# 37SOLUTIONS

> Senior technical advisory for small and mid-sized businesses that make technology decisions without anyone senior in the room. Platform selection, vendor evaluation, infrastructure oversight, and CTO-level judgment — remote, retained, and accountable for the outcome.

37SOLUTIONS is the advisory practice of Greg Duffie, a senior software engineer with 20+ years of production experience across healthcare, legal, eDiscovery, financial services, and manufacturing. Started in 2002, based outside Pittsburgh, Pennsylvania, all engagements remote. The work is judgment, not labor: being the person in the room when a platform, vendor, or infrastructure decision needs to be made, and being accountable for it afterward.

What 37SOLUTIONS is not: it is not an MSP, not a hosting company, not a design agency, and not an SEO or PPC shop. It can source, evaluate, and manage those providers on a client's behalf, and hands-on work routes to sister companies — website care and hosting to conciergewebhosting.com, design and development to conciergewebdesign.com, search and paid media to serpfu.com and megapromoters.com. The advisory relationship stays here.

Good fit: owner-operated businesses that have outgrown their original tech setup, professional firms (law, medical, consulting, finance, eDiscovery), manufacturers and industrial companies, and MSPs that need an outside web and infrastructure partner. Poor fit: sites needing frequent content updates, price-sensitive hosting shoppers, one-off project buyers, and anyone requiring on-site IT support.

## Services

- [Services](/services) — Four engagement levels with published price ranges
- [Digital Marketing](/services/digital-marketing) — SEO, PPC, SEM, social, and ads coordinated selectively as part of a broader technical engagement
- [Industries](/industries) — How the work differs for small business, MSPs, professional services, healthcare, and manufacturing

The four engagement levels, all listed on /services:

1. **Basic Advisory** (on-demand, per engagement) — Senior second opinions: vendor and platform reviews, pre-launch or pre-migration technical review, security and risk assessment, technology due diligence. No retainer.
2. **Infrastructure Oversight** (monthly retainer) — Ongoing accountability across web, email, DNS, hosting, and third-party integrations. The strategic layer above hands-on maintenance: monitoring and escalation coordination, vendor management, incident coordination, regular status reporting.
3. **Vendor & Platform Selection** (per project) — Requirements definition, RFP management, platform due diligence, contract review support, and migration planning. Ends in a recommendation, not a shortlist that puts the decision back on you.
4. **Strategic CTO-Level Partnership** (retainer) — Full technology picture: strategy, roadmap and budget oversight, vendor portfolio accountability, security and compliance guidance, growth and platform transition planning.

## Case Studies

- [Ten Years of Domain Decisions, Untangled in Six Weeks](/case-studies/consulting-firm-domain-audit) — 17 domains across five registrars mapped, consolidated, and documented; a lapsing email-forwarding dependency caught 18 days out
- [PCB Manufacturer Cleans Up Technology Stack Before Ownership Transition](/case-studies/manufacturer-ownership-transition) — Full technology audit and handoff package produced in six weeks so the deal could close without IT due-diligence issues
- [Expanding Medical Practice Gets Technology Coordination Across Three Locations](/case-studies/medical-practice-fractional-cto) — Three IT vendors consolidated, patient-portal failures resolved, email inbox rate raised from 71% to 96.3%
- [Industrial Supplier Resolves Email Deliverability Issues, Recovers Lost Leads](/case-studies/manufacturer-email-deliverability) — SPF, DKIM, and DMARC corrected and outbound mail moved to a dedicated sending domain; deliverability to 98.4%
- [Law Firm Moves Off GoDaddy, Achieves 99.98% Uptime](/case-studies/law-firm-hosting-migration) — Migration to managed infrastructure with Cloudflare edge caching and uptime monitoring for a 12-attorney firm
- [Security Hardening Eliminates Recurring Malware Infections for Medical Practice](/case-studies/healthcare-security-audit) — Three malware incidents in 18 months ended by a rebuild on a hardened stack with WAF rules and daily scanning
- [WooCommerce Store Migration Cuts Page Load Time by 60%](/case-studies/e-commerce-migration) — Outdoor gear retailer moved off shared hosting; 8.2s to under 3s and 22% more completed checkouts
- [Nonprofit Consolidates Fragmented IT Under a Single Managed Plan](/case-studies/nonprofit-it-infrastructure) — Five vendors consolidated, email migrated to Google Workspace for Nonprofits, IT costs down 34%
- [Boutique Hotel Hands Off Website Management, Focuses on Guests](/case-studies/hospitality-website-care) — Owner reclaims 5+ hours a month; staging environment added to stop broken-update incidents
- [Regional Contractor Gets Professional Web Presence and Email Without the Vendor Sprawl](/case-studies/construction-company-website-launch) — Domain, email, hosting, and site launched in three weeks with every account documented under owner control
- [New Financial Planning Practice Gets Email, Domain, and Website Foundation Right from Day One](/case-studies/financial-advisor-business-launch) — Foundation built correctly for a new independent practice; zero rework at the 18-month follow-up
- [All case studies](/case-studies) — Engagements by industry and service

