Software Engineering & Development

How to get hired as a web developer in 2026-27

The short answer

To get hired as a web developer in 2026-27, show three to five live sites where you can name your own contribution and attach one measured before and after, because web development has no licence and no required degree, so the only gate is evidence. Aim that evidence at one of three markets, which hire in completely different ways: a digital agency runs a portfolio screen, a call with its lead developer and a short exercise that should be paid; a small business or nonprofit is hired by a non-technical marketing manager who asks what you would change about their current site; a direct client never interviews you at all, they take a discovery call and read a proposal. The template brochure site is now produced adequately by AI inside site builders, so the paid work sits in what a subscription cannot sell: integration with the systems a business already runs, migrations that keep URLs and rankings intact, ecommerce and payments, accessibility remediation, performance work, and rescuing applications that were generated by AI and then broke. Position yourself on judgment, integration, continuity and accountability rather than on page production.

Credential gateNone. No jurisdiction licenses web development the way it licenses electricians or nurses, there is no registration body, no required degree and no mandatory certification. Nothing stops you invoicing for web work tomorrow. The consequence cuts both ways: nobody can block you, and nobody will vouch for you either, so every filter in this trade is built out of evidence instead.
What replaces the credentialThree things, in this order. Live URLs you can take credit for with specifics. A past client or lead developer who will take a call about you. A listing in a platform partner directory you can realistically qualify for: Shopify Partners, Webflow Experts and Webflow certification, Wix Studio Partners, Squarespace Circle, Framer Partners, Codeable for WordPress, HubSpot Solutions Partner, and the agency programmes run by hosts such as WP Engine and Kinsta.
The three marketsAgency or studio employment (a dev shop building for other people's clients), in-house at a small or mid-size business (one web person inside a marketing team), and direct client or subcontract freelance work. They want different evidence, interview differently, and pay differently. Choose one to aim at before you write a word of your portfolio.
Typical hiring loopAgency: portfolio screen, a 30 minute call with the studio lead or a senior developer, a two to four hour exercise (a design turned into accessible responsive code, or a bug in a site you did not write), sometimes a paid trial project, then a start date. At a small studio this can run start to finish inside a fortnight. In-house small business: one or two conversations with a non-technical manager, plus a request to look at their current site and say what is wrong with it. Direct client: no interview at all. A discovery call, a written proposal, a deposit.
Time to first paid workFor a career changer studying deliberately, first paid work (a small business site, a subcontract from an agency, a fixed scope fix) often arrives inside the first year, and a portfolio strong enough for a salaried agency role usually takes longer than that. The variable that moves it is not study hours, it is how early you work on something real for someone who can refuse to pay you.
What has been commoditisedThe five to ten page marketing site with stock imagery, a contact form and a blog. Site builders with AI generation (Wix, Squarespace, Framer, Shopify, Hostinger, GoDaddy) produce something adequate for that in an afternoon, and no sales story wins a price fight against it. The paid work moved to integration, migration, data, ecommerce, accessibility, performance, security and ongoing responsibility for a site that earns money.
Pay: where to get real numbersFor employed roles in the United States, the authoritative source is BLS Occupational Employment and Wage Statistics code 15-1254 (Web Developers), with 15-1255 (Web and Digital Interface Designers) covering the design-leaning variant; both publish national, state and metro percentiles. Then read actual postings in pay-transparency jurisdictions (Colorado, California, New York, Washington, Illinois) where a band is legally required in the advertisement. For freelance rates, the honest benchmarks are the project minimums studios publish in partner directories, and what agencies in your city charge a client per day.
Obligations you are expected to understandAccessibility: WCAG 2.2 Level AA is the standard most contracts now name, with EN 301 549 referenced in Europe and a US Department of Justice rule under ADA Title II adopting WCAG 2.1 AA for state and local government bodies (that rule has phased compliance dates tied to population size, so check the current regulation rather than quoting a date from memory). Cookie and tracking consent under GDPR and the ePrivacy rules, plus the US state privacy laws. PCI DSS obligations when card data is in scope, which is the main argument for letting Stripe or a platform checkout handle cards rather than building your own.

The three web developer markets, and why advice for one sinks you in another

Web developer is one job title covering three hiring processes that barely resemble each other. Most advice fails because it was written for one of them and read by someone aiming at another.

Agency and studio employment means you are staff at a business that builds for other people's clients. You will ship several projects a year, hand most of them over, and rarely see the three year consequences. Screening is done by a lead developer or the owner, who will look at your portfolio before they look at your resume and form an opinion in under two minutes. What they are buying is throughput with low supervision: can you take a Figma file and a content doc and produce something accessible, responsive and on budget without asking the project manager eleven questions a day.

In-house at a small or mid-size business means you are the web person. The site, the landing pages, the email templates, the analytics, the booking form, the thing the sales team broke. Your manager is usually a marketing director with no technical background, and your real competition for the role is the agency retainer they considered instead. They hire on comparability and communication: have you built something like ours, and can you explain a delay without making me feel stupid. Technical depth helps you keep the job. It rarely gets you the job.

