a chance, or does this only reward whoever already dominates search?

The research is more encouraging than you'd expect.

In a December 2025 study of 75,000 brands, Ahrefs found that the strongest predictor of showing up in AI answers wasn't domain authority, backlinks, or the number of pages on a site.

It was brand mentions — how often other people write about you on sites you don't control.

"Brand mentions was the biggest predictor of showing up in AI answers."

Ahrefs also found that ChatGPT leans on traditional authority signals less than Google's AI features do. They suggest that makes ChatGPT a more accessible entry point for smaller or newer firms.

In plain terms: you don't win this by out-muscling established firms on domain strength. You win it by getting your name mentioned in the places that matter:

Industry directories and association listings (see tip #2)
Review platforms
Professional communities
Press and editorial coverage

Mentions, not backlinks, are the lever.

5. Build up reviews and ratings (within SEC rules)

Reviews and ratings are one form of off-site mention from the last point.

When a client reviews you on Google or on an advisor directory, that's exactly the kind of third-party signal AI systems weigh when they decide who to name.

Building that presence helps your visibility.

The wrinkle: financial advisors can't chase or use reviews the way a restaurant or a plumber can.

There's a line worth drawing:

A review a client leaves on their own is largely outside your control, and simply adds to your off-site presence.

A testimonial, endorsement, or rating you feature in your own marketing (e.g. on your website, in an ad, in a brochure), is something you're actively using. That's what the SEC's Marketing Rule (Rule 206(4)-1) governs, and it's a current enforcement priority.

Handled correctly, reviews are a real AEO lever. The point isn't to avoid them, it's to build them the way the rules require.

The AEO basics every advisory website needs first

The five levers above are where the real differentiation is. But none of them land if an AI tool can't read your site to begin with.

Two basics are worth getting right. I've written, and linked to, full walkthroughs of each, so this is the short version.

1. Get the on-site AEO foundation right

A few things make your site readable to AI tools:

Add structured data (Organization, LocalBusiness, and Person schema for individual advisors) so an AI tool can parse who you are and what you do

Write page titles and headers in the words a prospect would type — "retirement planning in Charlotte, NC," not "Our Services"

Keep the facts that matter (services, credentials, service area) in plain text near the top of the page, not buried in a PDF or baked into a graphic

Add a named, credentialed byline to your articles: the advisor's name plus their CFP, CFA, or fiduciary designation

One caveat on the structured data: it's a sound practical step, not something backed by an independent study, so treat it as good hygiene.

The byline point has more behind it. A Princeton study found that leading with a direct answer, supported by statistics and citations, improved how often content was cited by AI by 30–40%.

Clearer, more readable writing added another 15–30%. A real person with real credentials, attached to real answers, is close to what these tools are looking for.

Full walkthrough: our AEO guide for Duda websites .

2. Structure each service page around one clear service

Put a direct description near the top of the page (who it's for, what's included, why your firm), before the narrative and the trust-building copy.

An analysis of ChatGPT citations by Kevin Indig, reported in Search Engine Land , found that about 44% of ChatGPT's citations come from the first third of a page.

The material an AI tool is most likely to lift is the material it reaches first — so lead with the answer instead of building up to it.

I've covered the mechanics in my article on structuring service pages for AI .

Where to start with AEO

If the list feels long, the order of control is:

Start with your website. The specialty pages and the on-site basics are the levers you own outright, no one else has to approve them.

Then claim your association listings. It's the fastest win that lives off your own site.

Then build your off-site presence. Mentions, reviews, and press are slower and more diffuse, and they compound over time rather than paying off next week.

Here's the part that's easy to get backward: you don't have to be the biggest name in your market to be the one ChatGPT recommends.

The category is stable, but the names inside it move. The door stays open longer than traditional search ever kept it.

The firms that walk through it are the ones that made themselves easy to find, easy to understand, and clearly what they say they are.

That's the same advice we'd give about a website in general. Own it, keep it current, and be exactly who you claim to be.

Does Your Medical Practice Website Need to Be HIPAA Compliant?

Mon, 20 Jul 2026 13:15:43 GMT

If you manage a medical practice and you've searched for whether your website needs to be HIPAA compliant, you've probably found a pile of alarming checklists:

Encrypted hosting
Compliant forms
Business associate agreements with your web platform
Six-figure fines if you get it wrong

Look closely at who published those articles. Most of them are companies selling compliance products.

Here's the answer they won't lead with:

There is no official certification for a "HIPAA compliant" website.

The U.S. Department of Health and Human Services (HHS) doesn't certify websites or software. HIPAA regulates healthcare organizations and how they handle patient information, not the software itself.

Once you understand that distinction, protecting your practice becomes much simpler than many checklists suggest.

A quick note before we dig in: this article is general information, not legal advice. For questions about your specific situation, talk to a healthcare attorney or compliance professional.

The short answer

HIPAA applies to covered entities (healthcare providers, health plans, and clearinghouses) and to the business associates that handle patient data on their behalf.

It governs how those organizations create, receive, store, and transmit protected health information, or PHI.

Notice what's missing from the list of what HIPAA applies to: websites.

Software can support compliance with features like encryption, access controls, and audit logs. But compliance itself lives in your organization's policies, procedures, and training.

While a vendor can sell you a compliant component. No vendor can sell you compliance.

So set aside "is my website HIPAA compliant?" and ask the question that actually matters:

D oes my website ever create, receive, store, or transmit PHI?

For a well-designed practice website, the answer should be no. And when the answer is no, most of what those scary checklists demand simply doesn't apply to you.

I explain all of this below, let's dive in.

What HIPAA actually requires, in plain English

Does HIPAA require a Business Associate Agreement?

PHI is individually identifiable health information: anything that connects a specific person to their health status, care, or payment for care.

A name alone isn't PHI. A name attached to an appointment request for a specific condition is.

When a vendor creates, receives, maintains, or transmits PHI on your behalf, that vendor becomes a business associate, and HIPAA requires a signed business associate agreement (BAA) spelling out how they'll protect the data.

Your EHR vendor signs one. Your billing service signs one. Your website platform only needs one if PHI flows through your website.

That's the crux of it. If your website never touches PHI, your website platform is not your business associate, and no BAA is needed.

Does HIPAA require a privacy policy?

There is one genuine HIPAA requirement that applies to nearly every practice website: if you maintain a website describing your services, you must prominently post your Notice of Privacy Practices on it.

That's a real rule, it's easy to satisfy, and it has nothing to do with compliant hosting or encrypted forms.

The architecture that keeps your website out of HIPAA's scope

The cleanest way to handle HIPAA on your website is to design the website so that patient information never touches it. In practice, that means giving each system one job.

1. Your EHR and patient portal handle everything involving health information

Appointment scheduling, new patient intake, health questionnaires, prescription refill requests, messages about care.

Your EHR vendor should already have a signed BAA with your practice. Their systems are built for PHI, with the encryption, access controls, and audit logging HIPAA's Security Rule expects.

When a patient clicks "Book an Appointment" on your website, that button should take them into the patient portal.

2. Your website handles marketing and education

It tells your story, explains your services, showcases your providers, publishes helpful content, and makes it easy for people to contact you.

None of that requires collecting a single piece of health information.

This split puts patient data in the system designed to protect it and keeps your public-facing site free of compliance overhead.

It also answers the question of whether your website platform vendor needs to sign a BAA. Most website platforms don't sign BAAs; and that's fine when your website is designed so it isn't intended to collect or handle PHI in the first place.

"But what about our contact form?"

A general contact form that collects a name, email address, phone number, and a message is not collecting PHI by design.

Anyone might be filling it out: a job applicant, a pharmaceutical rep, a journalist.

Nothing about the form asks for health information, and name and contact details on their own don't constitute PHI.

The risk comes from what you ask and what patients volunteer. Handle both deliberately:

1. Don't ask for health information

Your contact form shouldn't request a date of birth, a "reason for visit," symptoms, insurance details, or anything else that invites health information into a system that isn't built for it.

Keep the fields to name, contact information, and a message.

2. Include a note

Add a short note near the form. Something like: "Please don't include medical or health information in this form. For appointment requests and medical questions, use our patient portal or call our office."

This steers patients to the right channel and shows you've taken reasonable steps to prevent PHI from arriving here.

For your specific situation, run the note you plan to use by your compliance officer.

3. Train staff on a procedure and document it

Have a procedure for when PHI arrives anyway.

Some patients will type health details into a message box even when you ask them not to. By itself, that doesn't automatically mean your practice has violated HIPAA. What matters is what your staff does next.

Here is a simple procedure as an example , but please create yours with your compliance officer:

Move the relevant information into your EHR
Delete the submission from your website's form dashboard
Delete the notification email (and delete it from your Trash folder)
Never reply with health details over regular email

Document your procedure in the employee manual and train your front desk on it. HIPAA expects reasonable safeguards , and having a documented procedure is an important part of that.

What if we use a "HIPAA compliant" form?

Here's the part the checklist articles skip: a paid "HIPAA compliant" form doesn't remove any of the above obligations.

If your staff copies a secure form's contents into a regular email thread, the chain is broken regardless of what the form vendor promised.

The procedure protects you. The product, at best, assists.

When you actually do need HIPAA-eligible tools

To be fair to the other side of this argument, there are cases where a website feature does handle PHI, and then the rules change:

Telehealth visits conducted through your website

Online intake or screening forms that ask health questions before a patient is in your EHR

Live chat where staff discuss symptoms, conditions, or care

If you truly need one of these on your website itself, then yes, you need a vendor that will sign a BAA and offers appropriate infrastructure for that specific feature.

That's a legitimate use case for HIPAA-focused form and chat products.

Before you buy one, though, ask a simpler question: does our EHR already offer this feature?

Most modern EHRs include portal-based scheduling, digital intake, secure messaging, and increasingly telehealth.

Routing those workflows through the portal is usually better for patients (one login, one record) and better for you (one vendor, one BAA, no duplicate data to reconcile).

About those tracking pixels

If you researched this topic between 2022 and 2024, you probably encountered warnings that running Google Analytics, cookies, or a Meta pixel on a medical website violated HIPAA.

That guidance came from a bulletin issued by the HHS Office for Civil Rights, and it caused real panic across healthcare marketing.

The legal landscape has since changed.

In June 2024, a federal court vacated the bulletin's position on public-facing web pages, ruling that HHS had exceeded its authority by treating a visitor's IP address combined with a visit to a public health-related page as protected information .

HHS initially appealed, then withdrew the appeal in August 2024, leaving the ruling in place.

