Janssen Neuroscience WordPress Site

WordPress plugin

2024 – Present

HTTP Security Header is a WordPress.org plugin by Mohit Goyal in PHP that adds CSP, HSTS and security headers from a settings screen, now at 1,000+ installs. It exists so that site owners can pass a security header scan without editing server configuration they are rightly afraid to touch. Most WordPress sites fail security header scans. The fix is well known, but adding headers means editing .htaccess or the server config. Site owners will not touch that, and many agencies would rather not be responsible for it. The result is that sites stay exposed to clickjacking, content sniffing and cross-site scripting that a few response headers would mitigate. I wrote this plugin so that anyone can turn on the important headers from Settings > Security Headers, with sensible defaults and validation, and without a trip into the hosting panel. The plugin covers Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, X-Permitted-Cross-Domain-Policies and Feature-Policy. Each header has its own settings with defaults that are safe to switch on, and the values are validated before they are saved. The part I care most about is the fallbacks. A bad Content-Security-Policy or a mistyped frame option cannot lock an admin out of their own site, because the plugin falls back to a working value rather than serving a header that breaks the dashboard. I published it to WordPress.org in November 2024 and have shipped updates through version 3.1. It is built in PHP for WordPress 5.0 and above. It sends headers from WordPress itself rather than from the web server, which makes it portable across Apache, Nginx and managed hosts where the owner has no config access. The settings screen uses the standard WordPress settings API, so it behaves like core and is easy to audit. Around the plugin I wrote a 15-article explainer series covering each header in turn. The series doubles as documentation and as the content that brings people to the plugin. I also built a companion online scanner on inspiredmonks.com that grades a site from A+ to F, so an owner can see the problem before installing the fix. At the time of writing the plugin reports more than 1,000 active installs, about 6,900 downloads and a 5 out of 5 rating on WordPress.org. Site owners who could never have edited a server file can now pass a header audit in a few minutes. Agencies I work with install it as a standard part of a build. The lesson from maintaining it has been that safe defaults and fallbacks matter more than coverage. A plugin that cannot break a site gets left switched on. Need a WordPress plugin built or hardened for your own site or product? Send me the requirements and I will reply with a plan.

Agency website

2023 – Present

Inspired Monks is my freelance web development brand: a fast WordPress agency site built by Mohit Goyal with 75 blog posts, free tools and case studies. It serves clients across India, and it is both the storefront for my freelance practice and the testing ground where I prove the performance work I sell. The site has two jobs. The first is to win work. A prospect needs to see services, real case studies and evidence that the site itself is quick, because a slow agency site undermines every performance claim on it. The second is to be a laboratory. It is where I try caching strategies, header configurations and builder techniques on a real production site before using them on a client. The challenge in meeting both is that the site runs on Elementor, a page builder that is convenient for content but not naturally fast. The site is WordPress with Elementor, tuned for speed with lazy loading, image optimisation and custom caching logic. That gets it top Lighthouse performance scores despite the builder. Beyond the service pages it hosts case studies for Nortek LED, Orilite, IIID Inscape and CyberVie, each with deliverables, approach and outcomes. A client wall includes Janssen, IPL Biologicals, PropAlert, Taxocity, Aura Clips and Easy Parenting Hub. The blog holds 75 articles I have written on WordPress, Core Web Vitals, HTTP headers, SEO and freelancing. They are organised into categories such as web development, tips, HTTP headers, tools and WordPress plugins. The site also serves the free tools I built: the HTTP Security Header Scanner, the AI Proposal Generator, the Free Invoice Generator and Humora. Under1MB is linked from the footer alongside my WordPress plugins. The stack is WordPress, Elementor, PHP, JavaScript and Yoast SEO. Keeping Elementor was a deliberate choice, because the site is also where I write, and a builder makes publishing long-form content and tool landing pages quick. The performance cost is paid back with custom caching logic in PHP, lazy loading for images and embeds, and image optimisation at upload. That is the same recipe I apply to client sites. Yoast handles the on-page SEO for a content library this size. The free tools run as pages on the same install, so they share the hosting and the brand without separate deployments. The site is live at inspiredmonks.com and is where most of my freelance enquiries begin. I own every part of it: design, build, content and hosting. The most useful outcome has been the content and tools flywheel. The HTTP header articles bring readers to the scanner, the scanner points to the plugin, and the whole thing shows prospects that I can make a page builder site fast. Running an Elementor site that feels slow? Send me the URL and your goals and I will reply with a plan.

Hospitality

2025

Ravens Ait venue website: WordPress and Bricks Builder build by Mohit Goyal for a Thames island venue, with 20+ event pages, Stripe bookings and HubSpot forms. It was built from scratch in 2025 through a London agency, scores 94 or higher on PageSpeed and has grown revenue pages since launch. Ravens Ait hosts weddings, christenings, private dining, corporate meetings and celebrations of life on a private island on the Thames near Kingston. The venue needed a site that reflected a luxury experience and converted browsers into enquiries. The brief asked for a luxurious light-gold palette, a sticky header, smooth non-intrusive animations, a quick availability call to action, an event-type carousel, an Instagram feed, case studies and testimonials. It also called for accessible contrast and a mobile-first layout. Working through a London agency, I built the full site from scratch on WordPress with Bricks Builder. The homepage has a video hero with Google-fetched reviews. There are nine event pages, including wedding sub-pages for Asian and European weddings, and eleven seasonal pages, from Holi to Boxing Day. All of them come from one Bricks template, so a new occasion is a content task rather than a build. Every event page follows one SEO heading structure: a single H1, three H2s for venue settings, catering and entertainment, H3s for FAQs, testimonials and the enquiry form, and an email subscription section. A gallery, blog templates with an author box, and a contact page with FAQs complete the core. Enquiry forms sync to HubSpot through Google Tag Manager, with mandatory fields so leads arrive complete. Later in 2025 I added revenue pages. A Wimbledon Tennis on the Island page has a date picker, per-date packages, Stripe payment through Forminator, customer and admin email templates, past dates disabled and a daily booking summary email. A Christmas 2025 page carries early-bird packages and a PDF flipbook menu. Dinner and Dance and Bollywood Student Night pages take Stripe bookings and share a combined promo popup. Bricks Builder was chosen over heavier builders because it produces lean markup. That is what made the PageSpeed target realistic on a page full of video and imagery. WP Rocket handles caching. The exit-intent popup is limited to once per 12 hours, with a scroll-triggered version on mobile, so it captures leaving visitors without nagging. HubSpot via Google Tag Manager keeps the CRM integration out of the theme code. Forminator with Stripe gave the venue paid bookings without a full e-commerce install. A cookie disclaimer and per-page SEO sections finished the build, followed by a QA pass that deduplicated card content and unified the sliders. The site has been live since April 2025 at ravensait.co.uk with a reported PageSpeed score of 94 or higher. The venue can now add a seasonal page or a ticketed event from templates, take payment on the page and see bookings summarised by email each day. The project taught me that one well-structured template, applied twenty times, is worth more than twenty bespoke pages. Run a venue that needs enquiry pages and ticketed events on one site? Send me your next project and I will reply with a plan.