Direct client freelance and subcontract work is not hiring at all, it is sales. Nobody interviews you. A business owner finds you through a referral, a directory or a search, has a 30 minute call, and either accepts a proposal or does not. Your portfolio is a sales asset, your contract is your protection, and your cash flow depends on deposits and on how fast you invoice. The quiet variant of this market, and the best entry to it, is white label subcontracting to agencies: they have the clients and the sales function, they are short of reliable build capacity, and they will keep you busy without you ever pitching.

You can move between these. You cannot optimise for all three at once. An agency wants to see range and speed. A small business wants to see sites belonging to businesses like theirs. A direct client wants to see outcomes and hear a reference. Pick the one you want first, build for that, and treat the others as later options.

What site builders and AI took, and what they left

Be honest about this, because clients already know and candidates who pretend otherwise lose credibility in the first call. A competent small business owner can now describe a site to an AI builder and have something presentable by the end of the day. Wix, Squarespace, Framer, Shopify and the hosting companies all ship generation tools, and tools like v0, Lovable, Bolt and Replit will generate a working application from a prompt. The floor price for a generic brochure site has collapsed, and it is not coming back.

What that killed is a specific product: the small static marketing site, built from a template, with content the client supplies, no integrations and no ongoing responsibility. If that was your plan, the plan is gone. Do not try to win it back on price. You will be competing with a monthly subscription that also includes hosting, SSL, forms and a CDN.

What it left is substantial, and most of it is more interesting than what it took. Integration is the biggest category: a business runs a practice management system, a point of sale, an ERP, a CRM, a scheduling tool and an accounting package, and wants the website to talk to two or three of them. That work is specific, unglamorous and resistant to generation, because the hard part is the other system's API, its authentication, its rate limits and its undocumented behaviour, not the page.

Migration is the second. Moving a 900 page site off a dead CMS without losing URLs, redirects, metadata, structured data or rankings is a job with a measurable failure mode, which is exactly why it gets paid. Anyone who has watched a client's organic traffic fall off a cliff after a rebuild understands why they hire for this specifically.

Then: ecommerce and payments, where money moves and mistakes are expensive. Accessibility remediation, now contractually required in a growing share of public sector and enterprise work. Performance, where Core Web Vitals (LCP, CLS, and INP, which replaced FID as the responsiveness metric) give you a deliverable you can measure before and after. Security and maintenance, including the WordPress plugin updates nobody wants to own. And the newest category, which barely existed two years ago: fixing applications that were generated by AI, shipped by a non-developer, and then went wrong. These arrive with no migrations, no backups, API keys in client-side code, authorisation checks only in the interface, and a founder who cannot change anything without breaking it. Being the person who can stabilise one of those is a 2026 service line with very little competition.

The strategic point: stop selling pages and start selling responsibility. A site builder cannot be accountable. A generated app cannot be on call. The things clients pay a human for are judgment (what do we actually need), integration (make it work with what we have), continuity (be there in March when it breaks), and risk (if the checkout fails, someone is answerable). Price and position around those four and the builders stop being competitors. They become part of your toolkit, because the right recommendation for a yoga studio with a four figure budget genuinely is Squarespace, and saying so is how you earn the right to the next job.

How hiring actually works, market by market

Agency and studio. The first filter is your portfolio links, opened on a phone, by someone with 40 other applications on the desk. They click two sites, look at how fast they load, resize the window, and read your description of what you did. If you cannot separate your contribution from your team's, that is a fail at this stage, because agencies have been burned by candidates who showed work they did not build. Then a 30 to 45 minute call with the lead developer or the owner, which is mostly one of your projects in detail: why that stack, what went wrong, what the client changed late, how you handled it. Then an exercise. A reasonable one is two to four hours: implement a component or a section from a provided design, responsive, keyboard accessible, with a short note on your decisions. Debug a broken page. Review a pull request. An eight hour unpaid build of a real client feature is a red flag about how that studio treats people, and you are allowed to ask to be paid. Many small studios skip the exercise entirely and offer a paid trial project instead, which is a better signal for both sides. Expect a question about how you use AI tools, and expect the answer they are listening for to be about review and responsibility rather than speed.

In-house at a small business or nonprofit. Your resume is read by someone who does not know what Astro is. Write for them. The interview is usually one or two conversations, and the most common real test is open-ended: they send you their current site and ask what you would do. This is where most technical candidates lose. The wrong answer is a list of defects. The right answer is two or three things that would move the number the business cares about, ranked, with rough effort, plus one thing you would deliberately leave alone. Say which you would do in the first month. They are trying to work out whether you will be a cost centre who complains about their legacy site, or someone who makes their numbers better. Expect the scope to be wider than the title: email templates, analytics, basic technical SEO, a print job, the CRM integration, training the intern to edit pages.

Direct client. There is no loop, there is a sales process, and it has a shape. A lead arrives (referral, directory, local network, search). You run a discovery call where you ask more about their business than about their website: what makes money, who the customer is, what happens today when someone enquires, what they have tried, what their deadline is tied to. You send a written proposal with scope, exclusions, timeline, payment schedule and what you need from them. You get a deposit before you start, and the deposit is not negotiable. Most of the skill in this market lives in the hour before the proposal, not in the build.

