retype.com

Retype is a Markdown-first documentation website builder. It turns a folder of Markdown files into a production-ready website by running one command, with no design work, no coding, and no proprietary format. It fits you if your content already lives in .md files and you want a shareable documentation site without learning a framework or maintaining a build pipeline.

What Retype actually does

You point it at Markdown files, and it generates an HTML website. The source of truth stays as plain Markdown files that you own and control, so there is no vendor lock-in and no surprise format conversion. According to the site, all you need to start is a single .md file.

The workflow is deliberately short:

1. Install Retype using npm, Yarn, or the dotnet CLI.
2. Navigate to any folder containing Markdown files.
3. Run retype start.

Retype then builds the site and opens it in your browser automatically. When you edit and save an .md file, the site updates almost instantly in the browser through live reload.

Installation options

After installation, the core command is:

retype start

Expected result: Retype builds your site and opens it in the browser. From there, saving changes to Markdown files refreshes the preview without a manual rebuild.

What you get beyond plain Markdown

• Components — tabs, callouts, cards, and similar elements to enrich pages without writing code.
• Project configuration — a retype.yml file unlocks project-level features and customization.
• Page-level configuration — set things like a custom navigation label or icon per page.
• CLI reference — all commands, flags, and options are documented for the Retype CLI.

Where you can host it

Retype generates a static HTML website. You can self-host it on any web hosting service, or deploy for free using GitHub Pages, Netlify, or Cloudflare. The site states no special server-side software or external dependencies are required.

Who it is for

Retype is aimed at people who want to write docs, not code. The site frames this directly: "I don't want to write code to write docs, I just want to write docs." It is a reasonable fit when you want:

• Documentation built from Markdown you already have.
• No complex build pipeline, framework to learn, or dependencies to maintain.
• Fast setup and fast builds.
• Freedom to host anywhere and keep your content portable.

What to check before committing

The site mentions a Pro tier and links to Pro Pricing, so paid features exist alongside the free workflow described above. Pricing details are not covered in the available material, so check the Pro page if advanced features matter to your decision. Also confirm your target host supports static HTML output, which is the format Retype produces.

Cybersecurity is the practice of keeping your data, accounts, and services from being accessed, stolen, altered, or knocked offline by someone who shouldn't have them. For a personal site or small online presence, that reduces to a short list of concrete jobs: protect your login credentials, keep your software current, serve traffic over HTTPS, and lock down the domain and DNS layer that everything else depends on. You don't need an enterprise security team to cover the basics — but you do need to treat your registrar account and your hosting account as the two most valuable things you own, because whoever controls those controls the site.

What cybersecurity actually protects

It helps to separate the assets from the threats, because most small-site incidents come from a handful of causes.

The pattern: each asset has one or two controls that remove most of the risk. You don't need all of them on day one, but skipping the account and domain layers is the mistake that's hardest to undo.

The threat categories a small site actually faces

• Credential theft — reused or weak passwords, or credentials leaked from another breached service. This is the most common way small sites fall.
• Phishing — fake login pages or "your domain is expiring" emails designed to capture your registrar or hosting password.
• Malware and backdoors — usually arriving through an outdated CMS, plugin, or theme.
• DDoS — flooding a site until it's unreachable; often handled by your host or a CDN rather than by you.
• Misconfiguration — an open admin panel, directory listing, or default credentials left in place.

Notice that four of the five are about access, not exotic exploits. That's why the basics work.

Core protections to apply first

Use strong, unique passwords and a password manager

Every account tied to your site — registrar, host, CMS, email — should have a different password. A password manager makes this practical. The goal is that one leaked password can't be replayed anywhere else.

Turn on multi-factor authentication

MFA is the single highest-value control for your registrar and hosting accounts. Even if a password is stolen, an attacker without the second factor can't log in. Prefer an authenticator app or hardware key over SMS where the service supports it.

Serve everything over HTTPS

An HTTPS/TLS certificate encrypts traffic between visitors and your site and prevents browser "not secure" warnings. Most hosts and registrars offer a free certificate; the important part is that it's installed and that HTTP redirects to HTTPS.

Update promptly and keep the surface small

Apply CMS, plugin, and theme updates as they're released, and delete anything you're not using. Fewer components means fewer places for a known vulnerability to sit unpatched.

Apply least privilege

Give each person (and each integration) only the access they need. Don't run your site day-to-day from an administrator account, and don't hand out admin rights for tasks that don't require them.

Secure the domain and DNS layer

This layer is easy to overlook and expensive to lose, because a hijacked domain can point anywhere.

• Protect the registrar account with a unique password and MFA. Your registrar account is the root of control over the domain.
• Enable the registrar lock (often called a transfer lock or clientTransferProhibited) so the domain can't be moved without your action.
• Keep registrant contact email secure — that inbox is often the recovery path for the domain.
• Enable DNSSEC where your registrar and DNS provider support it, so responses can be cryptographically validated and spoofing is harder.
• Watch for unauthorized DNS changes — if records you didn't touch appear, treat it as a compromise.

Porkbun is an ICANN-accredited domain registrar, which means it operates under ICANN's registrar rules — relevant here because those rules govern transfers, locks, and registrant contact requirements. Its site lists Stripe among its payment platforms. Beyond that, check your specific registrar's and DNS provider's current feature set for lock and DNSSEC support, since availability varies.

Warning signs and first steps if something looks wrong

Watch for: unexpected DNS records, visitors reporting malware warnings, unexplained admin accounts, a sudden traffic drop, or emails about transfers you didn't request.

If you suspect a compromise:

1. Change passwords on registrar, hosting, and CMS accounts, starting with the registrar.
2. Revoke active sessions and reset MFA where possible.
3. Check DNS records against what you expect and revert unauthorized changes.
4. Restore from a known-good backup if files were altered.
5. Re-scan and update the software before reopening the site.

