---
title: "Cybersecurity Website Design: 12 Examples to Learn From"
description: "12 cybersecurity websites read on 7 November 2026: emergency paths, trust centers, security.txt, prices and proof, plus a checklist for your own site."
url: "https://dardo.studio/en/blog/cybersecurity-website-design/"
language: "en"
translations: {"es":"https://dardo.studio/es/blog/diseno-web-ciberseguridad/","pt":"https://dardo.studio/pt/blog/sites-de-ciberseguranca/"}
updated: "2026-11-08T05:14:40.170Z"
---

[Blog](https://dardo.studio/en/blog/)

# Cybersecurity website design: 12 examples and what each one does well

12 security company websites read on 7 November 2026, from Wiz to HackerOne: how each earns a security buyer's trust, and what to copy for your own site.

By [Nicolás Cerón](https://www.linkedin.com/in/nicoceron/) · November 8, 2026

![A fortified stone gatehouse on a bridge over a moat at night, amber lanterns on the walls and its heavy gate doors painted deep crimson.](https://dardo.studio/_astro/01M6WMFT3E8GWQGB31YEVWQQGM_Z2w1Jj8.webp)

## Key takeaways

- Of 12 security company websites read on 7 November 2026, 5 link an emergency or incident path from the homepage, and 4 of them put it in the header or top bar.
- 6 of the 12 publish prices with numbers, from Tailscale's free plan for up to 6 users to Chainguard's catalog, which starts at USD 19K for a team of 10.
- 9 of the 12 serve a security.txt file at /.well-known/, but only 5 of those files include both fields RFC 9116 requires: Contact and Expires.
- 9 of the 12 appear on CISA's list of Secure by Design pledge signers, and among the trust and security pages we read, only Rapid7's linked to its own pledge report.
- All 12 link a trust center or security page from the homepage; Expel's says four documents answer 90% of vendor reviews and names them.

## The short answer

We read the websites of 12 security companies on 7 November 2026, from cloud security and identity to compliance automation, managed detection and bug bounties. This isn't a ranking: each shows one pattern clearly, for a CISO, an IT lead, a developer or a small-business owner.

What they have in common:

- **A path for the buyer in trouble.** 5 of the 12 link an emergency or incident page from the homepage, and 4 put it in the header or top bar.
- **Prices follow self-serve buying.** 6 of the 12 publish prices with numbers, and all 6 also offer a free plan or a free trial.
- **Trust pages are universal, quality isn't.** All 12 link a trust center or security page, but only 5 serve a security.txt file with both fields the standard requires.
- **Proof is stacked.** All 12 show named customers or customer stories, and 8 cite analyst reports on the homepage.

Site-by-site notes come first, then patterns, what's specific to security buyers and a checklist.

## The 12 at a glance

| Site and buyer                                                                           | Emergency path on the homepage          | Public prices                              | Trust or security page                 |
| ---------------------------------------------------------------------------------------- | --------------------------------------- | ------------------------------------------ | -------------------------------------- |
| [Wiz](https://www.wiz.io/), cloud security, CISOs                                        | "Under attack?" in the header           | No; licensing model explained              | Trust center with dated certifications |
| [Okta](https://www.okta.com/), identity, IT teams                                        | No                                      | Yes, from USD 6 per user a month           | Trust page with uptime and its method  |
| [1Password](https://1password.com/), access, IT and individuals                          | No                                      | Yes, Business at USD 8.99 per user a month | Security page and white paper          |
| [Cloudflare](https://www.cloudflare.com/), network security, developers and enterprises  | "Under attack?" in the header           | Yes, on the homepage                       | Trust Hub                              |
| [Tailscale](https://tailscale.com/), connectivity, developers and IT                     | No                                      | Yes, free for up to 6 users                | Security page                          |
| [Vanta](https://www.vanta.com/), compliance automation, startups to enterprise           | No                                      | No; plans listed                           | Trust center link                      |
| [Huntress](https://www.huntress.com/), managed security, small businesses and MSPs       | No                                      | Yes, list prices                           | Trust center link                      |
| [Arctic Wolf](https://arcticwolf.com/), managed detection, mid-market                    | "Experienced a Breach?" in the top bar  | No                                         | Information security page              |
| [Rapid7](https://www.rapid7.com/), detection and exposure, security teams                | "Get Breach Support" in the footer      | No                                         | Trust page linking its CISA pledge     |
| [Chainguard](https://www.chainguard.dev/), open-source supply chain, platform teams      | No                                      | Partly: free tier, catalog from USD 19K    | Trust center link                      |
| [Expel](https://expel.com/), managed detection, SOC leaders                              | No                                      | No; packages listed                        | Security page for reviewers            |
| [HackerOne](https://www.hackerone.com/), offensive testing, AppSec teams and researchers | "Contacted by a hacker?" in the top bar | No                                         | Trust center with 11 certifications    |