What gets people rejected at each stage is predictable. Portfolio stage: dead links, slow sites, tutorial projects, no statement of what you did. Call stage: inability to talk about a project as a set of decisions rather than a list of technologies, and badmouthing a previous client. Exercise stage: ignoring the accessibility and responsive requirements that were written in the brief, no README, and code that works only on the reviewer's machine. Proposal stage: a quote with no exclusions, which guarantees an argument later.

The portfolio: five case studies beat twenty thumbnails

Your portfolio is the hiring decision in this trade. It is also, awkwardly, a work sample of itself: if your own site takes four seconds to render a hero video on a phone, you have answered the performance question before anyone asks it. Build it fast, make it legible, make it keyboard navigable, and make the case studies the point rather than the animation.

Three to five case studies is the right number. Each one needs five things, in this order: the business problem in the client's language, the constraints you worked inside (budget, deadline, the CMS they refused to leave, the content that arrived three weeks late), what you actually built with specifics, what changed that can be measured, and what you would do differently. That last item is the one that makes experienced reviewers trust you, because it shows you have seen consequences.

Measurable change is where most portfolios go vague. You do not need a conversion study. You need something verifiable and modest, written the way these examples are written: largest contentful paint went from 4.1 seconds to 1.4 on a throttled mobile profile; the migration moved 412 pages with a redirect for every one of them, and organic sessions were flat within three weeks rather than falling; the booking form that used to email the owner now writes into their scheduling system, which removed about an hour a day of retyping; the accessibility pass cleared every automated failure on the eight templates and added a manual keyboard and screen reader pass. Record the before numbers on the first day of a project, because you cannot reconstruct them afterwards.

No real clients yet? Build work that has a real stakeholder, which is not the same as a real invoice. In rough order of how much hiring managers respect it: paid work for a tiny business even at a low price; unpaid work for a community organisation where someone else makes the decisions and can be unhappy; a rebuild of a specific existing local business site done as a speculative case study, clearly labelled as unsolicited, with before and after measurements taken from the live original (this is the most underused move available to a beginner, and it doubles as a sales pitch to that business); a tool that solves a real problem for a specific group of people and has actual users. Avoid: another portfolio template, a clone of a famous product, anything from a course where thousands of other people submitted the same repository.

Show the inside, not only the outside. Link a public repository for at least one project, with a README that explains the decisions, a reasonable commit history, and tests if the project warrants them. Agency leads do open these. A repository with four commits named update is a worse signal than no repository at all.

Plan for link rot. Client sites get redesigned and your evidence disappears with them. Screenshot and archive every project at launch, record the metrics, and write the case study in the week you finish rather than two years later when the site has been replaced by someone else's work.

The resume and the proposal: what lands and what gets skipped

A web developer resume is read in two different ways depending on the market, so you need two versions. The agency version is read by a developer who wants stack, scale and evidence. The in-house version is read by a marketing manager who wants business outcomes in plain words. The freelance equivalent is not a resume at all, it is a proposal and a one-page capability summary.

What lands on the agency resume: live URLs next to the relevant role, with your contribution named. The platforms you can be trusted alone with, separated from the ones you have touched once. Scale facts that imply judgment: a 900 page migration, a multi-language build, a store with 4,000 SKUs, a site under a traffic spike from a television slot. Launches, plural, because shipping is the skill. Maintenance and on-call work, which is undersold constantly and is exactly what agencies struggle to staff. Accessibility and performance work with numbers. Handover and documentation, if you have ever trained a client to run their own site.

What lands on the in-house resume: the business outcome first. Rebuilt the site on a new CMS so the marketing team could publish without a developer, which removed a two week queue. Fixed the checkout error that was losing orders on mobile Safari. Cut page weight so the campaign landing pages stopped burning ad budget on bounces. Then a short technical section underneath, because someone technical may still be in the room.

What gets skipped by everyone: a skills wall listing HTML5, CSS3 and responsive design, which reads as filler because those are assumed. Logo grids of technologies you used once. Self-description paragraphs about passion, pixel perfection and being detail oriented. Certificates from video course platforms (they are not harmful, they are just not evidence, and a bootcamp name is worth less than one real client). Twelve repositories of unfinished exercises. Soft skill claims with no incident attached.

Format, briefly, because it matters more than people think for a trade with no credential: one page if you have under about eight years in, two at most, plain and parseable, no two column layout that an applicant tracking system will scramble, and a links line at the top with your site, your repository host and your best live project. Put the live URL in the bullet, not only in a portfolio nobody opens.

For freelance work, the equivalent document is the proposal, and it is the single highest leverage thing you can learn to write in this job. A proposal that wins has: the client's goal restated in their words so they know you listened, scope as a list of deliverables, an explicit exclusions list (this is the section that prevents arguments, and amateurs omit it), what you need from them and by when, the timeline with its dependency on their content stated plainly, the price and the payment schedule, and what happens after launch. Two to four pages. Send it within 48 hours of the call while they still care.

What the technical stages actually test

Web developer interviews, in the agency and small business markets, are not algorithm interviews. If you are being asked to invert a binary tree, you have applied to a product engineering role that happens to use the word web in the title, and you should prepare differently. What these stages test is whether you can be handed a design and a deadline and produce something that holds up in the real world.

