PREPARED FOR DR. SHAWN SPRAGUE · PT PROGRESSION · SOUTH NATICK, MA
The practice is elite.The website is benching it.
5.0 stars across 74 Google reviews — and a homepage that takes 10 seconds to load and never mentions them. Here's the live audit and the 90-day plan to close the gap.
3-MINUTE READ · BUILT FOR A BUSY CLINIC OWNER
THE WHOLE PITCH IN 20 SECONDS
- 01
Your reputation is elite — 5.0 across 74 reviews — and your website never shows it.
- 02
Your homepage ships a 68 MB video and takes 10.2 seconds to appear on a phone.
- 03
Your lead form interrogates cold prospects — birth date, home address — when it should book a 15-minute call.
- 04
Week one is cheap: patch the security gaps, cut the video, show the proof, shrink the form.
- 05
Then: rebuild on the modern stack this page runs on, productize golf, and turn on an AI content engine you own.
STAGE 01 · ASSESS
You already won
the hard part
Most clinics would kill for these assets. They're real, they're rare — and they're invisible online.
And here's what's leaking
LIVE AUDIT · JULY 13, 2026SHOW THE RECEIPTS — THE UNGLAMOROUS STUFF THAT MATTERS
- Theme and slider declare
Enfold 4.9andSlider Revolution 6.5.11— both sit below publicly patched versions with published vulnerability histories. Not evidence of compromise; still indefensible. - No
SPFrecord, noDMARCrecord — anyone can spoof mail from your domain. Business runs through a consumer Gmail address. - Robots + sitemap reference
http://URLs on anhttps://site; footer still says © 2022; one clinician URL is a typo (/about-cono/). - Website says Monday closes 7:00 PM; Google says 7:30 PM. Small, but trust is a details business.
- The privacy policy contains copy-pasted text referencing another business ("Sustained Fitness").
- One of your three blog posts extrapolates pulmonary-edema risk using nonstandard terminology, without citations — under your clinical brand. It should be unpublished or rewritten under clinician review.
- Your DNS already runs on Cloudflare nameservers — which quietly makes the modern-stack move in Stage 04 a switch-flip, not a migration.
STAGE 02 · RESTORE
Week one:
stop the bleeding
Seven fixes. Days, not months. None of them wait for a redesign — and we do the work, you approve it.
Tested backup first, then patch or remove the outdated theme + slider layer, audit admin users, verify integrity.
PUBLISHED-CVE EXPOSURE → CLOSED DAY ONEReplace with a compressed poster frame; headline readable instantly; no full film pushed to phones.
~10.2S → ~2S FROM THIS FIX ALONE5.0 · 74 reviews · three senior DPTs · TPI golf · South Natick — above the fold on every page, verified before publishing.
Four fields max — or straight to a 15-minute fit-call scheduler. DOB and address move to secure intake after booking, where they belong.
BOOKABLE ON A PHONE IN UNDER 2 MINUTESSPF + DKIM + DMARC on the domain, and a plan to route business mail off consumer Gmail.
Unpublish or rewrite the pulmonary-edema post under clinician review — standard terminology, real citations, named author.
Reconcile Google vs website hours, fix the typo URL, the © 2022 footer, the copy-paste privacy policy.
Why this order? Trust before traffic. There is no point buying attention for a site that's slow, leaky, and quietly vulnerable.
STAGE 03 · REBUILD
Say what only
you can say
"One-on-one," "root cause," "individualized" — every competitor within ten miles says the same words. Your real moat is continuity. Name it.
"Rehab that doesn't stop at good enough."
One-on-one physical therapy and performance training for active adults, athletes, and golfers who need more than a standard rehab protocol.
Define the limitation against the life or sport it's blocking.
Recover usable motion. Reduce symptoms.
Load strength, control, and capacity — progressively.
Retest against objective, real-world demands.
Graduate into training. Don't disappear at discharge.
THE PROGRESSION METHOD — YOUR OPERATING MODEL, FINALLY NAMED. (YES — THIS PITCH IS ORGANIZED THE SAME WAY. IT WORKS.)
Comprehensive evaluation + a written care plan. The front door.
The bridge from "feels better" to tested, loaded, proven capacity.
Body-Swing Assessment → focused build → quarterly checkpoint.
Ongoing individual or semi-private training. Retention, not reacquisition.
THE SHARPEST WEDGE
Golf is yours to take
You already surface for "golf performance physical therapy Boston." Spaulding, Joint Ventures, and Needham PT are circling the same territory — but none of them combine TPI screening, senior-DPT rehab, and post-rehab training under one roof, four towns deep in country-club country.
- Name it and price it: the Golf Body-Swing Assessment — a bookable product, not a paragraph.
- Golf Performance Build — 4/8/12-session blocks after the assessment.
- Club & pro partnerships: Screen Days on their turf, booked assessments on yours.
- "Finish the Season Strong" campaign timed for August–October.
Your front door, before & after
TODAY — REAL SCREENSHOT, FULLY LOADED
THE PROPOSAL — WORKING MOCK
Get back to your sport.
Keep progressing.
