From Wix to Enterprise — In 48 Hours

ThinkOpen is a cybersecurity firm that serves regulated industries and SMBs with security audits, managed IT, and AI-driven solutions. But our own digital infrastructure didn't reflect that caliber.

We were running on Wix — a single-page landing site with no subpages, no client portal, no service pages, and no multilingual support. Our ticketing system was HelpSpot — functional but limited: no M365 SSO, no SLA tracking, no auto-assignment, no internal notes.

As a security company advising clients to take control of their data and infrastructure, having our own critical business tools on third-party platforms with no control over security posture was the definition of the "Security Guesswork Trap" — the exact problem we solve for our clients.

In a single 8-hour session, we replaced the Wix landing page with a full-scale enterprise website:

• ✓22 marketing pages — Services hub with 6 sub-pages, Solutions, About, Contact, Resources
• ✓Full bilingual support — English + Spanish with 846 translation keys per language
• ✓Apple-palette design system — frosted glass navigation, semantic color tokens, responsive layouts
• ✓Client portal — NextAuth magic link authentication, no passwords to manage
• ✓Security findings dashboard — severity scoring, remediation tracking, evidence management
• ✓Report delivery system — HTML upload with SHA-256 hashing, time-limited signed URLs
• ✓Organization management — multi-org support with role-based access control
• ✓Deployed on Vercel — auto-SSL, edge network, zero-downtime deployments

HelpSpot was replaced with a custom support portal at support.thinkopen.net — built in ~9 hours:

• ✓Microsoft Entra ID SSO — engineers sign in with their M365 credentials
• ✓Magic link authentication — clients sign in via email, no passwords
• ✓Domain-based auto-org linking — user@clientdomain.com auto-links to the correct organization
• ✓Atomic ticket numbering — YYYYMMDD-NNNNNN format, race-condition-safe
• ✓RBAC — Admin / Engineer / Viewer with scoped views per organization
• ✓Auto-assignment — routes tickets to the least-loaded engineer per org
• ✓SLA tracking — response + resolution time targets per priority level
• ✓Internal notes + internal file uploads — hidden from clients, builds knowledge base
• ✓Contact card — name, email, formatted phone, org tag
• ✓Daily digest email — 7am Pacific, personalized per engineer, SLA breach alerts
• ✓Satisfaction prompt — thumbs up/down on resolved tickets
• ✓Take Over workflow — engineer ticket transfer with full audit trail
• ✓Reporting — org stats, engineer performance, resolution times by priority
• ✓Settings — editable SLA targets, organization tags, system status

With the core system live, we added operational features, mobile optimization, client engagement tools, and published our first case study:

• ✓Daily digest email — automated 7am Pacific delivery via Vercel Cron, personalized SLA breach alerts per engineer
• ✓Admin settings page — editable SLA targets, organization tag management, system status dashboard
• ✓Global ticket search — search by number, subject, org, or engineer with status filtering
• ✓Ticket satisfaction prompt — thumbs up/down on resolved tickets, feeds into reporting
• ✓Mobile responsive overhaul — touch device detection, dynamic viewport height, stacked layouts
• ✓Quo SMS chat widget — desktop form (name + phone + message) + mobile native SMS link
• ✓Chat widget i18n — fully bilingual EN/ES with locale toggle
• ✓First case study published — live at thinkopen.net/resources/case-studies
• ✓Supabase RLS hardening — deny-all policies on all 14 tables, function search path secured
• ✓Product strategy documented — pricing tiers, multi-tenant architecture, go-to-market sequence

ThinkOpen uses AI as a force multiplier, not a replacement. Every architecture decision, security control, and feature specification is made by a human engineer. The AI handles implementation velocity.

This model enables what was previously impossible: enterprise-grade solutions at SMB-accessible pricing. A custom ticketing system with 8 security layers, M365 SSO, SLA tracking, and RBAC — delivered in one day instead of three months.