Case Study
TITAN Vehicle
Post-incident WordPress → Cloudflare migration. Attack surface reduced from PHP+SSH+MySQL+50 plugins to a single Worker isolate.
TITAN Vehicle
Post-incident WordPress → Cloudflare migration. Attack surface reduced from PHP+SSH+MySQL+50 plugins to a single Worker isolate.
Project Overview
TITAN Vehicle's WordPress site (titanpuls.com) on an advin VPS was compromised — Elementor RCE → DB credentials → SSH backdoor → hidden lighthouse user → libonion.so LD_PRELOAD rootkit — and abuse-suspended by the upstream provider during forensics. We migrated the entire 30-page / 18-post / 91-media trilingual (EN + ZH + RU) site to a zero-server Cloudflare D1 + R2 + Workers stack, eliminating the entire intrusion attack path (no PHP, no SSH, no MySQL on the public surface) while preserving SEO with a one-week WP fallback for safe rollback.
What We Delivered
Capabilities below are included in the standard Client Sites Factory package.
Attack-Surface Elimination
No PHP runtime, no shell, no writable filesystem. The exact intrusion path that hit the old WP simply does not exist on the new stack.
Zero-Server Migration
wp-json + 7 sub-sitemaps scraped → portable text + R2 media batch upload → wrangler deploy. No more apt update, no more plugin patches.
Trilingual SEO
EN + ZH + RU full coverage of the CIS export funnel — Russia / Kazakhstan / Iran / Egypt search reach in one deploy.
DNS Gray-Cut Migration
Old WP held in standby for one week as a rollback safety net before we cancelled the advin VPS.
Edge Speedup
Single-origin VPS → 300+ Cloudflare PoPs. TTFB drops 50-70% for CIS / MENA users.
Delivery Timeline
Every milestone from kickoff to production.
Inventory + scaffold
Inventoried 221 URLs, 30 pages, 18 posts, 91 media. Scaffolded EmDash app locally with 35 migrations.
Trilingual content migration
wp-json → portable text auto-conversion + R2 media bulk upload + brand re-skin.
Inquiry form + CF deploy
Worker handler + Cloudflare Email Routing (custom-domain inbox at $0/mo) + production wrangler deploy.
DNS cutover + acceptance
CF DNS CNAME → workers.dev cutover. titanpuls.com main domain switched. Old WP retained as 1-week fallback.
Decommission old VPS
One week stable → advin account cancelled. Saved $120/yr recurring + ~10h/yr maintenance.
Outcome
Old intrusion path eliminated. titanpuls.com served from 300+ CF edge nodes. Equivalent local-outsource value: USD 8,000–15,000 (with the security migration premium). Equivalent local-outsource market value: USD 8,000 – 15,000
Want a site like this?
From Starter ($1,500) to Enterprise ($8,500+) — four tiers covering monolingual, bilingual, trilingual, and post-incident migration scenarios.