The practical takeaway: while this ruling doesn't prevent someone from filing a lawsuit, it should make them significantly less attractive to plaintiffs.

Caution still applies behind logins. Tracking technologies have no place on authenticated portal pages or anywhere a user's identity connects to their care.

And state privacy laws are their own topic, with several states regulating consumer health data independently of HIPAA.

Be aware that many articles ranking for this topic, including some from major platforms, still cite the vacated guidance as if it were current. Check the date on anything you read, including this article.

What to ask your website developer

If you're evaluating a website developer for your healthcare practice , a few questions will tell you quickly whether they understand any of this:

1. Where does appointment booking happen?

The right answer routes patients into your EHR or portal, not into a basic website contact form, or appointment booking plugin.

2. What does the contact form collect?

The right answer is contact information and a message, with a note steering health questions elsewhere, and nothing that solicits health details.

3. What happens when a patient submits health information anyway?

The right answer is a documented handling procedure, not a blank stare.

4. Do we need a BAA with the website platform?

If your website isn't handling PHI, the answer is usually no. A vendor who insists you need compliant hosting for a purely marketing website is selling you something.

A healthcare website done well gives patients a clear path to care, gives your practice a professional presence, and makes your compliance officer's job a whole lot easier.

That outcome comes from smart architecture and sound procedures. No product can give you 100% HIPAA compliance, and once you know that, you can stop being scared of your own website.

Bonfire Studio designs and builds websites for healthcare organizations , with the architecture questions above baked in from the start. Start the conversation today if you'd like to discuss a new website for your organization or medical practice.

Duda vs WordPress for Complex Business Websites

Wed, 08 Jul 2026 01:38:26 GMT

If you've started researching website platforms and you’re wondering if your site is too complex for Duda, I’m here to help answer that question.

After years of building websites, software, and web apps for businesses in complex industries like healthcare, construction and utilities, I've found that most businesses don't actually need what WordPress uniquely offers.

Before diving in, it's worth asking what "complex" actually means for your organization.

If you consider your website complex, I wonder if you mean one of two things:

Content complexity: you have a lot of content to organize across many pages, locations, service lines, and/or team members.

Application complexity: you need custom-coded functionality that doesn't exist as a standard feature anywhere.

Duda handles content complexity very well. If your website requires application complexity, Wordpress or custom development makes more sense.

I've been building Wordpress websites, Duda websites , and custom-coded websites for over ten years. Here's an honest comparison of WordPress vs Duda for businesses with complex needs.

What Type of Website is Duda a Good Fit For?

Let’s dive into the types of websites that Duda handles very well.

1. Large sites with many pages of dynamic content

Duda's Dynamic Pages feature is one of the most underappreciated tools on the platform. You design a page once, and it automatically generates multiple pages from a connected dataset.

That dataset can be managed inside the Duda editor, or connected to a Google Sheet, Airtable, or any external database via Duda's API.

In practice, this means:

A healthcare website can maintain a directory of 80 providers without manually building 80 separate pages

An environmental consulting firm website can maintain a project portfolio where each case study pulls from a spreadsheet the team manages, without calling on their web developer

A construction company can build out service area pages at scale. The site stays current because the data does.

2. Staff directories, location pages, and service lines

Any organization with multiple locations, service lines, or team members knows how quickly a site can become difficult to maintain.

Duda handles this through Dynamic Pages and its connected data features: you define the structure once, the content populates from a source the team manages, and when something changes, the update flows through the site automatically.

For a financial advisory firm website with advisors across multiple offices, this means a directory that stays accurate without a developer touching it each time someone joins or leaves.

For a multi-location healthcare practice, it means consistent location pages that are easy to keep current and well-structured for local SEO.

3. Sites that integrate with third-party tools

Duda integrates with a wide range of tools that many organizations already use: CRMs, scheduling platforms, email marketing systems, and more.

The Duda app store includes vetted integrations with tools like HubSpot, Mailchimp, and a range of scheduling and booking platforms.

4. Websites that need to handle appointment or calendar bookings

Duda's native Bookings feature is worth calling out as well:

Built directly into the Duda platform
Integrates automatically with your website's design
Supports bookings with multiple staff members
Supports paid or unpaid appointments
Integrates with Zoom and Google Meet for virtual sessions
Syncs with your current calendar

For a consulting firm taking discovery calls, or a home services company scheduling site visits, it's ready to go without requiring integration with a third-party platform.

5. Membership sites and gated content

Duda includes a native membership feature that lets you gate specific pages behind a login, create free or paid membership tiers with payments through Stripe (including Apple Pay and Google Pay), and choose between open signups or approval-based access.

Example use cases:

A professional association can offer member-only resources without a third-party membership platform
A financial services firm can give clients access to a private document portal
An environmental consulting firm can provide clients with gated project documentation

None of this requires code or additional plugins - it's all managed inside Duda.

6. Websites your team needs to update without calling a web developer

If your goal is a website that your staff can update, and add content to, without needing to bring in outside help for every change, Duda's editor is considerably more approachable than WordPress.

Managing a Wordpress website is quite a bit more complicated than managing a Duda website, unless you have a web developer on call.

What Types of Websites is Wordpress a Good Fit For?

There are situations where WordPress is the right platform, and I'd recommend it over Duda.

1. Custom web applications

WordPress's open-source architecture makes it more accommodating of custom development than a closed platform.

If your site needs bespoke functionality that doesn't exist as a standard feature in another CMS, a developer will generally have more flexibility working with Wordpress, or a fully custom stack.

This could include deep integration with proprietary internal systems, or some third-party systems; advanced members-only portals; and custom web apps.

Duda supports on-page custom code and custom widgets, but its architecture has limits that a fully open platform does not.

2. High-volume publishing operations

If content publishing is central to your business model - your team needs content scheduling, editorial workflows, category taxonomies, contributor roles, or unique publishing triggers - WordPress has a meaningful advantage over Duda.

Yes, your Duda website can include a blog - with videos, articles, and downloadable PDFs - and that works for most organizations.

Wordpress, on the other hand, was built as a publishing platform first, and that heritage shows in the editorial tools. If the website essentially is the publication, WordPress is the right call.

3. E-commerce with complex requirements

Wordpress might be a better fit than Duda in the following e-commerce scenarios:

Multi-vendor marketplaces where multiple sellers manage separate storefronts
B2B operations requiring custom pricing per customer account
Online stores that need many specialized WooCommerce extensions working in concert

Duda's e-commerce capabilities are solid for most businesses: up to unlimited products on higher-tier plans, support for multiple payment gateways, automated tax calculation via Avalara, and shipping integration via Easyship. For a business selling products or services online alongside their main site, it works well.

Additional Considerations When Comparing WordPress vs Duda

Beyond features and fit, there are a few practical factors that should also be considered when comparing Duda to Wordpress: the plugin ecosystems, security, and total cost.

1. Duda's App Store vs. WordPress Plugin Directory

WordPress has over 60,000 plugins. You can find a solution for almost anything, and for developers who know what they're doing, that flexibility is genuinely useful.

The trade-off is that each plugin is a separate piece of software, built by a separate developer, maintained on a separate schedule. Plugins conflict with each other. They fall out of date. And as I'll cover in the next section, they're the source of the vast majority of WordPress security vulnerabilities.

Duda's app store is much smaller and curated - every app is reviewed by Duda staff before it's listed.

The trade-off for fewer options is more consistent quality and reliability.

More importantly, many of the things WordPress users install plugins for are built natively into Duda: image optimization, SEO tools, SSL certificates, analytics integration, bookings, membership, automated backups, and AI-generated meta tags and alt text.

On WordPress, each of these is an additional install, each with its own update cycle and potential for conflict.

For organizations that want a secure, stable site, the curated ecosystem has advantages.

3. Security: How Duda compares to Wordpress

Security is one of the least visible but most consequential differences between the two platforms.

WordPress core is actually quite secure - in 2025, only six vulnerabilities were found in the core software itself .

The problem is plugins.

According to Patchstack's State of WordPress Security 2026 report, 91% of the 11,334 WordPress vulnerabilities discovered in 2025 came from plugins.

"91% of Wordpress vulnerabilities came from plugins."

And the window to act on them is narrow: the median time from vulnerability disclosure to mass exploitation is five hours. 43% of those vulnerabilities require no authentication to exploit.

For an organization with a developer actively managing the site, this might be manageable. For a financial services company, a regional healthcare network, or an environmental consulting firm without web development resources on staff, it's a real and ongoing risk.

Duda handles security at the platform level. Updates, SSL certificates, and security patches are applied automatically. There are no plugins to keep current, no third-party code introducing new vulnerabilities. It's a fundamentally different security model, and for most of the clients I work with, it's a better fit.

(For more on how Duda handles SEO and technical performance, see Are Duda Websites Good for SEO? )

4. The True Cost of Wordpress vs Duda

WordPress is often described as free, which is technically true of the core software.

But the total cost of running a WordPress site is not free:

Hosting (typically $25–$80/month for quality WordPress hosting that you manage yourself)
Premium plugins (e.g. page builder, security tools, backup services)
Ongoing developer support for maintenance, troubleshooting and updates ($75 to a few hundred dollars per month, or more depending on how much service is included)

A well-maintained WordPress site for a mid-size business can easily run several hundred dollars per month in infrastructure and support costs, before any new development work.

Duda is a subscription platform that includes hosting, SSL certificate renewals, and platform maintenance. The cost is predictable.

A website care plan with Bonfire Studio including a subscription to Duda, hosting, security updates, backups, and content updates done-for-you starts at $350 per month. That means your team won’t ever need to touch the website (we do the updates for you) or troubleshoot a broken plugin.

How to Choose Between WordPress vs Duda for Complex Business Websites

Rather than declaring one platform the winner, the better question is which one fits how your organization actually operates.

Duda is likely the right fit if:

Your website does not require much custom-coded functionality

You have multiple locations, service lines, or team members that need to be reflected across many pages

You want integrations with tools like scheduling platforms, CRMs, or booking systems without managing plugin stacks

Your team wants to make updates independently without relying on a developer for every change (or you can subscribe to a website care plan with us that includes updates done-for-you, because we know your team is busy)

You want a site that performs well without ongoing technical maintenance

Data security matters and you want fewer plugin vulnerabilities to manage (financial services, healthcare)

WordPress is likely the right fit if:

Your site requires custom-built functionality that goes beyond what standard platform features offer

Content publishing is central to your business model and/or you need a full editorial workflow

Your e-commerce requirements are complex: multiple vendors, custom B2B pricing, or a store that requires many specialized extensions

Frequently Asked Questions

Can Duda handle a complex business website?

