A public range should reduce confusion before a discovery call, not manufacture certainty that real scope cannot support.
Pricing anchors for enterprise website and system delivery
These are starting points and typical ranges. Final pricing is confirmed after discovery, written scope, and complexity scoring.
Public pricing should help you understand the investment range without pretending every project is identical. Scope, content volume, integrations, workflow complexity, and environment constraints all affect final price. That is why Vantus publishes anchors and ranges instead of forcing a one-size-fits-all number onto unlike work.
Clear price anchors, not fake certainty
The expensive mistake is buying the wrong package, not seeing a high number on a page for a scope you may not even need.
Publishing control usually matters sooner than custom workflow software, which is why the middle package is the default path here.
Three pricing anchors. Three very different problems.
Use the business problem to choose the package. Public credibility, publishing control, and workflow control are not the same purchase.
Website Rebuild (Modern + Complete)
Starting at
$15,000
Replace the site that makes your business look dated, hard to trust, or difficult to use. This package gives you a serious public foundation without overcomplicating the scope.
Businesses whose main problem is public credibility.
- Responsive design implementation
- Content completion support
- Technical SEO baseline
- Analytics instrumentation
- Deployment hardening
- Launch readiness checks
- Ownership handoff package
- CMS functionality
- User login or portal workflows
- Complex integrations
- Ongoing content updates after handoff
- Open-ended custom application work
Website + CMS
Website + CMS (Recommended)
Starting at
$32,000
This is the best-fit package for most growing businesses. It gives you the public credibility of a modern rebuild plus the internal control to manage content without waiting on a developer.
Growing teams that need publishing control and content velocity.
- Everything in Website Rebuild
- CMS implementation
- Content model architecture
- Editorial workflow setup
- Role-based publishing controls
- Media and publishing governance
- Operator training and handoff
- User-facing portal workflows
- Customer authentication
- Complex business process automation
- Third-party system integrations unless added
- Ongoing content creation or copywriting
Website + Business Portal
Website + Business Portal
Starting at
$90,000
When the real problem is not just the website but the workflow behind it, this package moves you from public presence into operational software.
Businesses whose operations are already breaking on spreadsheets and manual handoffs.
- Everything in Website + CMS
- Secure authentication
- Portal MVP scope
- RBAC baseline
- Audit trail for key actions
- One primary workflow implementation
- Integration foundation
- Unlimited workflow development
- Enterprise-wide replatforming
- Unscoped multi-system modernization
- Mobile app development
- Ongoing helpdesk support inside project scope
Enterprise Systems Program
Infrastructure engineering
Hosting and deployment posture are commercial decisions — not invisible technical footnotes. The track you choose determines your team’s independence, your compliance exposure, and what you pay the next vendor who touches this.
Cloud deployment baseline (VPS + Docker + NGINX)
Managed infrastructure on hardware you never have to touch.
- VPS · Hetzner / DigitalOcean / Linode
- Docker + Compose
- NGINX reverse proxy
- SSL + automated cert renewal (Let's Encrypt)
- Daily snapshot policy
- Server provisioning and baseline hardening
- Containerized application deployment
- NGINX reverse proxy with SSL termination
- Automated snapshot rotation and recovery plan
- Deployment pipeline with documented rollback path
- Uptime monitoring hook and alert configuration
Teams that want professional, production-grade hosting without an in-house sysadmin.
Businesses with data residency, air-gap, or strict compliance requirements — see On-Prem.
View full scope + hardening detail
SSH key enforcement, firewall rules (UFW), unattended-upgrades, fail2ban, rootless Docker, and a non-root application user. This is a real posture audit delivered in writing, not a security theater checklist.
Encrypted-at-rest block storage. Automated snapshot retention policy. You receive root credentials and every access key at handoff — no vendor lock, no surprises later.
You own the server. Operational runbooks mean your team — or any future vendor — can manage it without us. Vantus Care continuity contracts are available but never required.
On-prem install + hardening (client-owned hardware)
Your hardware. Your facility. Air-gap-grade control where it actually matters.
- Client-provided servers or NAS
- Proxmox / bare-metal Debian or RHEL
- NGINX + application tier
- Internal PKI · self-signed SSL
- On-site backup + offsite replication
- Physical server environment assessment
- OS installation, hardening, and baseline configuration
- Application stack deployment to client hardware
- Internal DNS and certificate authority setup
- Verified local backup with offsite replication path
- Physical access documentation and runbook package
Healthcare, legal, financial, and industrial businesses with compliance, data residency, or air-gap requirements.
Businesses without dedicated IT staff or an active hardware maintenance budget.
View full scope + hardening detail
Disk encryption (LUKS / BitLocker), network segmentation, SSH key enforcement, OS-level audit logging, sudoer restrictions, and application-layer least-privilege policy.
We document every decision in a format your auditors can read. Scope can extend to HIPAA technical safeguard alignment, SOC 2 evidence collection, and internal penetration test coordination.
Full operational runbooks, a disaster recovery test plan, and an incident response contact list. This is yours to operate independently — we ensure you actually can.
