Kwok Lun Hong Kong Web Design provides the following design and web design services:

Web Design & Website Development

• Art & Web Animation Direction, Web UI Design, Web UX Design, Website Development, Responsive Web Design (Mobile and Tablet Websites), Google Progressive Web Apps (PWA), W3C Web Accessibility, Content Management System (CMS), WordPress and Joomla CMS backend systems, Online Shop Website (E-commerce) and OpenCart Online Shop etc.

Server Configuration, Web Hosting & Global CDN Network services

• Applicable to our “Professional Company Web Design Website Plan” and “E-commerce Online Shop Web Design Website Plan” clients

Mobile Apps & Native Apps Programming services

• Applicable to our “Professional Company Web Design Website Plan” and “E-commerce Online Shop Web Design Website Plan” clients

Brand Identity & Corporate Visual Design

• Art Direction, Visual Logo Design, Company Name Consultation, Brand Identity Design, Brand Supergraphic, Stationery Design (Letterhead, Business Card etc.), Brand Aid Design (PowerPoint Design, Quotation, Invoice etc.), Brand Guidelines, Colour Scheme & Mood Board and Brand Positioning, Brand Planning and Digital Media Brand Strategy etc.

Graphic Design & Printed Materials

• Art Direction, Event Design, Event Backdrop Design, Visual Poster Design, Print Ads, Leaflet (Flyer), Brochure, Packaging Design, Coupon Design, Annual Report Design, Book Cover and Book Content Layout Design, Greeting E-card and Invitation Card Design etc.

Commercial & Product Photography

• Art Direction, Commercial Photography, Product Photography, Jewellery Photography, Advertising Photography, Shop Environment Commercial Photography, Newborn Baby & Family Photography, Wedding Photography, Artistic Pre-Wedding, Pre-Wedding, Wedding Big Day, Wedding Video Services and Wedding Makeup etc.

“We believe that not only the creative design and the emerging web technologies, if we need to keep fresh, we must keep our original intention – the temperature of the heart”

Looking for our latest design and 26 years of complete design portfolio series?
Please feel free to contact us, thank you!

Most of our design projects start with building of a Company Website, Online Shop Website and Brand Identity Design, if you are interested our design quotation, please feel free to contact us. Thank you!

Go to the “Contact Us” page

Go to the “Get Design Quotation” page

Kwok Lun Hong Kong Web Design is a locally registered company in Hong Kong and holds a valid Hong Kong Business Registration certificate and corporate bank account.

Hong Kong Brand and Made in Hong Kong – Our team is based in Hong Kong

• From the beginning of 2022, all of our team have started working from home / providing services from home (Ma On Shan, Hong Kong) and use the Hybrid Cloud server computing and Desktop Virtualization (Virtual Desktop) as the cloud infrastructure to realise the solutions of multi-point-to-point working mode. In this way, we hope to provide more high-quality and comprehensive design consultant, web design, website maintenance and server management services to clients around the world and in different time zones.We have a wide range of design services, providing various types of design consultant, such as Web Design, Website development and maintenance, Responsive Web Design, Mobile and Tablet websites, WordPress CMS backend system, WordPress CMS with E-commerce backend system, Joomla CMS backend system, OpenCart E-commerce backend system, Web User Interface (Web UI) design, Web User Experience (Web UX) design, Search Engine Optimization (SEO), User-friendly Content Management System (CMS) and Tailor-made Online Shop E-commerce Web Design etc.

Multipoint-to-point remote working – Desktop Virtualization (Virtual Desktop)

• It is not limited by the location of the physical office and eliminates the integration of various systems and the lack of information flow of design and web design projects to eliminate information silos, we use industry leading network and security expertise (For example : Deployed in the cloud environment, data protected by firewall and securely using Zero Trust Network Access (ZTNA) to deliver the Virtual Desktops and internal applications etc.), this allows us to develop the right remote working solutions to increase the productivity and safety of our design and web design projects.

New cloud-based work environment – Cloudification

• As cloud services have become more mature and popular, our workplace and the way we work has changed to meet the high-end demands of an ever-increasing number of design and web design projects, we have effectively implemented a multi-point-to-point work model, from general collaboration, professional knowledge fields and substantive professional and industry standard skills etc., all can be done together.

Secure remote connections – Zero Trust Network Access (ZTNA)

• In order to meet the remote working needs of our team, as well as the cloudification of our design and web design projects, internal applications and server API gateways, we use the next generation Zero Trust Security Model (Access to specific resources only and the users and devices must be authenticated and authorized to be trusted), allowing us to work without compromising productivity and user experience, thus securing our team, devices, internal applications, server API gateways and data.

Let us take care for you no matter of the design, web design and website

• Everything starts from the cloud and the Internet network. We have invested in the Hybrid Cloud server computing and Desktop Virtualization (Virtual Desktop) cloud applications. Whether it is a design or web design project, we are not limited by geographical boundaries, weather changes, environmental factors and commuting traffic, and can really focus on your design projects and server management for a long time (Before festivals and long holidays (For example: Chinese New Year, Easter, Halloween and Christmas), we may implement special shift work arrangements to expedite the processing of each design and web design project to match the client company schedules and marketing needs while maintaining the quality of our design and web design projects).

Keep our website and server infrastructure up to date

• We further focus our business and operating on high-end web technologies, innovative servers, server cluster environment technologies and global CDN networks. We spend a lot of time on a daily basis focusing on emerging website and web technologies and making sure our server infrastructure is up to date (For example: The Website and Web Programming Performance Optimization, Mobile and Tablet Websites Compatibility Debugging, W3C Web Accessibility, Organic SEO Website Structure, SEO Keyword Planning and Strategy Optimization, Google PageSpeed Module (More details) for server that is beneficial to Search Engine Algorithms, Varnish Cache Cluster, Redis Cluster (Varnish Cache Cluster and Redis Cluster are hosted within the same data center physical location and use a private network to provide unlimited, secure and isolated internal traffic.), Domain Name Server (DNS) with Geographic Routing and Global Content Delivery Network (CDN) and others expertise).
  

  Remark : Single Server – Varnish Cache and Redis using our independent Varnish (Listen and Backend Addresses) and Redis Unix Socket for multithreading connections, except when the client Company Website or Online Shop Website is hosted on our Server Cluster Environment, Varnish Cache Cluster and Redis Cluster.