Yes, depending on what "complex" means. Duda handles content-complex sites well - large page counts, dynamic directories, multiple locations, third-party integrations, and membership-gated content.

Where Duda has limits is in application complexity: custom-coded functionality, bespoke business logic, or e-commerce operations that require many specialized extensions.

For most service organizations, healthcare practices, and established businesses, their complexity is the content kind, and Duda is a capable fit.

Is Duda good for large websites?

Yes. Duda's Dynamic Pages feature is built for large sites with many similarly structured pages. A site with dozens/hundreds of provider profiles, location pages, or project case studies is exactly what it was designed to handle. Content connects to a data source the team manages, and pages generate and update automatically.

How does security compare between Duda and WordPress?

The two platforms take fundamentally different approaches.

Duda is a closed, managed platform - security patches, SSL certificates, and updates are handled automatically at the platform level.

WordPress is open-source, which gives more control but also means the site owner is responsible for keeping everything current.

According to Patchstack's 2026 report, 91% of WordPress vulnerabilities originate in plugins, and the median time from disclosure to mass exploitation is five hours

For organizations with a developer actively managing their website, WordPress can be kept secure. For organizations without dedicated technical resources, Duda's managed approach carries less ongoing risk.

Does Duda have enough apps and integrations for a complex site?

For most organizations, yes. Duda's app store is much smaller than WordPress's plugin directory, but it covers the tools most businesses actually use: booking systems, CRM connections, marketing integrations, forms, analytics, and more.

Because every app is reviewed before listing, the risk of plugin conflicts or compatibility issues is significantly lower. Additionally, many tools that require a plugin on WordPress - bookings, membership, image optimization, SEO tools, SSL - are built natively into Duda.

What is the real cost difference between Duda and WordPress?

WordPress's core software is free, but the total cost includes hosting, premium plugins, a page builder, security tools, backup services, and ongoing developer support for maintenance and troubleshooting.

For a well-maintained mid-size business site, this can add up to several hundred dollars per month. Which is still a bargain considering the return your website hopefully provides.

Duda is a subscription that includes hosting, security, platform updates, and SSL. The pricing is predictable, and in many cases lower than what a similar website would cost if it were built on Wordpress.

What types of businesses are best suited to Duda vs WordPress?

Duda is well suited for the types of complex companies we work with at Bonfire - healthcare practices , financial services firms , environmental consultancies , construction and manufacturing companies - that need a polished, functional site but don't have a developer managing it day to day.

WordPress is the stronger choice for organizations with custom development needs, high-volume publishing operations, or e-commerce requirements that go beyond what standard platform features support.

(If you're also thinking about how AI search affects your website strategy, this guide to AEO for Duda websites is worth a read.)

Ready to Talk About Your Website?

If you're evaluating platforms for a redesign or trying to figure out whether your current setup is working for you, I'm happy to talk through it.

The web design and software development companies I own have built complex sites across healthcare, utilities, and construction on Duda — and I'll tell you honestly if it's the right fit for what you need.

Get in touch to start the conversation .

How to Optimize Service Pages for Google AI Overviews

Wed, 01 Jul 2026 15:45:13 GMT

Google's AI Overviews are changing how people discover service businesses. If you want to optimize your service pages for AI Overviews, your pages need to:

Clearly describe the service
Organize information well
Provide specific details about what's included

While nobody outside Google knows exactly how AI Overviews decide what to surface, we do know they frequently reference content that's well structured and easy to understand.

If your service pages were built before AI search became a major consideration, a few formatting changes can make them more useful for both potential clients and modern AI search tools.

1. Give each service its own dedicated page

If one page on your website describes five different services, it's difficult for that page to be the strongest result for any one of them.

Google primarily evaluates relevance at the page level , so dedicated service pages usually have a better chance of matching specific searches than one broad "Services" or "What We Do" page.

A page devoted entirely to remediation services can answer the questions someone has about remediation. A separate page for compliance monitoring can focus on that service without competing for attention.

If you've grouped everything onto one general services page, creating separate pages for each service is often the most valuable improvement you can make.

2. Answer the main question in the opening paragraph

Every service page should answer the primary question a prospective client is asking.

That might be:

What does this service include?
How does the process work?
Is this the right service for our project?

Answer that question before talking about your company history, credentials, or philosophy.

One industry study from Contently found that AI citations frequently came from the first third of a page.

While that's an observed pattern, not a Google rule, it reinforces a longstanding SEO best practice: answer the main question early.

Google's systems are also capable of identifying useful passages within a page , so a clear explanation near the top may be surfaced even if the rest of the page contains additional detail.

If your page begins with, "We've proudly served clients for over 20 years," you've probably buried the information your visitor, and search engines, were looking for.

3. Write headings that match how people search

Headings, and subheadings, help readers understand what's coming next. They also help search engines understand what each section is about.

Compare these two examples:

Our Approach
How does the site assessment process work?

Or:

Details
What's included in a compliance audit?

The second version tells both readers and search systems exactly what the section answers.

You don't need every heading to be a question, but descriptive headings that reflect how people actually search are generally more useful than internal labels.

4. Keep each paragraph focused on one idea

Search systems increasingly evaluate sections of a page , not just the page as a whole.

That's one reason why short, focused paragraphs work well. Each paragraph communicates one complete idea, making it easier for readers to scan and for search systems to understand the content.

If a single paragraph explains your process, lists deliverables, and discusses pricing, none of those topics stands out particularly well.

Give each idea its own space.

5. Include a structured "What's Included" or "How It Works" section

Lists are one of the easiest ways to make service pages easier to scan.

Whether it's a numbered process, a list of deliverables, or a step-by-step explanation of how your service works, structured content helps readers quickly find the information they're looking for.

Industry research has also observed that AI Overviews frequently include bulleted and numbered lists, making this format well worth incorporating into your pages.

Instead of using a generic heading like Details, try something more descriptive:

What's Included in a Phase I Environmental Assessment
Our Four-Step Remediation Process
What You'll Receive During a Free Consultation

Specific headings provide better context for both readers, AI crawlers, and search engines.

6. Add a service-specific FAQ section

Not every FAQ belongs on every page.

Questions like "How long have you been in business?" or "Where are you located?" are usually better answered elsewhere on your site.

Instead, use each service page to answer questions that are unique to that service.

For example, a healthcare company 's webpage about wound care services might answer:

Is wound care covered by insurance?
Do your providers come to my home to provide wound care?
Do you provide wound care supplies I can use at home?

Keep each answer direct and complete — usually one to three short paragraphs or a few concise sentences.

This format also mirrors the way many AI-generated answers are presented : a clear question followed by a straightforward answer.

If you're not sure which questions to include, Google's "People Also Ask" results can be a helpful starting point.

7. Be specific about who you serve, what clients receive, and what to expect

Specific language is more useful than general language.

Compare these two examples:

We work with organizations across multiple industries.

Versus:

We help utilities, municipal governments, and construction firms with environmental compliance and remediation projects.

The second example tells both readers and search engines exactly who the service is for.

The same applies to deliverables and timelines.

Instead of saying:

We'll provide a full assessment.

Say something like:

You'll receive a written assessment with findings, photographs, and compliance recommendations within three weeks of the site visit.

Specific details also support the qualities Google associates with high-quality content: experience, expertise, authoritativeness, and trustworthiness ( E-E-A-T ).

More importantly, specific details about your services helps potential clients understand exactly what they're getting.

Quick Checklist

Audit Any Service Page in Under 10 Minutes

Look at the service page(s) on your organization's website and ask yourself:

Does this page focus on one service?
Does the page title clearly label the service?
Does the opening paragraph answer the primary question?
Do the subheadings clearly describe what each section covers?
Does each paragraph focus on a single idea?
Is there at least one structured section explaining the process or what's included?
Does the page include service-specific FAQs with clear, direct answers?
Does the page clearly explain who the service is for, what clients receive, and what they can expect?

If you can answer "yes" to all eight, your page is likely well organized for AI overviews.

If you'd like a deeper dive into how to get cited in AI search , we wrote an entire article about it.

_____________

If your company's website is in dire need of a refresh for modern times, we'd be happy provide a web design quote or answer any question. Start the conversation today.

AEO for Duda Websites: How to Get Cited in AI Search Results

Tue, 30 Jun 2026 18:39:49 GMT

When someone asks ChatGPT for the best physical therapist in their city, or asks Perplexity to recommend an environmental consulting firm, the answer comes from websites that those AI tools have crawled, read, and decided are worth citing.

According to Duda's own research (drawn from 69 million AI crawler visits across more than 850,000 websites), sites that AI crawlers visit generate:

320% more human traffic
270% more form submissions
250% more click-to-call events than sites that go uncrawled.

That gap is going to widen. According to Semrush research , AI search is projected to overtake traditional search by 2028.

"AI search is projected to overtake traditional search by 2028."

The organizations that show up in those answers aren't necessarily the biggest or most established. They're the ones whose websites are built and maintained in a way that makes it easy for AI to find, read, and cite them.

If your website is built on Duda , you're starting from a better position than most. Here's how to take it the rest of the way.

1. Duda Handles the AEO Foundation

Duda handles technical SEO fundamentals out of the box without installing 3rd party plugins:

Image optimization for faster load times
Automatic sitemap generation
Built-in tooling to easily manage page meta titles, descriptions and alt tags on images
Core Web Vitals performance standards

As of 2025, 82% of sites built on Duda pass all three Core Web Vitals metrics , the highest rate among major website platforms.

"Duda handles your AEO and SEO foundation without installing 3rd-party plugins."

This matters because many AI tools use traditional search indexes as one way to discover web content. If your site isn't indexed, it’s less likely to be found and cited in AI-generated answers.

You might have also heard of GEO (generative engine optimization). Some draw a distinction — AEO for things like Google's AI Overviews, GEO for chatbots like ChatGPT. In this article I'm using AEO as an umbrella term for both.

2. Add a Blog and Keep It Active

Of all the variables Duda analyzed in their 2026 AI visibility study, a blog was among the most consistently correlated with crawler visits.

Each blog post is associated with a 7% increase in AI crawler activity on a website.

Each post is a new page, a new set of questions being answered, and a fresh signal to AI platforms that this site has something current and relevant to say.

Freshness matters even more than most people realize.

Research from AirOps found that 83% of AI citations for commercial queries came from pages updated within the past 12 months, with more than 60% refreshed in the last six months.

