The project
Scheriani S.r.l. is a construction company based in San Dorligo della Valle that has been working across the Trieste area for over sixty years: demolition and excavation, haulage and logistics, road works, underground utilities, earthmoving and skip hire, all carried out with its own fleet.
The starting point was a reputation earned on site that did not exist online. The website had to close that gap and turn the company's credibility into quote and site-visit requests, while staying readable for someone looking the firm up on a phone, often from a building site. I handled the work end to end: art direction, design system, development and copy.
The solution
The visual direction deliberately steps away from the standard Italian construction-website look: no stock photos of yellow hard hats, but an OKLCH palette built on carbon black, iron oxide and paper white, condensed display type (Big Shoulders Display) paired with Barlow for reading, and an alternating section rhythm that walks the visitor from the company story through the services to the fleet.
The heavier lifting, though, happened in two less visible areas. The first is discoverability: semantic structure and geo-targeted keywords for Trieste and its province, LocalBusiness and GeneralContractor JSON-LD structured data covering services, opening hours and service area, plus a sitemap and clean URLs. Alongside it I wrote an llms.txt file describing the company, its services and its pages in a form language models can read: a foothold in generative answers, not just in the SERP.
The second is security and compliance. A Content-Security-Policy generated at runtime with a PHP nonce, so no inline script is authorised wholesale, along with HSTS, clickjacking and MIME-sniffing protection, a Referrer-Policy and a Permissions-Policy. The contact form uses CSRF tokens with constant-time comparison, server-side validation and authenticated SMTP delivery; the cookie banner keeps Google Analytics blocked until consent is explicitly given, as the GDPR requires.
The site runs on PHP with no CMS: cheap to maintain, with no plugins to update, WebP imagery, compression, long-term caching and WCAG 2.1 AA accessibility verified across contrast, focus states and reduced motion.
Results achieved
- CMS-free PHP site: no plugins to update, nothing that can break apart
- Content-Security-Policy with a nonce regenerated on every request, HSTS and clickjacking and MIME-sniffing protection across all pages
- Contact form with CSRF tokens, server-side validation and authenticated SMTP delivery
- Google Analytics blocked until consent is explicitly given, with IP anonymisation
- LocalBusiness/GeneralContractor structured data and an llms.txt file: the company is readable by search engines and language models
- WebP imagery, compression and year-long caching on static assets, with WCAG 2.1 AA accessibility verified across contrast, keyboard focus and reduced motion