All read on 7 November 2026 from the US English pages.

B2B website design

Want Dardo to do this for you?

Tell us what you need. Nico replies personally within one business day.

[Get a proposal](https://dardo.studio/en/contact/?service=b2b-website-design) · [See the service](https://dardo.studio/en/services/b2b-website-design/)

## Twelve examples, one pattern each

### Wiz: a self-assessment for buyers who aren't ready for a demo

[Wiz](https://www.wiz.io/), a cloud security platform, opens with "Protect Everything You Build and Run" and a demo form in the hero. Proof is stacked for a CISO: "Trusted by more than 65% of Fortune 100 companies", 18 customer logos, a G2 rating from 916 reviews, a Forrester Wave, an IDC MarketScape and quotes from named security leaders.

"Under attack?" sits in the header next to "Get a demo". For buyers who aren't ready to talk, a free [cloud security assessment](https://www.wiz.io/cloud-security-assessment) asks 9 questions, one per security domain, and returns a risk level. The pricing page explains the licensing without numbers, and the [trust center](https://www.wiz.io/trust-center) dates each certification; the newest we saw was 3 December 2025.

**Worth copying:** a self-assessment that returns a result, so the first sales call starts from the buyer's own answers.

### Okta: numbers that come with their method

[Okta](https://www.okta.com/), the identity company, rotates headlines about AI agents and puts a phone number in the top bar. Customer stories lead with numbers. Pricing is public: the Starter suite begins at USD 6 per user a month and Essentials at USD 17, billed annually, with a USD 1,500 annual minimum ([Okta pricing](https://www.okta.com/pricing/)).

What stands out is method. [Okta's trust page](https://trust.okta.com/) shows "12-Month Availability: 99.99%" with a note saying the figure averages incidents that affected at least 10% of customers. Its Secure Identity Commitment page footnotes attack figures to internal reporting from 1 April to 1 July 2026, and the homepage says some images were generated with Midjourney.

**Worth copying:** put the method and the date range next to every number you publish.

### 1Password: encryption explained in one sentence

[1Password](https://1password.com/) leads with "Secure access for every human and AI agent" and two doors, "Talk to sales" and "View plans". Its [security page](https://1password.com/security) explains the dual-key model in plain words: "we can't use, lose, or abuse data that we don't have." A white paper and published audits serve readers who want depth.

1Password Business is USD 8.99 per user a month billed yearly, with a 14-day trial and "No credit card required", and the footer adds a free password generator.

**Worth copying:** explain your security model in one sentence a non-specialist can repeat, then link the white paper.

### Cloudflare: prices on the homepage

[Cloudflare](https://www.cloudflare.com/) opens with "Everything we learned from powering 20% of the Internet" and "Start building for free". It claims "310B Daily cyber threats blocked", then prints prices on the homepage: a free plan, Pro at USD 20 a month and Business at USD 200, billed annually, and a Zero Trust plan where "The first 50 employees are on us".

