WordPress hardening: 12 settings worth doing today
Concrete steps without extra plugins that genuinely reduce the chance of a breach.
Insights
Short articles from practice: how to recognise an infected site, what to do after a breach, why a site is slow and what public sector websites must meet.
Backups that actually work
A backup nobody has restored is not a backup. Four requirements it has to meet.
Shared or dedicated hosting: when to move
Four signs that shared hosting is now limiting your site, and what moving actually gives you.
Why your website is slow: start with TTFB
If the server takes 1.5 seconds to respond, optimising images will not save you. How to find the real cause.
nginx, PHP-FPM and Redis: what actually speeds up WordPress
The three components that make the biggest difference, and the usual mistakes in tuning them.
Core Web Vitals: what Google actually measures
Three metrics, their thresholds and the concrete actions that improve them on a WordPress site.
Multilingual websites: five hreflang mistakes
Why Google shows the German page to a Lithuanian visitor, and how to link language versions correctly.
WCAG 2.1 AA for public sector websites: where to start
Accessibility requirements for institutions: the most common failures and what you can check yourself.
Outdated plugins: the most common cause of breaches
Why automated scanners find your site within days of a disclosure, and how to avoid it.
Suspect your site is infected?
We check it externally and send a report with the concrete findings.