BricksExtras

United Kingdom · bricksextras.com · 12 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 12 sub-vendors.

Insights

Last updated 2026-05-31 · revision 1

12 direct vendors, 143 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

BricksExtras exhibits medium migration readiness, leaning towards the lower end of the spectrum. The primary challenge stems from its traditional WordPress/PHP tech stack, which is not inherently cloud-native, containerized, or microservices-based. A migration to a modern cloud environment would likely require significant re-architecture and refactoring efforts. A critical impediment to assessing readiness is the complete absence of financial stability data (revenue concentration, growth history), making it impossible to determine the company's capacity to fund a potentially costly and complex migration. Data residency requirements are also unspecified, which could introduce significant compliance hurdles depending on the target migration environment. Vendor lock-in risk is unknown, and while vendor geographic diversity is present across 6 countries (United States, Netherlands, Bangladesh, Germany, Finland, France), the actual number of vendors and contract complexities are not provided, making a precise assessment of vendor-related migration challenges difficult. On the positive side, the use of Vue.js indicates some modern development practices, and the absence of jQuery on the frontend could simplify certain refactoring tasks. However, these do not outweigh the substantial challenges posed by the core technology stack and the critical data gaps.

Compliance

3 in-scope frameworks identified; showing 3.

GDPR (source) — Compliant

Company demonstrates strong GDPR compliance through comprehensive privacy policy that explicitly references GDPR requirements, includes data subject rights, lawful basis for processing, and EU supervisory authority contact information. However, as an Australian company serving global customers including EU residents, ongoing compliance monitoring is essential. Risk is medium due to potential for data processing violations and significant GDPR fines (up to 4% of annual turnover).

Evidence: https://bricksextras.com/privacy/

SOC 2 (source) — Assessment Required

As a cloud-based software service provider handling customer data, SOC2 compliance would be beneficial for demonstrating security controls to enterprise customers. Risk is medium because lack of SOC2 certification could limit business opportunities with security-conscious clients, though it's not legally required. The company processes customer account data and payment information, making security controls important.

ISO 27001 (source) — Assessment Required

ISO 27001 would be valuable for a software company handling customer data and intellectual property. Risk is medium because while not legally required, lack of formal information security management system could expose the company to security incidents and limit enterprise sales opportunities. The company handles sensitive customer data and proprietary software code.

Financials

Three-year financials

Financial Resilience Score: 5/10

BricksExtras (operated by WPLIT, ABN 12 651 372 244) is a bootstrapped Australian micro-business with no publicly disclosed financial statements. Qualitative indicators suggest a lean, low-cost digital product operation with disciplined premium pricing, active product development (v1.7.0, 47 elements as of late 2025), and strong community reputation within the Bricks Builder WordPress ecosystem. The mixed license model (annual + Lifetime Deals) provides upfront cash and some recurring revenue, while the absence of disclosed external funding or debt suggests self-sustaining cash flow since founding in 2022. However, resilience is materially constrained by extreme concentration risk: 100% of revenue depends on a single plugin tied to a single host platform (Bricks Builder), with key-person dependency on founder David Browne and one additional developer. The Lifetime License model creates long-tail support obligations against one-time payments, and the unincorporated ABN structure implies unlimited personal liability with no balance-sheet ring-fencing. The complete absence of financial transparency, combined with platform and ecosystem risks inherent to the WordPress plugin market, justifies only a moderate resilience score.

Key strengths: Lean cost base typical of a 1-3 person digital micro-business, Mixed revenue model: annual licenses (from $79) plus Lifetime Deals, Strong product-market reputation in Bricks Builder community, Active product development with continuous release cadence since 2022, Premium pricing discipline with no-discount policy and upward price trajectory, No external VC funding or visible debt; appears self-sustaining

Risk factors: Single-platform dependency: 100% revenue tied to Bricks Builder ecosystem, Key-person risk concentrated on founder David Browne, Lifetime License tail risk: perpetual support obligations against one-time payments, No financial transparency for counterparties or acquirers, Unincorporated/ABN structure implies unlimited personal liability, WordPress ecosystem disruption risk (core changes, security, marketplace shifts), Small team (~1-3 people) limits operational redundancy

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report