Most small business owners hire a web design agency once every three to five years. That is not enough reps to develop pattern recognition. So when an agency says the right things on a discovery call, sends a clean proposal, and quotes a number that feels reasonable, the decision often comes down to gut and price. Then the project drags. The site launches half-broken. The agency disappears after the final invoice. Twelve months later, the owner is back at square one, rebuilding from scratch with a different agency that may or may not be any better.
The framework below is the one we use when we vet partner agencies, and the one we wish every client had used before they came to us. It is not biased toward any single agency, including ours. If you take it and use it to score five firms, and one of them comes out ahead of us on the criteria that matter to you, hire them. The point is that you have the framework to know.
The 7 red flags to walk away from
These are pattern-level warnings, not callouts of specific firms. Any single one is reason to slow down. Two or more in the same conversation is a sign to end the call politely and move on.
1. No live portfolio on the open internet
If the agency sends you a PDF deck of mockups, dribbble shots, or screenshots in a slide carousel, that is not a portfolio. That is a marketing pitch. A real portfolio is three to ten working URLs you can open in a fresh browser tab, that load fast, that render correctly on your phone, and that show up in Google when you search the client name. If the agency cannot or will not provide working URLs, the most charitable explanation is that they are protective of client privacy. The less charitable explanation is that they did not actually build the sites.
2. Vague, sliding, or "depends on scope" pricing with no examples
Project work is always somewhat custom, so "it depends" is partially fair. But a healthy agency can give you starting ranges within thirty seconds. They can say "a five-page brochure site for a single-location business starts at X" or "a multi-page lead-gen site with booking and SEO runs Y to Z." If every question about price gets deflected into another discovery call, you are being qualified for upsells, not quoted for a project.
3. You do not own the code, content, or domain when it is over
Read the contract. Specifically search for the words "ownership," "intellectual property," "license," and "termination." If the agency retains ownership of the code or design, or licenses it to you only for as long as you stay on their hosting, you are not buying a website. You are renting one. That is not inherently wrong if the price reflects rental, but most small business owners assume they own what they paid for. They often do not.
4. Lock-in to a proprietary CMS you have never heard of
WordPress, Webflow, Shopify, Squarespace, and modern static stacks like Next.js or Astro all have something in common: if the agency walks away, you can hire someone else to take over. A proprietary CMS that only the agency understands traps you. Ask which platform they build on. Search the platform name plus "developers" on a freelance marketplace. If almost nobody else can work on it, that is a problem.
5. "Guaranteed" SEO results, page-one rankings, or traffic numbers
Google does not guarantee rankings to anyone, including itself. Any agency promising a specific position for a competitive keyword is either lying, planning to rank you for a keyword nobody searches, or both. Honest SEO talks about audits, technical hygiene, content strategy, expected timelines, and ranges. It does not promise positions.
6. No written contract, or a contract written entirely in their favor
A handshake email and a PayPal invoice is not a contract. You need a written scope of work that defines deliverables, revision rounds, timeline, payment schedule, ownership transfer, what happens if either side wants to exit, and what counts as "done." If the contract has no exit clause, no defined scope, and a 100% upfront payment, you are funding the agency, not buying a project.
7. Pressure tactics, fake scarcity, and "this price expires Friday"
Sales urgency belongs in retail, not in a six-figure-impact business decision. If the discovery call ends with "I can only hold this rate until end of day," walk. The agency has trained itself to close people who would otherwise have walked. That training is paid for by every client who said yes under pressure and regretted it later.
The 12 questions to ask before signing
Send these as a written list, not just in conversation. Asking them in writing makes the agency commit to answers you can hold them to. If they refuse to put answers in writing, that is itself an answer.
1. Do I own the source code and design files at the end of the project?
The answer should be a flat yes, with delivery format spelled out. Code in a Git repository you control, design files in Figma or equivalent, accounts under your email, domain in your name.
2. What platform are you building on, and why?
You want a real answer, not jargon. "We use WordPress because it is the most widely supported CMS in the world" is a real answer. "We use a custom proprietary system optimized for our workflow" is a warning sign.
3. What is your post-launch support model?
Some agencies hand you the keys at launch and end the relationship. Some bundle 30 to 90 days of support. Some retain you indefinitely. None of these is wrong, but you need to know which model you are buying.
