DOSSIER №01 — APRIL 2026
The ground your website stands on just moved.
On April 6, 2026, thirty-one WordPress plugins were quietly backdoored. If your municipality runs WordPress, your clock started last week.
Read the briefingThe current exposure.
In March and April of 2026, a threat actor compromised thirty-one widely installed WordPress plugins by injecting obfuscated PHP into their update packages. The attack was dormant for eight months before activating — a technique designed to survive the first wave of security audits.
For municipalities, the calculus is straightforward: a WordPress site that was unpatched for even a short window during the activation period is compromised until forensically cleared. The site is running. The certificate is green. The backdoor is open.
The alternative.
I build statically generated municipal websites using Next.js and modern deployment infrastructure. No PHP. No database. No plugin ecosystem. The attack surface is reduced to a CDN and a git repository.
Every site ships bilingual, WCAG 2.1 AA compliant, and optimized for Canadian hosting. Updates are atomic, reversible, and auditable. The stack is the same one used by the largest enterprises on the web.
Why me.
Governance Platforms
Built front-ends for Waterworth, Muniworth, and The National Strategy Council — platforms used by municipal councils across Canada.
Procurement Expertise
All projects structured to fall beneath direct-award thresholds. No RFP required. No procurement committee. Your CAO can sign tomorrow.
Enterprise Background
Currently building senior-living enterprise software. Previously ran internal finance and recruited three-quarters of the engineering team at a governance-tech firm.
PRINCIPAL
Jesse James
Full-stack developer and civic-tech builder. Previously de facto chief of staff at the governance-technology firm behind Waterworth, Muniworth, and The National Strategy Council, where I built all three platforms' front-ends, recruited roughly three-quarters of the engineering team, and ran internal finance reconciliation.
I also build enterprise software for the senior-living industry, but this practice is exclusively focused on municipal and civic clients.
jesse@fitforgov.com · +1 250 415 5678
24/7/365 direct line. I answer the phone.
CONTACT
Call first. Email second. Forms third.
If your municipality runs WordPress and you want to discuss alternatives, I can usually take a call within the hour.