"Under attack?" sits in the header. The [hotline page](https://www.cloudflare.com/under-attack-hotline/) explains the response in three steps, from diagnosis to monitoring, next to a form. The footer links the Trust Hub and Cloudflare Radar, its public internet data.

**Worth copying:** if a small team can buy without a call, put the price where they decide.

### Tailscale: a program for the employee who brings it to work

[Tailscale](https://tailscale.com/) often starts with one engineer at home. Its copy uses the buyer's vocabulary on purpose ("replaces your legacy VPN, SASE, and PAM") and quotes developers' posts under "Developer approved". The personal plan is free for up to 6 users; Standard is USD 8 and Premium USD 18 per user a month.

The menu's "Make the case" opens [Bring Tailscale to work](https://tailscale.com/bring-tailscale-to-work): a rollout plan, monthly office hours and rewards, up to three free months on a team plan. The [security page](https://tailscale.com/security) says "Tailscale sees your metadata, not your data", lists what it does receive and points to open-source code so readers can check.

**Worth copying:** if usage starts bottom-up, build a page that helps your fan sell you internally.

### Vanta: frameworks as the menu

[Vanta](https://www.vanta.com/)'s buyer often arrives with a framework name and a deadline. The headline is "Get your compliance together", the hero asks only for an email, and the menus sort by company size and by framework (SOC 2, ISO 27001, HIPAA, FedRAMP and more), each with a guide or checklist. Proof starts with "Trusted by 16,000 businesses".

Pricing lists four plans and offers "personalized pricing" after a demo. Vanta sells trust centers, includes one in its entry plan and links its own, though that page loads only with JavaScript and we couldn't read it. Its security.txt was valid but set to expire on 15 November 2026, eight days after our visit.

**Worth copying:** if buyers search by standard, make each standard a page and a menu item.

### Huntress: list prices, even though partners do the selling

[Huntress](https://www.huntress.com/) writes for small businesses and their MSPs: "Hackers Wrecked. Your Enterprise Secured.", backed by a 24/7 SOC, with "Start for Free". Proof is volume and reviews: "Securing 285k+ Businesses Like Yours" and 4.8 out of 5 from more than 1,200 G2 reviews.

Its [pricing page](https://www.huntress.com/pricing) publishes list prices, such as Managed EDR at USD 8.99 a month per endpoint, while saying most teams buy through a partner and direct buyers need 50 seats per product. A recurring show, Tradecraft Tuesday, promises no products and no pitches.

**Worth copying:** publish list prices even when partners sell, so small buyers can budget before they call.

### Arctic Wolf: a warranty that admits no tool stops everything

[Arctic Wolf](https://arcticwolf.com/) puts "Experienced a Breach?" first in its top bar; the [emergency page](https://arcticwolf.com/emergency-incident-response/) shows a toll-free number, international numbers and a form. Its threat statistics cite their sources in a footnote, its own 2026 trends report and IBM's 2026 Cost of a Data Breach report.

The distinctive proof is financial. The [Security Operations Warranty](https://arcticwolf.com/why-arctic-wolf/security-operations-warranty/) offers up to USD 3 million for covered events, says "no cybersecurity solution can prevent 100% of all cyber attacks" and links the terms.

**Worth copying:** if you back your service with money, say what it covers, link the terms and don't promise perfection.

### Rapid7: free tools the community already uses

[Rapid7](https://www.rapid7.com/) leads with "The Preemptive MDR Leader that Outpaces Attackers" and four analyst mentions. Its strongest asset is in the Intelligence menu: Metasploit, which Rapid7 calls "The world's most used penetration testing tool", the Velociraptor forensics platform and a vulnerability database.

"Get Breach Support" in the footer leads to an [incident response page](https://www.rapid7.com/services/incident-response/) with a 24/7 number, +1-844-RAPID-IR. Rapid7's [trust page](https://www.rapid7.com/trust/) was the only trust or security page we read that links to its CISA pledge report.

