Twenty-five years building for the web, from the first line of design to the rack it runs on. You get one person who understands your whole system and answers when you call, not a ticket in somebody's queue.
I'm Joe Stone, a full-stack developer and infrastructure engineer. I started building on the web at thirteen and have spent the twenty-five years since writing software and running the systems underneath it: enterprise platforms with six figures of desktops on them, and gaming networks carrying tens of thousands of people at once.
Most shops split your project across a designer, a developer, a rented server and a support queue, and the gaps between them become your problem. I do the whole thing: the design, every line of code, the server it lives on, and the network in front of it. Nothing gets handed off, so nothing falls between.
That means the person who picks up the phone is the person who knows why the thing is doing what it is doing. No escalation, no ticket number, no waiting on a vendor to answer a vendor.
It also means I can say yes to the awkward requests. A booking flow that matches how you actually schedule, a dashboard for the numbers you check every morning, an ordering page your regulars can use in three taps. If it can be built, it does not need to be somebody else's product.
Your website is not going to be the hardest thing I run this year, and that is rather the point. The habits come from environments where an outage meant a division stopped working, or thirty thousand people noticed at once.
Day to day I work inside enterprise environments most people never see the inside of. One runs more than 100,000 concurrent virtual desktop sessions a day. In another I am responsible for close to 200,000 endpoints under seat management. Architecture reviews, capacity planning, security posture, and the calls where the answer has to be right the first time.
100K+ DAILY VDI SESSIONS · 200K+ ENDPOINTS · ENTERPRISE ADVISORYI build with AI the same way I build everything else: end to end, and actually shipped. Agents that answer the phone and complete a real onboarding start to finish. Workflows and automations wired into systems a business already runs. Retrieval over a company's own documents. I work across every major provider and Azure AI Foundry, and I run custom and self-hosted models where the data should not leave the building. The intake on this site is mine. So is the phone number that does the same thing.
AI FOUNDRY · VOICE AGENTS · MCP · CUSTOM LLMS · RAG · AUTOMATIONI led physical and virtual infrastructure for a large enterprise division, growing the VDI platform to 50,000 virtual desktops inside a 130,000+ endpoint estate: the environment thousands of staff worked on every day. Direct accountability for PCI compliance, from deployment through annual review and remediation. My team held 95%+ patch compliance, a mark no other department came close to.
VMWARE · AZURE VIRTUAL DESKTOP · PCI-DSS · 95%+ PATCHEDFor years I built and ran the entire stack behind large-scale online gaming platforms: dozens of live communities operating at the same time, 25,000 to 30,000 concurrent users across the network, and 50 to 60 million web hits a month. Bare metal, databases, game servers, web front ends and the network in front of all of it, kept running while people were actively using it. Nothing about that scale is forgiving.
30K CONCURRENT · 60M HITS/MO · FULL STACKGame servers attract attacks most businesses will never see. I hardened hosts by hand, wrote custom firewall rule sets, and tuned deep packet inspection to fingerprint hostile UDP game traffic at the network edge, with layered enterprise DDoS mitigation in front of all of it. Coordinated volumetric and application-layer campaigns that take most operators offline did not take us offline.
DPI · CUSTOM FIREWALL · WAF · VOLUMETRIC MITIGATIONYears before anyone called it AI, I was designing and training my own models to detect cheating in online games. One of them read the screen: an OCR pipeline that recognised the visual signature of a cheat tool in real time, catching what signature-based detection structurally could not. The approach worked well enough that it went on to influence anti-cheat well beyond the servers I ran.
OCR · CUSTOM MODELS · REAL-TIME DETECTIONHTML at thirteen, then Visual Basic, object-oriented programming, .NET, and eventually the modern JavaScript stack this platform runs on. Along the way: an analytics platform 300+ staff used to track service levels, a remote support tool deployed to 100+ frontline engineers, applications used company-wide at a national retailer, and hardware, networks and custom portals for over a thousand small businesses. That last one is the job I liked best. It is the one this page is for.
NODE · C# · PHP · APACHE · NGINX · SQLDesktop platforms in every form they take: physical fleets, virtual sessions, and the cloud they run in, plus the identity, security and automation layers around them. This is current tooling I work in now, not a list of things I once touched.
That is the background. What it buys you is a smaller thing done properly: a site that loads fast, stays up, and is looked after by the person who built it.
Start a conversation →Passwordless sign-in, live project tracking, file exchange both ways, quotes, invoices and card payments. Written from scratch with zero third-party packages.
NODE · SQLITE · STRIPE · NO DEPENDENCIESClients describe what they need in plain language, upload whatever they already have, and it files a structured, costed request on the other side. Or they use a form. Their choice, never mine.
GROK · STRUCTURED OUTPUT · VISIONReal numbers from the machine rendering this page: load, memory, temperature, uptime, and the solar and battery keeping it powered. Not a status badge someone updates by hand.
REAL TELEMETRY · UPDATED EVERY 6sCloudflare Enterprise turns away the floods, a ProofPoint firewall guards the perimeter, and a web application firewall reads what is left. The API validates against a published schema, anything probing for holes is banned automatically, and the rack itself is behind access control.
CLOUDFLARE ENTERPRISE · PROOFPOINT · WAF · AUTO-BANCredibility-first sites for contractors and crews, with quote capture and mobile layouts that win the call.
Menus and online ordering for local food spots, fast and simple so customers order in a few taps.
Getting small businesses found. Fast pages, clean structure, and a real local footprint that shows up.
Dashboards, trackers, and small internal apps built to fit the exact way a business already works.
One page that says who you are, loads instantly, and gets you found. Often live within days, and genuinely enough for a lot of businesses.
DaysSeveral pages, a menu or a portfolio, forms that actually reach you, and booking or ordering built the way you already work.
WeeksCustomer portals, dashboards, internal tools, accounts and payments, wired into the systems you already run. This site's portal is an example.
Built to fitMulti-server, load balanced, monitored, with the network and security engineering behind it. The kind of thing that carries tens of thousands of people at once.
No ceilingMoving up a rung later is normal and expected. Nothing at the small end is built as a throwaway, so growing means adding to what you have rather than starting again.
Lean, hand-built front ends with no bloated page builders. Pages that load instantly and feel effortless on any device.
Design, build, deploy, and maintain. You talk to the person who writes the code, not a support queue.
Everything runs on my own hardware behind a proper edge, monitored around the clock and hardened on a weekly cadence.
A 10 Gb backbone with enterprise firewalling from ProofPoint on UniFi, sitting behind Cloudflare Enterprise DDoS mitigation. Four layers turn traffic away before it ever reaches a server.
A quick call to understand the business, the goal, and what winning looks like. No jargon, no pressure.
I design and build the site, sharing staging links as it comes together so there are no surprises at the end.
We go live on my own hardware behind a proper edge. Fast, secure, and monitored from the first minute.
Updates, tweaks, and a real person to call. Your site stays fast and current long after launch day.
A few lines is plenty. I read every one of these myself.
I will come back to you, usually within a working day. There is a copy in your inbox.