"83% of AI citations for commercial queries came from pages updated in the past 12 months."

An outdated blog that hasn't been touched in two years isn't helping you and may actually signal to crawlers that the site isn't worth prioritizing.

For many organizations, an active blog will be one of the highest-leverage ways to improve AEO.

"An active blog is one of the highest-leverage ways to improve AEO."

Even one or two well-written, specific posts per month can meaningfully shift how often AI platforms are visiting and citing your website.

3. Build Dedicated Pages for Each Service and Location

Duda's study also found that every additional page on a website is associated with a 4% increase in AI crawler visits.

The cumulative effect of building out your website (rather than just having a home, services, about us, and contact page) is significant.

More important than page count, though, is specificity .

For example, here's how Perplexity might recommend an environmental consulting firm that has a dedicated page about their wetland mitigation services in NC.

4. Write Content the Way AI Engines Prefer to Cite It

This is where your website could be leaving a lot on the table.

Getting crawled is one thing; getting cited is another. AI engines evaluate pages and decide whether they're worth quoting. The way your content is written has a direct influence on that decision.

Researchers at Princeton published a landmark study on this in 2024, which Duda has referenced in their own AEO documentation.

Their findings are specific and actionable:

a) Lead with the answer

AI engines look for direct, extractable responses to questions.

If someone asks an AI tool what services your firm offers and your website doesn't have a clear, structured answer to that question, you're less likely to be cited than a competitor who answers in the first paragraph of their services page.

b) Write page headings thoughtfully

Structure your content so that headings pose a question (e.g. How Much Does a Home Sleep Study Cost in Central Florida?), or make a direct statement (e.g. Our Primary Care Services). Then answer it directly in the first 40-60 words below.

c) Include statistics, citations, and quotes

The Princeton research found that adding statistics and citations produced the highest performance boost of any content change tested: a 30-40% improvement in how often content was cited by AI.

When you make a claim, support it:

Cite a source
Quote an expert
Reference a study

Content that reads like it was written by someone who knows what they're talking about, and can prove it, performs better.

d) Write in an active voice with strong fluency

The same study found that improving fluency and readability produced a 15-30% visibility boost .

Passive voice, run-on sentences, and keyword-dense writing all work against you. Good writing for humans turns out to be good writing for AI, too.

"Improving fluency and readability produced a 15-30% visibility boost in AI-generated responses."

e) Add FAQ sections

FAQ content maps almost perfectly to how people phrase questions to AI tools. A well-written FAQ on a service page ("How long does a website migration from Wordpress to Duda take?" or "What's included in website maintenance?") is prime material for AI citation.

The underlying principle here is that AI engines reward the same things good editors reward: clarity, authority, specificity, and evidence.

5. Implement Local Schema and Sync Your Google Business Profile

Structured data (specifically LocalBusiness schema) is one of the clearest signals you can send to AI tools about who you are and where you operate.

Schema markup is code that explicitly tells search engines and AI platforms your business name, address, phone number, hours, service area, and more.

Without schema markup, AI has to infer that information from your page copy, which introduces ambiguity and error.

Duda makes LocalBusiness schema straightforward for your web developer to implement.

More importantly, Duda lets them generate that schema and sync it directly with your Google Business Profile , so the information AI engines see on your website matches what they see in Google's index, in Maps, and anywhere else your GBP appears.

Consistency is the key word here. When AI tools see the same accurate information about your business in multiple places, it increases their confidence in citing you.

6. Build Your Presence Off Your Website

AI engines don't learn about businesses based solely on their websites.

They look at the broader web: review platforms, industry directories, LinkedIn, third-party articles, and any other place your business name appears alongside credible context.

Mentions in industry publications and directories, Healthgrades profiles, Houzz listings, LinkedIn company pages, features in local press, Yelp reviews: each of these is a data point that AI engines aggregate when forming an understanding of who you are and whether you're worth recommending.

Practically, this means a few things:

Maintain consistent NAP (name, address, phone number) information across all directories and platforms, since inconsistencies create uncertainty for AI.

Actively pursue and respond to reviews.

Publish on LinkedIn.

If there are industry-specific directories or association memberships relevant to your field, make sure your profiles are complete and current.

Duda's soon-to-be-released AI Visibility tool will track where your brand appears online vs. competitors. Thus surfacing off-page recommendations specific to your company.

7. Measure Your AI Visibility and Close the Gaps

Duda's new AEO Performance dashboard was built specifically for this, and it's one of the more concrete tools available for understanding and improving AEO performance.

The AEO performance dashboard includes:

AI visibility score - How visible your brand or content is inside AI-generated answers.

LLMs visit tracking - Tracks how many visits you’re getting from the various LLM crawlers.

Recap of AEO for Duda Websites

AEO for a Duda website is a set of compounding advantages that build on each other.

The Duda platform gives you a technically solid foundation.

A well-maintained blog and expanded page architecture give crawlers more to visit and index.

Content written with clarity and evidence gives AI something worth citing.

Local schema and Google Business Profile synchronization make your business easy to identify and recommend.

Off-site presence expands the surface area AI can find you across.

And Duda's AI Visibility tools let you measure all of it and act on the gaps.

The organizations that will earn the most AI search citations over the next few years aren't necessarily the ones who wait for the landscape to settle.

They're the ones who get the right things in place now, while the competition is still figuring out what AEO means.

If you're not sure where your site stands, that's a reasonable place to start.

A quick audit of your current AI visibility, page architecture, schema implementation, and content freshness will tell you a lot about where the highest-leverage improvements are.

Bonfire Studio builds and manages Duda websites for established organizations. If you'd like a closer look at how your site is performing in AI search and what would move the needle, get in touch .

A single "Services" page that lists everything you offer is harder for AI to parse and cite than a dedicated page for each individual service.

If you run an environmental consulting firm that offers g roundwater and vapor intrusion assessments, wetland delineating, and brownfields redevelopment , three separate service pages will outperform one combined page, both in AI search and in traditional SEO.

Competitor AI Insights - how often AI mentions you, and your competitors, and in what tone (positive, neutral, or negative).

Recent AI responses - This AEO tool within Duda is my personal favorite. It tracks the actual AI prompts and responses that you’re actually mentioned in.

Duda's SEO/AEO dashboard also surfaces one-click fixes: missing image alt text, broken links, absent metadata, gaps in local schema.

This is meaningfully different from discovering them through a manual audit.

The same logic applies to locations. If you serve multiple areas, each location deserves its own page with content specific to that area.

"Every additional page on a website is associated with a 4% increase in AI crawler visits."

When populated with unique, useful content, dynamic pages are especially effective because they provide organized, structured information in exactly the format AI engines can read and extract from cleanly.

This is one of the most actionable changes most organizations can make. And it's a service we provide at Bonfire Studio.

A site that currently has 10 pages could reasonably build to 20 or 30 by properly expanding its service and location architecture, with meaningful impact on AI visibility at every step.

10 Signs Your Environmental Consulting Firm's Website Is Costing You Projects

Wed, 17 Jun 2026 18:25:28 GMT

Environmental consulting is a credibility business.

When a developer, bank, or project owner needs an environmental consulting firm, many of them start the same way anyone starts looking for a professional service: they search online.

And what they find on your website shapes their first impression of your firm before they have ever spoken to you.

That first impression determines a lot. Whether they pick up the phone. Whether they send an email. Whether your environmental consulting firm even makes the short list.

An outdated website does not just look a little neglected. It raises questions:

Is this firm still active?
Is their experience current?
Do they do work like ours?

And once those questions come up, they are hard to shake.

I've looked at a lot of environmental consulting firm websites, and many of them are very outdated. More so than in other industries.

The tells are things like:

The most recent projects in the portfolio are from years ago
A news section that hasn't been updated since the 2010s
Team pages referencing employees who are now retired
Certifications and affiliations that have lapsed
An outdated copyright year in the footer
A design that looks like it's from the early 2000s

So let's take a deeper dive into 10 signs your environmental consulting firm's website may be causing you to lose projects.

1. Your project portfolio hasn't been updated in years

This is a common and costly problem.

When someone lands on your website, one of the first things they look for is: have you done something like this before?

If your portfolio only shows work from several years ago, they have no way of knowing what your environmental consulting firm has been doing since then.

Even if you have completed a dozen relevant projects, if they are not on the website, they might as well not exist in the eyes of a prospect trying to evaluate your experience.

Environmental consulting work varies enormously by project type, sector, geography, and regulatory context. Prospects are not just looking for any project; they are looking for evidence that you have done work like theirs.

An outdated portfolio says nothing about whether you have. That is a problem.

3. Your team page is no longer accurate

This is one of the most common signs of a neglected website, and in environmental consulting, it matters more than in most industries.

Credentials are currency here. A site visitor evaluating your environmental consulting firm wants to know who is on your team, what they are licensed or certified in, and how much experience they bring.

If someone left two years ago and is still listed, that erodes trust immediately.

If new senior staff have joined, a PE, a certified ecologist, a floodplain manager, and they are not on the website, that is a missed opportunity to demonstrate your firm's depth.

And if certifications like CPESC, CWS, AICP, or professional engineering licenses are not listed or have not been updated, the site is quietly underselling people who have earned meaningful credentials.

The team page is often where a prospect forms their first real impression of who they would be working with. It should reflect the firm as it exists today.

4. Your services do not reflect current regulatory language

Environmental regulations evolve. EPA rules get updated. State permitting requirements shift. Agency guidance changes.

If your service descriptions still reference outdated frameworks, obsolete processes, or regulatory language that has changed since the website was first built, a prospect who knows the space will notice.

This is a nuanced but meaningful signal. It does not necessarily mean your environmental consulting firm is behind; it means your website is. But the person reading it cannot always tell the difference.

For a firm whose value proposition is technical expertise, having a website that sounds out of date on regulatory language is worth paying attention to.

5. Your certifications and affiliations are missing, or no longer accurate

Small business designations, DBE and WBE status, industry affiliations, and professional memberships all signal something meaningful to the prospect vetting your firm.

Missing certifications are a missed opportunity. But certifications that are listed and no longer current are a different problem: they can actively erode trust. If a prospect goes to verify a membership and finds your firm is no longer active in that organization, it can raise a red flag for them.

The same applies to industry associations like NAEP, AWRA, or state-level environmental groups. Active membership signals engagement. Lapsed membership that still appears on your site signals the opposite.

This is exactly the kind of thing that is easy to let slip and hard to catch without someone actively maintaining the website. It is also one of the things we keep up to date for the firms we work with through our ongoing website care plans.