4. How is SEO baked in versus charged as an add-on?
Technical SEO basics, clean URL structure, fast load, mobile-friendly markup, schema, sitemap, robots, image optimization, descriptive page titles and meta descriptions, should be part of any modern build. Content SEO and ongoing keyword work are legitimately separate. Make sure you know which is which on your quote.
5. Who owns the hosting account, and where will my site live?
Your site should live in a hosting account that you own. The agency can manage it for you, but the credit card on file, the email on the account, and the ability to grant or revoke access should be yours from day one.
6. What page speed and Core Web Vitals targets are you aiming for?
A good agency answers with specifics: LCP under 2.5 seconds, CLS under 0.1, INP under 200ms, mobile PageSpeed score above 85. If they shrug or say "fast," they are not measuring it.
7. What is specifically NOT included in this quote?
Possibly the most valuable question on the list. Forces the agency to list out copywriting, photography, stock imagery licenses, plugin subscriptions, content migration, third-party integrations, and post-launch changes. Hidden line items live here.
8. How many revision rounds are included, and what counts as a revision?
"Unlimited revisions" usually means revisions on minor details, not on structural redesigns. Get the definition in writing. Two to three structured rounds with clear feedback windows is typical and reasonable.
9. What is the timeline, and what slows it down?
Most projects do not slip because the agency is slow. They slip because the client is slow on content, approvals, and feedback. Ask which side typically causes delay and how the agency handles it.
10. Can I talk to two recent clients directly?
Not testimonials on the site. Names, emails, and permission to email those people directly without the agency on copy. A healthy agency keeps a small bench of clients who will take a 10-minute call.
11. What happens to my site if I stop working with you?
The answer should be: nothing changes, you keep the code, the domain, the hosting, and the analytics. If anything changes when the relationship ends, that is the lock-in risk you are signing up for.
12. What AI tools do you use, and where do you draw the line?
In 2026, almost every agency uses some AI. The question is whether they use it as leverage to ship better and faster, or as a shortcut to ship slop. Honest answers include things like "AI-assisted draft copy that we edit," "AI for image generation we then curate," or "AI chat agents we configure for your site." Vague answers like "we are AI-first" with no specifics are usually marketing.
How to evaluate their portfolio honestly
Most agency portfolio pages are designed to make you say yes. To evaluate them honestly, you have to do four things the agency does not want you to do.
Open the actual live site, not just the screenshot. Click through to the URL. If the agency does not link to the live site and only shows you mockups, ask why. Screenshots can be borrowed, faked, or pulled from work the agency contributed a small piece to and now claims as their own. Live URLs are the only evidence that matters.
Test it on your phone. Most small business sites get over 60% of their traffic from mobile. If the portfolio site is slow, broken, or hard to read on an iPhone, that is what your site will look like too. Spend 90 seconds per portfolio item: load it, scroll it, tap a button, fill out the contact form to make sure it works.
Run a Core Web Vitals check. Paste the URL into PageSpeed Insights. The Lighthouse score on mobile is the single most useful number for evaluating an agency. A modern agency should be shipping sites that score 85 or above. Anything in the 40s or 50s is the digital equivalent of a leaky roof.
Verify the agency actually built it. Ask the agency for the client name. Then email the client directly and ask: "We are considering hiring this agency. Did they design and build your site, and are you happy with it?" Two-minute email, three-line reply, you now know more about the agency than 90% of their prospects do.
One more honesty check: search the agency's name plus "review" or "complaints" on Google, on Trustpilot, on Reddit, and on relevant industry forums. Look not just for negative reviews but for the agency's response to them. An agency that answers a bad review with grace is worth more than one with no reviews at all.
