WordPress & WooCommerce
Custom PHP plugins and advanced functionality development, not just surface-level configuration.
- Custom PHP development
- Own plugins
- Critical bug debugging
About me
Javier Afán. WordPress developer specialised in security.
More than ten years coding in PHP and WordPress, with a path that runs through marketing agencies, technical consultancy, and now specialisation in security and hardening.
Who I am
WordPress developer specialised in security
I started programming in 2015, as an intern, writing my first WordPress templates by hand with PHP, HTML, and CSS. Since then I haven't stopped working in this same ecosystem — WordPress and WooCommerce.
I went through several agencies — Serinfor, Dosmedia — building custom functionality, maintaining installations built by other people, and learning, in the most direct way possible, how sites break and why. Between 2017 and 2019 I worked independently for two years, advising and developing directly for several clients.
After that I kept expanding — at Ricoh I worked on technical SEO audits, web accessibility under the WCAG standard, and advanced analytics. Since 2024 my day-to-day work combines WordPress development with technical SEO, Core Web Vitals, and analytics compliance (Consent Mode).
Over the years, the part that has always interested me the most has stayed the same — understanding why something fails, not just making it work on the surface. That's where my current specialisation in WordPress security and hardening has gradually come from.
What I'm good at
Security & Hardening
Hardening WordPress installations to drastically minimise the attack surface beyond standard plugins.
- OWASP-based audits
- Malware disinfection
- Closing entry points
Server Infrastructure
Hands-on experience in Linux server environments, DNS architecture, and complex hosting migrations.
- Apache and logs
- cPanel / Plesk
- Domain and email migrations
Performance & Technical SEO
Technical optimisation audits, Core Web Vitals, schema markup, and tracking compliance.
- Core Web Vitals
- Structured data
- Consent Mode
How I work
- Diagnosis before touching any codeI don't change a single line of code without first understanding the site's architecture and the root cause.
- Clear communication in plain languageYou don't need to know how to code to understand what happened and what I did.
- Direct communication with no middlemenYou write to me, you talk to me, no middlemen.
- Documented technical interventionsEvery intervention gets documented, not just solved.
Let's talk
Tell me about your case
No sales pressure — I'll tell you if I'm the right fit for what you need.