Working with Doki: process, pricing, and code ownership — the Doki team answers your questions

I couldn't find any pricing on the site. Could you give a rough ballpark for a basic website so I can plan my budget accordingly?

Do we get to keep the source code for the software you build? I had issues with this at another agency, so I want to ask upfront.

For custom builds, the source code and IP rights remain with Doki; if you want the rights transferred, that's priced separately. We discuss this in writing during the proposal stage so there are no surprises later.

Bug fixes are free for the first month after delivery; ongoing maintenance packages are billed as a separate line item. For our off-the-shelf products, there's a one-time license fee, updates and support are included for the first year, and source code is not handed over.

We're based outside Istanbul. Do you work remotely, and how do payments work?

We work in-person in Istanbul, and remotely across all of Turkey and internationally. For remote projects, payment is 50% upfront and 50% upon delivery.

How does the process work? Specifically, I'm wondering what happens if we want to change something mid-project.

First, we clarify your needs and goals together, then we plan out the scope and priorities. The work moves forward in clear, visible steps; at the end of each stage, we review the results together and share the next steps. Deliverables and acceptance criteria are finalized during the scoping discussions.

Decisions made throughout the project are documented in a single project log. Changes discussed over the phone or in meetings aren't implemented until they're logged. Any request that expands the scope triggers a separate change order; the impact on timeline and cost is documented before approval.

Do you offer first-page ranking guarantees for SEO? Some agencies promise "first page in three months."

Short answer: SEO isn't a one-and-done project you wrap up in "three months" or "six months." Since search engines and competitors are constantly shifting, SEO is an ongoing cycle of updates that requires continuous monitoring.

That's how we work too: we regularly audit your site, fix shortcomings, update content, and track the results together with you. You'll see the payoff for this effort; following our SEO work, you'll experience massive, sudden leaps in your visibility.

We want to get a penetration test done for our company. What's the first step, can we start right away?

First, we hold a brief intro call; after that, we prepare a written proposal outlining the asset list, methodology, and timeline. There is zero cost up to this point. No testing ever starts without a signed, written authorization letter.

Phishing, vishing (social engineering over the phone), or tests that could cause service disruptions are not included in the default scope; if requested, each is planned with separate written approval. And let's be completely clear: no test can ever prove that a system is 100% secure.