Pricing tiers explained transparently
These ranges are approximate, US-based, and reflect what we see in mid-2026. Outside the US, expect to scale down by 30 to 60% depending on the market.
| Tier | Price Range | What You Get | Best Fit |
|---|---|---|---|
| Budget / DIY-assisted | ~$1K–$3K | Template-based build, mostly DIY platform like Wix or Squarespace with a freelancer doing setup and content placement. Limited customization. | Brand-new sole proprietors validating an idea, side hustles, pre-revenue. |
| Small agency / freelance | ~$5K–$15K | Custom theme on WordPress or similar, real design work, basic SEO setup, contact forms, simple integrations. Often a one-person or small team operation. | Established small businesses doing $250K to $2M annual revenue. The realistic floor for a site that actually performs. |
| Mid-market agency | ~$15K–$50K | Fully custom design, content strategy, real SEO foundation, CRM and booking integrations, sometimes AI features, post-launch support window, brand work. | Multi-location small business, professional services firms, growing e-commerce, businesses with $2M to $20M revenue. |
| Premium / enterprise | ~$50K+ | Bespoke architecture, ongoing strategy, dedicated team, deep integrations, advanced AI workflows, content production, analytics, multivariate testing. | National brands, large e-commerce, regulated industries, anyone for whom the site is the primary revenue channel. |
The mistake almost every small business makes is buying a tier above or below their actual need. A pre-revenue solo consultant does not need a $50K build. A multi-location dental practice should not be on a $2K Wix template. For a deeper breakdown by business type and ROI math, see our piece on how much a small business website actually costs in 2026.
The hidden costs nobody warns you about
The contract price is rarely the real price. These line items show up after launch, usually as a surprise, and over three years they often add up to more than the original build.
- Post-launch maintenance retainer. Typically $100 to $500 per month for basic care: backups, security patches, plugin updates, small content edits. Without this, sites silently rot.
- Hosting fees. Anywhere from $10 to $300 per month depending on platform and traffic. Some agencies mark up hosting by 200 to 500%. Always know the underlying cost.
- Plugin and theme licenses. Premium WordPress plugins, form tools, page builders, and themes can stack to $500 to $2,000 per year. Ask which licenses are in your name and which are in the agency's.
- Third-party tool subscriptions. CRM, email platform, scheduling software, live chat, analytics extensions, A/B testing tools. Easy to hit $200 to $1,000 per month before you notice.
- Content writing add-ons. Most quotes assume you provide copy. Professional copywriting for a small business site runs $1,500 to $6,000 depending on page count and depth.
- Professional photography. Stock imagery cheapens premium sites instantly. A half-day shoot for product, team, or facility imagery is $800 to $2,500. Worth it on sites that need to feel real.
- Ongoing SEO and content. The build gets you to the starting line. Sustained ranking comes from consistent content. Budget $500 to $2,500 per month for a real SEO program.
- AI chatbot and automation setup. If you want a real AI agent on your site that books appointments or answers questions, expect $500 to $3,000 setup plus $50 to $300 monthly. Our guide on AI chatbots for small business covers what these actually do.
Get every one of these spelled out before signing. A trustworthy agency will volunteer the list. A less trustworthy one will let you discover them invoice by invoice.
Why the cheapest agency is usually the most expensive
The math nobody explains: a $1,500 site built badly costs you more over three years than a $12,000 site built well. Here is how that math actually works.
You will rebuild it inside 18 months. Cheap builds use templates, generic copy, and shortcuts that look fine on launch day and feel embarrassing by month nine. When you rebuild, you are not paying the $12,000 you should have paid the first time. You are paying $12,000 plus the original $1,500 plus 12 months of lost compounding SEO authority. The total cost is closer to $18,000, and you are still where you would have been if you started right.
You lose SEO authority during the migration. Every URL change, every redirect rule that breaks, every page that drops out of the index, costs you ranking. Google takes months to re-evaluate a site after a major rebuild. If you were ranking for "best Italian restaurant downtown" before the migration, you are starting over. Recovery takes 90 to 180 days if everything goes right.
Fixing a bad foundation costs more than starting right. Renovating a house built on a cracked foundation costs more than tearing it down. Same with websites. The site loads slowly because of bloated theme code. Search rankings are weak because the URL structure was never planned. The contact form does not actually email you because it was never tested. Each problem is a fix, but the underlying issue is structural.
Opportunity cost on lost leads. The real cost is what the bad site failed to capture during the months it was live. If a properly built site would have generated 8 additional leads per month at an average customer value of $1,200, and you ran the cheap site for 12 months, the gap is $115,200 in unrealized revenue. The $1,500 saving on the original build is rounding error.
This is not an argument for spending the most money possible. It is an argument for spending the right amount once. Match the tier to your business stage, hire the agency that fits the tier, and resist the urge to bargain shop a decision that compounds.