We are committed to provide clients with the world’s best web design and industry leading full-stack web programming technology(For further details)

• In recent years, our company website uses Varnish Cache Cluster, Redis Cluster, Domain Name Server (DNS) with Geographic Routing to integrate with a Global Content Delivery Network (CDN) application, which has been used in more than 400 Points of Presence (PoPs) across the Global Edge Network with the lowest latency speed to delivery our company website to global end users (For example : Company website content pages, text content information on each content page, design artworks and contact information etc.).
  

  The following picture shows the reference data of 28 days Google Analytics 4 (GA4) of our company website. (The analysis data will change in real time every day, the following picture does not represent the latest analysis data):

  

The price of our Professional Company Web Design Website Plan and E-commerce Online Shop Web Design Website Plan is more affordable than the industry

• Compared with the same or similar design and web design qualities in our industry, the initial price of the Professional Company Web Design Website Plan starts and ranges from approximately HK $120,000 to HK $150,000 and the initial price of the E-commerce Online Shop Web Design Website Plan starts from approximately HK $200,000. Around two to three teams are required to be responsible for different types of design and web design division works (For example : Graphic & Web Layout Design, Web HTML Frontend Design, Responsive Web Design (Mobile and Tablet Websites), CMS backend system, Server Configuration, Web Hosting, Global CDN Network services and Website Maintenance etc.).Therefore, clients can divide our transparent pricing by the required project times and Estimated Production / Working Days to the design project. You will find that, as a company with design quality and proficient in the industry leading web programming and Internet network technology, our pricing and profit of Web Design & Online Shop website projects are small margin.
  

  Estimated Production / Working Days

  Remark : The Estimated Production / Working Days for the design project are not the actual working days. The actual number of working days must be based on the mutual email records between client company and us, and the process and progress of the client handling of current design project.

  Clients can go to the following hyperlinks to see the Detailed & Transparent Pricing for our Web Design & Online Shop website projects

  Professional Company Web Design Website Plan

  E-commerce Online Shop Web Design Website Plan

If there are any types of design and web design troubles. Welcome to email us, we’re always here.

Go to the “Contact Us” page

Looking for our latest design and 26 years of complete design portfolio series?
Please feel free to contact us, thank you!

We are committed to provide clients with the world’s best web design and industry leading full-stack web programming technology

We provide a full range of one-stop high-end website and design professional consulting services to global clients in Hong Kong.

Starting from the root of the server to optimize and enhance the deployment, through various types of creative thinking to design, the use of the world’s universal programming languages and mainstream popular websites and Online Shop E-commerce CMS backend systems for user-friendly interface management and provide comprehensive search engine optimization and SSL secure encryption certificate installation and configuration services.

Safe, reliable and global brand identity image and website expansion – Assist our clients to establish a Company Website and/or Online Shop Website with international standards and global levels

We will take all possible methods to realize the client ideas and put it on the Internet

• Kwok Lun Hong Kong Web Design provides a full range of one-stop website solutions that can assist our clients to create a memorable and unique brand identity designs in an efficient ways. We have been working in the fields of design and web design (Around Adobe Photoshop 6.0, Microsoft Office FrontPage and Web HTML Marquee period) for nearly 26 years and have a rich experience, technology and troubleshooting capabilities. And able to assist corporations, government agencies, commercial companies, charities and organizations to establish and maintain their brand identities and brand images on the Internet.

Our First Line Design and Web Design Team

• Every design project begins with our accumulated 9656 days of design experience.
• Regardless of the client design project budget, the design projects that have been confirmed by us and the client are created and followed up by our first line design and web design team to ensure a better qualities and provide more complete design solutions.

Provide our clients with international standards programming and the most emerging web technologies

• We are well aware that even the most advanced and sophisticated technology depends on the professionals to ensure that the technology is fully utilized. Therefore, the website functions and programming of our Company Website and/or Online Shop Website projects are always kept up to date (Latest version or Stable version).

Ensure the quality and safety of the website

• We have chosen the globally recognized full-stack web programming and technologies for the creation and production of each web design project.

Build up more professional images for the client company email

• The company email has become an important communication bridge between clients and customers, and it is also an important asset of the company. Because the company email preserves the daily clients to customers communication and email content, which involves many conversations, business decisions, or day-to-day resolutions. So, to leave a good impression on your customers, you must have a representative company email.
• We check the security of the company email systems to prevent and protect against fake emails and phishing attacks by malicious people, and avoid emails being marked as spam by the systems.
• Through the configuration of the Email SPF, DKIM and DMARC, we make the client company email can be delivered to the target customers mailbox more safely and effectively, thereby enhancing the target customers impression of our client company.

  

Linked together MySQL Database Clusters

• MySQL Database Clusters are composed of multiple database instances to meet high read & write and operation intensive database environments, and are developed to meet the most demanding applications in many industries (For example: Social Media and Online Shop Websites) requirement, especially for industries that require 99.9% reliability of database operation (Excluding database maintenance and restart times).
  

  Each MySQL Database Cluster instance supports 6000 available backend connections (Take our current calculation of 64 GB RAM memory for each instance as an example). If you are interested to learn more about the functions and applications of MySQL Database Clusters, please go to the “White Papers – Extending the Web Application Repository with MySQL Clusters (Traditional Chinese version)” page.

  

NVMe SSD disk over 2.0 GB per second

• We use NVMe SSD disk with high-speed I/O performance to enhance better data transfer speeds and overall website experience.
  

  The following picture shows the reference data for testing the continuous read and write speeds of our server to 1 GB file using the SSH command:

  

Varnish Cache – A high-performance HTTP accelerator

• Varnish Cache is a set of high-performance HTTP accelerator designed for content-heavy dynamic websites and APIs (Mobile Apps & Native Apps Programming).
  

  The following picture shows the application integration reference of our company website using Varnish Cache and Amazon CloudFront Global CDN (From early 2023, we have removed and unset the list of HTTP header fields, including http.x-url, http.x-host, http.Server, http.X-Powered-By, http.X-Varnish, http.Age, http.Via, http.Link, http.X-Generator, http.X-Mod-Pagespeed and http.X-Ngx-Pagespeed etc.) :

  

• What is Web Cache and how does it work?

