Systems and security
Static sites, PHP2Shell and why your stack matters.
How much does a small business website cost in 2026?
What a small business website really costs: DIY, template, static rebuild and agency. The typical ranges and the ongoing costs to plan for.
CDN hosting for small business: free tiers explained
What a CDN is, why it makes sites fast, and what the free tiers actually cover for a small business.
How to check if your WordPress site is up to date and secure
A plain checklist for a WordPress site: PHP version, core, plugins, users and files. About ten minutes, no jargon.
Is WordPress safe after PHP2Shell and wp2shell?
Two separate WordPress issues came up in 2026: the PHP2Shell PHP flaw and the wp2shell WordPress-core chain. What they are and how to check your site.
Moving off PHP: your static site checklist
What it takes to move a website from PHP to a static site, and how to check you are ready. Plain steps, no vendor talk.
No server to maintain: what a static site saves you
Traditional hosting comes with updates and uptime checks. A static site on a CDN takes the server off your list.
PHP2Shell: critical PHP vulnerability patched October 2026
PHP2Shell is two critical PHP vulnerabilities with patches released 21 October 2026. The fixed versions and what to do.
Signs your PHP website has been hacked: the checks to run
How to tell if a PHP site has been compromised: unfamiliar files, new admin users, odd plugins and unexplained server load. Five checks in plain English.
What attack surface means for a small business website
Attack surface is the parts of a website that can be reached and need looking after. How it differs between a traditional PHP site and a static one.
The plugin supply chain risk, explained
Each plugin adds code you rely on someone else to maintain. How plugin supply chain attacks work and how to keep the risk low.
What a static site actually is
A plain-English explanation of static sites: files on a CDN, no PHP, no database, no server to maintain.
Why PHP sites are being targeted in 2026, and what to do
Two critical PHP vulnerabilities were patched in October 2026. What happened, who it affects and the steps to take, in plain English.
WordPress vs static site for small business
WordPress and static sites both work well for small businesses. How they compare on speed, cost, upkeep and security, and how to choose.
Find out what your website needs
Book a free 30-minute website audit. We'll go through your site together and you'll leave with a short list of what to change first. If a rebuild isn't worth it, I'll say so.