The design-to-code exercise. You get a Figma file or a screenshot and a few hours. What is being graded, in rough order: does it match at the specified breakpoints, does it work on a keyboard, are the semantics right (real headings in order, real buttons, labelled inputs, alt text that says something), does it degrade sensibly with long content or a missing image, is the CSS something another developer could extend next month, and did you read the brief. Modern CSS is an easy place to show current competence: container queries for components that must adapt to their container rather than the viewport, logical properties, clamp for fluid type, grid including subgrid, and :has where it saves a wrapper. Avoid reaching for a framework the brief did not ask for.

The debugging exercise, which is the most predictive of the lot. A page you did not write, something is broken, talk while you work. They are watching your method: reproduce it, confirm what you expect versus what happens, bisect, read the actual error rather than guessing, check the network panel before rewriting code, and say out loud when you are wrong. Candidates fail this by silently theorising for 15 minutes. Narrate.

Fundamentals, asked conversationally. The box model, stacking contexts and containing blocks, because positioning bugs are a large share of front-end work. Specificity and the cascade, including cascade layers. Event delegation and what happens on a click. Promises, async and await, and how you handle a fetch that fails or times out, which is the question that separates candidates fastest because most code only the happy path. Forms: validation, server trust, file uploads, why you never rely on client-side checks. Caching and what a CDN does. CORS, which breaks real builds often enough that every working developer can describe a preflight request. How a request becomes a rendered page, including DNS, TLS and the difference between server rendered, static and client rendered output.

The judgment questions, which decide senior versus mid. A client wants a feature in a week that needs three. What do you do. The content has not arrived and the launch date is fixed. How do you ship. A client asks for a carousel with nine slides and autoplay. What do you say and what do you build. The budget allows one of accessibility work, a performance pass or a CMS upgrade. Which do you pick and why. The client's developer nephew has edited the live theme. How do you proceed. Answer these with a decision and a reason, not with it depends.

The security and reliability questions that get skipped and then cost someone their job. Where do secrets live. Who has the DNS. What is the backup and have you restored from it. How do updates reach production. What is in place if the site is defaced on a Saturday. If you handle payments, why Stripe or the platform checkout rather than touching card data yourself. If you handle European visitors, how consent is captured before the tracking scripts load. A candidate who raises these without being asked moves up a band.

References, which matter more here than in most software hiring because there is no credential. A lead developer who will say you shipped on time, or a client who will say you answered the phone, is worth more than any certificate in this trade. Ask at the moment a project goes well, not a year later.

Pricing, scope and the paperwork that keeps you solvent

For employed roles, your pay is set by market and by which of the three markets you are in. Agencies pay less than product companies for similar skill, because an agency sells your time at a multiple of its cost and the margin has to live somewhere; in exchange you get volume and variety early in a career, which is why agency years are worth more than they pay. In-house single-developer roles at small businesses vary widely and often sit below both. Get real figures rather than guessing: BLS code 15-1254 for national, state and metro percentiles, then live postings in pay-transparency jurisdictions where a band is required in the advertisement. When you negotiate, negotiate against postings in your metro, not against a national average.

For freelance work, the single most expensive mistake is selling hours. An hourly rate punishes you for getting faster and invites the client to audit your day. Three better models. Fixed price per defined scope, which requires you to write exclusions and change orders properly, and which rewards speed. A day rate for work with unpredictable shape (audits, debugging, legacy rescue, sitting with a client's team), typically sold in blocks. A monthly retainer or care plan, which is what turns freelancing from feast and famine into a business: hosting, updates, backups, monitoring, uptime, a small bucket of changes per month, and a stated response time. Three care plan clients paying monthly change your year more than one big build.

How to price a fixed scope without guessing. Estimate in deliverables, not hours. Break the build into countable items (templates, not pages; integrations; forms; migration volume; content entry) and price per item, because clients can follow that arithmetic and it makes change orders obvious. Add a contingency for the things that always happen: content arriving late, a third party API being worse than its documentation, two extra review rounds. State the number of revision rounds included, because unlimited revisions is how fixed price work turns into unpaid work. Quote ranges before you have seen the content, firm numbers only after.

The paperwork is short and non-negotiable. A written agreement with scope, exclusions, timeline, payment schedule, revision rounds, a change order process with a stated rate, late payment terms, and an intellectual property clause assigning the work to the client on final payment (not before). A deposit before work starts, commonly a third to a half, and payments tied to milestones rather than to launch, because launch can be delayed by the client for months. Pass-through costs (fonts, plugins, hosting, stock) billed as pass-through or clearly included, never absorbed quietly.

Own the right accounts, and make sure the client owns theirs. The client should hold their own domain registration, their own hosting or platform account, their own analytics, and their own payment processor, with you given access. Reselling hosting in your name looks like easy recurring revenue until you want to stop working with someone and discover you are holding their business hostage, or they are holding you. Document credentials, keep a handover file, and write into the contract what happens at the end of the relationship. The cleanest reputation in this trade belongs to developers who are easy to leave.

Two scope habits that pay for themselves. First, require content before the build starts, or price a content entry phase separately, because missing content is the most common cause of a stalled project and it is almost always the client's side that stalls. Second, separate discovery from delivery and charge for discovery on anything substantial. A paid discovery (audit, requirements, sitemap, integration review, a fixed quote at the end) protects you from scoping for free, and it is also a low-risk first purchase for a client who does not know you yet.