  Whenever going to a website, the website needs to render the content of the page, and use PHP (PHP-FPM) to request the page data from the MySQL / PostgreSQL database. Therefore, a server system requires a CPU and RAM memory to operate.

  If multiple global end users access a website at the same time, the server system will take up a large amount of the CPU and RAM memory for processing, and the rendering speed of the content of the page will become very slow. In this case, the website needs a caching system to avoid rendering and presenting the same page content over and over again. The caching system can automatically generate static HTML files and store them in the cache folder specified by the server. Whenever a new end user visits, the website renders the content of a static HTML page to new end user and greatly reduces the pressure on the server system and shortens the loading time of the content of the page.

  In addition, the speed and time it takes for the website loading (For example: Largest Contentful Paint (LCP), First Input Delay (FID) and Cumulative Layout Shift (CLS) mentioned in the optimization guide) are important for search ranking and its algorithm. Because, the caching plugin that shorten your website’s page loading and loading time are one of the most important factors to enhance your website’s SEO ranking.

Redis in-memory database – Average read and write operation times below one millisecond

• Redis is an in-memory database, NoSQL key-value database, and is mainly used as an application cache and quick response database. Because it stores data in internal RAM memory instead of Solid-State Drive (SSD) or NVMe SSD. So, Redis offers unparalleled speed, reliability, and performance (Take our current server with DDR4 3200MHz RAM memory speed as an example, its Peak Transfer Rate is 25.6 GB per second).Whenever an application relies on external data sources (For example : MySQL / PostgreSQL database), the latency and throughput of these data sources can create a performance bottleneck, especially as traffic increases or the application scales. In these cases, one way to improve performance is to store and manipulate data in RAM memory storage that is physically closer to the application. And Redis is built to perform this task: It stores all data in-memory, provides the fastest data read and write performance, and provides built-in replication capabilities that let you place data physically closer to the user for the lowest latency.
  

  The following picture shows the reference of our company website using Redis in-memory database and new Redis Zstandard (Zstd) lossless data compression algorithm:

  

• Should I use Varnish or Redis? Which one is better?

  Varnish is a server-side Web Cache / Page Cache mechanism; while Redis is an in-memory database, which implements object caching through application, and stores database query or complex operation results in the object in the form of key-value.

  Varnish and Redis can be used together at the same time. These two caching mechanisms have different advantages and uses, and are especially suitable for high-end and global levels websites, because it is a high-performance caching solution that can greatly improve website performance and throughput.

  While our Varnish and Redis are configured and completed at the server-side levels, if the client Company Website or Online Shop Website is hosted on our Server Cluster Environment, Varnish and Redis are pre-configured.

  Because we take care of all caching issues for you.

Important Website Performance Metrics – Time to first byte (TTFB)

• If a website takes a long time to load, this can adversely affect user experience, website traffic, and SEO. A performance-optimized website has an advantage over a slow website.
  

  The following picture shows the reference data of our company website using Google Chrome Incognito Window (Desktop computer web browser) for two test results:

  

Improve website speed and avoid sudden network congestion

• All of our servers use the HTTP/3 or HTTP/2 network protocol, Google Brotli Lossless Compression Algorithm and Google BBR Congestion Control Algorithm to improve website speed and avoid sudden network congestion.
  

  The following picture shows the reference test results of our company website using HTTP/3, HTTP/2 network protocol and Google Brotli Lossless Compression Algorithm:

  

  

  

Yoast SEO & Google Schema Structured Data Markup – Get higher rankings in search engines and gain more trust from customers in the digital marketing market

• The CMS backend system of our WordPress Professional Company Web Design Website Plan and/or WordPress Online Shop Website Plan can use Yoast SEO Artificial Intelligence (AI) to provide further guidance suggestions and options for the client website, such as setting Focus keyphrase, Search Engine Results Page (SERP) preview, SEO title, Meta description and SEO page analysis and other useful functions for each individual web content page.

  Therefore, to make the client website easier to appear in the search engines and get a higher rankings, as long as it is easily handed over to Yoast SEO search engine optimization tool in the CMS backend system, it can be done easily.

  The following picture shows the reference of our company website using Yoast SEO:

  

We were first indexed by Google search engine more than 10 years ago so far

• We have more than 10 years of time and experience in Google and Bing search engines and able to help our clients to develop online markets more easily.

  

Expand our clients local business globally

• We have many years of global “Big 3” cloud service providers and dedicated server deployment and application experience (For example : Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure and Others Dedicated Server providers) and proficient in Domain Name Server (DNS) with Geographic Routing and Global Content Delivery Network (CDN) application, through the Global Content Delivery Network (CDN) located in multiple regions and mirrored sites around the world, clients can deliver your Company Website and/or Online Shop Website to global end users more quickly and smoothly, eliminate remote connection delay caused by geographical distance factors and improve the speed of dynamic mirroring and connection downloading of website content between sites.
  

  The following picture shows the reference data of 0.0% Packet Loss for Hong Kong users connecting to the www.hongkongwebdesign.com.hk website through the Internet:

  

Target Audience – Establish more precise website deployment and reach new customers

• The clients targets and potential customer groups come from different countries, cities and regions around the world. We are able to use various types of programming and emerging web technologies to expand our client business and reach out to more levels of potential customers.

Interact with your customers more efficiently

• The direct marketing tools of E-newsletter, Promotional Email & SMS Marketing Campaigns and Marketing Automation (For example : Customer’s Birthday and Abandoned Cart) able to reach your customers through multiple channels. Automatically sync and add consented customers to the contact lists with your Company Website and/or Online Shop Website, then deploy effective Email & SMS Marketing Campaigns to get the best deliverability for your marketing campaigns with track detailed analysis metrics including Email Delivery Rate, Open Rate / Unique Open Rate and Click Rate etc.

Data Visualization, Data Analysis and Data Evaluation of the Company Website and/or Online Shop Website at a bird’s eye view

• We use the next generation of Google Analytics 4 (GA4) tools (Supports and collects data from both Company Website and/or Online Shop Website + Mobile Apps & Native Apps Programming), including Pages and screens reports, Google Analytics 4 (GA4) reports, Users Flow reports, Web Page Performance Evaluation, Data-collection and Sampling, Cross-domain Measurement, E-commerce Tracking and Event Tracking.
  