**Worth copying:** free tools that practitioners use every day bring them back more often than a blog.

### Chainguard: a claim you can check in a public catalog

[Chainguard](https://www.chainguard.dev/) sells hardened open-source images to platform teams, and its claims are specific: "3,000+ images with 97.6% fewer CVEs than public alternatives" and a one-day SLA for known exploited vulnerabilities. The [pricing page](https://www.chainguard.dev/pricing) turns them into terms: 5 free images, a contractual CVE SLA of 7 days for critical issues and 14 for the rest, and a catalog that "Starts at $19K for a team of 10".

The [public image directory](https://images.chainguard.dev/) lets anyone browse and compare images; its calculator said 5 common images (Go, Node, Python, Ruby, Rust) would remove 4,179 vulnerabilities, a 99.71% reduction.

**Worth copying:** turn your headline claim into something a skeptical engineer can test without talking to sales.

### Expel: a security page written for the vendor reviewer

[Expel](https://expel.com/) writes in a direct voice: "From detection to done. Faster.", analysts "you can Slack or Teams directly", "Forrester says we're a Leader. We agree." with Forrester's disclaimer as a footnote. Buyers not ready for a call can join a 30-minute group demo.

The page to study is "[Security & compliance, plainly stated.](https://expel.com/security-compliance/)" It names "The four documents that answer 90% of vendor reviews", available under NDA: a SOC 2 Type II report with a bridge letter, a NIST SP 800-171 report, an architecture overview "Written for security reviewers, not marketers" and an AI datasheet.

**Worth copying:** tell the reviewer which documents they need, in what order, and how to get them.

### HackerOne: a door for "Contacted by a hacker?"

[HackerOne](https://www.hackerone.com/) serves companies that need testing and the researchers who do it. "Not every vulnerability matters. Fix the ones that do." speaks to the first; "Help build a safer internet" and a public leaderboard to the second. Next to its contact form it says "Our team typically responds within 1 business day".

The top bar carries a link few sites have: "[Contacted by a hacker?](https://www.hackerone.com/contact/security-incident)" It offers to help a company a hacker has contacted plan its next steps, tells anyone being extorted to contact law enforcement and mentions a free disclosure program. Its trust center lists 11 certifications, including ISO 29147 and ISO 30111, the standards for vulnerability disclosure and handling.

**Worth copying:** map the moments when a stranger needs you urgently and give each one a named link.

## Patterns across the 12

| Pattern                                                | Sites | Which                                                               |
| ------------------------------------------------------ | ----- | ------------------------------------------------------------------- |
| Emergency or incident path linked from the homepage    | 5     | Wiz, Cloudflare, Arctic Wolf, Rapid7, HackerOne                     |
| That path in the header or top bar                     | 4     | Wiz, Cloudflare, Arctic Wolf, HackerOne                             |
| Public prices with numbers                             | 6     | Okta, 1Password, Cloudflare, Tailscale, Huntress, Chainguard        |
| Free plan or free trial                                | 6     | The same six                                                        |
| Analyst reports cited on the homepage                  | 8     | Wiz, Okta, 1Password, Vanta, Arctic Wolf, Rapid7, Chainguard, Expel |
| Named customers or customer stories                    | 12    | All                                                                 |
| Trust center or security page linked from the homepage | 12    | All                                                                 |
| security.txt at /.well-known/                          | 9     | All except Huntress, Chainguard and HackerOne                       |
| security.txt with Contact and Expires                  | 5     | Wiz, Okta, Tailscale, Vanta, Expel                                  |
| On CISA's Secure by Design pledge signer list          | 9     | All except 1Password, Tailscale and Expel                           |

What the table suggests:

1. **Emergencies belong in the header.** A company in a breach doesn't scroll, and the 4 header links use the buyer's words ("Under attack?", "Experienced a Breach?").
2. **Public prices and self-serve travel together.** Every site with numbers also lets you start free. The others explain the model (Wiz) or list packages (Vanta, Expel) so the buyer knows what to ask.
3. **Proof is everywhere; method is rare.** All 12 show customers, but few footnote a source or a method next to their numbers; Okta, Arctic Wolf and Expel do.
4. **The basics lag the marketing.** Only 5 of 12 security.txt files pass RFC 9116's two required fields, at companies whose product is security.

