SecuritySite at risk? Do you even know? We'll help you figure it out
Is your website at risk? We can check for you, for free.
Blog
The bits of the web that aren't obvious.
Short, plain-English notes for people who have websites and want to know a little more about how to get them right. No jargon, no scare tactics, just what we'd say if you asked us over a cup of tea.
All posts
Security
AccessibilityYou probably don't need that cookie banner
Is your cookie banner telling the truth? A plain-English guide for charities and small teams: what your site tracks, how to check, and better options.
SecurityWe've launched our first plugin on WordPress...and it's Hopelessly Sensible
Security plugins for WordPress are usually complicated, expensive, and offer more tools than you need. Ours is none of these things.
SecurityWho holds the keys?
The Calderdale Voluntary and Community who invited us to create a short guide on security and people for their website and newsletter.
SecurityNo, deleting the account won't fix it
Google flagged my passwords as compromised. Deleting the breached account won't help. Here's what a reused password really costs, and how to stop it happening again.
AccessibilityThe developer "tricks" that quietly break your website
Six shortcuts a well-meaning developer reaches for that quietly lock people out. For each one: what to ask whoever builds your site, and the fix.
SecurityFive free ways to back up your WordPress site today
No developer needed, no budget required. Five free ways to get a complete, off-server backup of your site in about half an hour.
SecurityThat WordPress plugin may be your biggest security risk
Every plugin you add is a door. We look at how to decide which doors are worth opening, and how to spot the ones that should already be closed.
AccessibilityYour colour scheme might be turning people away
Low-contrast type is the most common accessibility issue we find, and the easiest to fix. Here's what to test, and how to test it in five minutes.
AccessibilityWhat WCAG actually is, and why it's not as scary as it sounds
WCAG is the standard for accessible websites. We translate the bits that matter for community sites into plain English, and call out the bits you can skip.
SecurityWhat SSL certificates actually do (and don't do)
That little padlock isn't a sign that a site is safe. We explain what an SSL/TLS certificate actually proves, and what it definitely doesn't.