  The following picture shows the reference data of 28 days Google Analytics 4 (GA4) of our company website. (The analysis data will change in real time every day, the following picture does not represent the latest analysis data):

  

Protect our clients websites, API gateways and web applications

• We prefer to use Cloudflare Global CDN and Cloudflare DDoS Resistance Attack Protection as the first line of protection for our servers and clients websites.
• Cloudflare Global CDN – To reduce potential and attacked areas, we put most of our computing resources on the Global Content Delivery Network (CDN) so that the Internet traffic cannot directly flow to our basic server facilities.
• Amazon CloudFront Global CDN – We merge and adopt the CloudFront Origin Shield to protect our origin servers in the shortest AWS region in global CDN deployments (The effect is to establish a security shield protection at the frontend of our basic server facilities to provide additional protection against high-load traffic and reduce the number of retrieved content and requests from the global CDN server to our basic server facilities).
• Cloudflare DDoS Resistance Attack Protection – Using Cloudflare intelligent IP hided, Proxied and DNS controlled services, it can provide built-in DDoS protection and effective 5 seconds firewall protection;
  • DDoS L7 ruleset
  • Global L7 attack mitigations configuration – Automatic mitigation of HTTP-based DDoS attacks such as HTTP floods, amplification HTTP attacks, and reflection HTTP attacks.
• Brute Force Monitor and Nginx combines iptables to limit the number of source requests per minute (Once a large number of attacks are detected, the website will automatically turn on Cloudflare DDoS resistance attack and 5 seconds firewall protection).

SSL secure encryption certificate configuration and application grade

• More about the configuration and application grade of SSL secure encryption certificate we install on our servers and websites.
  

  The following picture shows the reference data of SSL report of our company website (Please note that our origin servers are not compatible with older web browser versions, such as the Chrome 49 / XP SP3, Safari 6 / iOS 6.0.1, Safari 7 / iOS 7.1, Safari 7 / OS X 10.9, Safari 8 / iOS 8.4 and Safari 8 / OS X 10.10 etc.):

  

Disaster and Catastrophic Recovery of Company Website and/or Online Shop Website

• In the most extreme cases, we are able to recover and restore our client proud Company Website and/or Online Shop Website (This only applies if the Company Website or Online Shop Website is hosted on our servers)
  

  The following picture shows the backups of our Remote Location 1. The server is protected by Zero Trust Network Access (ZTNA) and only accepts requests from authorized servers:

  

• Automatic server full mirror Source and dual Remote Locations backups every day (Source and Remote Location 1 : Retain the latest 7 days server data backups, Remote Location 2 : Retain the latest 14 days server data backups)
• Server Snapshots before running large server update or software installation (For VPS Virtual Private Servers)
• For further details, please see “What specific security measures do we use on our web design projects and servers?“

We are still on the way, hope to meet you in the future!

• When the client starts to look for and consult a project solution services for the Company Website and/or Online Shop Website, the most important thing is to know how we can help our clients develop online markets. Therefore, in order to give a clear answer, we have detailed the above matters and disclose some statistics of our company website and some configuration information, such as website and server cluster for clients reference and inspection.

For more details on what types of programming and emerging web technologies we specialize in, please go to:

Our Worldwide Professional Industry Standard Skills and familiar Software and Application summary

The best secure website solution：A website programming that can constantly up to date and patch vulnerabilities quickly

Take the WordPress CMS for example. Many large multinational corporations, government agencies, commercial companies, charities and organizations all over the world like to use WordPress CMS backend system because WordPress CMS is the most popular CMS backend system in the world right now. The customizability, sustainability and extensibility of its core programming is very powerful.

The following world famous websites and professional universities all use WordPress as their CMS backend system

• The official website of The White House government
• The Official Microsoft Blog and Microsoft News Center
• The Foursquare Church and International Church of the Foursquare Gospel Hong Kong District
• Hong Kong Metropolitan University
• The Hang Seng University of Hong Kong
• Technological and Higher Education Institute of Hong Kong
• University of Washington and Washington University in St. Louis
• Linode Global Cloud Service Provider
• Meta Newsroom (Facebook Newsroom)
• The official website of Sony Music
• The official website of Bianchi Bike from Italy

The information was taken from the above websites in early 2025. All Company Name and Third-party Trademarks are the properties of their respective owners.

If you are interested to learn more about which websites are using the WordPress CMS backend system, you can search “Who uses WordPress?“

So clients don’t have to worry! Brands known for outstanding performance, safety and reliability are safer.

WordPress, Joomla, and OpenCart are the top brands of choice for web design and web technologies, as well as CMS backend systems for many major websites and online shops. Just like the Apple iOS and Google Android mobile phone systems we use every day, it is very safe and reliable.

In addition, for your peace of mind, we are cautious about aggressive Brute Force attacks from the Internet around the world. When we create a website or Online Shop E-commerce, we will set unique CMS administration login URL, enable Two-Factor Authentication (2FA) for CMS backend system login, using Google Authenticator or Microsoft Authenticator or receive One-Time Password by Email to login (Applicable to our creation of WordPress CMS backend system, WordPress CMS with E-commerce backend system, Joomla CMS backend system and OpenCart E-commerce backend system) and limit the number of login failures to enhance the overall security of the website.

To provide our client with more comprehensive security and protection in real-time monitoring of the Antivirus Engine, Virus Scanner and Website Firewall on the server-side and/or website

To ensure that the client website is safer and more reliable, we install server-side Clam AntiVirus (ClamAV) – Antivirus Engine and Virus Scanner and the client website (Each client CMS backend website and Online Shop E-commerce CMS backend system are different. Therefore, some of the module functions are not applicable to each client.) install website Firewall and Virus Scanner, which can be regular comprehensive virus scans, malware and program scans and removals, and security risk assessments can be performed for the entire website.

Clam AntiVirus (ClamAV) – Antivirus Engine and Virus Scanner

• Clam AntiVirus Exim (ClamAV and Exim integration)
• ModSecurity (Scan HTTP when uploaded files)
• Pure-FTPd、ProFTPD (Scan FTP when uploaded files)
• Suhosin – PHP extension (Scan when uploaded PHP scripts)

The following picture shows us using Clam AntiVirus (ClamAV) – Antivirus Engine and Virus Scanner to perform a comprehensive virus scan of the entire website directories and files:

Website Lock function on our Server Web Control Panel

The Website Lock function will completely lock the directories and files within the entire website, any changes are prohibited, such as adding or modifying web content, uploading new files, file modification and client self database backup and restore (Not applicable to our automatic server full mirror source and dual remote locations backups every day) etc.

