Work / Company website / 2026
The Other Company
A site for an independent product and research company, built as a corporate intake form that someone answers with a marker.
The boundary
Stays inside
- Source and build in the repo
Allowed to cross
- Static assets served by Workers
- A mailto link
The smallest attack surface is the one you never deploy.
Context
A young company with no customers to show needs a site with character that says plainly what it does.
Idea
Every category box on the form is wrong except Other, which is circled in marker. No invented clients, metrics or testimonials.
Craft
- Static Astro build deployed as Workers static assets with a designed 404.
- Security headers and immutable caching from a single _headers file.
- The hand-drawn circle redraws on the GSAP ticker and stops off screen.
Threat model
| Asset | Threat | Control |
|---|---|---|
| Site integrity | Server compromise | No server: static assets only |
| Visitors | Clickjacking and sniffing | Frame and content-type headers |
Outcome
Live at other-company.com.