Left: what a new patient actually sees today — the headline dissolves into the photo, proof is absent, and this frame took ten seconds to arrive. Right: proof up top, one promise, two buttons. Nothing loads before the words do. The full working preview is live here →
STAGE 04 · PROVE
The platform call
you asked about
Does it stay on WordPress? Short answer: stabilize it now, then move the marketing site to the stack this page runs on. Here's the honest version.
Stabilize WordPress
The Stage-02 fixes happen on the current site. Patching, poster-swap, proof bar, form fix — cheap, fast, and they protect SEO equity while the real build happens on a preview URL.
This is triage, not the destination. Staying long-term means paying the plugin-patch treadmill forever.
Rebuild on Cloudflare Pages
Your whole public site is 17 pages and 3 posts — a small, safe move with every URL redirect-mapped. And your DNS already lives on Cloudflare: cutover is a switch flip, rollback is instant.
No plugins. No patch cycle. No hosting bill. Every change ships to a preview link before it touches production.
| Dimension | Today — WordPress/Enfold | After — Cloudflare Pages |
|---|---|---|
| Mobile load (LCP) | 10.2 seconds | Under 1.5s — budgeted & verified before cutover |
| Security patching | Monthly theme/plugin treadmill, published CVEs | Static files. Nothing to patch. |
| Hosting cost | SiteGround plan, annually | ~$0 |
| Making a change | Edit live production in a page builder | Preview URL per change · one-click rollback |
| Content updates | Wrestle the WP admin | Text it to the engine → draft → your approval → live |
| Booking & intake | 8-field form → email | Fit-call scheduler + secure intake in PtEverywhere |
Not yet — there's nothing to sell on the site today. No store, no packages, no merch. Bolting on a storefront now is plumbing without water.
The moment golf assessments or training blocks go on sale online, checkout is a week of work — Stripe payment links or an embedded buy button. Full Shopify only if a real product line (programs, merch, courses) emerges. The door stays open; we just don't pay rent on it yet.
This page is the proposed stack: Cloudflare Pages, no WordPress, no plugins, no builder — total page weight around 2% of your homepage video alone.
And the rebuild isn't hypothetical: walk through your new homepage → — a working preview, built today.
We just ran this exact play for a European wellness brand — legacy site builder → Cloudflare Pages, live at holmhouse.dk, July 11. Same recipe, tested.
And we measure like clinicians. Baselines first, then: fit-call bookings, show rates, eval conversions, PT→performance transitions, review velocity. One weekly dashboard — not vanity traffic.
STAGE 05 · PERFORM
An engine you own,
not an app you rent
You've already reached for AI — smart instinct. The upgrade isn't a better chatbot. It's an operations engine wired into your actual business, working while you treat.
One clinician-reviewed article every two weeks — drafted for you, cited, formatted — then automatically recut into the Google Business post, the email, and the shorts script. You approve; the machine does the other 90%. Your 3-post blog becomes a compounding library.
Every image on this page was generated this afternoon — the golf bay, the facility at dusk, all of it. Seasonal campaigns, golf funnels, and video for reels on demand, without a production retainer.
Every inquiry answered in minutes with a fit-call link; no-show rescue, post-eval follow-ups, milestone review requests — sequences that run themselves, with health details kept out of marketing systems by design.
Manus was a great instinct — and a cautionary tale: Meta announced a $2B acquisition in December; Beijing blocked the deal in April. A rented cloud agent is someone else's chess piece. Yours runs on a box in your building, on your data, tuned to your practice. Nobody can acquire it out from under you.
The 90 days, honestly
- The seven week-one fixes, live
- Access + accounts inventoried
- Baselines: capacity, fees, conversion
- Day-14 call: pick the first campaign
- New site built on a preview URL
- Every old URL redirect-mapped
- Golf products named, priced, bookable
- Cutover with instant rollback ready
- "Finish the Season Strong" golf funnel
- Content engine on cadence
- Weekly dashboard running
- Scale decisions made on evidence
Day 90 looks like this
- A prospect books a fit call on their phone in under two minutes
- 5.0 × 74+ is the first thing every visitor sees
- Golf has named, priced, bookable products — in season
- Every lead gets a same-day human-quality response
- The site loads before a driver finishes their backswing
- You read one weekly dashboard and decide with evidence
STAGE 06 · GO
Three steps.
The first is a text.
15 minutes this week — phone or in person. We walk this page, you tell me what's wrong, we lock scope.
Read-only first, then as needed:
The seven Restore fixes ship. You approve everything before it goes live. Then we build.
Or just text me back. You know where I live — same street, in fact.
Method & honesty notes — the motion in the hero up top is a 7-second, 0.9 MB generated loop (Veo via Flow, seeded from the still) that only loads on large screens; phones and reduced-motion viewers get the still image. Compare: your current homepage pushes 68 MB of video to every phone. Every number above came from a live, read-only audit run July 13, 2026: Google PageSpeed lab runs (mobile/desktop), DNS lookups, sitemap inventory, the live Google Business profile, and public page inspection. Review counts, credentials, and hours get re-verified before anything ships publicly. Competitor pricing mentioned in planning (Tempo $260/$210 · Elliott $225/$175) are public anchors, not recommendations. Load-time projections are budgets we verify before cutover, not guarantees. Nothing here is medical advice; clinical content ships only with clinician sign-off. Full 40-page audit, strategy, and roadmap available — this page is the short version, on purpose.