About
One project at a time, properly.
Citriverse is a UK web studio building fast, secure, custom websites and Vue applications for businesses — and then looking after them properly once they're live.
How every build is done
Security and speed aren't afterthoughts
Plenty of studios say their sites are secure and fast. Here's what that actually means on a Citriverse build — all of it true of the page you're reading right now, and all of it checkable.
- A strict content security policy generated per build from SHA-256 hashes of the page's own scripts — no unsafe-inline for scripts, no unsafe-eval, no wildcard sources.
- Hardened response headers — HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and Cross-Origin-Opener-Policy, set on every response.
- Self-hosted fonts keep a page load free of any third-party request.
- No analytics, no cookies, no trackers on this site — nothing follows a visitor around, and there's no consent banner to click past.
- Server-side input validation on the enquiry form, with size caps and header-injection guards, rather than trusting whatever a browser posts.
- Dependencies kept patched as routine maintenance, because the gaps that get found become the gaps that get exploited.
- Performance measured against Core Web Vitals on every build — a number to hit, not a general sense that the site feels fast enough.
None of that is a checklist run through at the end of a project — it's where every build starts. Security bolted on at the end is the first thing to get dropped when a deadline gets close.
Citriverse is new, and that's said plainly rather than dressed up. There's no client roster yet, and the case studies on the work page are concept builds — labelled as such, every one of them. What's on offer instead is a standard of build you can verify on this very page, and direct access to the developer doing the work.
Working together
How working with Citriverse goes
You deal with the developer building it
No account manager relaying messages to a team you never meet — you talk directly to the person doing the work.
Fixed prices, agreed up front
You'll know the number before anything starts, and what it does and doesn't cover.
Plain English, not jargon
Every decision gets explained in terms that make sense whether or not you know what a CDN is.
Honesty about fit
Work that Citriverse isn't the right studio for gets turned down, rather than taken on anyway and figured out later.
Want to talk about a project?
Describe what you're trying to build, and what you're hoping it'll do for the business. That's plenty to start a sensible conversation.
Get in touch