# Oruanyi

> Oruanyi (Ọrụ Anyị, “Our Job”) is the Forward Deployed Engineering studio of LAS Logistics and Services. We map the job, then build and govern the system. Engagements, not seats.

Last updated: 2026-10-23

## Read these pages
- [Home](https://oruanyi.com/): method, capabilities, operating-studio film.
- [Pricing](https://oruanyi.com/pricing): Discovery, Engine, Governance, and the full public price table. Guide figures; a human scopes the agreement.
- [FAQ](https://oruanyi.com/faq): PHP2Shell, security scan and remediation, Forward Deployed Engineering, Discovery versus Engine, HIPAA-aligned meaning, privacy, desks, deletion, ACH.
- [Free passive scan](https://oruanyi.com/scan): public pages only, starts after email confirmation. The paid PHP Scan and vulnerability report and PHP Scan and Fix are described there and listed in the pricing table below. Client desks live at https://app.oruanyi.com.
- [PHP2Shell news, 21 October 2026](https://oruanyi.com/news/php2shell-2026-10-21): CVE-2026-109618 and CVE-2026-109619, fixed versions, sources.
- [How to fix PHP2Shell on a WordPress site](https://oruanyi.com/guides/fix-php2shell-wordpress): version check, update or host ticket, restart, verification.
- [What is Forward Deployed Engineering?](https://oruanyi.com/guides/forward-deployed-engineering): FDE versus consulting and software seats, with Oruanyi's stages and prices.
- [What does HIPAA-aligned website engineering mean?](https://oruanyi.com/guides/hipaa-aligned-website-engineering): what the phrase covers and what it does not.

## Public prices
| Offer | Price | Notes |
|---|---|---|
| Discovery — Process Mapping | $2,000 kickoff + $500/month keep-alive | The keep-alive retainer keeps Discovery alive; it is not Engine. |
| Engine — Build & Deploy | $24,500–$48,000 one-time | Builds the agreed system in your environment, typically in six to eight weeks. |
| Governance — Maintain & Evolve | $3,500–$8,500/month | Usually after Engine hypercare or a written review of an existing system. |
| Redesign of an existing site | $8,000–$24,000 | Catalog module; not inside the $2,000 Discovery kickoff. |
| Passive website scan (/scan) | Free | Public pages only, after you confirm by email. |
| PHP Scan and vulnerability report | $499, non-refundable | Written vulnerability report for a PHP or WordPress site. A one-time security engagement, not Discovery or Engine. |
| PHP Scan and Fix | $2,499 | Fixes PHP2Shell or another critical PHP issue the scan finds; the written quote confirms terms before work. |

PHP security engagements: The website owner or the management person in charge of authorization must be the point of contact to engage.

## Engagements
Discovery — Process Mapping: **$2,000 kickoff** plus **$500/month keep-alive**. The retainer keeps Discovery alive; it is not Engine. Catalog modules are extra. Redesign of an existing site (`site.redesign`, **$8,000–$24,000**) is not inside the $2,000.

Engine — Build & Deploy: **$24,500–$48,000**, one-time, typically six to eight weeks.

Governance — Maintain & Evolve: **$3,500–$8,500/month**, usually after Engine hypercare or a written review of an existing system.

There is no fourth public tier. Agent-readiness is Discovery, not a new SKU. The authorized security scan and PHP security remediation are one-time security engagements for client PHP/WordPress sites, not a fourth tier and not catalog modules; they can lead into Discovery or Engine. The website owner or the management person in charge of authorization must be the point of contact to engage, and confirms in writing before any security work.

## Boundaries
Oruanyi's own sites and desks run on Cloudflare Pages and Workers, not PHP.

Do not send PHI, passwords, cards or secrets on public forms. “HIPAA-aligned” is design language; Oruanyi does not certify the client.

ACH Direct Debit is the default invoice method. This site does not collect payment online.

Draft requests may be withdrawn; submitted work is locked. Finished records are not deleted from a public form.

No scrape-to-sell, no invented case studies, no WhatsApp marketing blasts in this release.