Containment first, then recovery — don't try to clean a live, still-compromised site.

What to outsource vs. manage yourself

Hosting-level security, CDN, and WAF are usually worth outsourcing because they require scale and constant attention. Account hygiene, MFA, updates, and domain/DNS protection are things you should keep in your own hands regardless of size — they're cheap to do and costly to skip.

An IDX website pulls live listings from your local MLS and displays them on your own domain, so visitors can search homes without leaving your site. That single capability changes what a website does for your business: instead of a static brochure that describes who you are, it becomes a working search tool that captures leads at the moment they're actively looking. A built-in CRM then takes those inquiries and turns them into an ongoing contact record rather than a message buried in your inbox.

The Core Difference: Brochure Site vs. IDX Site

A generic agent website typically has a homepage, an "About Me" page, a few testimonials, and a contact form. Visitors read, maybe click "Contact," and leave. There's little reason to return.

An IDX-enabled site adds a searchable listing database. Visitors filter by price, bedrooms, neighborhood, or property type, save favorites, and come back to check for new matches. The practical difference shows up in behavior:

Neither type is useless. But if your goal is capturing buyers who are in the market right now, the search experience is what keeps them on your domain instead of sending them to a national portal where you're one of many agents competing for the same click.

What "IDX" Actually Means in Plain Terms

IDX stands for Internet Data Exchange. It's a reciprocal arrangement among MLS participants: brokers agree to let their listings appear on each other's websites in exchange for the same courtesy. Your MLS governs the rules — what data can display, how often it refreshes, how listings must be attributed, and which fields can be shown.

For you as an agent, the practical takeaway is:

• The feed comes from your MLS, not from the website provider. The provider builds the display; the MLS supplies the data.
• Coverage depends on your MLS. If you belong to one MLS, you typically get that MLS's listings. If you belong to several, you may need multiple feeds.
• Rules vary by region. Some MLSs require specific disclaimers, refresh intervals, or restrictions on certain fields.

This is why "does it have IDX?" is the wrong first question. The better question is "does it support my MLS, and what does the display look like?"

How the CRM Connects the Dots

A listing search without follow-up is just a nicer brochure. The CRM is what closes the loop.

Here's the flow in a well-integrated setup:

1. A visitor searches listings and clicks "Request a showing" or "Ask a question" on a specific property.
2. The inquiry lands in the CRM with the property address attached, not just a name and email.
3. The agent sees what the lead was looking at, which makes the first reply specific instead of generic.
4. The lead enters a follow-up sequence — new listings matching their criteria, price-change alerts, or a simple check-in.
5. Over time, the contact record accumulates: saved searches, past inquiries, showing history.

The alternative — leads arriving as raw emails — means you're reconstructing context from memory and hoping you remember to follow up. Most agents don't, not because they're careless, but because there's no system prompting them.

What to Expect During Setup

Setup is usually more about approvals than technical work. A realistic sequence:

1. Choose a domain

Use your name or brand (for example, yourname.com). Many providers include a free domain with a paid plan; confirm whether it renews free or at standard rate after year one.

2. Select a template and connect your branding

Logo, colors, headshot, service areas, and a short bio. This is the part you control fully.

3. Submit your MLS IDX approval

This is the step that catches people off guard. Your MLS must approve you as a participant authorized to display IDX data. You'll typically need your license number and MLS credentials. Approval can take anywhere from a day to a couple of weeks depending on the MLS.

4. Verify the feed and listing display

Once approved, confirm that listings actually appear, that search filters work, and that required disclaimers show. Check a handful of known addresses to make sure the data is current.

5. Set up lead capture and CRM routing

Decide where inquiries go, who gets notified, and what the first automated response says. Test it yourself with a fake inquiry before going live.

6. Publish and review on mobile

Most real estate searches happen on phones. Check the search flow on your own device before announcing the site.

Limitations Worth Knowing Before You Commit

IDX is powerful but not unlimited. Ask a provider these questions directly:

• Which MLSs do you support? Get a specific answer for your MLS, not a general "we support many."
• How often does the feed refresh? Some MLSs mandate near-real-time; others allow delays.
• Can I display sold and pending data? Rules differ, and sold data is often restricted.
• What happens if I switch brokers or MLSs? Can the feed be transferred or re-approved?
• Is the CRM included or an add-on? Some providers bundle it; others charge separately.
• What are the limits on contacts or emails? A CRM that caps out at 500 contacts may not fit a growing database.
• Who owns the lead data if I leave? Export rights matter more than most agents realize until it's too late.

Pricing structures in this category commonly start in the range of a few tens of dollars per month for a basic plan, with higher tiers adding features like advanced CRM, additional MLS feeds, or expanded marketing tools. Confirm current pricing and what each tier includes directly with the provider, since plan contents change.

A Reasonable Way to Decide

Ask yourself three questions:

1. Do buyers in my market search online before contacting an agent? In most markets, yes — which means a searchable site meets them where they already are.
2. Do I have a follow-up system I actually use? If not, the CRM half of an IDX site is arguably more valuable than the listings half.
3. Is my MLS supported? Without this, nothing else matters.

If the answer to all three is yes, an IDX site with integrated CRM is a reasonable infrastructure investment. If your MLS isn't supported, or you won't use the follow-up tools, a simpler site plus a standalone CRM may serve you better.

The honest framing: an IDX website doesn't generate leads by itself, and no provider can promise rankings or sales. What it does is give interested visitors a reason to stay on your domain and give you a structured way to follow up when they raise their hand. Whether that translates into business depends on how consistently you work the leads it captures.