NEXT_PUBLIC Is Not a Vault: Frontend Environment Variables Are Not Secrets
A myth-busting audit for Next.js, Vite, source maps, and build artifacts: how to detect and remediate credentials accidentally shipped to browsers.
Manual technical website audit for businesses without an internal web team: tracking, external services, performance, security headers, and visible required areas such as imprint, privacy policy, and cookie settings – prioritized in plain language, without legal advice.
Book manual website check from €249Technical audit and implementation, not legal advice. I check visible signals, integrations, and delivery issues; legal texts and binding legal assessments remain the work of lawyers or privacy consultants.
Free website quick test
Signal
Enter a URL to start
2-5 days
Delivery
Prioritized
Measures
Optional
Fixes
Who this is for
You know your business. I know the technical issues that build up over the years – and how to prioritize them.
Without a dedicated IT department, but with a website that needs regular technical checks.
Where reliability, visibility, and reachable required areas matter.
Who do not have time for plugin chaos, slow pages, or cookie questions.
Who moved fast with ChatGPT, Cursor, or Claude and now need stability.
I review websites from practical technical work: what is risky, what is unnecessary, and what actually needs to be done? The perspective comes from frontend, CMS, legacy, and rescue projects, not from a redesign pitch.
Experience with WordPress, CMS platforms, custom websites, and long-running legacy projects.
Pragmatic assessment for small businesses, practices, law firms, local services, and founders.
Clear recommendation: repair, monitor, brief your existing agency, or intentionally do nothing.
You can use the report with your existing provider. If design, communication, production, or broader implementation is needed, an independent partner can be useful.

Implementation partner for clear print and web presences: media design, project management, PR, signage, media production, IT services, social media, and content.
What you get
Every package ends with a documented assessment you can reuse – whether you change something yourself, hire an agency, or continue with me directly.
HTTPS, headers, tracking, external scripts, performance, mobile usability, and visible required areas.
A clear order: what is critical, what can wait, and what delivers the most impact for the least effort.
Concrete next steps, estimated effort, and a clear boundary of what I can take on.
Afterwards you know whether a repair, a leaner rebuild, or no action at all makes the most sense.
11 sections covering hosting, security, cookies, backups, forms, AI tools and more. Technical, practical, no legal advice.
Report preview
The report shows findings, technical risks, and prioritized measures. It is a decision basis: repair now, plan for later, monitor, or take no immediate action.
How it works
Choose a package, enter the URL or repository, and book. Work only starts after your explicit approval.
I analyze the relevant signals: tracking, required areas, performance, security headers, build errors, or AI shortcuts.
You receive an understandable assessment with priorities. Implementation is only booked if it makes sense for you.
I check technical signals and give you a clear priority list, not legal assessments.
Booking creates the order. Work begins only after you confirm the start in the customer panel.
You receive concrete findings sorted by risk, effort, and impact.
Every package includes a written summary of findings and next steps.
14 signals found, 3 critical
Trade business, Brandenburg
Tracking stopped before consent
Service provider, Berlin
Load time reduced by 40%
Online shop, Saxony
Imprint & privacy verifiable
Law firm, Bavaria
Websites technically reviewed
All figures are anonymized real-world case examples.
I check whether relevant required areas are technically visible, appear complete, and are delivered correctly. I do not provide binding assessments of individual legal texts.
Packages
All packages are designed as technical audits or targeted fix packages. You can start with an audit, share the report internally or with your agency, and decide without pressure whether implementation makes sense.
When you want to quickly know whether your website has obvious technical or tracking issues — no appointment, no call.
Asynchronous written express check with results within 48 hours.
one-time payment, plus VAT where applicable
Risk reversal
If the express check finds nothing actionable, you can receive a refund within 14 days — as long as the review has not yet started. After that, the full amount is credited when you book a higher-tier package.
Commercial terms
When nobody is sure which scripts, cookie signals, or technical risks are currently running on the site.
