PropAlert Real Estate Website

Web app

2024 – 2025

Free Tools on Inspired Monks: three free browser tools built by Mohit Goyal on inspiredmonks.com, an AI proposal generator, a GST-ready invoice generator and an HTTP security header scanner. I built these between 2024 and 2025 for freelancers, small businesses and site owners. Each one does a single job, needs no account and keeps the user's data on their own device wherever it can. The AI Proposal Generator turns a few client details into a complete proposal. An LLM (large language model) drafts the executive summary, scope of work, timeline and about sections. Five templates and a tone switch set the style, a live editor allows changes before export, and pricing tables handle taxes, discounts and INR, USD and EUR. Drafts auto-save on the device and export to PDF or DOCX. It is live at inspiredmonks.com/proposal-generator. The Free Invoice Generator produces tax-correct invoices for Indian and global businesses. It switches tax fields by currency: IGST, CGST, SGST and CESS for INR, sales tax for USD and VAT for EUR and GBP, across more than 150 currencies, with logo upload, drag-and-drop line items and a clean PDF download. Everything runs and saves in the browser, so there is no account, no email capture and nothing stored on a server. It is live at inspiredmonks.com/invoice-generator. The HTTP Security Header Scanner grades any website from A+ to F. A PHP REST endpoint on WordPress fetches the response headers server-side, because a browser cannot read another site's headers, and a JavaScript frontend scores HSTS, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Each finding explains what the header protects against, gives a step-by-step fix and links to my 15-article series on security headers and my WordPress plugin. It is live at inspiredmonks.com/http-security-header-scanner. No usage metrics are measured for these tools. Together they show the kind of small, focused web app I build: one screen, no sign-up, and a finished result in about a minute. Need a calculator, generator or diagnostic tool that runs in the browser? Send me the idea and I will reply with a plan.

WordPress plugin

2024 – Present

HTTP Security Header is a WordPress.org plugin by Mohit Goyal in PHP that adds CSP, HSTS and security headers from a settings screen, now at 1,000+ installs. It exists so that site owners can pass a security header scan without editing server configuration they are rightly afraid to touch. Most WordPress sites fail security header scans. The fix is well known, but adding headers means editing .htaccess or the server config. Site owners will not touch that, and many agencies would rather not be responsible for it. The result is that sites stay exposed to clickjacking, content sniffing and cross-site scripting that a few response headers would mitigate. I wrote this plugin so that anyone can turn on the important headers from Settings > Security Headers, with sensible defaults and validation, and without a trip into the hosting panel. The plugin covers Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, X-Permitted-Cross-Domain-Policies and Feature-Policy. Each header has its own settings with defaults that are safe to switch on, and the values are validated before they are saved. The part I care most about is the fallbacks. A bad Content-Security-Policy or a mistyped frame option cannot lock an admin out of their own site, because the plugin falls back to a working value rather than serving a header that breaks the dashboard. I published it to WordPress.org in November 2024 and have shipped updates through version 3.1. It is built in PHP for WordPress 5.0 and above. It sends headers from WordPress itself rather than from the web server, which makes it portable across Apache, Nginx and managed hosts where the owner has no config access. The settings screen uses the standard WordPress settings API, so it behaves like core and is easy to audit. Around the plugin I wrote a 15-article explainer series covering each header in turn. The series doubles as documentation and as the content that brings people to the plugin. I also built a companion online scanner on inspiredmonks.com that grades a site from A+ to F, so an owner can see the problem before installing the fix. At the time of writing the plugin reports more than 1,000 active installs, about 6,900 downloads and a 5 out of 5 rating on WordPress.org. Site owners who could never have edited a server file can now pass a header audit in a few minutes. Agencies I work with install it as a standard part of a build. The lesson from maintaining it has been that safe defaults and fallbacks matter more than coverage. A plugin that cannot break a site gets left switched on. Need a WordPress plugin built or hardened for your own site or product? Send me the requirements and I will reply with a plan.

Agency website

2023 – Present

Inspired Monks is my freelance web development brand: a fast WordPress agency site built by Mohit Goyal with 75 blog posts, free tools and case studies. It serves clients across India, and it is both the storefront for my freelance practice and the testing ground where I prove the performance work I sell. The site has two jobs. The first is to win work. A prospect needs to see services, real case studies and evidence that the site itself is quick, because a slow agency site undermines every performance claim on it. The second is to be a laboratory. It is where I try caching strategies, header configurations and builder techniques on a real production site before using them on a client. The challenge in meeting both is that the site runs on Elementor, a page builder that is convenient for content but not naturally fast. The site is WordPress with Elementor, tuned for speed with lazy loading, image optimisation and custom caching logic. That gets it top Lighthouse performance scores despite the builder. Beyond the service pages it hosts case studies for Nortek LED, Orilite, IIID Inscape and CyberVie, each with deliverables, approach and outcomes. A client wall includes Janssen, IPL Biologicals, PropAlert, Taxocity, Aura Clips and Easy Parenting Hub. The blog holds 75 articles I have written on WordPress, Core Web Vitals, HTTP headers, SEO and freelancing. They are organised into categories such as web development, tips, HTTP headers, tools and WordPress plugins. The site also serves the free tools I built: the HTTP Security Header Scanner, the AI Proposal Generator, the Free Invoice Generator and Humora. Under1MB is linked from the footer alongside my WordPress plugins. The stack is WordPress, Elementor, PHP, JavaScript and Yoast SEO. Keeping Elementor was a deliberate choice, because the site is also where I write, and a builder makes publishing long-form content and tool landing pages quick. The performance cost is paid back with custom caching logic in PHP, lazy loading for images and embeds, and image optimisation at upload. That is the same recipe I apply to client sites. Yoast handles the on-page SEO for a content library this size. The free tools run as pages on the same install, so they share the hosting and the brand without separate deployments. The site is live at inspiredmonks.com and is where most of my freelance enquiries begin. I own every part of it: design, build, content and hosting. The most useful outcome has been the content and tools flywheel. The HTTP header articles bring readers to the scanner, the scanner points to the plugin, and the whole thing shows prospects that I can make a page builder site fast. Running an Elementor site that feels slow? Send me the URL and your goals and I will reply with a plan.