The verdict in three sentences
For a regional bank in Casablanca, a secure and compliant website rebuild costs between 350,000 and 900,000 MAD in 2026, delivered in 4 to 6 months. The items that make the difference are not the design but security (audit + pentest), WCAG AA accessibility, FR/AR bilingualism with RTL support and Bank Al-Maghrib compliance. Plan for an uptime SLA, rigorous acceptance testing and continuous security maintenance.
2026 pricing of critical items
A banking site is a compliance project as much as a web project. Here is the 2026 order of magnitude item by item.
| Item | 2026 cost (MAD) | Comment |
|---|---|---|
| Design system + FR/AR mockups | 60,000 - 130,000 | Arabic RTL support |
| Front-end dev + secure CMS | 90,000 - 220,000 | CSP headers, WAF |
| Secure client area | 70,000 - 180,000 | strong auth, encryption |
| WCAG 2.1 AA accessibility + audit | 40,000 - 90,000 | growing obligation |
| Security audit + pentest | 60,000 - 120,000 | before go-live |
| Bank Al-Maghrib + legal compliance | 30,000 - 80,000 | personal data |
| SLA, 24/7 monitoring, hosting (year 1) | 40,000 - 100,000 | 99.9 % uptime |
| Rebuild total | 350,000 - 900,000 | 4-6 months |
The high end covers a transactional client area and full FR/AR multilingualism with editorial governance.
Security and compliance: the core of the budget
In banking, a breach or non-compliance costs far more than the rebuild itself. The security budget is non-negotiable.
| Requirement | Untreated | With 2026 rebuild |
|---|---|---|
| Security audit + pentest | absent | 60,000 - 120,000 MAD |
| CSP headers / XSS protection | partial | complete |
| WCAG AA accessibility | non-compliant | compliant + audit |
| Acceptance testing (UAT) window | improvised | 3-4 scoped weeks |
| Guaranteed uptime (SLA) | best effort | 99.9 % contractual |
| Arabic (RTL) support | absent | native FR/AR |
The pre-go-live pentest is the safety net that prevents a public incident costly in reputation.
Mini case study
Karim, digital director of a regional bank in Casablanca, runs a rebuild at 620,000 MAD including a secure client area, FR/AR and a pentest. The cycle lasts 5 months with 3 weeks of acceptance testing. WCAG AA and Bank Al-Maghrib compliance avoids a sanction risk and a corrective audit estimated at 150,000 MAD, while the new client area cuts call-center volume by 20 %, an operational saving of about 90,000 MAD/year. The project pays off by securing compliance and lightening support.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
FAQ
Why does a banking site cost more than a standard showcase site?
The premium comes from security (audit, pentest, CSP headers), WCAG AA accessibility and regulatory compliance. These items often make up 30 to 40 % of the total budget.
Is Arabic (RTL) support essential?
For a Moroccan bank serving the general public, yes. FR/AR RTL support broadens the audience and meets local expectations; it is built into the design system from the start.
How long does a banking rebuild take?
Between 4 and 6 months, including 3 to 4 weeks of acceptance testing (UAT) and a pentest before go-live. Compliance sign-offs pace the schedule.
What is a pentest and why now?
A penetration test simulates a real attack before launch. It costs 60,000 to 120,000 MAD and prevents a public incident that would otherwise be far costlier in fines and reputation.
Is security maintenance continuous?
Yes: 24/7 monitoring, security updates and a 99.9 % SLA are covered by a separate annual contract, indispensable in banking.
Let's scope your project. Specify your scope (client area, transactional or informational), your languages and compliance requirements — we will define audit, pentest and SLA. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