## What's specific to security buyers

Security buyers read a website the way they evaluate a product: they look for evidence and notice what's missing.

### Trust centers that answer the reviewer

All 12 link a trust center or security page, so having one doesn't set you apart; the detail does. Wiz dates each certification, Okta explains its uptime figure, Expel names the documents, and HackerOne's trust center shows its last update date. Vanta's and Chainguard's trust centers load only with JavaScript and Huntress's blocked us: a buyer's browser shows them, but a crawler or an AI assistant may see an empty page.

### security.txt: 9 of 12 have one, 5 pass the basics

[RFC 9116](https://www.rfc-editor.org/rfc/rfc9116.html) defines a plain-text file that tells researchers how to report a vulnerability. Organizations "MUST place the "security.txt" file under the "/.well-known/" path"; the Contact field "MUST always be present", and so must Expires, which the RFC recommends keeping "less than a year into the future".

On 7 November 2026, 9 of the 12 served the file at /.well-known/. HackerOne serves one only at the older top-level path; Chainguard and Huntress returned none. Of the 9, 1Password, Cloudflare and Arctic Wolf have no Expires field, and Rapid7 renames both required fields ("Contact Security Team:"), so a standard parser finds neither. Wiz's and Expel's expire in 2028 and 2030, past the recommended year. Most of the files link a disclosure policy, which tells researchers what they may test; Wiz's sends them to Google's Bug Hunters program.

### CISA's Secure by Design pledge

[CISA's pledge](https://www.cisa.gov/securebydesign/pledge) is "voluntary and not legally binding", and CISA says it "does not enforce nor verify adherence". One of its seven goals is a disclosure policy that "authorizes testing by members of the public" and commits to not pursuing legal action against good-faith researchers.

Nine of our 12 are on [CISA's signer list](https://www.cisa.gov/securebydesign/pledge/secure-design-pledge-signers), and CISA's [progress reports page](https://www.cisa.gov/securebydesign/pledge/progress-reports) links reports from six of them: Wiz, Okta, Cloudflare, Vanta, Rapid7 and Chainguard. None of the 12 homepages mention the pledge, and of the trust pages we read, only Rapid7's links its report. If you've signed, link the report: it's evidence a reviewer can check.

### Claims to avoid

The FTC's [advertising guidance](https://www.ftc.gov/business-guidance/resources/advertising-faqs-guide-small-business) says advertisers "must have evidence to back up their claims" and "At a minimum, an advertiser must have the level of evidence that it says it has." On a security site that means:

- **No absolute promises.** Arctic Wolf's warranty page and HackerOne's trust center both start from the premise that nothing is 100% secure.
- **Sourced, dated numbers.** Name the report and the year, and give internal data its period, as Okta does.
- **One number per fact.** Cloudflare's homepage says 335+ cities in one section and 330+ in a ticker.
- **Numbers that exist in the HTML.** Wiz's outcome tiles and Rapid7's incident response figures are animated counters that read "0" in the page source, which is what a crawler or an AI assistant may quote.

This is general information, not legal advice.

## A checklist for your own cybersecurity website

| Check                                                  | How to test it                                                                                      |
| ------------------------------------------------------ | --------------------------------------------------------------------------------------------------- |
| A visitor knows what you do and for whom in one screen | Show the homepage to someone outside security for five seconds and ask them to explain it           |
| A buyer in a crisis finds help in one click            | Look for an "Under attack?" link in the header; check it leads to a phone number or a short form    |
| Prices are public, or the pricing model is explained   | If a buyer can't see a number, can they see what the price is based on?                             |
| Every number has a source and a date                   | Check each percentage on your homepage for a footnote or a named report                             |
| Numbers appear without JavaScript                      | View the page source and search for your key figures                                                |
| The trust page names the documents and how to get them | Ask a customer's vendor reviewer what they request first                                            |
| security.txt exists and is valid                       | Open /.well-known/security.txt: is there a Contact field and an Expires date less than a year away? |
| A disclosure policy is published                       | Check that security.txt's Policy field opens a page saying what may be tested                       |
| Commitments are linked                                 | If you signed CISA's pledge or hold a certification, link the report from the trust page            |
| A path for buyers who aren't ready to talk             | A free plan, a self-assessment, a guided tour or a group demo                                       |

