Skip to content
Gulfturn Creative
← Back to Work

Client Delivery

/ Commercial

Modernizing a Federal-Facing Marketing Website with an AI-Assisted Content Platform

Gulfturn Creative delivered a full public marketing website and a bespoke, block-based content management system for a client serving the federal contracting market, built and iterated with an AI-assisted development workflow under continuous human review.

Domain
Web Platform / Content Management System

Capabilities

Custom CMS design & developmentInformation architectureAI-assisted software deliveryEnterprise SSO integrationThird-party system integrationWorkflow ModernizationAgentic Web and AEODigital PlatformsApplied AI

The Challenge

The client needed a professional marketing website capable of representing multiple service lines, capability areas, and case studies to a federal and enterprise buying audience, along with a way for non-technical staff to keep that content current without depending on a developer for every change. Off-the-shelf website builders did not offer the combination the client needed: a modular page-building system, section-level landing pages that could each carry their own hero media and layout, integrated media and asset management, and enterprise-grade sign-in restricted to corporate accounts. The client also needed the site to stay discoverable to search engines and answer-engine tools as content changed, without manual sitemap or metadata upkeep. Oh, they needed it in less than 30 days.

Gulfturn's Role

Gulfturn Creative acted as the delivery team for the full engagement: requirements definition, information architecture, UI/UX design, front-end and back-end implementation, and ongoing iteration. GulfturnCreative used an AI-assisted development workflow to accelerate implementation of the CMS, page-building blocks, and integrations, while retaining human review and sign-off on every change before it reached the client's live site. Gulfturn Creative also authored the client-facing documentation (an in-app Help Center) and internal requirements/testing records so the client's team could operate the CMS independently after delivery.

The Solution

Gulfturn Creative built a single-tenant web application combining a public marketing site with a private, admin-only content manager. The public site is organized into configurable sections (e.g. services, capabilities, case studies, insights), each with its own landing page, hero media, and a listing grid of published sub-pages. Content editors build individual pages from five reusable block types: rich text, call-to-action buttons, testimonial pulls, FAQ pulls, and card grids, all reorder-able by drag-and-drop. A centralized media library handles image and video uploads, folder organization, alt text, and version history so a replaced asset updates everywhere it is used. Homepage sections (hero, stats, feature highlights, CTA banner, testimonials, FAQs) are independently configurable and reorder-able from a dedicated homepage layout editor, with skeleton loading states so visitors never see placeholder content.

AI and Human Roles

AI was used as a development accelerator, not as an autonomous decision-maker on the client's behalf. Within Gulfturn Creative's build process, AI assistance was used to scaffold and iterate on CMS screens, content-block components, and integration code from written requirements, and to draft supporting documentation (in-app Help Center articles and internal requirements records) that a human then reviewed and refined. The delivered application itself does not run an AI agent against the client's live content or make autonomous edits to the published site; all publish, unpublish, and archive actions are explicit choices made by a logged-in admin user through the CMS interface.

Human Controls

Every piece of AI-assisted output — CMS features, block components, integration logic, and documentation — was reviewed by a Gulfturn team member before being delivered or deployed, and every content change on the live client site requires an authenticated admin action (there is no unattended or automatic publishing path). Row-level security enforces that only admin-role users can create, edit, or delete content, and a 10-minute idle session timeout automatically signs out inactive CMS sessions. Draft and archived content is never publicly readable, giving the client a safe space to prepare changes before they go live.

Platform Architecture

The application is a React single-page app on the Base44 platform, constructed with the WebMCP structure using entity-based data storage (Page, SiteSettings, Testimonial, FAQ, MediaAsset, ContactSubmission, and related entities) with row-level security restricting create/update/delete operations to admin users while allowing public read access to published content only. A small set of backend functions handle server-side concerns outside the reach of the browser client: a live XML sitemap generator that rebuilds from the current database on every request, a contact-form handler that persists submissions and notifies admin users by email, a secure webhook receiver that ingests articles from a separate companion blog-publishing application, and an integration that pulls live job openings from the client's HR system for the careers page. Authentication is handled by single-tenant enterprise SSO restricted to the client's corporate domain, gating every CMS route while leaving the public site fully open.

Security, Compliance and Accessibility

CMS access is restricted to a single tenant: sign-in is limited to the client's corporate email domain via enterprise SSO, and all administrative routes are gated behind authentication with no fallback local-account login. Row-level security is enforced at the data layer, not just in the UI, so published content is publicly readable while drafts, contact submissions, and media management remain admin-only regardless of how the data is accessed. Server-side integrations (HR job feed, blog webhook, outbound email) run through backend functions using server-held credentials, so no third-party API keys or shared secrets are ever exposed to the browser. The CMS admin area is excluded from search engine indexing via robots.txt.

Results

Demonstrated
As delivered, the platform gives the client's non-technical staff independent control over the full public site: creating and publishing pages, curating homepage sections, managing a shared media library with version history, and maintaining a live, self-updating sitemap without engineering support for routine content changes. No client-specific traffic, lead, or conversion metrics are publicly disclosed in this case study; outcomes here describe demonstrated platform capability, not measured business results, which the client has not authorized for public release.

Why This Matters

This engagement is representative of Gulfturn Creative's approach to organizations that need a marketing presence they can operate themselves after launch — particularly those serving regulated or federal-adjacent markets, where controlled access, auditability, and search/answer-engine visibility all matter alongside day-to-day content flexibility. The same block-based CMS pattern, AI-accelerated build process with mandatory human review, and single-tenant access model can be adapted for other clients needing a self-service website without a standing engineering team.

Capabilities Demonstrated

  • Block-based page building system
  • Row-level security & role-based access control
  • Live, self-updating XML sitemap
  • Centralized media library with asset versioning
  • Single-tenant enterprise SSO gating
  • Webhook-based content ingestion from an external system
  • Server-side integration with an external HR platform

Technologies

ReactTailwind CSSBase44 platformMicrosoft Entra ID (single-tenant SSO)REST webhooks

Disclosure

AI tools were used by Gulfturn Creative's development team to accelerate writing code and documentation during this engagement; they did not independently make decisions, publish content, or interact with the client's end users. Every AI-assisted output was reviewed and approved by a human team member before delivery, and every live content change on the client's site is performed by an authenticated human admin. No client name, traffic data, or business outcome metrics are disclosed in this case study without the client's approval.

Next Step

Need a self-service marketing site your team can actually run?

Tell us about your mission or workflow and we'll show you how we'd approach it.

Discuss a Similar Workflow