What to learn, what to be known for, and where the work comes from

Learn in this order, and resist skipping the first item, because it is the one that separates people who can fix anything from people who can only assemble. HTML semantics and accessibility, properly, including what a screen reader does with your markup. CSS as a system: layout with grid and flexbox, the cascade and specificity, container queries, custom properties, and how to structure styles so a stranger can extend them. JavaScript the language, including async behaviour, fetch and error handling, the DOM, and modules, before any framework. Git, including the recovery commands, because the day you need them you will be under pressure. The request lifecycle: DNS, TLS, caching, CDNs, status codes, and the difference between static, server rendered and client rendered pages. Then a framework. Then deployment and the boring operational layer: environments, backups, monitoring, logs, and how a change reaches production.

Pick a platform to be known for. This is the highest return career decision in client web work, because specific beats general in every sales conversation ever held. WordPress still runs more of the world's sites than any other CMS and is where most small business budget lives, including the whole long tail of maintenance and rescue work; modern WordPress work (block themes, custom blocks, ACF, headless) is a different trade from the shortcode era, and plenty of competent developers avoid it, which keeps rates better than its reputation suggests. Shopify is where the money is if you want ecommerce: themes, Liquid, apps, Hydrogen, and merchants who can measure what you did for them. Webflow, Framer, Wix Studio and Squarespace are all genuine businesses for developers who sit at the seam between design and code and add the custom code, integrations and CMS modelling the platforms cannot do alone; their partner directories send real leads. For custom work, Next.js or Astro with a headless CMS (Sanity, Payload, Contentful, Storyblok, or WordPress as a headless backend), and Laravel if you want to be the person who builds the application behind the site rather than the site. Edge platforms (Vercel, Netlify, Cloudflare) are worth knowing because small clients inherit their economics.

Add one scarce specialism on top of the platform, because this is what makes you non-interchangeable: accessibility remediation and audit, technical SEO and migrations, Core Web Vitals and performance, ecommerce conversion and checkout work, integrations with a particular vertical's software (dental practice systems, legal case management, restaurant point of sale, church management, trades scheduling), or multilingual and localisation work. Vertical knowledge beats technical novelty in this market. The developer who has built eleven sites for dental practices and knows which practice management systems have an API wins that twelfth job against anyone, at a better price, with a shorter sales cycle.

If you want a salaried job rather than clients, the channel is not the job board alone. Agency and studio roles are often filled before they are advertised, so build a list of 30 to 50 studios within commuting or remote distance (their client work is usually credited in the footer of sites you admire, and local design award listings and agency directories name the rest), then approach the lead developer directly with one specific, generous observation about something they built and a link to your two strongest case studies. Say you are available for build work as well as a permanent role, because subcontracting is how a lot of agency hires actually start. For in-house roles, search titles beyond web developer: web manager, digital producer, marketing technologist, webmaster, web coordinator, CMS developer, and the various flavours of WordPress, Shopify and Webflow developer. Nonprofits, universities, local government, healthcare groups and trade associations all employ web people and advertise in places a general job board does not reach.

Where client work comes from, in descending order of reliability. People who already know you, told specifically what you do now (vague announcements produce nothing; the message that works names the service and the type of business). Subcontracting to agencies and to other freelancers who are over capacity, which you get by introducing yourself to studios as build capacity rather than as a job applicant. Other professionals who serve the same clients: designers, copywriters, photographers, SEO consultants, fractional marketers, bookkeepers, and the local IT support company who gets asked about websites constantly and has nobody to send them to. Local business networks, chambers and trade associations, which are unfashionable and still work. Platform partner directories once you qualify for them. Speculative audits of named local businesses, sent as a short specific observation rather than a generic pitch. Marketplaces last, as a floor rather than a plan.

Then do the one unglamorous thing that compounds: after every finished project, ask for a referral and a reference at the moment the client is happiest, which is the week after launch and never later. Client web work is a referral trade. Two reliable referrers are worth more than any amount of content marketing.

Working with AI in this role

What a web developer has to know about AI in 2026-27

AI has changed web development more than it has changed most jobs, and in a different way than the headlines suggest. It did not remove the need for web developers. It removed the floor of the market, raised the amount of code one person produces, and created two new categories of paid work. If you walk into a 2026 conversation claiming either that nothing has changed or that the job is over, you lose the room. The accurate position is that generating code got cheap, and being responsible for a working, fast, accessible, secure, integrated site that earns money got relatively more valuable.

What changed on the supply side. Agent-style coding tools (Cursor, Claude Code, GitHub Copilot, and the generation tools v0, Lovable, Bolt and Replit) make the first draft of a page, a component or a small application fast enough that typing is no longer the constraint. The constraint moved to review. You can now produce more code in a week than you can carefully read, and generated code fails in characteristic ways: plausible but wrong API usage, security checks in the interface but not on the server, no error paths, accessibility that passes a scanner and fails a keyboard, dependencies chosen for popularity rather than fit, and occasionally an imported package that does not exist at all (attackers register those names, which is the slopsquatting problem, and the npm ecosystem has separately suffered repeated compromises of very widely installed packages). The practical skill employers are now screening for is not prompting. It is reviewing, and knowing which parts of a generated diff you must read line by line: anything touching authentication, authorisation, payments, file uploads, data deletion or user input.