This method is very practical and effective, and can almost 100% protect the client website. It is especially suitable for websites that are not updated frequently and only appoint one staff who can modify the website. If a client needs to modify your website or upload a new file, the client can simply unlock your Website Lock function temporarily.

The following picture shows the reference of Website Lock function on our Server Web Control Panel:

How do we prevent Vulnerabilities on the website, Backdoor of Impersonation, Malware, and obfuscated hexadecimal coded programming files?

Our servers aspect

• Automatic server full mirror Source and dual Remote Locations backups every day (Source and Remote Location 1 : Retain the latest 7 days server data backups, Remote Location 2 : Retain the latest 14 days server data backups)
• Disaster and Catastrophic Recovery – After the entire website crashes, resume the reconstruction of the entire website and MySQL or PgSQL (PostgreSQL) databases and data tables
• Server Snapshots before running large server update or software installation (For VPS Virtual Private Servers)
• Always keep Linux Kernel core version up to date and Linux Kernel levels tuning
• ModSecurity – Comodo WAF (CWAF) (Not applicable to all clients)
• Always keep ModSecurity – Comodo WAF (CWAF) and Rules version up to date
• We install server-side Clam AntiVirus (ClamAV) – (Antivirus Engine and Virus Scanner)
• We install website Firewall and Virus Scanner for the client website, which can regularly scan the entire website files for viruses, malware and programmes, security risk assessment and others security work
• For abnormal programming files – Our servers will automatically scan on time the abnormal 6 – 8 character .php files and obfuscated hexadecimal coded programming files in each server every week.

Website programming aspect

• Choose and use website programming written by reputable programming development companies / teams around the world
• Website programming need constantly up to date and able to patch vulnerabilities quickly
• Access and/or write permission to certain sensitive directories are prohibited on the website (Deny All) (Not applicable to all clients and only for 403 Forbidden access configured on high value and/or vulnerable Company Website and/or Online Shop Website)
• The PHP script language used by the website needs to be PHP 7.4+ or above
• Consider whether you really need to use unknown and the company’s own internal CMS backend systems, because many third-party programming are not constantly up to date, the programming contains many unknown codes and remote connections, and involves legal issues, such as the right to use and copyright of the programming and systems
• Do not install free and/or third-party programming on the server by yourself. The most common problem is that the programming contains potential malicious codes and scripts, which will repeatedly continue to attack, rewrite and refresh new data, eventually causing the entire website and database to crash and paralyze

CMS security measures and configuration aspect (For our web design project clients)

• Unique CMS administration login URL
• Using Google Authenticator or Microsoft Authenticator or receive One-Time Password by Email to login (Applicable to our creation of WordPress CMS backend system, WordPress CMS with E-commerce backend system, Joomla CMS backend system and OpenCart E-commerce backend system)
  • Two-Factor Authentication (2FA)
  • Time-based One-Time Password algorithm (TOTP)
  • Automatically generate a new set of 6-digit password randomly via the App every 30 seconds
• In the Content Management System (CMS) and the Online Shop Website (E-commerce) CMS administration login page, website enquiry form page and/or Online Shop Website (E-commerce) member registration and login page, add Google reCAPTCHA v2 or Google reCAPTCHA v3 verification (Applicable to our creation of WordPress CMS backend system, WordPress CMS with E-commerce backend system, Joomla CMS backend system and OpenCart E-commerce backend system) to help the website blocks brute force attacks by robots and non-human operations
• Limit the number of login failures
• IP restricted area, blockade and prohibition
• Enhanced password strength and protection
• Automatically back up the database data for the database at the specified time each day (Keep the latest 7 days database backups)
• Third-party installation – Cloudflare Global CDN Service (More details)
• Third-party installation – Cloudflare DDoS Resistance Attack Protection

Server security measures and configuration aspect (For our annual and monthly website maintenance services clients)

We will be automatic update / manual update the following core systems and programming to the latest version or stable version for our client Company Website and/or Online Shop Website (Currently, only for our annual and monthly website maintenance services clients)

• WordPress CMS core system, WordPress CMS with E-commerce core system, Joomla CMS core system and OpenCart E-commerce core system
• WordPress CMS tailor-made parent theme template, WordPress CMS with E-commerce tailor-made parent theme template, Joomla CMS tailor-made parent theme template and OpenCart E-commerce tailor-made parent theme template (All of our styles and programming are wrote on child theme template)
• WordPress CMS tailor-made / third-party plugins, WordPress CMS with E-commerce tailor-made / third-party plugins, Joomla CMS tailor-made / third-party plugins and OpenCart E-commerce tailor-made / third-party plugins (All tailor-made plugins need to be based on our guidelines and allow for semi-automatic update / manual update)
• Please note that every time we are processing the automatic update / manual update, there is a risk of downtime and paralysis of the entire website and/or database, and we will back up the entire website and/or server snapshots (For VPS Virtual Private Servers) before updating

Annual Fee Billed Plan：Hosted Client Company Website or Online Shop / E-commerce Website on our well-optimized and fine-tuned Server Cluster Environment

The following is the Monthly Fee Billed Plan. For more details, please check the content of our quotation for the coverage of protection

Our clients able to sleep well every night and we will use emerging web and network technologies to put our clients website stand in a global levels.

We will take care all of your Company Website and/or Online Shop / E-commerce Website optimization, deployment and infrastructure. The following Company Website and Online Shop / E-commerce Website monthly website maintenance services are included maintenance costs for basic DDoS global resistance attack protection, damage to the website caused by human accidents, catastrophic deletion and permanent and inability to recover data.

