Pink Salt Salon & Spa

The problem to solve

Pink Salt was running their booking system through Booker on a WordPress site. The problem was the site kept getting infected with malware. Clients would try to book an appointment and get redirected somewhere else — or worse, their browser would throw a security warning. Every time it happened, the salon had to hire Sucuri to clean it up. That costs money, takes time, and in the meantime clients can't book.

WordPress is the most targeted CMS on the web for a reason. It's everywhere, it runs on plugins, and every plugin is a potential vulnerability. A small business shouldn't have to deal with that. Their site should just work.

The other issue was trust. A luxury nail salon charging premium prices can't afford to have clients land on a site that looks generic or triggers a security warning. The brand and the website weren't matching.

What we built

We rebuilt the site from scratch on Next.js and moved away from WordPress entirely. Next.js doesn't have plugins, doesn't have a database exposed to the internet, and doesn't have the attack surface that makes WordPress a target. The site is deployed to Vercel's edge network — there's nothing to hack in the traditional sense.

The booking integration was rebuilt cleanly so it works reliably without redirect issues. The new site matches the actual feel of the salon — dark, elegant, and premium. It looks like somewhere you'd pay for a luxury experience, not a generic template.

We kept the migration straightforward. Content from the old site was moved over, the new site went live, and Pink Salt hasn't had a malware issue since.

Impact and outcomes

• No malware incidents since launch
• Booking system working reliably with no redirect issues
• Zero ongoing security costs—no more Sucuri cleanups
• Site design now matches the premium positioning of the brand
• Clients can book without friction or security warnings