## What to do next

Run the checklist on your homepage, your trust page and your security.txt, and note where you fall short of the sites above. If your buyers are enterprises with long security reviews, our [B2B website design](https://dardo.studio/en/services/b2b-website-design/) service plans the trust pages with the sales pages. If you sell a product with a free tier or self-serve plans, see [SaaS website design](https://dardo.studio/en/services/saas-website-design/); our [B2B website examples](https://dardo.studio/en/blog/b2b-website-examples/) cover the same patterns outside security.

If the gaps add up to more than a few fixes, a [website redesign](https://dardo.studio/en/services/website-redesign/) rebuilds the structure, the copy and the proof together. To see what crawlers and AI assistants can read on your current site, try our free [AI visibility checker](https://dardo.studio/en/tools/ai-visibility-checker/).

## Common questions

**What makes a good cybersecurity website?**

In the 12 security sites we read on 7 November 2026, the strongest did five things: they said who the product is for in plain words, gave a buyer in a crisis a visible path to help, kept proof dated and sourced, published a trust or security page written for the person doing the vendor review, and showed prices or the pricing model when buyers can self-serve.

**Should a cybersecurity company publish its prices?**

If anyone can sign up or buy without a call, yes. Six of the 12 sites publish numbers, and all six also offer a free plan or a free trial: Okta, 1Password, Cloudflare, Tailscale, Huntress and Chainguard. Wiz explains its licensing model without numbers, and Huntress publishes list prices even though it says most customers buy through a partner.

**What is security.txt and does a security company's website need one?**

It's a plain-text file defined by RFC 9116 that tells researchers how to report a vulnerability. It must sit at /.well-known/security.txt and must include Contact and Expires fields. A security vendor without one looks careless to researchers: 9 of our 12 serve one there, but 4 of those 9 lack a valid Expires or Contact field.

**What should a cybersecurity trust center include?**

The certifications you hold with dates, how to get the reports, your disclosure policy, status and uptime, and security advisories. The best pages we read add method and context: Okta explains how it calculates its 99.99% uptime figure, Wiz dates each certification announcement, and Expel names the four documents most vendor reviews need.

**Does a cybersecurity website need an "under attack" page?**

If you sell incident response, DDoS protection or managed detection, it helps. Wiz, Cloudflare, Arctic Wolf and HackerOne put that link in the header or top bar, and Rapid7 puts "Get Breach Support" in the footer. Arctic Wolf's and Rapid7's pages show a phone number; Wiz's and Cloudflare's rely on a form.

**Can a security vendor quote analyst reports and statistics on its site?**

Yes, with care. The FTC says advertisers must have evidence to back up their claims and "must have the level of evidence that it says it has." Name the report and year, footnote the source, as Arctic Wolf and Expel do, and keep the same number across pages. This is general information, not legal advice.

## Sources & further reading

Sources behind this page, with further detail from the original publishers.