6. There is no clear signal of what your firm specializes in

Generalist positioning is a quiet liability in a competitive specialty.

Environmental consulting covers an enormous range of work: wetland delineation, Phase I and II site assessments, NEPA compliance, air quality monitoring, natural resource management, ecological restoration, remediation, stormwater, cultural resources. The list goes on.

If your website tries to cover all of it without clearly communicating where your environmental consulting firm has the deepest experience, a prospect looking for specific expertise is left guessing.

The firms that get the call are often not the ones with the broadest service list. They are the ones that made it easiest for the prospect to see that their experience was directly relevant.

Your website should make that case clearly. If it does not, you are leaving a lot to chance.

7. Your news or insights section has gone stagnant

A lot of environmental consulting firm websites have a news or blog section that launched with strong intentions.

Project announcements. Regulatory updates. Conference recaps. And then, at some point, it just stopped. The last post is from six or seven years ago. The section is still there, just visibly dormant.

For many of the environmental consulting firm sites we have looked at, the news stopped well before 2020. That is not just a signal that no one is maintaining the website. It genuinely raises the question of whether the firm is still active. A prospect who finds a news section frozen in 2018 has every reason to wonder.

If you are not going to actively maintain that section, it is better to remove it or restructure it than to leave it as a visible timestamp of when the website was last cared for.

8. The copyright year in your footer is out of date

This one is small, but it stacks.

One small sign of neglect might not matter. Several stacked together start to shape an impression. The copyright year is often one of them.

9. The website is not mobile-friendly

Developers, project managers, and lenders look firms up everywhere, not just at a desktop.

If your website looks fine on a laptop but is difficult to navigate on a phone, text too small to read, layouts that do not resize, contact information buried and hard to find, you are creating friction at exactly the wrong moment.

A website that struggles on mobile can make an established environmental consulting firm look less current than it actually is. And it does not take long for a prospect to move on.

10. The website does not match the caliber of work your firm actually does

Some environmental consulting firms do sophisticated, technically complex, high-stakes work. And then they have a website that looks like it was built in 2012, with terrible stock photography, outdated look and feel, and generic language about commitment to excellence.

The website is often the first impression a prospect has of your environmental consulting firm. It sets expectations before your team, your credentials, and your project history ever enter the conversation.

If the quality of your website does not reflect the quality of your work, you are starting every new relationship at a disadvantage.

This is not about having a flashy site. It is about having a site that reflects the professionalism and technical depth your firm has actually built.

Why This Matters More in Environmental Consulting

Some businesses can get by with an outdated website if their referral network is strong enough, or they work only on government contracts. Referrals carry trust that the website does not need to establish.

But when a developer, a lender, or a project owner finds your environmental consulting firm through search and knows nothing about you, the website is doing all the work.

And anything that raises doubt, whether about your activity level, your team's experience, or attention to detail, can quietly end the conversation before it begins.

A website that accurately reflects who your firm is today is not a luxury. For the level of work you are competing for, it is a baseline.

What to Do If You Recognize Some of These Signs

The place to start is an honest assessment of where the gap is between what your website communicates and what your firm actually is today.

If you are not sure where things stand, we offer a free website review for environmental consulting firms. No pitch, just an honest look at what is working, what is not, and what would actually move the needle.

Start the Conversation →

Bonfire Studio builds and maintains websites for established environmental consulting firms. We handle the strategy, design, build, and ongoing care, so the site stays current after launch.

2. Your project descriptions are too vague to be useful

This is a separate issue from an outdated project list. Some environmental consulting firm websites do have recent projects listed, but the write-ups tell you almost nothing.

"Completed Phase II ESA for a commercial development client in the Southeast."

That tells a prospect very little. It does not tell them the project size, the regulatory complexity, what was found, how it was resolved, or what the outcome looked like for the client.

People evaluating your firm want specificity. They want to understand the scope of your experience, not just that you have experience.

Detailed project descriptions give you credibility. Our web design company can write them this way without even mentioning who the client is if the project location is confidential.

How to Choose a Web Design Company (Practical Buyer's Guide)

Thu, 04 Jun 2026 13:40:48 GMT

1. Get clear on scope

Before you start evaluating companies, it helps to get clear on the scope of what you're looking for.

A few questions worth thinking through before your first conversation:

Are you doing a full rebrand, or just rebuilding the site?

If your logo, color palette, and brand identity are already solid, a web developer can work with what you have.

If you're starting from scratch on brand, make sure the firm you're considering handles that — or that you have someone else handling it.

Do you need copywriting?

Some companies come to a website project with copy ready to go.

Others need help writing it from scratch. Not every web design firm offers copywriting, and it's worth knowing upfront whether that's part of the engagement or something you'll need to source separately.

Do you need e-commerce?

A site that sells products online is a meaningfully different project than a standard business website. Make sure the web designers you're talking to have relevant experience if you need an e-commerce website.

How complex is your organization?

A single-location business and a multi-location organization with dozens of providers or service lines have different structural needs.

The more complex your organization, the more important it is that the firm you hire has experience thinking through information architecture — not just website design.

Getting clear on these things before you start talking to web designers will help you filter faster. It will also help any firm you speak with give you a more accurate picture of what the project actually involves.

2. Look at their portfolio — with the right lens

Reviewing their web design portfolio is the obvious first step when researching web designers. But how you review it matters.

Keep in mind that a live website may look very different from what the designer originally built.

After a site is handed off, clients update pages, add content, and make changes over time — sometimes carefully, sometimes not.

A site that launched beautifully two years ago may not look the same today, and that's not necessarily a reflection of the designer's work.

So when you're reviewing a firm's portfolio, give more weight to the screenshots and case studies on their own site than to what the live version of those sites looks like today.

"Give more weight to the screenshots on the web designer's site than to what the live website looks like today."

Beyond aesthetics, look at whether they explain the thinking behind their work.

A portfolio that walks through the strategy — why certain decisions were made, what problems were being solved — tells you a lot more than one that just shows finished results.

It gives you a glimpse into how they think, which matters as much as how things look.

3. Look for signs they're staying current

Web design and SEO best practices change. A firm that was doing strong work five years ago may or may not still be current — and it's not always easy to tell from the outside.

One reasonable signal: do they publish thought leadership?

A web designer's blog , a YouTube channel, or active social media where they share what they know suggests a firm that's paying attention.

It also gives you a sense of how they think and communicate before you ever get on a call with them — which can be useful context early in the process.

4. Read their reviews

Look at what past clients say — not just about the finished website, but about the experience of working with the firm.

Were they easy to communicate with?
Did the project move at a reasonable pace?
Were there surprises along the way, and how were they handled?

Reviews often reveal patterns that a portfolio won't. A website developer can produce beautiful work and still be difficult to work with.

Conversely, a firm with a more modest portfolio might have an exceptional track record for client experience. Both things are worth knowing.

5. Ask how they run a project

Once you're in conversation with a web design company, ask them to walk you through how a project actually works.

How do they kick things off?
How are decisions made, and who makes them?
What does a typical timeline look like?
What do they need from you, and when?

A firm that can answer these questions plainly — without a lot of jargon or a lengthy deck — usually has a clear, repeatable process.

That matters.

A well-run project moves forward steadily. A poorly run one stalls, drags, and tends to consume more of your time than you expected.

6. Ask what happens after launch

This is the question most buyers forget to ask until it's too late.

A website isn't finished when it launches. It needs to be updated, maintained, and kept in working order over time.

Your company evolves
Integrations break
Plugins need updating

And without someone responsible for those things, websites tend to drift — slowly falling out of date in ways that aren't always obvious until the problems have been sitting there for a while.

Before you hire anyone, ask what their model looks like after launch.

Do they offer ongoing maintenance?
Is that included, optional, or not available at all?

If you'll be managing the site yourself after launch, make sure you understand what that actually involves.

Understanding what a website maintenance plan should include before you hire a firm is a reasonable step — it will help you ask better questions and know what you're signing up for.

7. Understand how pricing works

Web design pricing varies widely, and it's worth understanding what drives that variation before you start comparing quotes.

Factors that typically affect cost include:

Size and complexity of the website
Whether copywriting is included
The level of custom design work involved
The platform being built on

A firm's size and experience level will also affect their rates.

A newer or independent web designer may price differently than an established boutique firm or a larger agency — and there are legitimate reasons to consider options across that range depending on your needs and budget.

When comparing quotes, make sure you're comparing the same scope. A lower number on paper may reflect a narrower scope, not necessarily a lesser quality of work.

8. Pay attention to how they treat you before you hire them

The sales process is a preview.

How quickly do they respond to your initial inquiry?
Do they ask thoughtful questions, or do they move straight to pitching?
When you ask something direct, do you get a straight answer?

A firm that's responsive, curious, and clear when they're trying to win your business is likely to behave the same way once they have it.

A firm that's slow, vague, or difficult to pin down at this stage rarely improves after the contract is signed.

You don't need a formal scorecard. Just pay attention.

Quick Summary: What to Look For Before Your Hire a Web Design Company

1. Ge t clear on your scope before you start talking to firms

2. Review portfolios for design sensibility and strategic thinking — not just how the live site looks today

3. Look for signs the firm is staying current in the industry

4. Read reviews with an eye toward the working experience, not just the output

5. Ask how they run a project and what the timeline looks like

6. Ask what happens after launch — and who's responsible for ongoing maintenance

7. Understand what's driving the pricing before you compare quotes

8. Pay attention to how they com municate during the sales process

Ready to Start the Conversation?

If you're evaluating web design companies and want a straightforward sense of what working with Bonfire Studio looks like, we're happy to talk.

No pressure. No pitch deck. Just an honest conversation about what you need and whether we're a good fit.

Start the Conversation →

Most companies don't hire a web design firm very often. A website rebuild might happen once every five or seven years — sometimes longer.

So when the time comes, it's not always obvious what to look for in a web design company, what questions to ask, or how to tell a good fit from a bad one.

This guide is meant to make the process of how to choose a web design company easier.

What Every Business Should Understand About SEO in 2026

Tue, 12 May 2026 16:14:38 GMT

If you are having your company website built, or rebuilt, there are some important things about SEO that are worth knowing before the project begins.

Even your company’s business website is already humming away online, this is good to know information about how SEO works.

While it’s not on you to be the SEO expert, having some background knowledge is useful when evaluating web design companies and hiring service providers.

I’m the owner of Bonfire Studio, a web design studio that builds custom websites for companies that don’t have time to micro-manage the process.

