CISNET — IT certification training.
Marketing site + SEO rebuild.

Legacy PHP that couldn't grow.

CISNET's existing site was a hand-coded PHP build from 2014. Maintainable in the sense that one person knew where everything was — and breakable in the sense that nobody else could ship into it without an outage. Marketing wanted to add new certification pages, run paid campaigns into specific cohorts, and capture leads into a CRM. Engineering reality was: every new page was a Friday deploy with the lights flickering.

The deeper issue: SEO momentum. The legacy site ranked for ~70 cert-related queries. Any redesign that didn't preserve those URLs risked tanking organic traffic for a quarter or more — and the business depended on that organic flow for ~40% of intake.

• Brittle stack: PHP 5.6, no test suite, manual FTP deploys
• No lead infrastructure: contact-form-to-email only, no CRM, no admin view
• SEO at risk: 70+ ranked legacy URLs that couldn't break
• Marketing blocked: couldn't ship landing pages without engineering

Next.js 16 + programmatic SEO + lead infrastructure.

Three parallel workstreams over 12 weeks. Stream 1 (weeks 1-4): stand up the Next.js 16 + Supabase + Vercel foundation, port the marketing pages 1:1, run the redirect map in dev. Stream 2 (weeks 4-8): programmatic SEO — generate 200+ certification × city pages from a structured content model, ship sitemap.xml + 7 distinct schema types (Course, LocalBusiness, FAQPage, etc.). Stream 3 (weeks 8-12): lead pipeline — Facebook Lead Ads webhook with HMAC verification, Supabase storage, admin dashboard, Resend transactional email, Stripe checkout for the paid courses.

Hardest call early on: how aggressive to be on the redirect strategy. Decided to map every legacy URL individually rather than rely on Next.js catch-all rewrites — slower to build, but Google indexed the new URLs with full link equity inside 6 weeks rather than 6 months.

• Foundation: Next.js 16 (app router), TypeScript strict, Supabase, Vercel
• SEO surface: 200+ pSEO pages generated from a cert × city matrix
• Redirects: 70+ legacy URLs mapped individually (not catch-all)
• Schema: 7 types — Course, LocalBusiness, FAQPage, Organization, BreadcrumbList, ContactPoint, WebSite
• Lead pipeline: FB Lead Ads → HMAC-verified webhook → Supabase → admin dashboard → Resend
• Payments: Stripe Checkout + course-enrollment webhook

Boring, fast, debuggable.

Default opinionated stack — Next.js + Supabase + Vercel. Could've used a CMS for the marketing pages but the editorial volume didn't warrant the operational tax. Page content lives in MDX in the repo; engineers ship copy through PRs.

12 weeks, 3 streams, no scope creep.

Locked scope in week 0. Anything that came up after that went into a "v2 list" — none of it shipped during the engagement.

What it enabled.

The headline numbers from the engagement (technical surface metrics — business KPIs are CISNET's to disclose):

Beyond the numbers: marketing can now ship a new certification page through MDX without engineering. Lead routing is observable end-to-end. Ad campaigns can target specific cohort × city combinations that previously didn't have a landing page.