(01) Vibe-coded websites
Vibe-coded websites
We build vibe-coded websites the careful way: AI writes the first draft of the code, and our developers read, test and fix every line for security, SEO, speed and accessibility before anything goes live. No page builder, no platform fees, code you own. This site is built the same way.
Platforms we run
Cursor
- 150+Custom websites built
- 11+Years in digital marketing
- 500+Clients served
- 6 monthsFree supportOn every website we build
- Code review
- Secrets on the server
- Server-side validation
- CSRF tokens
- Escaped output
- Rate limits
- Security headers
- Content in the HTML
- One h1 per page
- Canonical tags
- Schema markup
- Core Web Vitals
- Accessibility
- Dependency audit
(02) The basics
What are vibe-coded websites?
Vibe-coded websites are sites whose code is written mostly by an AI model from plain-language instructions, rather than typed line by line by a developer or assembled in a page builder. The term “vibe coding” was coined by AI researcher Andrej Karpathy in early 2025.
Done well, it gives you what used to need a large budget: a hand-coded site with no page builder, very fast pages, any feature you need and no monthly platform fee. Done carelessly, it gives you code nobody has read, with secret keys in the browser, forms that accept anything and content search engines cannot see.
The difference is the human check. At Webincline, AI writes the first draft and a developer owns the result: every file is read, tested and fixed against a written security and SEO checklist before launch. This website was built exactly that way.
- Plain HTML, CSS, JavaScript and PHP
- Every line reviewed by a developer
- Security and SEO checklists on every page
- You own all of the code
One contact form, two waysExample
Unchecked AI code
- API keySitting in the browser codeExposed
- Form inputChecked in the browser onlyOpen
- SpamNo limit on submissionsFlooded
- Page contentInjected by JavaScriptInvisible
It works in the demo. It fails the first real attacker and the first crawler.
Checked by our developers
- API keyKept on the serverSafe
- Form inputValidated on the serverChecked
- SpamCSRF token, honeypot, rate limitBlocked
- Page contentIn the HTML sourceCrawlable
Same feature, built to survive real visitors, bots and Google.
(03) Tools we use
The platforms we work in.
We set up, run and report from these platforms, and check every number in them before it reaches your report.
-
Cursor
AI code editor we review and fix code in
-
GitHub
Version control, code review and deploys
-
Cloudflare
CDN, caching, SSL and security rules
-
ChatGPT
Checks how ChatGPT answers about you
-
Google Search Console
Indexing, queries, clicks and page experience
Logos belong to their owners. Shown to say which platforms we work in, not a partnership.
(04) Why hand-coded
Why choose a vibe-coded website?
Checked properly, AI-assisted code gives you the strengths of a custom-built site at a more reachable cost.
-
Very fast pages
No page builder or theme framework means the browser loads only what each page uses. Fast pages keep visitors and help rankings.
-
Any feature you need
Calculators, quote forms, custom filters or integrations are written for your site, not squeezed into a plugin that almost fits.
-
Code you own
No platform subscription and no lock-in. The code is yours and runs on ordinary hosting, so you can move it whenever you like.
-
SEO built in
Titles, headings, schema, canonical tags and sitemaps are written into the templates, and every page is checked before launch.
(05) What we build
What vibe-coded work do we take on?
Five kinds of project cover most of what we do. Pick one to see what is involved.
01 / 05
New hand-coded websites
Marketing and service websites written in plain HTML, CSS, JavaScript and PHP, with AI speeding up the drafting and a developer reviewing every file. Fast, accessible and built around your content.
- Templates for every page type
- Forms posting to a secure handler
- SEO and schema in the templates
Build
yourbrand.com · hand-coded
- TemplatesReviewed
- FormsValidated
- Lighthouse mobileChecked
- SchemaValid
02 / 05
Checking a site you built with AI
Built your site with an AI tool and not sure it is safe? We read the code, test it like an attacker and a search engine would, and give you a list of issues sorted by risk, then fix them if you want.
Audit
AI-built site · review
- Exposed secretsChecked
- Input validationChecked
- Content visible to GoogleChecked
- PackagesAudited
03 / 05
Custom tools and features
Price calculators, multi-step quote forms, booking requests or dashboards for an existing site, written to fit your design and checked for security like any other code.
Feature
Quote calculator
- Logic on the serverYes
- Inputs validatedYes
- Works without JSFallback
- Tracked as a leadYes
04 / 05
Moving off a page builder
For sites stuck on a slow theme or builder. We rebuild the pages in clean code with the same content and URLs, or redirect any that change, so you gain speed without losing rankings.
Rebuild
Builder → clean code
- ContentCarried over
- URLsKept or 301
- Page weightLighter
- Search ConsoleWatched
05 / 05
Ongoing code care
Changes, new pages, security updates for the server and libraries, and a re-run of the security and SEO checks after each release, so the site stays as clean as on launch day.
Care
This month
- New pageLive
- Dependency auditClean
- Security headersChecked
- LighthouseRe-run
(06) The real problem
Where does AI code usually go wrong?
AI models write code that works in the happy path. They are much weaker at the parts nobody sees in a demo: who is allowed to do what, what happens when someone sends bad input on purpose, and what a search engine sees before any JavaScript runs.
The most common problems we find are secret keys shipped to the browser, forms validated only on the front end, missing CSRF protection and rate limits, user input printed without escaping, and pages whose content only appears after scripts load. Every one of these is on our checklist.