Monthly Fee Billed Plan：Managed Company Website by us + “Advanced Care+ Website After-sales Guarantee (Please check the content of our quotation for the coverage of protection)” + Hosted Client Company Website on our well-optimized and fine-tuned Server Cluster Environment
HK $7,800 per month

Monthly Fee Billed Plan：Managed Online Shop / E-commerce Website by us + “Advanced Care+ Website After-sales Guarantee (Please check the content of our quotation for the coverage of protection)” + Independent VPS server / Independent VDS server

• Independent VPS server (Nginx PHP-FPM server) / Independent VDS server (Nginx + Varnish Cache + Apache PHP-FPM server)
• AlmaLinux 9 (64-bit) server operating system (OS)
• 4 vCPU Cores (AMD EPYC™ (2nd Gen)) / 6 Physical Cores (Latest AMD EPYC™ (3rd Gen))
• 8 GB DDR4 RAM memory / 32 GB DDR4 RAM memory
• 120 GB / 240 GB high-speed NVMe SSD disk spaces

HK $13,800 to HK $16,800 per month

• CPU Server code name – INTEL® XEON® Skylake, AMD EPYC™ (2nd Gen), Latest AMD EPYC™ (3rd Gen)
• Solid-State Drive (SSD) disk spaces with high I/O performance (Enabled SSD TRIM)
• AlmaLinux 9 (64-bit) or AlmaLinux 8 (64-bit) server operating system (OS)
• Nginx + Varnish Cache + Apache PHP-FPM server or Nginx PHP-FPM server
  • FPM/FastCGI on AlmaLinux 9 (64-bit)
  • FPM／FastCGI on AlmaLinux 8 (64-bit)
• Amazon Simple Email Service (Amazon SES) (Our servers use the industry’s highly respected Amazon SES SMTP outgoing verification email service) (For Monthly Fee Billed Plan only)
  • Include your company unique “mailed-by” and “Signed by” white-labels
  • For example : mailed-by: bounces.example.com
  • For example : Signed by: example.com
  • Amazon SES SMTP endpoint supports the both STARTTLS (Port 587) and traditional TLS Wrapper (Port 465) protocols and requires all connections to use the Transport Layer Security (TLS) encrypted connection mechanism. Please note that our server only supports the new STARTTLS (Port 587) protocol and not applicable to the traditional TLS Wrapper (Port 465) protocol
• Mailgun SMTP outgoing verification email service (Client will get an independent SMTP credentials account) (For Monthly Fee Billed Plan only)
  • Include your company unique “mailed-by” and “Signed by” white-labels
  • For example : mailed-by: bounces.example.com
  • For example : Signed by: example.com
  • Mailgun SMTP endpoint supports the Port 25 (no SSL or TLS), Port 465 (SSL), Port 587 (TLS) or Port 2525 (TLS), but we recommend our clients to use Port 587 (TLS) or when all the above ports are blocked, the Port 2525 (TLS) can be used.
• An important note about incoming emails settings : As our server does not open the Incoming Mail (IMAP) Mailbox Server (Or we use it as a transit station), we only allow clients to use the Incoming (POP3) Mailbox Server. If our clients need to manage and check emails on several different devices (For example : Desktop computer, mobile phone and tablet). We recommend that the clients can use existing email addresses (For example : Gmail or Yahoo!) to receive all incoming emails from POP3 mailbox server. In addition, if the clients are looking to use external and monthly paid mailboxes, we would like to recommend the following:
  • Google Workspace (Formerly Google G Suite)
  • Amazon WorkMail
  • Zoho Mail
• Global Content Delivery Network (CDN) that is not measured every month (Cross-Origin Resource Sharing (CORS) website headers : CSS, JS, JPG, PNG, SVG, WebP, ICO, EOT, TTF, WOFF and WOFF2) (For Monthly Fee Billed Plan only)
• Google BBR Congestion Control Algorithm
• Google Brotli Lossless Compression Algorithm
• Single Server – Redis (Multithreading connections using our independent Redis Unix Socket, except when the client Company Website or Online Shop Website is hosted on our Server Cluster Environment and Redis Cluster.)
• Varnish Cache
  • X-Forwarded-For (XFF) request header
  • X-Forwarded-Proto request header protocol (HTTP or HTTPS)
  • X-Forwarded-Port request header destination port (Independent Port)
• Google PageSpeed Module NGX (ngx_pagespeed)
  • Some of our servers have enabled the following Google PageSpeed Module functions, but given that each client CMS backend website and Online Shop E-commerce CMS backend system are different. Therefore, some of the module functions are not applicable to each client (For example : Prioritize Critical CSS, Critical Threshold, Optimize CSS Delivery).
  • FetchHttps, RespectXForwardedProto, rewrite_css, inline_css, outline_css, flatten_css_imports, rewrite_javascript, inline_javascript, outline_javascript, include_js_source_maps, convert_jpeg_to_webp, convert_to_webp_lossless, convert_jpeg_to_progressive, jpeg_subsampling, recompress_jpeg, recompress_png, recompress_webp, trim_urls, responsive_images, resize_images, local_storage_cache, remove_comments, collapse_whitespace, FileCachePath, FileCacheSizeKb, extend_cache, extend_cache_pdfs
• Unique Port and Web Hosting Control Panel login URL
• Limit the number of login failures
• HTTP/2 network protocol
• TLS 1.2, TLS 1.3 encrypted connection protocol (Transport Layer Security)
• Online Certificate Status Protocol (OCSP) Stapling (Not applicable to all clients)
• Application-Layer Protocol Negotiation (ALPN)
• Email SPF, DKIM and DMARC configuration
• Latest Linux Kernel core
• Latest PHP script language
• MySQL and PostgreSQL databases are not using default Port 3306 and Port 5432 on our servers (Not applicable to all clients and our MySQL Database Clusters)
• Direct URL Access to phpMyAdmin and phpPgAdmin are prohibited – Access to phpMyAdmin and phpPgAdmin are only allowed from our Web Hosting Control Panel (Not applicable to all clients)
• HTTP Strict Transport Security (HSTS) (Not applicable to all clients)
• HTTP-01 challenge or DNS-01 challenge (For SSL Wildcard)
• AXFR – DNS Full Zone Transfer
• FTPS (FTP with TLS Transport Layer Security and SSL Secure Protocol)
• SSH Access – Configure custom secure port or SSH security and hardening key connection management (Blocked common ports)
• ModSecurity – Comodo WAF (CWAF) (Not applicable to all clients)
• CSF (ConfigServer Security & Firewall)
• iptables
• Nginx combines iptables to limit the number of source requests per minute
• SpamAssassin
• Clam AntiVirus
• Fail2ban
• Brute Force Monitor
• Real-time Probes Monitoring – Checking the server environment, such as CPU, Hard Disk resources, Memory usage, Internet Traffic, System Load, and Database Load of the server in real-time
• Automatic server full mirror Source and dual Remote Locations backups every day (Source and Remote Location 1 : Retain the latest 7 days server data backups, Remote Location 2 : Retain the latest 14 days server data backups)
• Server Snapshots before running large server update or software installation (For VPS Virtual Private Servers)
• Let’s Encrypt SSL, Paid commercial version SSL, SSL Wildcard certificate with one level subdomains and SSL EV Greenbar (Extended Validation) secure encryption certificate installation and configuration
• Our servers API support external DNS Providers (Cloudflare Global DNS, Amazon Route 53 and Amazon Lightsail, Google Cloud DNS, Microsoft Azure DNS, DigitalOcean DNS and NameCheap PremiumDNS) to generate and renew the Let’s Encrypt SSL Wildcard on times automatically
• SSL ECC Certificates – Our servers support for ECDSA (Elliptic Curve Digital Signature Algorithm) certificates to provide higher security and reduce the key sizes (X9.62/SECG (prime256v1), NIST/SECG (secp224r1), NIST/SECG (secp384r1) and NIST/SECG (secp521r1))