Where AI-powered agencies fit in 2026
By mid-2026, almost every agency claims to be "AI-powered." Most are not. The label is doing a lot of work it does not deserve. The honest read is that AI in web design falls into two camps.
Legitimate AI use: the agency uses AI as leverage to ship faster, more accurate, and more customized work than they could without it. AI-assisted copy that a human edits and approves. AI image and video generation that gets curated, not dumped. AI-driven personalization that adapts the site to the visitor. Real AI chat agents trained on your business that answer questions and book appointments 24/7. Workflow automation that handles intake, content updates, and lead routing. These are real value-adds and they show up in measurable ways: faster turnaround, lower cost, better outcomes.
AI-washing: the agency uses AI as a marketing label without changing the underlying product. The site is still a generic template. The copy is unedited AI slop with phrases like "elevate your business" and "unleash your potential." The "AI chatbot" is a hardcoded FAQ widget with no real intelligence. The promised "personalization" is a name tag and nothing else. The price is higher because of the label, not because of the work.
The way to tell the difference is to ask specifics. "What AI tools do you use?" Real answer: named tools, named workflows, where in the process. Vague answer: "we are AI-first" with no examples.
Concrete things worth asking about:
- ChatGPT or Claude integration on your site. A real AI agent that knows your business and can answer questions, qualify leads, and book appointments. Ask to see one running on a live client site.
- AI content workflows. Not "we use AI for copy" but "we use AI for first drafts and run them through a three-stage human edit and a fact-check."
- AI image and video generation. Useful for hero imagery, product mockups, and short promotional video when budget rules out a photoshoot. Should be curated by a designer, not dumped raw.
- SEO and AEO. AI search results like Google AI Overviews, ChatGPT, and Perplexity now drive a meaningful share of discovery. The framework for optimizing for them is different. Our explainer on Answer Engine Optimization walks through it.
- Local SEO automation. AI can dramatically reduce the time it takes to keep Google Business Profile, citations, and review responses fresh. See SEO for local businesses for the full playbook.
The right question is not "are you an AI agency?" The right question is "show me where AI changes the deliverable, the timeline, or the price for my project." If the agency cannot answer specifically, the label is marketing.
Red flags vs. green flags, side by side
| Criterion | Red flag pattern | Green flag pattern |
|---|---|---|
| Portfolio | PDF deck of screenshots, no live URLs | 3 to 10 working URLs, recent launches |
| Pricing | "It depends" with no ranges, ever | Starting ranges given upfront, scope drives final |
| Ownership | Agency owns code, content, or domain | You own everything, accounts in your name |
| Platform | Proprietary CMS only they understand | Standard platform with a large developer pool |
| SEO promises | "Guaranteed page-one rankings" | Audit-driven plan with realistic timelines |
| Contract | No written SOW, 100% upfront, no exit | Defined scope, milestones, ownership, exit terms |
| Sales process | Pressure, fake deadlines, "today only" | Discovery, proposal, follow-up, your timeline |
| Client references | Refuses or delays direct contact | Two names, two emails, permission to ask anything |
| AI claims | "AI-first" with no specifics | Named tools, named workflows, live examples |
| Post-launch | Disappears after final invoice | Defined support window, clear path to ongoing care |
The 12-question vetting checklist
Paste these into your RFP or send them as a follow-up email after the discovery call. Track the answers in a spreadsheet. The agency that answers in writing wins.
- Do I own the source code, design files, content, and domain at the end of the project?
- What platform are you building on, and why is it the right choice for my business?
- What is your post-launch support model and how long does it last?
- What SEO is baked into the build, and what is charged as an add-on?
- Who owns the hosting account, and what is the underlying monthly cost?
- What page speed and Core Web Vitals targets are you committing to?
- What is specifically NOT included in this quote?
- How many revision rounds are included, and how do you define a revision?
- What is the timeline, and what historically slows your projects down?
- Can I email two recent clients directly, without you on the thread?
- What happens to my site, code, and data if we stop working together?
- What specific AI tools and workflows do you use, and where do they show up in my project?
Rule of thumb: if an agency gives you full, written answers to all 12 questions within 48 hours, and the answers hold up under scrutiny, you have a serious candidate. If they dodge more than two of the questions, keep looking.