- [Wiz: Homepage](https://www.wiz.io/) · wiz.io
- [Wiz: Public Trust Center](https://www.wiz.io/trust-center) · wiz.io
- [Okta: Homepage](https://www.okta.com/) · okta.com
- [Okta: Trust](https://trust.okta.com/) · trust.okta.com
- [Okta: Plans and pricing](https://www.okta.com/pricing/) · okta.com
- [1Password: Homepage](https://1password.com/) · 1password.com
- [1Password: Security](https://1password.com/security) · 1password.com
- [Cloudflare: Homepage](https://www.cloudflare.com/) · cloudflare.com
- [Cloudflare: Under attack hotline](https://www.cloudflare.com/under-attack-hotline/) · cloudflare.com
- [Tailscale: Homepage](https://tailscale.com/) · tailscale.com
- [Tailscale: Bring Tailscale to work](https://tailscale.com/bring-tailscale-to-work) · tailscale.com
- [Vanta: Homepage](https://www.vanta.com/) · vanta.com
- [Huntress: Homepage](https://www.huntress.com/) · huntress.com
- [Huntress: Pricing](https://www.huntress.com/pricing) · huntress.com
- [Arctic Wolf: Homepage](https://arcticwolf.com/) · arcticwolf.com
- [Arctic Wolf: Security Operations Warranty](https://arcticwolf.com/why-arctic-wolf/security-operations-warranty/) · arcticwolf.com
- [Rapid7: Homepage](https://www.rapid7.com/) · rapid7.com
- [Rapid7: Trust](https://www.rapid7.com/trust/) · rapid7.com
- [Chainguard: Homepage](https://www.chainguard.dev/) · chainguard.dev
- [Chainguard: Image directory](https://images.chainguard.dev/) · images.chainguard.dev
- [Expel: Homepage](https://expel.com/) · expel.com
- [Expel: Security and compliance](https://expel.com/security-compliance/) · expel.com
- [HackerOne: Homepage](https://www.hackerone.com/) · hackerone.com
- [HackerOne: Contacted by a hacker?](https://www.hackerone.com/contact/security-incident) · hackerone.com
- [RFC Editor: RFC 9116, A File Format to Aid in Security Vulnerability Disclosure](https://www.rfc-editor.org/rfc/rfc9116.html) · rfc-editor.org
- [CISA: Secure by Design Pledge](https://www.cisa.gov/securebydesign/pledge) · cisa.gov
- [CISA: Secure by Design Pledge signers](https://www.cisa.gov/securebydesign/pledge/secure-design-pledge-signers) · cisa.gov
- [CISA: Secure by Design progress reports](https://www.cisa.gov/securebydesign/pledge/progress-reports) · cisa.gov
- [FTC: Advertising FAQs, a guide for small business](https://www.ftc.gov/business-guidance/resources/advertising-faqs-guide-small-business) · ftc.gov

[Nicolás Cerón](https://www.linkedin.com/in/nicoceron/)

Nicolás Cerón is the founder of Dardo, a brand, web design and development studio in Bogotá, Colombia.

## Related articles

- [**Best B2B SaaS websites: 15 examples and what each one does well**We read 15 B2B SaaS homepages on 7 November 2026, from Linear to HubSpot: what each shows buyers, where the proof sits and which pages it links.](https://dardo.studio/en/blog/best-b2b-saas-websites/)
- [**B2B website examples: 12 real sites from different industries and the patterns worth copying**12 B2B websites read on 17 October 2026, from Stripe to GE Vernova: how each says who it's for, where it puts proof and prices, and what to copy.](https://dardo.studio/en/blog/b2b-website-examples/)
- [**VPAT and ACR for SaaS: the VPAT 2.5 template, its four editions and how to write a credible report**A VPAT is ITI's free template; completed for one product version, it becomes an Accessibility Conformance Report. Which edition to use and how to write it well.](https://dardo.studio/en/blog/vpat-acr-guide/)
- [**SaaS pricing page examples: 20 B2B pages compared, and what each one does well**We read 20 B2B SaaS pricing pages on 7 November 2026: 16 offer a free plan, all 13 billing switches open on annual, and 11 price AI in its own unit.](https://dardo.studio/en/blog/saas-pricing-page-examples/)

## Keep exploring.

- [Service · **B2B website design for long sales cycles**](https://dardo.studio/en/services/b2b-website-design/)

- [Your project · **Start a conversation**](https://dardo.studio/en/contact/)