What changed on the client side, and this is the part most candidates miss. Search traffic behaves differently now. Answer engines and AI summaries sit between a business and its customers, many site owners are watching impressions hold while clicks fall, and clients arrive with a new question: how do we show up in those answers. That question is partly SEO and partly your job, because much of it is decided by things a developer controls. Whether the content exists in the server rendered HTML or only after JavaScript runs. Whether headings and semantics actually describe the content. Whether structured data (schema.org for organisation, product, article, FAQ, local business, events) is present and valid. Whether there is a clean sitemap and a feed. Whether robots.txt and your CDN rules deliberately allow or block the AI crawlers (GPTBot, ClaudeBot, PerplexityBot and the rest, plus Google-Extended, which is a control token rather than a crawler), which is now a business decision for the client to make rather than a default to inherit; Cloudflare and others have turned crawler control into a configurable product, including charging crawlers for access. One honest caveat to carry into client conversations: llms.txt is a proposal, not a standard the major engines have committed to honouring, so offer it as cheap and optional and never sell it as required.

What is genuinely being automated, stated plainly: boilerplate and scaffolding, converting a design into first-pass markup, CSS from a screenshot, repetitive component variants, test stubs, migration scripts, regular expressions, first drafts of copy and alt text, content entry, and most of the five-page brochure site. If your income depended on that list, it is under real pressure and you should move.

What is not being automated, and is not close: deciding what a business actually needs when the client's stated request is wrong; integrating with a specific other system whose API is undocumented and whose sandbox lies; migrating a large site without losing URLs and rankings; accessibility judgment, because automated tooling finds only a fraction of WCAG failures and the remaining ones (focus order, meaningful alt text, error recovery, whether a custom component is genuinely operable) need a human with a keyboard and a screen reader; performance work on a real device with real third party scripts; owning a production incident; and the client relationship, which is most of the job in this market. Accountability does not generate.

The two new service lines worth naming in a pitch. First, AI build rescue: businesses that generated an application and now cannot safely change it. You arrive to no backups, no migrations, keys in the bundle, authorisation enforced only in the interface, and a dependency list nobody chose. Stabilise, secure, test, document, make it deployable, and you have a client for years. Second, AI visibility and readiness work: server rendered content, valid structured data, crawler policy, feeds and clean semantics, sold as a package with before and after evidence of what a crawler and an answer engine can actually see. Neither is something a site builder subscription provides or a prompt replaces.

Finally, how to talk about it in an interview or a client call. Say which tools you use and for what. Say what you do not let them do unreviewed. Have one concrete story about generated code you rejected, including why it was wrong. If you can also say that you recommended a site builder to a client because it was the right answer for their budget, and then charged for the integration work the builder could not do, you have demonstrated exactly the judgment this market is short of.

Reviewing AI-generated code as a discipline, not a formality

Authoring got fast and reviewing did not. The failure modes of generated web code are specific: authorisation checked in the interface only, missing error paths, insecure file uploads, unvalidated input, accessibility that passes a scanner and fails a keyboard, and imported packages that do not exist. Every one of those lands on you when the site breaks or leaks.

Show it: Keep one public pull request where you rejected or rewrote generated code, with review comments explaining the defect. In an interview, name the categories you always read line by line: authentication, authorisation, payments, uploads, deletion, and anything touching user input.

Building sites that answer engines and AI crawlers can actually read

Clients now ask to appear in AI answers, and most of the levers are developer-side: server rendered content rather than client-only rendering, correct semantics, valid structured data, sitemaps and feeds, and a deliberate crawler policy. This is a billable service that barely existed two years ago.

Show it: Show a before and after of what a crawler receives for one page (rendered HTML, structured data validated, headings mapped), plus the robots.txt and CDN rules you set and the business reason for each. Be clear that llms.txt is optional and unproven rather than overselling it.

Rescuing and hardening AI-generated applications

A growing pool of businesses have a working prototype generated by someone non-technical, with no backups, no migrations, secrets in client code, and permissions enforced only in the interface. They cannot change it and they cannot abandon it. There is very little competition for this work.

Show it: Write up one rescue as a case study: what you found (listed as findings, not insults), what you fixed first and why, the backup and restore you actually tested, what you documented, and what the client can now safely do themselves.

Accessibility judgment past the automated scanner

Automated tools catch only a fraction of WCAG failures, and generated interfaces are confidently inaccessible: divs acting as buttons, broken focus order, custom components with no keyboard path, alt text that describes a file name. Accessibility is also increasingly a contract requirement, which turns this from ethics into revenue.

Show it: Describe a manual pass, not a Lighthouse score: keyboard only through every interactive element, screen reader across the templates, focus visible, error messages announced, forms labelled. Quote WCAG 2.2 AA as the target and say that regulatory compliance dates should be checked against the current rules rather than recited.

Performance work on real devices, against generated bloat

Generated and builder-made sites tend to arrive heavy, and third party scripts from marketing tools finish the job. Core Web Vitals (LCP, CLS, INP) give you a measurable deliverable with a before and after, which is the easiest thing in this trade to get paid for twice.

