TITAN Vehicle
Post-incident WordPress → Cloudflare migration. Attack surface reduced from PHP+SSH+MySQL+50 plugins to a single Worker isolate.
Project Overview
TITAN Vehicle's WordPress site (titanpuls.com) on an advin VPS was compromised — Elementor RCE → DB credentials → SSH backdoor → hidden lighthouse user → libonion.so LD_PRELOAD rootkit — and abuse-suspended by the upstream provider during forensics. We migrated the entire 30-page / 18-post / 91-media trilingual (EN + ZH + RU) site to a zero-server Cloudflare D1 + R2 + Workers stack, eliminating the entire intrusion attack path (no PHP, no SSH, no MySQL on the public surface) while preserving SEO with a one-week WP fallback for safe rollback.
What We Delivered
Capabilities below are included in the standard Client Sites Factory package.
No PHP runtime, no shell, no writable filesystem. The exact intrusion path that hit the old WP simply does not exist on the new stack.
wp-json + 7 sub-sitemaps scraped → portable text + R2 media batch upload → wrangler deploy. No more apt update, no more plugin patches.
EN + ZH + RU full coverage of the CIS export funnel — Russia / Kazakhstan / Iran / Egypt search reach in one deploy.
Old WP held in standby for one week as a rollback safety net before we cancelled the advin VPS.
Single-origin VPS → 300+ Cloudflare PoPs. TTFB drops 50-70% for CIS / MENA users.
Delivery Timeline
Every milestone from kickoff to production.
- Day 0
Inventory + scaffold
Inventoried 221 URLs, 30 pages, 18 posts, 91 media. Scaffolded EmDash app locally with 35 migrations.
- Day 1
Trilingual content migration
wp-json → portable text auto-conversion + R2 media bulk upload + brand re-skin.
- Day 2
Inquiry form + CF deploy
Worker handler + Cloudflare Email Routing (custom-domain inbox at $0/mo) + production wrangler deploy.
- Day 3
DNS cutover + acceptance
CF DNS CNAME → workers.dev cutover. titanpuls.com main domain switched. Old WP retained as 1-week fallback.
- Day 7+
Decommission old VPS
One week stable → advin account cancelled. Saved $120/yr recurring + ~10h/yr maintenance.
Stack
Outcome
Old intrusion path eliminated. titanpuls.com served from 300+ CF edge nodes. Equivalent local-outsource value: USD 8,000–15,000 (with the security migration premium).
Equivalent local-outsource market value: USD 8,000 – 15,000
Want a site like this?
From Starter ($1,500) to Enterprise ($8,500+) — four tiers covering monolingual, bilingual, trilingual, and post-incident migration scenarios.