Small business web
What a small business website costs to build and to own, and when an off-the-shelf tool such as Shopify or a booking app is the better buy.
Overview
For most small businesses the right website is a quick marketing site, with an off-the-shelf tool for booking or selling until the business outgrows it.
Our published prices run from $3,000 to $10,000 for a marketing site and $6,000 to $15,000 for a site with one working feature such as booking or ordering. Web applications start at $15,000. What moves a quote is mostly the number of page designs and whether anything on the site is interactive, and handing over finished text and photos is the biggest saving you control.
WordPress suits a site that is mostly content on a small budget, as long as someone keeps it updated; several of the security write-ups in the Journal are about WordPress and its plugins. We build marketing sites on Astro, which sends very little code to the phone, and use Next.js when customers need to log in or pay.
For selling online and taking bookings, the articles start from the tools you can rent. Shopify suits most stores, and Calendly, Square or Jane cover most booking needs for at most about $100 a month. A custom build starts to pay off when your buying or booking flow is unusual or has to connect to your own systems, or when the platform's fees grow large at your volume. Restaurants have the clearest case: delivery apps take 20 to 30 percent of each order, and moving your regulars to your own ordering can pay for the build.
Ontario's accessible-website rule under AODA binds organizations with 50 or more employees, so most small businesses are exempt from it. If you have 20 or more employees, you still have to file an accessibility compliance report by December 31, 2026. A site that works with a screen reader and a keyboard reaches more customers either way, and it costs little when it is built in from the start.
We build websites, online ordering and booking at a fixed price, agreed in writing before work starts.
Start here
-
What a custom small business website costs in Toronto in 2026
Our price brackets, what moves a quote up or down, and the charges you should refuse.
-
Astro vs Next.js vs WordPress for a small business in 2026
Which of the common ways to build a site fits yours, decided by what the site has to do.
-
Shopify or a custom storefront: how a Toronto retailer should choose in 2026
Why most stores should stay on Shopify, and the signs that a store of your own would pay for itself.
-
Online booking: when to buy off the shelf, when to build your own
Which booking app fits your kind of business, and when it is time to build your own.
Articles (52 articles)
September 2026 (16 articles)
-
We checked every Ontario and federal technology grant a Toronto small business can apply for today, and the one that could pay for a website closes on October 9
-
Next.js 16.3.6 fixes a flaw that turns text on an Open Graph card into code running on your server, and the library that finishes the chain still ships in sharp's current release
-
WordPress 7.1.2 fixes a flaw that lets a stranger run code on your site, and the first attack arrived before the patch was public
-
cPanel fixed a root escalation any shared-hosting customer can use, but not on every branch
-
WordPress 7.1.1 fixes a flaw that turns a harmless comment into a script on the page
-
Exploited Acronis Backup plugin: DirectAdmin's update channel served the vulnerable build for eight days
-
Vite dev servers patched for CVE-2026-39364 still serve your npm token
-
GitLab's September 10 CVSS 10.0 flaw can expose the keys that decrypt your instance
-
Shopify gave every Liquid store ten WebMCP tools for AI agents on August 5
-
Google sunset the Content API for Shopping on August 18: how to check your feed
-
Meta Business Agent pricing: when it is free and when it costs 4 to 5 cents a reply
-
Magento StyleSmuggler (CVE-2026-75650): check for compromise before you patch
-
Google's August 20 Preferred Sources button: what it does and what it costs
-
All-in-One WP Migration flaw CVE-2026-19949 triggers when you restore a backup
-
After OpenAI's GPT-6 Astra, exploitation data still points at WordPress plugins
-
Live Stripe keys from hundreds of merchants leaked, likely via exposed .env files
August 2026 (22 articles)
-
npm audit misses the critical libheif RCE that reaches Next.js through sharp
-
Chrome, Edge and Firefox now ship every two weeks, so deprecations arrive sooner
-
Chrome 154 finishes switching off the unload event on September 22
-
Gitea CVE-2026-60004 lets any new account run code on a default install
-
ClickFix fake CAPTCHA attacks get staff to paste and run the attacker's command
-
TranslatePress saved admin password reset links in a table anyone could read
-
Google's August 2026 spam update tightened enforcement of rules it already had
-
npm 12 turns off install scripts by default: what it blocks and what it breaks
-
Postgres closed a record 28 CVEs, six found by AI and two whose fixes change behaviour
-
What status page incident counts at five hosting providers say about reliability
-
WordPress core's pre-auth wp2shell RCE: how to check your site is patched and clean
-
Google Search Console now lets a site opt out of AI Overviews and AI Mode
-
Chrome 154 puts a full-page warning on HTTP-only sites from September 22
-
SPF, DKIM and DMARC: how to stop others sending email as your business
-
Canada's Real-Time Rail instant payment rules take effect August 24
-
PostgreSQL 19 arrives this fall with six changes that matter for a small app
-
Cloudflare's AI crawler settings change on September 15 and can block Googlebot
-
Your website's TLS certificate now lasts 200 days at most, down from 398
-
Node.js moves to yearly releases in October 2026: which versions still get patches
-
npm supply chain attacks in 2026: the August 4 worm and the settings that block it
-
AI shopping in 2026: customers find products in chat and still buy on your site
-
Why Postgres is still our default database in 2026, and the extensions that make it one
June 2026 (6 articles)
-
How to make your website AI-readable so assistants can recommend your business
-
Answer-engine optimization checklist: 13 checks for showing up in AI answers
-
What AODA requires of your Ontario business website in 2026
-
What the delivery apps cost a Toronto restaurant in 2026
-
Online booking: when to buy off the shelf, when to build your own
-
Shopify or a custom storefront: how a Toronto retailer should choose in 2026
May 2026 (4 articles)
April 2026 (2 articles)
March 2025 (1 article)
February 2025 (1 article)
Start a project
Tell us what you need built.
Send a few lines about your business and what you have in mind. We reply within one business day, book a 30‑minute call if it makes sense, and send a fixed quote in writing after that.
Or call 647-252-5352, Monday to Friday, 9 am to 6 pm Toronto time.