
About
Websites with armour.
A crab's shell protects it, and its sideways walk gets it around obstacles others walk into. That is how we approach every project.
0+
Years building for the web
0+
Client projects delivered
0
Services under one roof
0
Countries served
Our story
Seven years of websites that stay online, for clients in three countries.
Webcrab Digital has been building websites for over 7 years from Ratnapura, with 50+ client projects delivered, mainly for businesses in three countries: Sri Lanka, the UK and Australia. We work with WordPress, Shopify and Ghost, and we build custom systems when a business outgrows off-the-shelf tools: online stores, B2B portals and multi-location ERPs.
The founder studied cyber security and does penetration testing alongside development. That is why every site we ship starts hardened, with SSL, backups and monitoring already in place, instead of as an upgrade sold later.
We keep the team small so you always know who is working on your project, and we explain what we are doing in plain language.
The shell
Security is the hard shell. Hardening, backups and monitoring are built in, so your site keeps its shape under pressure.
The sideways walk
A crab reaches the same place from a different angle. We question the brief first, then choose the approach that fits your business, not the one we sell most.
The team
Who you will work with.
A small team, led by the person who builds and secures your site.

Founder
Tharana Hansaja
Web developer and cyber security specialist with a Cyber Security degree from SLIIT. Builds every site and specialises in WordPress, Shopify, Ghost and penetration testing.
Cyber Security degree
Studied at SLIIT, Sri Lanka.
Penetration testing
Finds weaknesses before attackers do.
WordPress, Shopify, Ghost
Plus custom-built sites and systems.
- Cloud operations
- Cloud security
- Server hardening
- ISO 27001 Lead Auditor
Credentials
Trained, certified and recognised.
Cloud and security experience
- Cloud operations
- Cloud security
- Server hardening
- ISO 27001 Lead Auditor
Training
- Google Digital Garage
- I2CS
- NDG
- Cyber security tools training
- Cloud computing
Registered business number: RPDS/ADM/RC/01/BRG/04745
Values
How we work.
Numbers over adjectives
If we claim a site is fast, we show the Lighthouse score. If we claim it is safe, we show the checklist.
Secure by default
Hardening, SSL, backups and monitoring are part of every project, not upgrades.
Plain language
You should understand every line of your quote and every message we send.
You own it
Your domain, code and content are yours. If you leave, we hand everything over.
Where we work
Based in Ratnapura. Working worldwide.
Sri Lanka
Home base in Ratnapura. On-site visits for systems projects like ERPs and gate automation.
United Kingdom
Remote projects, with hosting placed close to your customers and UK GDPR in mind.
Australia
Remote projects, with clear handovers and privacy practices for Australian visitors.
25/34 Deniyawaththa Rd, Ratnapura, Sri Lanka · Get in touch

Let's build something that lasts.
Tell us about your business. You'll get a written quote with a fixed price within one working day.