I built my first website over 20 years ago, a lot has changed with SEO during that time. Let’s dive into what matters in 2026!

Part 1: What SEO is and Why it Matters

What Is SEO?

Search engine optimization (SEO) is the practice of building and maintaining a website so that it surfaces in search results when people are looking for what you offer.

It is not a single tactic. It is a collection of decisions made when structuring, creating content for, and maintaining a website.

Some of what’s involved in SEO doesn’t directly involve your website - which I’ll explain in part 3 about local SEO.

Done well, SEO means your website is:

Easy for search engines to find
Clearly understood as relevant to the right topics
Trusted enough to rank well among search engine results

Why SEO Matters

Organic search - the results that appear when someone types a query into Google - accounts for a significant share (53%) of all website traffic.

It captures people at different stages of the buying process:

Some are researching a category
Some are looking for service providers
Some are ready to make a decision

A well-positioned website can reach all of them.

For established businesses, a strong presence in search is not just a marketing tactic. It is a business development channel that works consistently.

Because Google holds approximately 90% of the global search market , this guide focuses primarily on how Google works.

Part 2: How Google Evaluates Your Website

Discovery, Relevance, and Authority

Understanding how Google evaluates websites makes it easier to see why the decisions made during a website build matter so much.

Discovery

Before Google can rank your site, it has to find it.

Google uses automated bots called crawlers to discover pages across the web. It then adds them to its “index” - a massive catalog of content it draws on when someone searches.

A well-structured website is easy for Google to discover, crawl and index completely.

Relevance

Once Google has found your website, it works to understand what it is about.

It looks at the content, the page structure, the title, and the keywords used throughout.

Pages that clearly address a specific topic - using the language your potential clients are actually searching - are more likely to surface for those searches.

Authority

While relevance tells Google what a page is about, authority tells Google whether to trust it.

Authority is built over time, largely through links from other reputable websites pointing to yours (aka "backlinks").

The more quality links a site earns, the more authority it carries, and the more favorably Google tends to treat it in rankings.

"All the content in the world doesn’t matter if you don’t have authority." (Hubspot)

E-E-A-T: What Google Values

Underlying all of this is a framework Google uses to evaluate the quality and credibility of web content:

E-E-A-T, which stands for Experience, Expertise, Authoritativeness, and Trustworthiness.

In practice, E-E-A-T shows up on a business website in some of these ways:

Experience

Evidence that the people behind the content have done this work firsthand

Case studies and project portfolios
Named authors with relevant professional backgrounds
Content that reflects genuine on-the-ground knowledge, not generic information

Expertise

Signals that the business and its people know their field

Team pages with credentials, roles, and bios
Blog content that demonstrates depth, not just breadth
Specific, accurate information that a non-expert would not know to include

Authoritativeness

Recognition from outside sources that the business is credible

Links from reputable industry websites, publications, or partners
Media mentions, awards, or professional affiliations
A track record that is visible and verifiable online

Trustworthiness

Signals that the business is legitimate and reliable

Reviews and testimonials from real clients
A well-maintained About page that accurately reflects the company today
Consistent, accurate business information across the web

Part 3: What Every Website Should Include

1. Site Structure and Page Depth

This is one of the most consequential decisions made during a website build - how to structure your website, what pages to include and what content to include on those pages.

Small (in terms of the number of pages) and narrow websites will not perform as well in search as larger websites that provide a lot of information about your products/services and company.

For example, it might seem like overkill to build out individual pages about each service your company offers - but it is not.

Small websites will not perform as well in search as large websites with a lot of information.

Individual service pages (depth) is one of the best ways to signal to search engines what your website is about and therefore, get found in search by potential customers searching for those services.

What this means in practice

This is not an argument for an unnecessarily large website. It is an argument for a site sized to match the full range of services and searches relevant to the business — not just the four things that fit on a homepage.

2. Page Titles and Meta Descriptions

Page titles (the <title> tag behind each page) and meta descriptions are two foundational elements of a well-optimized website.

Page titles are a direct ranking signal. Meaning, they tell Google what a page is about, and they often appear as the clickable headline in search results.

A clear, well-written title that reflects the page content and includes relevant search language will consistently outperform one that does not.

Meta descriptions are the supporting text beneath that headline in search results. They are not a direct ranking factor, but they directly influence whether someone clicks.

A well-written meta description gives the right person a clear reason to visit.

Before hiring a web designer, be sure they will include unique page titles and meta descriptions on each page of your website

3. A Blog or Resources Section

For businesses that want to perform well in search over time, a blog is one of the most effective tools available - and it is often underestimated.

Every new article is a page Google can index and rank — expanding the range of searches your site can surface for beyond what core service pages can cover.

A consistent body of well-written content also signals genuine expertise to Google, directly supporting E-E-A-T.

And useful, well-crafted articles are far more likely to earn links from other reputable sites than a static services page - and high-quality links are one of the strongest authority signals available.

One important caveat: a blog that goes quiet can work against you.

A news section with nothing recent, or an insights page untouched for months, raises questions - is this business still active? Is this information current?

If maintaining a blog consistently is not realistic, it is worth thinking carefully about how it appears on the site, rather than letting it go stale.

That said, maintaining a blog doesn’t require adding new content every week. Your blog might get updated just once a month, and that’s fine as well.

The bar is not volume. It is consistency and usefulness.

4. Local SEO

For businesses that serve a specific city or region, local search is an additional layer that impacts SEO, and it deserves its own attention.

Google Business Profile

This is the foundation of local search visibility. Your Google Business Profile powers the map results and the business panel that appears alongside search results.

Keeping your Google Business Profile accurate, complete, and actively maintained is one of the highest-leverage things a local business can do.

NAP Consistency

NAP stands for Name, Address, Phone number.

Google cross-references this information across your website, your Google Business Profile, and the various directories where your business appears online.

Inconsistencies — different phone numbers, outdated addresses, old locations still listed — create confusion and can suppress local rankings.

Consistency across every listing matters more than most businesses realize.

Location-Specific Pages

For businesses that serve multiple locations or want to rank in specific markets, dedicated pages for each location or service area give Google a clear signal about where you operate and who you serve.

A single page that mentions several cities in passing is far less effective than a well-structured page built specifically for each.

Location-specific pages is a strategy we used with our client Clark Health .

They operate a network of primary care clinics across their state, so we built out a unique page for each location explaining what services are offered and what providers work from that location.

SEO Isn’t a Feature, it’s a Mindset

SEO is not a feature to add during or after a website project.

It is built into the decisions made at the beginning and throughout - how the site is structured, how many pages it includes, what each page covers, and how the content is written.

When those decisions are made well, results can come faster than most people expect.

For example, within ten days of launching a newly rebuilt website for Headshot Love , an Asheville-based headshot photography studio, their top priority search terms moved from page five of Google results to position six on page one — without any paid advertising.

The site was simply built the right way.

Be sure to ask your web design partner how they approach SEO before you hire them.

Final Thoughts

Thinking about a new website and want to understand how yours currently performs in search?

We offer a free website audit — no pressure, no obligation. We will give you an honest read on what is working, what is not, and what is worth addressing.

In this article:

I’ll cover what search engine optimization is, how Google evaluates websites, and what that means for the way your site should be built.

Part 1: What SEO Is and Why It Matters

Part 2: How Google Evaluates Your Website

Part 3: What Every Website Should Include

What to Include in a Website Maintenance Plan (Checklist)

Mon, 13 Apr 2026 13:33:47 GMT

A lot of website development projects are planned around three phases — design, develop, launch.

Maintenance doesn't always make it onto the list from the start. And once the site is live and attention moves elsewhere, things start going wrong.

Without a website maintenance plan in place, a site will start to show it. Slowly at first. A team member who left is still on the About page. A contact form stops working. A plugin breaks.

In this article, I provide a checklist of what a website maintenance plan should include:

Content updates
Technical health checks
SEO maintenance
Security and platform updates
Visual and brand consistency

Plus, who should actually handle website maintenance.

1. Content Updates

This is the most visible layer of website maintenance, and the one that affects trust most directly.

Key pages need to be reviewed and updated on a regular basis. That includes:

Team and leadership pages: people join, people leave, titles change

Services pages: offerings evolve, positioning matures, old services are phased out

Location and contact information: especially for multi-location businesses that are regularly opening new locations

Case studies, testimonials, and portfolio work: trust signals are most effective when they are current

Time-sensitive content: any page that references dates, offers, or time-sensitive information

These all need someone checking them periodically and keeping them accurate.

Signs of an outdated website can quietly undermine credibility with exactly the people you most want to impress.

2. Technical Health Checks

A website can look fine on the surface while technical issues are building underneath.

Regular technical checks should cover:

Page speed and performance: slow load times frustrate visitors and hurt search rankings

Broken links: internal and external links can break over time, often without anyone noticing

Forms and calls to action: contact forms, booking links, and downloadable resources need to be tested periodically to confirm they are working correctly

Mobile display: layouts can shift or break as browsers and devices update

Cross-browser consistency: what looks right in Chrome may not look right everywhere else

3. SEO Maintenance

A website's search visibility is not something that can be set and forgotten.

A good website maintenance plan includes periodic SEO review, which covers:

Monitoring rankings for target keywords and noting meaningful shifts

Reviewing and updating page titles and meta descriptions as content evolves or rankings drift

Checking for crawl errors or indexing issues that might be suppressing visibility

Ensuring new pages are being indexed properly

Keeping internal linking updated as the site grows

Be sure the web design company you hire includes SEO, not just a pretty website.

4. Security and Platform Updates

This section is especially relevant for websites built on Wordpress and similar content management platforms.

A proper maintenance plan should include:

SSL certificate validity: an expired certificate triggers browser warnings that immediately damage trust

Core software updates: WordPress sites need to be kept up to date to the latest stable version for both security and performance

Plugin and theme updates: outdated plugins are one of the most common sources of vulnerabilities and breakage on WordPress sites

Uptime monitoring: knowing when a site goes down, rather than finding out from a client or prospect who tried to visit it

Security issues are often invisible. That is what makes them worth staying ahead of.

5. Visual and Brand Consistency

This one tends to develop gradually, which is part of what makes it easy to overlook.

A site that was designed well at launch can start to look inconsistent over time — because small ad hoc edits accumulate.

A new page gets added without quite matching the existing design

A headline gets rewritten in a different tone

Someone swaps in a slightly different button style

A section gets reorganized and no longer flows the way it was intended to

None of it feels like a big deal in the moment. But over time, a site that started out cohesive can start to feel pieced together.

