Developer directory

oneRhino has been building web applications since 2003, and building on Silverstripe since 2008.

Web engineering for Silverstripe installations that can't afford surprises

oneRhino has been building web applications since 2003, and building on Silverstripe since 2008. We've evolved alongside the framework, and we now specialize in the work most agencies avoid: rescuing and modernizing legacy Silverstripe installations with years of custom code, live integrations, and no tolerance for downtime.

Our team is US-led (Virginia, Eastern Time) with senior near-shore engineers, serving enterprise, government, nonprofit, and growth-stage clients in insurance, finance, behavioral health, publishing, and beyond. Clients include FujiFilm, International Living, Oxford Club, MedTrainer, NorthOne, and SixFifty. We've maintained one Salesforce-integrated Silverstripe member portal continuously since 2014.

Specialist services

• Major version upgrades. Migrations from Silverstripe 3 and 4 to the current major release, with custom module inventories, staged environments, backup and rollback plans, and scheduled maintenance windows. Version lifecycle management, not one-off rewrites.
• Salesforce and enterprise integrations. CRM sync, marketing automation (Pardot), transactional email, and cloud storage, kept intact through upgrades. We treat data integrity as the first requirement of any integration change.
• Security hardening and compliance. Installation audits, password policy enforcement, WAF and OWASP rule sets, SSL configuration, ADA/WCAG 2.2 Level AA compliance, and PHP hardening for stacks that have drifted past security end-of-life. Hosting and AWS infrastructure are managed in-house by our system administrator, not parceled out to a third party.
• Core Web Vitals and performance rescue. Code-level remediation (render-blocking assets, image serving, and layout stability) is monitored by alwaysPass.io, our own forecasting tool that flags threshold breaches before Google's 28-day reporting window closes.
• Ongoing support. Month-to-month plans with ticket-level transparency: clients see every task, every hour, and weekly reports they can forward to their own leadership.

AI-accelerated, engineer-owned

We use agentic AI tooling in our maintenance and upgrade work, and we're direct about where it fails: AI output can look correct while breaking edge cases, it can apply current-version APIs to older codebases, and it can generate tests that pass without testing anything. So no AI-generated change reaches production without senior-engineer review, staging verification, and a rollback plan.

What that looks like in practice: a recent Salesforce contact-sync fault was showing some portal members the wrong account name after login. Before any write, we ran a read-only census across all 2,245 member records to classify the damage, took a fresh backup, then ran the correction. 60 records fixed, zero errors, a per-change audit file delivered to the client, unit tests passing. Sized without AI, this was a 20 to 30 engineer-hour job. Our engineers logged under five hours. AI raises our throughput; our engineers prioritize correctness.

Recent work

Legacy portal modernization (Radimage). Took a Salesforce-integrated member portal from an end-of-life Silverstripe 3.6 / PHP 7.2 stack to a hardened Silverstripe 5 platform. Salesforce, Pardot, Mailgun, and S3 integrations were preserved through the upgrade; annual password policies, OWASP rules, and verification gating were added; minor updates now run in 15 to 30 minute maintenance windows.

Performance remediation on the same platform. A code-level Core Web Vitals sprint: 846 ms of render-blocking CSS scoped out of pages that never used it, WebP image serving, layout-shift reservations on the banner slider, and font loading cut back to what the templates actually reference.

New engagement (Keslow Camera). Cinema camera rental. Core Web Vitals audit and remediation, hosting consolidation onto isolated production and staging servers, spam protection rollout, and a mid-migration rescue of content records lost between old and new servers, restructured into Silverstripe's hash-based asset storage. The site is now under ongoing Core Web Vitals monitoring through alwaysPass.

Selected Silverstripe work

• radimage.com - the Salesforce-integrated member portal described above, on Silverstripe 5. We've maintained it since 2014.
• keslowcamera.com - cinema camera rental on Silverstripe CMS 6, with isolated staging and performance monitoring.

Why oneRhino for Silverstripe

Frameworks accumulate technical debt quietly, and the bill arrives as a breaking upgrade. We've been paying those bills for clients since 2008 - and for clients who stay with us, making sure the next one never balloons: scheduled upgrades, monitoring, and small maintenance windows instead of emergency rewrites. That's why our engagements are month-to-month: if we don't deliver, you can leave without disagreement. You get continuity, senior engineers on Eastern Time, full visibility into the work, and rates typically 30 to 60% below equivalent US domestic hiring.

A note from Billy, our founder

We don't hard-sell anyone. Nearly all of our business still comes from referral, the way it has since 2003. If your Silverstripe site needs help, write to us and we'll tell you honestly whether we're the right fit. If we're not, we'll try to point you to a useful alternative.

-Billy Gorman