The principles of our DDoS defense technology – Protect servers from Layer 4 to Layer 7 DDoS flood attacks from Internet

Reduce potential and Attacked areas

• Global Content Delivery Network (CDN) – We put most of our computing resources on the Global Content Delivery Network (CDN) so that the Internet traffic cannot directly flow to our basic server facilities.
• Only common communication ports of 80 (Transmission Control Protocol – TCP) and 443 (Transmission Control Protocol – TCP and User Datagram Protocol – UDP) are allowed – To ensure that websites, applications or other resources will not receive any communication and ports signals. Thereby the possible attack points are greatly reduced.
• Firewall IP Whitelist – Our servers will automatically check the IP address lists of each service provider’s for Global Content Delivery Network (CDN) to ensure our Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) communication ports are unobstructed.
• Completely prohibit XML-RPC applications or Partially prohibit XML-RPC applications (Applicable to Mobile Apps & Native Apps Programming services clients)
• Although we use many different protection technologies to ensure that our clients websites, applications or other resources are also functioning properly every day and are not affected. Therefore, we will not encourage our clients to install free and/or third-party programming on their own websites, applications or other resources. The most common problem is that the programming contains potential malicious codes and scripts, which will repeatedly continue to attack, rewrite and refresh new data, eventually causing the entire website and database to crash and paralyze.

Advanced and Expansion measures

• Using Cloudflare intelligent IP hided, Proxied and DNS controlled services, it can provide built-in DDoS protection and effective 5 seconds firewall protection.
• The installed CSF (ConfigServer Security & Firewall) server firewall on our servers limits incoming traffic, blocks common flood ports, limits thresholds and manages rate and burst values. Thereby, mitigating the impact of large-scale DDoS attacks on the basic server facilities.
• Nginx combines iptables to limit the number of source requests per minute – Slow down the bandwidth (or transmission) capacity of the attack.
• Cron Jobs checks the server’s traffic every minute for abnormality – Check the server’s traffic every minute and email alerts will be sent in the event of an accident.
• Brute Force Monitor – View, research, and understand the source of traffic, and make a preventive deployment before an accident occurs.

For more Complex attacks and Deployments

• The best way is to use a Web Application Firewall (WAF) to further prevent the DDoS attacks (For example : ModSecurity, Comodo ModSecurity and Comodo WAF (CWAF))
• Participate in Cloudflare – Pro to Enterprise solutions to resist complex DDoS attacks (More details)

Clients can go to the following hyperlinks to see the Detailed & Transparent Pricing for our Web Design & Online Shop website projects :

Professional Company Web Design Website Plan

E-commerce Online Shop Web Design Website Plan

Why do we adopt a transparent pricing method?

Our transparent pricing approach gives clients control over their budgets

We use “Web Design Project Pricing” transparent pricing method to allow our clients to better understand the budget and details of the charges for each design and web design items. Welcome to contact us today to get your exclusive quotation.

In addition to “Professional Company Web Design Website Plan” and “E-commerce Online Shop Web Design Website Plan“, will we also provide additional and specialized website and/or online shop website web programming technology?

Yes, we will do, our “Professional Company Web Design Website Plan” and “E-commerce Online Shop Web Design Website Plan“, has covered the most commonly used web programming technology and functions. The web programming technology and version used are industry leading. Therefore, if the client has additional and specialized website and web programming technology requirements. We can further quote in details.

Will we provide additional web page or programming offers?

Professional Company Web Design Website Plan
If the total amount of the entire design project is more than HK $80,000 or more, we will provide additional web page or programming offers.

E-commerce Online Shop Web Design Website Plan
If the total amount of the entire design project is more than HK $120,000 or more, we will provide additional web page or programming offers.

Clients can go to and review above Detailed & Transparent Pricing for our Web Design & Online Shop website projects at any time. Each design project is produced through the following “The flow of our design and web design projects“, which takes around 1 to 3 months.

Friendly “ ” hyperlink

In order to ensure the integrity of the client Company Website and/or Online Shop Website, the friendly “ ” hyperlink does not need to be added (Unless requested by the client).

The author and copyright related < meta > tags

For the benefit of Search Engine Optimization (SEO) functionality, we will add the author and copyright < meta > tags to the source code within the client Company Website and/or Online Shop Website.

For example :

• < meta name="author" content="Client Company Name" >
• < meta name="copyright" content="Copyright © Client Company Name All Rights Reserved." >

The footer of the website source code

We will add our company’s backlink at the end of the source code to achieve better Search Engine Optimization (SEO) ranking and effects for the client Company Website and/or Online Shop Website.

For example :

• Website by Hong Kong Web Design Company (This text will only appear in the source code of the website and will not be visible directly on the website)

Let the people who know best about web design and website programming provide you with after-sales and website programming support services

We understand how various website programming and functions need to work together, because we start with the root of the server to create website, online shop, CMS backend system, and various types of mobile apps & native apps programming at the same time.