Show it: One case study with field data and lab data: the metric before, what you changed (image strategy, fonts, script loading, third party audit, rendering approach), the metric after, and on which device profile. Name the script you talked the client into removing.

Knowing the builders well enough to recommend one honestly

Clients can tell when you are protecting your own invoice. Being the developer who says a studio with a small budget should use Squarespace, then charges for the booking integration, migration and analytics the platform cannot do, wins the long relationship and the referrals.

Show it: Be able to state in one sentence each what Webflow, Framer, Wix Studio, Squarespace and Shopify are genuinely good at and where each one hits a wall. Have one example where you recommended a platform over a custom build and one where you argued the opposite.

Dependency and supply chain hygiene

Generated code pulls in packages nobody evaluated, and the npm ecosystem has had repeated compromises of very widely installed packages. A client site that ships a malicious dependency is your incident, and small business sites rarely have anyone else watching.

Show it: Describe your actual practice: lockfiles committed, automated dependency updates reviewed rather than auto-merged, verifying that a package exists and is maintained before it enters a project, a deliberately small dependency count, and what your update and rollback process looks like on a live client site.

What a screen is looking for

These are the terms that a resume screen, human or automated, is matching against for this role. Use the ones that are true of you, in the words the posting uses.

Mistakes that cost people this job

Competing with site builders on price for brochure sites. The floor is a monthly subscription that includes hosting, SSL and a CDN, and AI generation inside those platforms made the first draft free.

Compete on the four things a subscription cannot sell: judgment about what the business needs, integration with the systems it already runs, continuity when something breaks, and accountability when money is involved. Recommend the builder when it is right, and charge for the integration, migration and data work around it.

A portfolio of twenty thumbnails, several dead links, and no statement of what you personally did. Agency leads assume the worst when a contribution is unnamed, because they have been burned before.

Three to five case studies with problem, constraints, your specific contribution, a measured change, and what you would redo. Archive screenshots and metrics at launch so a client redesign later does not erase your evidence.

Quoting a fixed price on the discovery call, before seeing the content or the systems you have to integrate with.

Give a range verbally, then quote in writing after you have seen the content and tested the integration surface. Price in countable deliverables (templates, integrations, forms, migration volume) so change orders are obvious arithmetic rather than an argument.

Fixed price with no exclusions list and no cap on revision rounds. This is the most common way a profitable project becomes unpaid work, and it is always discovered too late.

Write an exclusions section into every proposal, state the number of review rounds included, and name the hourly or daily rate for anything beyond scope. Both sides are happier for it, and clients read exclusions as professionalism rather than as meanness.

Starting work without a deposit, and tying the final payment to launch. Launch is the one date the client can delay indefinitely, and some do.

Deposit before work starts, then payments tied to milestones you control (design approval, build complete, staging sign-off). Put late payment terms in the agreement, and transfer intellectual property on final payment rather than before it.

Holding the client's domain, hosting and analytics in your own accounts as recurring revenue. It feels like retention and it is actually a hostage situation in both directions.

The client owns domain, hosting or platform, analytics and payment processor. You hold access. Keep a handover document and write into the contract what happens when the relationship ends. Being easy to leave is why people stay and why they refer you.

Starting the build before the content exists, on the client's promise that it is coming next week.

Make content a stated precondition with a date, or price a separate content entry and migration phase. If the content misses its date, the timeline moves in writing on the day it misses, not in a panic two weeks before launch.

Shipping generated code you did not review, especially anything touching authentication, authorisation, payments, uploads or deletion. A passing scanner and a working happy path are not a review.

Read those categories line by line, every time. Test the failure paths. Verify that every dependency actually exists and is maintained. Keep lockfiles committed and review dependency updates rather than auto-merging them.

Treating accessibility as a Lighthouse score. Automated tools catch only a fraction of WCAG failures, and generated interfaces fail in exactly the ways tools miss.

Do a manual pass: keyboard through every interactive element, a screen reader across the templates, visible focus, announced errors, labelled inputs, alt text that carries meaning. Quote WCAG 2.2 AA as the target, and check current compliance dates in the regulations rather than reciting them from memory.

Applying for agency jobs the way you would apply for a product engineering job: a stack list, grinding algorithm practice, and no live URLs.

Lead with live work, launches, and the operational experience agencies are short of: maintenance, migrations, on-call, client handover. Prepare for a design-to-code exercise and a debugging session, not a whiteboard, and have one project you can discuss as a sequence of decisions rather than a list of technologies.

Questions people ask

Do you need a degree or a certification to become a web developer?

No. Web development is not a licensed or registered occupation, and no certification is required to build sites, charge for them, or be hired as a web developer. A computer science degree helps with larger product engineering roles and with some corporate HR filters, but in agency, freelance and small-business web work it is routinely outranked by three live sites and a reference who answers the phone. The credentials that do produce work for a web developer are platform partner statuses (Shopify Partners, Webflow, Wix Studio, Squarespace Circle, Codeable), and they help because they list you in directories where clients search, not because they prove skill.

Are web developers still in demand now that AI can build websites?

