Development

  1. Do you outsource your work or is it developed “in house”? If outsourced, what is the percentage of outsourced work?
    100% in house.

  2. Would we have direct contact with developers?
    Yes. We hold formal meetings, informal standups, and real-time chats (e.g. Slack) with our developer team included.

  3. Please describe any warranties provided by your development services.
    Digimix offers enterprise Service Level Agreements (SLAs) which provide comprehensive technical coverage of all software developed. Including:

– 24/7 tech support from our senior developers on pager duty
– Guaranteed response times
– Guaranteed functionality and device compatibility

Scalability

Have you provided development services to clients who’s websites receive more than 50 million page views per year?

Yes. Thanks to WordPress development by Digimix, our clients WordPress instances gracefully handles traffic spikes of over 150,000 visitors per day, and deliver over 50 million page view per year. Digimix can collaborate with your organization’s Production Team to optimize in-app caching mechanisms for their system architecture.
Plugins:

Please provide your opinion on the use of plugins in WordPress. Under what circumstances would you advocate using a plugin?

Plugins offer a tradeoff of enabling new features versus creating new vulnerabilities. At Digimix, we’ve spent years vetting a list of reliable plugins that are safe to use for high traffic WordPress sites. However, we do not use the core WordPress plugin system. Instead, Digimix WordPress sites are developed as 12 Factor Apps (the Heroku methodology for building web apps). Plugins are treated as application dependencies and managed by Composer.
Custom meta fields are controlled by Digimix’s private fork of CMB2, that includes proprietary development specifically for Digimix 12 Factor WordPress Apps. Overall, Digimix maintains private repositories of any WordPress plugins used on enterprise level projects and does not use anything we do not work on the development of ourselves.

Security

Please describe your philosophy and general security procedures utilized in performing client services.

Digital security is more important than ever. Digimix developers user military grade encryption tools even in their local development environments. We have comprehensive security procedures in place that cover all aspects of project touchpoint from the collection and storage of project assets, to client communications, to the delivery of software packages.

One of our hot points for WordPress apps is strictly controlling write permissions and functionality. This brings us back to why we treat plugins as dependencies, manage them with Composer, and completely disable the WordPress plugin management system. The fewer opportunities the application provides to write and execute, the less exposure it has to security risk.
All of our enterprise WordPress apps are tested for security purposes. We keep up to date with the latest WordPress and web developer security news. There’s even monitoring in place to alert our team if any security issues related to application decencies are published online.

QA

We collaborate with our clients to learn about their audience’s behavior and build a prioritized list of bowers and devices for guaranteed compatibility. Multiple users test a client approved features list on a client approved devices list and browsers. All errors are logged and resolved on private Git repositories. Device emulators are used in certain scenarios with client approval. All Q/A test results are delivered to the client. In short, we click every link and try out every use case scenario on all the devices and browsers required by the client, meticulously track the results, and resolve any errors.
We also provide Web Accessibility (WAI) compliance assurance and qualitative usability testing for UI/UX optimization.