Capstone project: a complete, optimized, secure and compliant business website

Capstone project — Building a professional business website from A to Z

Goal: build a real business website (a small fictional company or your own) by applying every level of the guide — from choosing hosting to a compliant launch.
Materials: the launch checklist below (to tick off as you go) — the professionals' memo.
Method: one step per level. Ideal: build LOCALLY (0.3), then migrate online at the end (5.2).

Step 0 · Level 0 — Laying the foundations

Install WordPress (locally, to practice). Create a secure admin account (not “admin”), explore the dashboard and define the type of site (business site, with or without a blog).

Step 1 · Level 1 — Creating the structure and content

Create the key pages (Home, About, Services, Contact) and 1-2 posts. Compose with Gutenberg (blocks, columns, patterns), insert optimized images (with alt text filled in), build the menu and set permalinks to “Post name”.

Step 2 · Level 2 — Styling the site

Install a lightweight block theme, customize the Global styles (colors, font, logo) via FSE or the Customizer, polish the footer, build an attractive homepage (hero + sections + CTA) and CHECK it on mobile.

Step 3 · Level 3 — Adding essential features

Install the key plugins: SEO (Yoast/Rank Math + optimizing one page), caching (PageSpeed measurement before/after), security + automatic backup (UpdraftPlus), and a working contact form (with SMTP if needed).

Step 4 · Level 4 — Advanced features (optional)

Depending on your project, add ONE component: a WooCommerce store, a second language (Polylang), a membership area, CSS/child theme customization, or a custom post type (CPT + ACF, e.g. “Projects”).

Step 5 · Level 5 — Going live, compliant and maintained

Bring the site into GDPR compliance (cookie consent, legal notice, privacy policy). Migrate the local site to online hosting (5.2), check everything, and plan maintenance (backups + updates).

Success criteria

Clear page structure + menu + SEO-friendly permalinks, checked on mobile.
SEO, caching, security and automatic backup in place; a contact form that actually receives emails.
GDPR-compliant site (prior consent, legal pages) and a conversion-oriented homepage.
A defined maintenance plan (backups + updates) — and, if migrating: a working live site with no broken links.