Demand for web developers has not disappeared, but it has moved. The generic template brochure site, which was the entry-level product for many web developers, is now produced adequately by AI inside site builders, and that part of the market is effectively gone. What remains, and is harder for employers to staff: integrating a site with the systems a business already runs, migrating large sites without losing search rankings, ecommerce and payments, accessibility remediation, performance work, security and maintenance, and stabilising applications that were generated by AI and then broke. A web developer who sells responsibility and integration is in a better position in 2026 than one who sells page production.

How does a web developer compete with Wix, Squarespace and Webflow?

A web developer does not beat those platforms, they use them where they fit and charge for the work the platforms cannot do. The honest division is this: a site builder handles a standard marketing site with standard content very well and very cheaply, and hits a wall at custom data models, real integrations with a client's other software, complex ecommerce, large migrations, and anything that needs a person to be accountable when it breaks. The winning position for a web developer is to recommend the builder when it is genuinely right, then be paid for the booking integration, the CRM sync, the migration, the performance work and the ongoing care plan. Clients trust the developer who tells them to spend less.

What is the difference between a web developer, a web designer and a front-end developer?

A web designer decides what a site looks like and how it is laid out, usually working in Figma, and may not write production code. A web developer builds the working site, including the content management system, forms, integrations, hosting and maintenance, and in small-business work often handles some of the design as well. A front-end developer is a narrower specialism inside a product engineering team, paid on software engineering scales: the browser side of an application, with deeper JavaScript, TypeScript and framework expectations and no client-facing or hosting responsibilities. Titles in this area are unreliable, so read the listed responsibilities instead: if the advert mentions clients, a CMS, hosting or maintenance, it is web developer work whatever it is called.

How do I build a web developer portfolio with no clients?

A web developer's portfolio needs real stakeholders, not real invoices, so create work where someone other than you can be disappointed. The strongest options for a beginner, in order: a small paid job for a tiny local business even at a low price; a site for a community organisation that has actual decision-makers and deadlines; and a speculative rebuild of a named local business's existing site, clearly labelled as unsolicited, with measured before and after numbers taken from the live original. That last one is a portfolio piece and a sales approach in the same artefact. Avoid course projects and clones of famous products, because the web developer reviewing your application has seen the same submission hundreds of times.

What should a freelance web developer charge?

A freelance web developer should avoid an hourly rate, because it punishes speed and invites clients to audit the day. Price a defined scope as a fixed fee with an exclusions list and a stated number of revision rounds, sell a day rate for work with unpredictable shape (audits, debugging, legacy rescue), and build monthly care plans covering hosting, updates, backups, monitoring and a small change allowance, because recurring revenue is what makes freelance web development a business instead of a series of projects. For benchmarks, use what agencies in your city bill a client per day and the project minimums studios publish in platform partner directories rather than any single number from an online rate survey.

How much do web developers get paid?

Web developer pay is best taken from a source you can check rather than from a quoted band. In the United States that source is the BLS Occupational Employment and Wage Statistics series for code 15-1254 (Web Developers), which publishes national, state and metropolitan percentiles, with 15-1255 (Web and Digital Interface Designers) covering the design-leaning variant. Then read live postings in pay-transparency jurisdictions such as Colorado, California, New York, Washington and Illinois, where a band must appear in the advertisement. Expect agency web developer roles to pay less than product engineering roles for comparable skill, and in-house single-developer roles at small businesses to vary widely, so negotiate against postings in your own metro rather than a national average.

How long does it take to become a web developer?

For a career changer studying deliberately, first paid web developer work (a small site, a subcontract from an agency, a defined fix) often arrives inside the first year, and the portfolio needed for a salaried agency role usually takes longer. The pace is set less by study hours than by how early you do real work for someone who can say no: three small real projects teach a web developer more than a year of tutorials, because they include content that arrives late, a client who changes their mind, and a launch that has to happen anyway. Learning fundamentals (semantic HTML, CSS as a system, JavaScript the language) before frameworks feels slower at first and shortens the whole path.

What does a web developer interview test?

A web developer interview in the agency or small-business market tests whether you can take a design and a deadline and ship something that holds up, not whether you can invert a binary tree. Expect a design-to-code exercise graded on breakpoints, semantics, keyboard access and maintainability; a debugging session on a page you did not write, where narrating your method matters as much as the fix; conversational fundamentals on the box model, specificity, async behaviour, forms, caching and CORS; and judgment questions about scope, late content and a client request you should push back on. If an interview for a web developer role is algorithm-heavy, it is really a product engineering role and should be prepared for differently.

How does a freelance web developer get the first few clients?

A freelance web developer's first clients almost never come from job applications or cold outreach at scale. In descending order of reliability: people who already know you, told specifically what service you now sell and for which kind of business; subcontracting to agencies and busier freelancers, which you get by introducing yourself to local studios as build capacity rather than as a job candidate; the other professionals who serve the same clients (designers, copywriters, SEO consultants, photographers, local IT support firms that get asked about websites and have nobody to refer); local business networks and trade associations; and platform partner directories once you qualify. Then ask every finished client for a referral and a reference in the week after launch, because client web development runs on referrals.

Put this on a resume in about a minute

Paste your history once and point it at the Web Developer posting you are looking at. No account, no card.

Build my resume free More roles