## Blog

- [Vendor Sprawl Is Costing You More Than You Think](/blog/vendor-sprawl-is-costing-you-more-than-you-think) — Why most small businesses don't discover their vendor sprawl problem until something breaks
- [Your Tech-Savvy Employee Is Probably Hurting Your Business](/blog/tech-savvy-employee-is-hurting-your-business) — What it actually costs when the person who "handles the tech stuff" doesn't know what they don't know
- [From Startup to Stability: Where 37SOLUTIONS Fits at Each Stage of Your Company's Growth](/blog/how-37solutions-fits-at-each-stage-of-business-growth) — How the kind of technical help a business needs changes as it grows
- [3 Reasons Why "Unlimited" Hosting Is Bad for Your Business](/blog/3-reasons-why-unlimited-resources-is-bad) — What a $3/month "unlimited" plan actually costs when the site goes down
- [cPanel Email Isn't Worth the Trouble](/blog/cpanel-email-isnt-worth-the-trouble) — Why running email out of cPanel means running your own mail server, whether you meant to or not
- [Speed Isn't Optional: How Load Time Kills Conversions](/blog/speed-isnt-optional-how-load-time-cuts-your-conversions) — What a one-second delay costs, and how much most inherited business sites are losing
- [WordPress Security Best Practices: A Practical Checklist for 2026](/blog/wordpress-security-best-practices) — Authentication, updates, file permissions, monitoring, and backups, without the fear-mongering
- [Managed WordPress Hosting: Why It's Worth Every Penny](/blog/managed-wordpress-hosting-benefits) — What managed hosting includes and how it differs from shared hosting
- [Website Care Plans vs. DIY Maintenance: An Honest Comparison](/blog/website-care-vs-diy) — The real costs and risks on both sides
- [Premium Website Hosting for Small Businesses](/blog/premium-website-hosting-small-businesses) — What premium hosting and hands-on support buy a small business
- [All posts](/blog) — Advisory, hosting, email, security, performance, and website care

## Support

- [Support](/support) — Email-first support through the Zendesk portal, with stated response expectations
- [Website Hosting Support Policy](/support/website-hosting) — What's included, billable rates, add-ons, and emergency handling
- [Website Care Support Policy](/support/website-care) — What's included with a care plan and what falls outside it
- [Email Hosting Support Policy](/support/email-hosting) — What's covered on email hosting plans and support fees
- [Managed Services Support Policy](/support/managed-services) — Managed services inclusions, billable work rates, and add-ons
- [SEO Support Policy](/support/seo) — SEO engagement scope, out-of-scope work, and reporting
- [PPC Support Policy](/support/ppc) — PPC engagement scope, billing for out-of-scope work, and reporting
- [Emergency & After-Hours Support Policy](/support/emergency-urgent) — What triggers emergency billing and what is explicitly excluded

## Company

- [About](/about) — Who runs 37SOLUTIONS, how the practice works, and why it's named 37
- [Partners](/partners) — Tools and platforms actually used in the work, with affiliate links disclosed
- [Contact](/contact) — New engagements and consultations; responses within 48 hours

## Legal and Security

- [Legal & Policies](/legal) — Index of every policy with its last-updated date
- [Terms of Service](/legal/terms)
- [Privacy Policy](/legal/privacy)
- [Acceptable Use Policy](/legal/acceptable-use)
- [AI Policy](/legal/ai-policy) — How AI tools are used in the work and in site content
- [Service Agreement](/legal/service-agreement)
- [Billing Policy](/legal/billing)
- [Refund Policy](/legal/refund)
- [Communication Policy](/legal/communication-policy) — Email-, Slack-, and SMS-first; how and when to reach us
- [Security Policy](/security-policy) — How to report a vulnerability and what to expect; see also /.well-known/security.txt