Enterprise add-on modules
These modules stay visible, individually priced, and separately scoped — not buried inside vague custom-work language. Every need listed here is something we have been asked to solve after a project launched, when it cost significantly more to address. These exist so you can decide upfront.
Discovery + Solution Blueprint
The research that makes every other decision cheaper.
Full scope + rationale
Most failed projects trace to one moment: the vendor skipped discovery and assumed. Wrong scope, wrong architecture, wrong priority — all preventable with structured research upfront.
- Business requirements documentation
- Technical environment audit
- Competitive and content landscape review
- Architecture recommendation with written rationale
- Phased scope and engagement blueprint
Add this when the project is complex, stakeholders have conflicting priorities, or the previous vendor left the architecture undocumented.
Website + Business Portal
Businesses that fund discovery ship projects on time at 3× the rate of those that skip it. This is the least expensive item in the catalog relative to what it prevents.
Data and Content Migration
Your content history does not have to start over.
Full scope + rationale
Migrations done badly corrupt relationships, break SEO equity, and erase years of published work. They are consistently underscoped because they seem boring — until they catastrophically fail at launch.
- Source system audit and full content inventory
- Field and taxonomy mapping to the new system
- ETL pipeline construction and dry-run testing
- SEO redirect map for every migrated URL
- Data validation report and rollback checkpoint
Add this whenever you're changing CMS, database, or domain — especially if the site has been live for more than two years.
Website + CMS, Website + Business Portal
Every URL left without a redirect is a broken trust signal with Google and a dead end for every customer who bookmarked your content.
Integration (per system)
Connect the systems you already paid for.
Full scope + rationale
Disconnected software creates double-entry work, reporting blind spots, and handoff friction that quietly drains hours every week. Most integrations are treated as nice-to-have right up until they become urgent.
- Integration architecture design (auth, data model, error paths)
- API or webhook implementation per connected system
- Data sync validation and failure notification setup
- Integration documentation for your team
- Graceful degradation path if upstream API goes down
Add this when two systems need the same data but your team is currently re-entering it manually or running CSV exports.
Website + Business Portal
The average SMB loses 6+ hours per week to workflows that were almost integrated at launch. Scoping this upfront costs a fraction of what it saves in year one.
SSO and RBAC Hardening
Single identity. Auditable access. No shared passwords.
Full scope + rationale
Role confusion and shared credentials are the leading cause of internal data breaches in small businesses. Access controls that look fine on day one drift into serious risk over months without active management.
- SSO implementation (SAML or OIDC) against your identity provider
- Role-based access control policy design and implementation
- Privilege escalation workflow documentation
- Access audit log configuration and alerting
- Offboarding checklist and credential rotation policy
Add this when staff turnover is frequent, when you operate in a regulated environment, or when sensitive data access has never been formally scoped.
Website + Business Portal
The median time to detect a credential-based breach is 197 days. This module eliminates the attack class, not just the symptom.
Analytics & Dashboarding
Stop flying blind on your own business data.
Full scope + rationale
Google Analytics is not a business intelligence tool. Page views don't tell you which content converts customers, which workflow step has the highest abandonment rate, or whether this pricing page is earning its weight.
- Analytics instrumentation strategy and event taxonomy
- Custom dashboard design and tool implementation
- Goal and conversion event configuration
- Data export pipeline to your business reporting stack
- Onboarding session for internal stakeholders
Add this when you're making decisions based on gut feel that should be based on data, or when your current analytics tool hasn't been touched since it was installed.
Website + CMS, Website + Business Portal
Businesses with correct instrumentation at launch spend 40% less on optimization work later because they know exactly what needs fixing.
Localization Framework
Grow into new markets without rebuilding everything.
Full scope + rationale
Localization added after launch is expensive. Content models, URL structures, and editorial workflows need to support multiple languages from the start — retrofitting them breaks things that previously worked.
- Localization-ready content model architecture
- i18n routing and URL structure implementation
- Translation memory and TMS integration (if applicable)
- Editorial workflow configuration for multilingual publishing
- Locale-specific SEO metadata handling
Add this when you serve or intend to serve customers in multiple languages, or when market expansion is on a 12-month roadmap.
Website + CMS
The cost to retrofit localization after launch is typically 2–4× the cost of building it in upfront. Timing is everything on this one.
What pushes a project toward the higher end of the range?
Projects move up in range when they include more content types, more approvals, harder migrations, more integrations, more workflow complexity, or more infrastructure and compliance constraints. That is not sales theater. It is basic delivery reality.
More content types
More approvals
Harder migrations
More integrations
Workflow complexity
Infrastructure & compliance
Not sales theater. Basic delivery reality.
Questions that reduce sticker shock before it turns into confusion.
01Why publish ranges instead of a single number?
Because public builds are scoped projects, not commodity subscriptions. Ranges are more honest than fake flat pricing.
02Why is Website + CMS marked as recommended?
Because it is the highest-value public package for most businesses. It solves both the presentation problem and the publishing-control problem.
03Do you publish Care pricing here?
No. This release of /pricing excludes Care tiers.