Ticked0 of 6
Nothing ticked yet. A free review still checks headers, forms and what Google sees, which are hard to judge from the outside.
One or two issues. Usually quick to fix once found, and worth fixing before the site gets more traffic.
Several issues. Your site likely has security or SEO gaps that need fixing before you spend on marketing.
(07) Code + technical SEO
Clean code is half of technical SEO.
Search engines and AI answer engines rank pages they can fetch, read and understand quickly. Hand-coded sites start ahead: content in the HTML, light pages and schema written into the templates.
Our technical SEO team checks the rest after launch: indexing in Search Console, Core Web Vitals from real users, redirects and structured data, so the speed advantage turns into rankings.
(08) Our process
How do we build a vibe-coded site?
Five steps. AI speeds up the drafting; the reviews and tests are done by people.
-
Brainstorming and assessment
We agree the pages, features, content and the people who will update the site, and confirm a hand-coded build is the right fit rather than a platform like WordPress or Webflow.
-
Design and roadmap
Designs for phone and desktop, the list of templates and components, and a timeline. You approve the design before code is written.
-
AI-assisted build
We write the code with AI coding assistants under close direction, in small, reviewable pieces, using plain web standards and only well-known, exact-name packages.
-
Line-by-line review and tests
A developer reads every file and runs the security and SEO checklists on every page: server-side validation, CSRF, escaping, secrets, headers, one h1, canonical, schema, plus Lighthouse on mobile and a check with JavaScript switched off.
-
Launch and support
We deploy to your hosting, set up redirects and monitoring, hand over the code and documentation, and stay on with 6 months of free support.
(09) What is included
What comes with every vibe-coded site?
Every site leaves our hands with these checks done and written down.
-
01
Developer code review
Every file read by a person, with risky shortcuts and unused code removed before launch.
-
02
Security checklist
Secrets on the server, server-side validation, CSRF tokens, escaped output, rate limits and security headers.
-
03
SEO checklist
Content in the HTML, one h1, unique titles and descriptions, canonical tags, schema, sitemap and robots.txt.
-
04
Speed and accessibility
Lighthouse on mobile, Core Web Vitals, keyboard use, contrast, alt text and reduced-motion support.
-
05
Your code and documentation
The full source code, how to deploy it and how to make common changes, handed over at launch.
-
06
6 months of free support
Fixes and small changes for six months after launch, at no extra cost.
(10) Why Webincline
Why trust us with AI-built code?
-
01
A person owns every line
AI drafts, people decide. A developer reviews and signs off every page before it goes live.
-
02
Written checklists, not vibes
Every page passes the same written security and SEO gate before launch, and you can see the results.
-
03
We use it ourselves
The site you are reading was built with AI assistance and checked against the same checklists, so we know where the pitfalls are.
(11) Pairs well with
What works well with a hand-coded site?
A fast, clean site does the most when it is looked after and found.
(12) FAQ
Questions, answered.
Still unsure?
Talk it through with us on a call.
We look at your website, ads and socials with you and point out the quickest wins — you keep the advice either way.
Book a callOr write to webincline@gmail.com
A website whose code is written mostly by an AI model from plain-language instructions. At Webincline the AI writes the first draft and a developer reviews, tests and fixes every line before launch.
Not on its own. AI models often leave secret keys in browser code, skip server-side validation or print user input without escaping. Code is only as safe as the review behind it, which is why every page we ship passes a written security checklist.
Our developers. Each page is read line by line and tested against our security and SEO checklists, plus Lighthouse on mobile and a check with JavaScript switched off, before it goes live.
It can be very good: content sits in the HTML, pages are light, and titles, headings, canonical tags and schema are written into the templates. The common AI mistake, content that only appears after JavaScript runs, is one of the first things we check.
There is no platform, theme or page builder underneath, so pages are lighter and you pay no platform fee. The trade-off is that there is no drag-and-drop editor: changes are made in code, by us or your developer, unless we add a simple editing area for content you change often.
Small text changes are easy for anyone comfortable with files. If your team needs to edit often, we can add a simple editing area for that content, or recommend a platform such as WordPress or Webflow instead.
You do. At launch we hand over the full source code and documentation, and the site runs on hosting in your name.
Yes. Whatever tool built it, we read the code, test it as an attacker and a search engine would, and send you a list of issues sorted by risk. We can then fix them for you.
Secrets kept on the server, server-side validation of every input, CSRF tokens and rate limits on forms, escaped output, safe error messages, security headers, no debug files left public, and an audit of every package the code uses.
Speed is one of the main reasons to build this way. We test every page with Google’s Lighthouse on mobile and work towards Google’s Core Web Vitals targets before launch.
We build to WCAG 2.2 AA basics: proper headings and landmarks, labels on every form field, keyboard use, visible focus, colour contrast, alt text and support for reduced motion.
On ordinary web hosting or a cloud server in your name. We can set it up for you, including the domain, SSL and backups.
Every website includes 6 months of free support after launch. After that, our website maintenance service covers updates, backups and re-running the checks after changes.
It depends on the pages, features and integrations. AI drafting saves build time, but the review and testing are not skipped. After a short call we send a fixed quote with the scope written out.
(13) Get a quote
Let’s build it and check it properly.
Tell us what the site must do, or send us the AI-built site you already have. We reply with a plan, or a list of what needs fixing, and a fixed quote.