Part of ongoing website maintenance is periodically stepping back and looking at the site as a whole. Making sure it still feels consistent and on-brand.

Who Should Handle Website Maintenance

Once you understand what a website maintenance plan needs to cover, the natural next question is who should actually be responsible for it.

There are two options.

1. Manage the website internally

Some companies assign website maintenance to a marketing coordinator or office manager.

This can work — but only if that person has the time, the technical comfort, and a clear checklist to work from.

In practice, internal website maintenance tends to slip. Mainly because managing the website competes with other projects on their plate.

Updates get delayed, someone changes job roles, checks get skipped. And the website slowly drifts in the background.

2. Working with a trusted partner

The other option is to hand ongoing website maintenance to the same team that built the site — or a qualified web development partner who knows the platform and understands your business.

This removes the maintenance responsibility from your internal team entirely. Someone else is watching the site, running the checks, making the updates, and flagging anything that needs attention.

For most established organizations, this is the more reliable option.

Because website maintenance requires consistent, focused attention — and that is a hard thing to sustain internally when other priorities are always competing for time.

"A website is not a one-time project. It is an ongoing business asset."

Want to know if your website is being properly maintained?

Most companies only think about website maintenance when something breaks. The ones with the healthiest sites treat it as an ongoing responsibility — and make sure someone is accountable for it.

At Bonfire Studio , every website we build comes with the option for ongoing care. We handle the maintenance so our clients do not have to.

We also offer a free website audit — no pressure, no obligation.

We will take an honest look at where things stand and give you a clear read on what is working, what needs attention, and what is worth addressing.

Contact us and request a free website audit →

10 Signs Your Company Website Is Outdated

Thu, 26 Mar 2026 15:59:03 GMT

A business website does not become outdated all at once, it happens gradually.

Pages stop getting updated. Small edits are made by different people over time. A blog that used to be active goes stale.

Nothing feels urgent enough to deal with right away, so the website keeps going as-is. And for a while, it still seems fine.

That is what makes it easy to overlook an outdated website. Your company website can still be live, functional, and technically “working” while also showing clear signs that it is out of date.

In this article we'll cover 10 signs your company website is outdated in 2026:

Your copyright year is outdated
Your team or about page is no longer accurate
Your services are behind where the company is now
Your case studies or credibility points are old
Important pages contain outdated details
Your blog or news section is no longer updated
Your forms, links or CTAs are broken
Your website has become visually inconsistent
The site hasn't been updated in a very long time
Your website has technical issues

Why This Matters

An outdated website does more than look a little neglected.

It can affect trust.

People notice when a website feels stale, even if they cannot immediately explain why. And in some cases, a business website that looks outdated can make potential customers wonder whether the company is still active, still growing, or still paying attention.

"A business website that looks outdated can make potential customers wonder whether the company is still active."

That is especially true if your site used to show signs of activity - such as a blog, news section, or updates page - and then everything simply stopped.

Not every company needs to publish content all the time. But when a website shows visible signs that it has not been maintained in a while, people notice.

If you are wondering whether your website may be starting to drift out of date, here are some of the most common signs to look for.

1. Your copyright year is outdated

This is a small one, but it matters.

Not all visitors will pick up on this but those who are attuned to the little details will notice it. And once a few signs of neglect start showing up, it risks impacting credibility.

Fortunately, while this is one of the simplest signs your website is outdated - it’s also one of the easiest things to fix.

2. Your team, or about page is no longer accurate

This is a very common sign of an outdated business website.

Someone left six months ago and is still listed on the team page

A new leader joined and never got added

The company has grown, changed locations, or evolved in a meaningful way - but the website still reflects an older version of the business.

That creates a subtle disconnect.

When someone is evaluating your company, they are trying to get a

current sense of who you are and how established you are.

If the information on your website no longer lines up with reality, that trust starts to weaken.

3. Your services or positioning are behind where the company is now

A lot of companies outgrow their website before they realize it.

Maybe the company has matured, but the website still sounds like an earlier-stage version of the business.

Maybe the quality of your work has gone up, your clientele has changed, or your offerings have become more refined - but the site still speaks in older, broader, or less polished terms.

That does not always look obviously wrong. But it can absolutely make the website less effective.

If your company has become more sophisticated and the website has not kept up, the site may still be technically accurate while quietly underselling the business.

That is one of the more subtle signs a website is outdated.

4. Your testimonials, case studies, or credibility points are old

Trust signals are most helpful when they are current.

If your testimonials are several years old, your featured work has not been updated in a long time, or your credibility points stop at a noticeably earlier chapter of the company, people notice that too.

For example:

You’ve won awards, but the dates on them are 5+ years old

You have a BBB Accredited badge but your business is no longer accredited

Your case study dates are all from many years ago

There haven’t been projects added to your portfolio since 2020

It is not so much one dramatic issue. It is more the overall impression.

If someone is trying to assess whether your company is active, credible, and moving forward, old proof can start to work against you, especially when paired with other signs your website is outdated.

A healthy business should generally have a website that shows some signs of life.

5. Important pages contain outdated details

This is where an outdated company website often starts showing its age in obvious ways.

Things like:

old service descriptions
outdated downloadable PDFs
references to offerings you no longer provide
old office locations
broken links
pages that still say “coming soon”
event or seasonal references that should have been removed long ago

These are the kinds of details that make a website feel unattended.

They also create unnecessary friction. If a prospect sees conflicting or outdated information, they now have to wonder which version is correct.

That is not a great way to start a business relationship.

6. Your blog or news section is no longer updated

This one is worth paying attention to because it can send a stronger message than people realize.

To be clear: you do not need to constantly publish blog posts to have a good website. Most companies do not need a high-volume content machine.

But if your website visibly suggests that your company does publish updates, and then those updates stopped a long time ago, that can create a bad signal.

A blog that ends abruptly. A news section with nothing recent. An “Insights” page that has not been touched in eight months.

That kind of silence can make people wonder:

Is the company still active?
Is this website still being maintained?
Is this information still current?

Even if your business is doing great, this is one of the clearest signs your website is outdated.

If you are not going to actively maintain a blog or updates section, it is better to be intentional about how it appears on the site than to let it slowly die in public.

7. Your forms, links, or calls to action are broken

This is one of the more important signs because now we are getting into things that can directly affect business.

A website can look perfectly fine while key functionality is quietly breaking.

That might mean:

a contact form is no longer routing correctly
a downloadable resource link is broken
a calendar link no longer works
a CTA points somewhere outdated
a form sends to someone who no longer works at the company

This is the kind of issue that usually sits unnoticed until someone internally happens to catch it. And in the meantime, you may have lost leads without realizing it.

"You may be losing leads without realizing it."

If nobody is periodically checking those things, problems can sit there longer than most companies would expect.

8. Your website has become visually or verbally inconsistent over time

This is a big one.

A lot of websites start out clean and cohesive because they were originally designed well.

Then over time, small edits get made by different people.

A new section gets added or rearranged

A page gets updated by someone trying to be helpful

Another person swaps in different button styles

Someone rewrites a headline in a different tone

A new page gets built without matching existing styles

The visual consistency gets weaker. The writing starts sounding like it came from three different people. Some pages feel carefully designed, while others feel improvised.

"Does your website look pieced together, or consistent?"

This is one of the clearest signs a website is outdated - when the site is no longer being maintained with the same level of care it was originally built with. It starts looking pieced together.

And yes, people absolutely notice this.

9. Your website has not been updated in a long time

This is the umbrella sign that often sits underneath everything else.

The absence of ongoing care results in a website that looks outdated.

While a website does not need constant redesigns, it does need someone paying attention to it.

And when that stops happening, the difference shows.

10. Your website has technical issues

Not every outdated website has obvious technical problems.

But when technical issues do start showing up, that is usually a strong sign the website is no longer being actively maintained the way it should be.

Technical issues with a website include:

pages loading slowly
images not displaying properly
layout issues on mobile
sections that no longer align correctly
outdated plugins or integrations causing problems
features that work inconsistently from one browser or device to another

A slow or unreliable website is not just frustrating — it can make the business itself feel less current, less polished, and less trustworthy.

And to make matters worse, technical issues are easy to miss unless someone is routinely checking the site.

If your website is starting to show technical wear, it is usually a sign that it needs attention.

What to Do If Your Website Is Outdated

If any of these signs of an outdated website apply to the company you own or where you work, it does not automatically mean you need a full website redesign.

Sometimes the site itself is still fundamentally solid.

What it usually means is that the website needs a proper review and a round of cleanup before small issues turn into bigger ones.

A good place to start is with the basics:

update anything that is clearly out of date
review your key pages for accuracy
test your forms and calls to action
remove or fix anything that feels neglected, broken, or inconsistent
make sure the website still reflects the company as it exists today

That alone can go a long way.

And if the site has been updated by different people over time, it is often worth stepping back and looking at it as a whole - not just page by page.

Is it still on-brand? Does it feel consistent throughout?

This will give your team a clear picture of what needs attention, what is still working, and whether the site needs maintenance,

cleanup, or a redesign.

How to Keep It From Happening Again

The bigger issue with most outdated websites is not usually one bad page or one broken form.

It is that no one is consistently responsible for the website after launch.

And as a result, small updates get delayed, content grows stale and inconsistencies start stacking up.

Before long, the website still technically works, but no longer reflects the business as well as it should.

The best way to prevent that is to make sure someone actually owns the website.

That does not mean your internal team needs to take on another project. It means someone should be responsible for keeping the site current, polished, and in good working order over time.

That is exactly what our website care services are for.

At Bonfire Studio , we build websites with long-term ownership in mind.

Every website we build comes with the option for ongoing care, so it stays current, consistent, and in good working order after launch - not just on day one.

That way, it does not quietly drift out of date over time.

If your current website is starting to show some of these signs, the first step is simply understanding where things stand and what actually needs attention.

From there, you can decide whether the right next move is cleanup, or a more comprehensive rebuild.

Concerned your website may be falling out of date?

If you are wondering whether your company website is showing signs that it is outdated, we offer a free website audit.

No pressure. No obligation.

We will take a look and give you an honest read on what feels current, what may be slipping, and what is actually worth addressing.

Are Duda Websites Good for SEO?

Mon, 16 Mar 2026 19:09:25 GMT

When companies evaluate website platforms, SEO performance is always part of the conversation.

It’s reasonable to ask whether Duda websites are good for SEO.

The answer is yes - Duda is great for SEO. Websites built on Duda perform very well in search results when the site is structured properly and maintained over time.