Both the website and web programming have undergone comprehensive performance optimization and compatibility debugging

All of our web design projects are subject to quality tested by Support from Kwok Lun Hong Kong Web Design prior to the design project delivery / launch website. Both the website and web programming are optimized for performance with at least two mainstream Linux server hosts (Apache, Nginx and LiteSpeed) and the debugged of the following five major web browsers.

Google Chrome, Apple macOS Safari, Microsoft Edge, Mozilla Firefox and Opera.

Desktop computer web browsers supported versions：Google Chrome 76 or upper, Apple macOS Safari 13 or upper, Microsoft Edge or upper, Mozilla Firefox 70 or upper and Opera 65 or upper.
Mobile and Tablet web browsers supported versions (Mobile and Tablet web browsers produced by third-parties are not guaranteed)：Google Android 9.0 or upper (Google Chrome and Mozilla Firefox only), iOS 11.0 or upper (Apple Safari only).

In addition, our web design project will extra provide 12 months of “Standard Care+ Website After-sales Guarantee” services to provide a better and more complete website solutions.

For the details of “Standard Care+ Website After-sales Guarantee” services, please go to:

Professional Company Web Design Website Plan

E-commerce Online Shop Web Design Website Plan

It depends on the specific needs of the design project. A typical web design project takes about 5 to 8 weeks, while a brand identity project takes about 3 to 4 weeks.

However, we can speed up the progress of design projects according to the needs of our clients. We generally recommend at least 3 weeks to process most design projects to ensure that the design project is fully researched and created.

Our flow of design and web design projects can be briefly summarized as follows：

• Listen to the client ideas and needs via email and/or phone, and define the details of the design project and then collect the following information from client：
  1. Can the client provide the entire Website Sitemap?
  2. How many web pages does your website have (Single Language)?
  3. How many language version(s) does your website have?
  4. Do you need the WordPress CMS backend system or Joomla CMS backend system? (For Professional Company Web Design Website Plan only)
  5. Do you need the Responsive Web Design (Mobile and Tablet Websites)?
  6. In addition to the above items, are there any special website programming and functional requirements for the client website?
• Design the quotation for client consideration
• After the client is interested in the content of the quotation, arrange the face-to-face meeting / e-meeting (we use the Google Meet) and discuss the further details of the design project
• We will charge a 50% payment deposit for the quotation after both parties confirm the quotation charges and included design items
• After charged a 50% payment deposit for the quotation, we will confirm the design project and will start to collect design references that our client like (For example：client favorite design, style, look and feel, colour scheme and website reference etc.) and your company’s text content (For example：The company logo, history, business philosophy, website structure sitemap and text content for each content page of the website etc.)
• Design Data Collection and Visual Research
• Design Concept Expression and Design Creation
• Design Draft
• Design Revision
• System Analysis & Development (SA&D) (Web Design and Online Shop Website projects)
  • Frontend Programming
    • Desktop Web HTML Layout Design (Please note that the limitation of desktop computer website, the desktop web HTML layout design(s) and corresponding image sizes are slightly different from actual and real desktop computer website. However, we will try our best to retain 90% the same with our desktop web HTML layout design(s) and corresponding image sizes.)
    • Mobile and Tablet Web HTML Layout Design (Responsive Web Design) (The Responsive Web Design (Mobile and Tablet Websites) is adjusted according to the desktop computer website to be compatible with mobile phone and tablet web browsers. (Mobile and Tablet web browsers produced by third-parties are not guaranteed) )
    • Web Animation, Specific Frontend Programming and Third-party installation Programming (Social Media sharing links function, and the next generation of Google Analytics 4 (GA4) tools for Sales and Marketing etc.)
  • Backend Programming
    • Build up SQL Database
    • Backend Systems – Web CMS or Online Shop E-commerce Backend Programming
    • Specific Backend Website Functions and Programming (Membership System, Order Form etc.)
    • Testing, debugging and cross-browser compatibility provisioning of entire Company Website or Online Shop E-commerce Website on our side (Desktop computer web browsers, Mobile and Tablet web browsers (Mobile and Tablet web browsers produced by third-parties are not guaranteed) )
    • Before launch the Company Website or Online Shop E-commerce Website, we will optimize our side website programming and evaluate the client current web hosting server
• client User Acceptance Testing (UAT) and overall experience (Web Design and Online Shop Website projects)
  • System Integration Testing (SIT) – Only for more complex Web Design and Online Shop Website projects
• Charge the final 50% remaining balance of the contract amount
• Delivery / Launch Company Website or Online Shop E-commerce Website
• “Standard Care+ Website After-sales Guarantee” services (Web Design and Online Shop Website projects)

It depends on the types of design project and the needs of your company. In general, the design files will include the following :

Web Design & Website Development project

Source files such as web layout design (homepage and content pages), frontend website programming and/or backend website system programming

Brand Identity & Corporate Visual Design project

Source files such as company logo, letterhead, business card(s), etc.

Graphic Design & Printed Materials project

Source files such as commercial advertising design, graphic layout design, etc.

Commercial & Product Photography project

Image versions of commercial photography and/or source files of photography (if any)

The choices of confidence website services and professional technical consultant » Every design project begins with our accumulated 9656 days of design experience.

We have major design experience and have created designs in many various industries.

In conclusion, the design and style of different industries are not the specific design focus, because of each design project, we will conduct different types of Visual Research and Design Processes according to the needs of client and industry needs until the fundamental design problem has been solved.

We accept Bank Transfer, Bank Remittance and Check (Cheque) Payment.

For most our design and web design projects, we will charge the 50% payment deposit to confirm and schedule the design project.

The final remaining balance 50% of the contract amount will charge before the design project is delivered / launched website (Web Design and Online Shop Website projects).

Hong Kong client and payable by Bank Transfer / Bank Remittance

Please kindly arrange and remit the payment to our company bank account “The Bank of East Asia, Limited” (Bank Code in Hong Kong : 015), and the Account Holder’s Name and Account Number will be provided in the quotation.

For overseas client and payable by Bank Remittance

Please go to the following hyperlink for further details and information
https://www.hkbea.com/html/en/bea-personal-banking-inward-remittance.html

Hong Kong client and payable by Check (Cheque) Payment

Please kindly send the crossed cheque made payable to “ADDISON WAN DESIGN CO” and post to our correspondence address.

ADDISON WAN DESIGN CO
P. O. Box 290, Ma On Shan Post Office, Hong Kong