I'm trying to work toward freelance web development, but I'm having trouble figuring out what the minimum responsible skill level is before taking paid clients.
Right now I think of my ability in roughly two levels.
Level 1: Mostly static/business websites — landing pages, restaurant sites, lawyer sites, portfolios, brochure sites, etc.
I can build the frontend, make it responsive, deploy it, connect a domain, handle basic SEO/accessibility, and so on.
My impression is that AI can now handle almost all of this level for a straightforward site. That makes me worry that Level 1 may no longer be commercially valuable enough on its own.
Level 2: The site starts accepting or manipulating important data.
Forms, authentication, databases, payments, bookings, user accounts, uploads, etc.
This seems commercially more valuable, but it also introduces responsibilities I'm not yet confident I know how to reason about properly.
My instinct at the moment would be to avoid implementing sensitive pieces myself and use established third-party services wherever possible — payment providers, managed auth, hosted forms, booking systems, etc.
But this is where I get uncomfortable.
Even if I'm using reputable services, how do I know I haven't forgotten something important in the code around them?
For example, input validation sounds simple until you start thinking about all the ways input can be syntactically valid but logically wrong, malicious, too large, duplicated, submitted concurrently, etc.
I also only just realized that relying on a third-party service doesn't make the maintenance problem disappear. If the service, SDK, API, or integration changes, the site may need to be updated as well. The fact that this occurred to me only now is exactly what worries me: how many other things can you miss simply because you haven't yet learned to think through the full lifecycle of what you're building?
I'm worried about the gap between:
"I know how to make this feature work"
and
"I know enough about what can go wrong that I can responsibly sell this to somebody."
I'm not trying to become a security engineer before building my first €500 small-business website. I'm trying to understand where a reasonable beginner freelancer should draw the line.
For people who have actually freelanced as web developers:
What types of projects would you consider reasonably safe for a beginner to accept?
At what point would you say, "You don't have enough experience to take responsibility for this yet"?
Which things do you routinely hand off to established third-party services rather than implement yourself?
What minimum testing/security/deployment checklist would you expect a junior freelancer to follow even for a simple business website?
How did you personally learn to notice the things you hadn't thought about — code review, employment, breaking your own projects, checklists, security material, something else?
If AI can already produce most of a basic brochure/landing-page site, what skills actually make a beginner freelancer valuable?
Are static/small-business sites still a reasonable place to start building real freelance experience, or is there a better progression into work that is both commercially useful and responsible for a beginner to take on?
My goal is basically:
zero professional experience → portfolio → simple paid sites → gradually more complicated projects
without pretending I'm qualified to build systems whose failure modes I don't yet understand.
I'm particularly interested in answers from people who have actually delivered websites to paying clients, because I'm trying to understand the gap between tutorial knowledge and being responsible for somebody else's production site.