For Canadian municipalities — the Hamilton read
Their IT audit warned three years before the February 2024 ransomware attack. Their insurer declined the claim. The website is the part of the attack surface a CAO can rebuild in one procurement cycle — under your direct-award ceiling, without a tender.
Call first. Email second. Forms third. The principal answers the phone.
Free. Passive. Public sources only. Reads what an attacker reads — nothing you don’t already show the open internet. Or call +1 250 415 5678.
Quick qualify — direct-award check
A · 30 seconds
CA$9,800 sits inside Ontario’s CA$10,000 direct-award ceiling — CA$200 headroom, no RFP required.
FRAMEWORK — Municipal Act §270 — bylaw governs; $10K is the universal direct-award norm in the confirmed bylaw sample
THE SURFACE — PRIMARY SOURCES
new WordPress vulnerabilities disclosed in 2025 — a 42% increase over 2024.
Patchstack 2026 State of WordPress Security
weighted median time from disclosure to first in-the-wild exploitation.
Patchstack 2026 State of WordPress Security
of compromised WordPress sites were running outdated software at time of incident.
Sucuri remediation data
Hamilton’s IT audit flagged critical weaknesses three years before the February 2024 ransomware. The recommendations were not all actioned. The practice builds the answer in architecture: a statically generated Next.js site served from an edge CDN. No PHP. No database. No plugin supply chain. The attack surface is a git repository.
Every site ships bilingual, WCAG 2.1 AA compliant, and optimized for Canadian hosting. Updates are atomic, reversible, and auditable. The principal signs every deliverable.
Built front-ends for Waterworth, Muniworth, and The National Strategy Council — platforms used by municipal councils across Canada.
All projects structured to fall beneath direct-award thresholds. No RFP required. No procurement committee. Your CAO can sign tomorrow.
Currently building senior-living enterprise software. Previously ran internal finance and led sales recruiting at a governance-tech firm — including senior municipal-finance hires who remain personal references.
Every Fit For Gov engagement falls into one of three categories. Each is priced at the threshold for direct award. Each is delivered by the principal.
A full inspection of your website's WordPress vulnerabilities, accessibility compliance, sovereignty posture, and the named grants that pay to fix what we find. Delivered as a printed Dossier.
$1,500 CAD · 5 business days
Book an auditThe bylaw assistant, council insights, and other modules — running on Canadian-region infrastructure, billed monthly. Three tiers from foundation to custom-domain enterprise.
From $99 CAD/mo
See platform pricingA senior engineer attached to your IT department for a fixed-scope project — website rebuild, FOI automation, EREMS integration. Procurement-ready proposals under the direct-award threshold.
From $25,000 CAD
Request a proposal¹ Direct-award threshold is the per-province dollar limit under which procurement can be sole-sourced without a public tender. Audit and Platform sit well under every Canadian province's threshold; Custom is sized to it.
PRINCIPAL
Full-stack developer and civic-tech builder. Previously de facto chief of staff at the governance-technology firm behind Waterworth, Muniworth, and The National Strategy Council, where I built all three platforms' front-ends, led sales recruiting, and ran internal finance reconciliation. Some of the senior hires from that period — including municipal-finance leaders in the BC capital region — remain personal references today.
I also build enterprise software for the senior-living industry, but this practice is exclusively focused on municipal and civic clients.
jesse@fitforgov.com · +1 250 415 5678
24/7/365 direct line. The principal answers the phone.
THE BRAND PROMISE
If Fit For Gov is not the right team for the outcome your municipality requires, I will tell you that on the first call and connect you with the team that is.
The answer is always yes or forward. It is never yes-when-no.
Three years before the February 2024 ransomware, Hamilton's IT audit flagged critical weaknesses. The recommendations were not all actioned. The recovery is $18.3 million.
Read →Thirty-one WordPress plugins were quietly backdoored. If your municipality runs WordPress, your clock started last week.
Read →Live tenant registry. Updated on deploy.
The first tenant goes live this week. Oak Bay, BC — population 18,094 — eighteen bylaws indexed, including the section-aware noise and tree-preservation bylaws. Check back on Wednesday.
Registry: 0 active tenants — generated 03 Jun 2026 16:32 UTC
Source: bylawbot.fitforgov.com/api/towns · revalidates every 5 minutes
FREE TOOLS — PRINCIPAL-LED, NO ACCOUNT REQUIRED
Enter any Canadian municipal URL. The routine reads what attackers can read — WordPress fingerprint, plugin inventory, exposed admin paths, security headers, TLS posture, email-spoofing risk — and returns a printed dossier.
Begin reconnaissance→02 · PROCUREMENT THRESHOLDSLook up the direct-award and competitive-bid thresholds that govern your jurisdiction — the CFTA 2026 schedule, BPS Procurement Directive, BC CPPM, TILMA, and Quebec's LCOM in one printed reference. With a printed brief for every province and territory.
Look up thresholds→03 · COUNCIL BRIEFINGThree fields and the Practice produces a printed, dossier-styled briefing — naming the issue, citing the threshold that applies to your jurisdiction, and proposing the path forward. Yours to print or edit.
Draft a briefing→04 · GRANT PROGRAMSEnter your province, population, and project scope. The Practice returns a Council Briefing memo listing every grant program your municipality qualifies for — funder, deadline, eligible expenses, expected offset against the build cost. Verified against funder guidelines this week.
Find the grants→05 · THE LIBRARYPrimary-source documents the practice cites in council briefings, proposals, and proceedings. The legal-floor analysis above bylaw; the 24-municipality bylaw sample. Read in the browser or print as a PDF.
Open the library→Pick the one that matches where you are. The audit is the fastest. The platform compounds. The custom engagement is for the towns with a real procurement file open.
$1,500 · 5 business days · Dossier-format PDF
THIS MONTHFrom $99/mo · 30-day trial · card required
THIS QUARTERCustom engagement · $25K+ · procurement-ready
All three are signed by Jesse James. All three carry the bronzed seal on the front page.
CONTACT
If your municipality runs WordPress and you want to discuss alternatives, I can usually take a call within the hour.