SecurityThat WordPress plugin may be your biggest security risk
Every plugin you add is a door. We look at how to decide which doors are worth opening, and how to spot the ones that should already be closed.
Blog
The bits of the web that aren't obvious.
Short, plain-English notes for people who have websites and want to know a little more about how to get them right. No jargon, no scare tactics, just what we'd say if you asked us over a cup of tea.
All posts
Security
AccessibilityYour colour scheme might be turning people away
Low-contrast type is the most common accessibility issue we find, and the easiest to fix. Here's what to test, and how to test it in five minutes.
AccessibilityWhat WCAG actually is, and why it's not as scary as it sounds
WCAG is the standard for accessible websites. We translate the bits that matter for community sites into plain English, and call out the bits you can skip.
SecurityWhat SSL certificates actually do (and don't do)
That little padlock isn't a sign that a site is safe. We explain what an SSL/TLS certificate actually proves, and what it definitely doesn't.