What should a production corporate website include?
- Delivery: global CDN caching, responsive images, light pages, healthy Core Web Vitals and a low p95 HTML response; no broken images
- SEO hygiene: canonical URLs, a consistent sitemap and correct redirects
- Forms (contact, tender, vendor): anti-spam, CSRF/rate limits, secure attachment handling, and delivery monitoring with retries
- Admin/CMS isolation from the public site, with MFA and least privilege
- Privacy: enquiry-data retention rules and analytics/GTM consent where required
- Safe backups and reliable mail routing