Manual technical first assessment and clear priorities within two business days.
one-time payment, plus VAT where applicable
Risk reversal
If the check finds nothing actionable, we discuss how the price can still be used meaningfully — for example as credit toward a follow-up package.
Commercial terms
When the website matters, but nobody knows which visible required areas, technical risks, and fixes actually have priority.
Audit, assessment, and concrete action plan within 3-5 business days.
one-time payment, plus VAT where applicable
Risk reversal
If the audit finds only low technical risk, the audit price is fully credited when you book a fix package.
Commercial terms
When the check shows that targeted technical repairs are enough and a full redesign is not the next step.
Audit plus up to six hours of technical implementation after short alignment.
one-time payment, plus VAT where applicable
Risk reversal
After the sprint, any remaining items are clearly documented. If nothing is urgent, you do not book further implementation.
Commercial terms
For small businesses without an internal web team that need ongoing technical calm instead of occasional emergencies.
Monthly technical support after a short onboarding check.
monthly subscription, plus VAT where applicable
Commercial terms
Results and timelines depend on the concrete state of your website or repository. You only book implementation if the priorities make sense.
Comparison
The packages are not a redesign ladder. They separate fast clarity, deeper audit, targeted implementation, and ongoing care.
| Criteria | Express Website Check€99 | Manual Website Check€249 | Technical Website Audit€549 | Audit & Fix Sprint€1190 | Website Protection & Maintenance€279/month |
|---|---|---|---|---|---|
| Delivery | Asynchronous written express check with results within 48 hours. | Manual technical first assessment and clear priorities within two business days. | Audit, assessment, and concrete action plan within 3-5 business days. | Audit plus up to six hours of technical implementation after short alignment. | Monthly technical support after a short onboarding check. |
| Best when | you need a fast first signal | the site needs a documented decision basis | clear fixes should follow the audit | ongoing care is the real problem | |
| Implementation included | No | No | Up to 6 hours | Small monthly fixes | |
| Decision output | repair, monitor, or ignore | prioritized action plan | fixed items plus remaining list | monthly priorities |
11 sections covering hosting, security, cookies, backups, forms, AI tools and more. Technical, practical, no legal advice.
Latest insights
Short, practical articles for deciding what to check, fix, or leave alone first.
A myth-busting audit for Next.js, Vite, source maps, and build artifacts: how to detect and remediate credentials accidentally shipped to browsers.
How an outdated WordPress site became a modern Next.js website with clearer positioning, protected customer access, web dictation, CI and controlled VPS deployment.
FAQ
No. I check technical signals, visible required areas, and suspicious integrations. Legal texts and binding legal assessments remain the work of lawyers or privacy consultants.
The manual website check and AI code triage are designed for two business days. More thorough packages like the technical website audit or stabilization need a bit more time.
No. You can book only the audit at any time. If you like, we clarify the right fix scope afterwards.
Then that is a useful result. For paid packages, the risk-reversal applies: if the check or audit finds nothing actionable, we discuss how the price can still be used meaningfully — for example as credit toward a suitable follow-up package.
No. The goal is clarity before spending money. If a few repairs are enough, the report will say exactly that.
Yes. The findings are written so your existing providers can reuse the locations and priorities.
Yes, as long as the website is publicly reachable. For the fixes, the possible scope depends on system access and the technical platform.
Small businesses, practices, law firms, local services, clubs, and founders who need technical clarity without an internal web team.
Legal advice, legal text writing, binding document review, and an automatic redesign are not included. The work covers technical signals, findings, and priorities.
For pure checks, usually just the URL. For fixes or code rescue I may need CMS, hosting, or repository access depending on the system. We clarify this before starting.
Start with a technical check. If the findings are minor, you can stop there, hand the report to your existing team, or book targeted fixes later.
Technical audit and implementation, not legal advice. I check visible signals, integrations, and delivery issues; legal texts and binding legal assessments remain the work of lawyers or privacy consultants.