Search performance depends far more on technical foundation, site structure, and ongoing maintenance than on the specific platform used.

Duda provides a strong technical base for those things; which is one of the reasons our duda web design studio builds client websites on it.

But to understand why, it helps to look at what actually influences search rankings.

What Actually Determines SEO Performance

Google uses automated ranking systems that evaluate many signals to determine which pages should appear in search results.

While the exact algorithm is complex, Google has publicly confirmed several factors that influence how websites perform in search.

Some of the most important include:

1. Page speed and performance

Google confirmed that page speed is used as a ranking signal in search results.

2. Mobile usability

Google now uses the mobile version of a website as the primary basis for indexing and ranking, a system known as mobile-first indexing .

3. Page experience and usability

Google’s ranking systems aim to reward pages that provide a strong user experience , including fast loading and stable layout.

4. Content quality and relevance

Google evaluates whether a page provides useful, relevant information for the user’s query.

In other words, search engines are not judging websites based on which builder or CMS was used.

They evaluate how well the website performs and how helpful the content is.

"Search engines are not judging websites based on which website builder was used. They evaluate how well the website performs and how helpful the content is."

A good platform simply makes it easier to get those fundamentals right.

The Technical SEO Strengths of Duda

Duda includes several built-in features that support strong search performance.

1. Fast Page Delivery

Duda websites are delivered through a global content delivery network (CDN).

In simple terms, a CDN stores copies of your website on servers around the world. When someone visits your site, it loads from the server closest to them instead of from a single location.

That helps pages load faster, which matters for both user experience and search performance. Google has confirmed that page speed is a ranking signal , particularly for slower sites.

2. Strong Mobile Performance

Because Google now uses mobile-first indexing , the mobile version of a website is the primary version evaluated for ranking .

Duda provides responsive design tools and a flexible framework that helps websites to perform well across devices, but the mobile experience still depends on your website designer to create and refine.

3. Built-In SEO Controls

Duda also provides control over key on-page SEO elements, including:

page titles
meta descriptions
image alt text
structured data
canonical URLs
redirects

These are the technical tools needed to properly optimize a website for search engines.

The platform doesn’t “do SEO for you,” but it gives you the ability to implement the fundamentals correctly.

A Real Example From One of Our Clients

We recently launched a new Duda website for a client.

Within ten days of launch , their rankings improved dramatically :

Several of their most valuable keywords went from position 50+ to the top ten results .

No new blog posts were added during that period.

What changed?

We rebuilt the site with:

better page structure
improved technical performance
stronger on-page SEO
clearer internal linking

In other words, Duda provided a strong technical foundation, and the site itself was optimized properly.

Duda didn’t magically create those rankings, but it certainly didn’t limit them either.

What Actually Drives SEO Results

This is where many conversations about website platforms miss the point.

SEO success rarely comes from the platform itself.

It comes from things like:

clear site structure
useful content
strong internal linking
fast performance
regular maintenance

links and reputation (e.g. links from trusted websites, online reviews)

Unfortunately, many websites launch and then slowly fall apart.

Pages go out of date
Content stops evolving
Technical issues accumulate

Search engines reward websites that stay healthy, structured, and maintained over time.

That’s why our approach as a duda web design studio doesn’t end at launch. Ongoing care is a big part of keeping a website performing well.

The Real SEO Risk: Neglected Websites

In practice, most SEO problems aren’t caused by the platform.

They’re caused by websites that nobody maintains.

Common issues include:

outdated content
broken links
slow plugins
neglected technical updates
poor site structure

Over time, these issues quietly erode search performance.

A healthy website requires ongoing care, not just a good launch.

So, Are Duda Websites Good for SEO?

Yes.

Duda provides the technical foundation needed for strong search performance:

fast page delivery
mobile-friendly design
modern SEO controls
reliable infrastructure

But like any platform, the real results come from how the website is built and maintained.

A well-structured, well-maintained website can perform extremely well in search, regardless of the platform behind it.

And when the foundation is solid, the work of improving the website becomes much easier.

That same foundation also sets your site up well for AI search, which is where more and more of your potential clients are starting their search. See how to get your Duda website cited in ChatGPT, Perplexity, and Google's AI Overviews .

"SEO success rarely comes from the website platform used. Whether your site is built on Duda or Wordpress or Shopify, you can still perform well in search."

Thinking about building a new Duda website?

We design and build websites that are structured for search performance, usability, and long-term growth.

If you want to get it right from the start, request a quote today.

How to Remove Fake Google Reviews

Fri, 13 Feb 2026 19:46:28 GMT

If you’re here, something frustrating likely happened and you need to know how to remove a fake Google review from your business profile.

First, some good news.

If a review truly violates Google’s policies, Google wants it removed too. They provide a formal process to report and appeal reviews that contain prohibited content.

In this guide, we’ll walk you through:

What qualifies as a fake Google review
What does not qualify as a fake Google review
Steps to report a fake review
How to appeal if Google denies your request
What to do if the fake review stays live

But if you just want to know how to get a fake Google review removed, here is the short answer...

Step 2: Locate the Review

Find the review you want to report.

To make it easier to find, you can sort reviews by:

Lowest rating
Most recent

Step 3: Report the Review

Click the three-dot menu next to the fake review.

Always remain professional — moderators are volunteers who help escalate legitimate issues.

Frequently Asked Questions

Are fake reviews automatically deleted after reporting?

No. Reporting triggers a review process. Google evaluates whether the content violates policy before making a decision.

How long does it take Google to remove a fake review?

Google states reviews are typically evaluated within a few days .

That said, there are multiple reports on Reddit of reported reviews sitting in ‘Pending’ status for months and longer. If this happens to you, follow Step 2 above and contact official support.

Additional Strategies to Protect Your Reputation

If removal doesn’t happen, here are practical next steps.

1. Respond Professionally

You should respond to every review — including fake ones.

Your response isn’t just for the reviewer. It’s for future customers reading your reviews.

Keep your reply:

Calm
Professional
Brief
Focused on resolution

Example:

“We’ve reviewed our customer records and are unable to locate a customer with this name. If this review was intended for our business, we’d appreciate the opportunity to connect directly and resolve the issue.”

This demonstrates transparency without escalating conflict. Avoid this approach if you're with a healthcare organization that must abide by HIPAA.

2. Reach out the Person Directly

If you know who posted the review, it may be helpful to reach out to them directly. Offer genuine empathy and attempt to resolve the situation with them 1-on-1.

If you can repair what went wrong they may take the review down or update it as an act of goodwill.

3. Generate More Positive Reviews

One negative review carries far less weight when surrounded by consistent five-star feedback.

Build a system for regularly requesting reviews from happy customers.

A steady flow of authentic positive reviews:

Boosts your star rating
Builds credibility
Dilutes the impact of isolated negatives

This is the most reliable long-term strategy.

4. Consider Professional Reputation Management (Carefully)

Reputation management firms cannot override Google’s policies.

No legitimate agency has “special connections” that guarantee removal.

However, experienced professionals may:

Help frame appeals correctly
Identify policy violations you may have missed
Manage broader reputation strategy

If you hire outside help, choose carefully and avoid companies that promise guaranteed deletions.

5. Legal Action (Rare Situations)

If a review is clearly defamatory and you can identify the author, consult an attorney.

Legal action is typically a last resort due to time and cost. It should be approached strategically and professionally.

Final Thoughts on How to Delete a Fake Google Review

Fake reviews are frustrating — especially when your business reputation matters.

While you cannot manually delete reviews, you can:

Understand Google’s policies
Report violations properly
Appeal when necessary
Protect your reputation through consistent positive reviews

If managing your online presence feels overwhelming, that’s exactly why we exist.

At Bonfire Studio , we help established businesses in complex and regulated industries maintain polished, professional brands — from their website to their online reputation.

You may be interested in our Google Business Profile management services . We keep your listing current and accurate with regular updates; and we respond to every review you receive. Including reporting any and all fake reviews plus handling the appeal process if the fake review isn't reviewed.

"A bad review is not automatically a fake review."

If a real client had a negative experience and shares it — even if you disagree with their version of events — Google typically will not remove it unless it violates a specific policy.

Google does not mediate factual disputes between businesses and customers. If someone claims they received poor service, Google generally will not determine who is right.

That distinction is important before you begin the reporting process.

Steps to Report a Fake Google Review

You cannot delete fake reviews yourself — but you can report them for policy violations.

Step 1: Access Your Google Business Profile

Sign into your Google Business Profile .

Then, click Reviews in the menu on the left.

What Is a Fake Google Review?

A fake Google review is any review not based on a genuine client's experience with your company.

Examples include:

Fake negative reviews from someone who was never a client
Reviews posted by competitors (for the purpose of sabotage)
Spam or bot-generated reviews
Reviews posted from fake accounts
Incentivized or paid reviews

Google’s policies prohibit misleading, deceptive, or conflict-of-interest reviews.

If a review clearly violates those guidelines, it can be removed.

You can also report a review that contains harassment, hate speech, or prohibited content.

What Is Not a Fake Review?

Steps to Remove a Fake Google Review

Sign into your Google Business Profile
Click "Reviews" in the left navigation panel
Locate the fake review
Click the three dots to the right of the review
Select "Flag as inappropriate"
Choose a reason
Submit

Then, select “Flag an inappropriate”

You’ll be prompted to choose a reason why you're reporting the review, such as:

Spam
Conflict of interest
Discrimination or hate speech
Personal information

Choose the option that best matches the violation and submit.

Google will review your request. Reporting does not automatically result in removal.

How to Check the Status of a Review You've Reported

Google manages the status of reported reviews through its Business Profile Support system.

To check your status:

Sign into the Business Profile support website
Confirm your email, if asked
Select the business to review

You’ll see a list of reviews you've reported and whether:

The review was removed
No policy violation was found
The decision is still pending

Reviews can take several days (sometimes longer) to process.

What to Do If Google Doesn’t Remove the Fake Review

If Google determines no violation occurred, you can submit an appeal.

Step 1: Appeal the Decision

Within the same page you checked for the status of a reported review, you should see an option to "Appeal eligible reviews".

When appealing:

Clearly reference the policy you believe was violated
Be concise and factual
Avoid emotional language

If the appeal is denied, Google will notify you.

Step 2: Contact Official Support

If you believe the review clearly violates policy , you can continue working through Google Business Profile Support channels.

In some cases, you may also post in the Google Business Profile Help Community , where product experts can review your case and provide guidance.

If they agree that the review violates a Google policy they may personally escalate the request to delete the review for you.