Recent articles
Insights on modern web development, performance, and building better digital products.
PHP2Shell: When moving away from WordPress makes sense
Another security update, another maintenance bill. PHP2Shell is a reason to check whether your business website needs the upkeep WordPress demands.5 min readWeb Application Security Requirements Checklist for Custom Software Contracts
A contract-ready web application security checklist with 12 testable requirements, evidence rules, acceptance criteria, and handover duties for custom software buyers.10 min readYour WordPress Site Has SEO Spam. Cleaning It Won't Fix It.
WordPress SEO spam returns after every cleanup because the backdoor and the rogue admin account survive it. Here is the 20-minute audit, the data on why removal fails, and the rebuild that ends the cycle.9 min readOpenAI Privacy Filter: The Open-Weight PII Model That Runs in Your Browser (And Where It Belongs in an Agent Stack)
OpenAI's new open-weight PII classifier runs in your browser and fills a governance layer that many agent stacks underweight. Here's how the model works, where it fits, and what it breaks.10 min readRotate, Redeploy, Revoke: The webvise Response to the Vercel Breach
Vercel disclosed a supply-chain breach on April 19, 2026. The response I ran across every managed project, and why this breach shape needs a different response model.7 min readBest Local AI Models for Compliant Businesses in 2026
Cloud AI means sending your data to someone else's servers. Local models keep everything in-house. Here are the best open-weight models, deployment tools, and what you need to run them.12 min readOpenClaw: The Open-Source AI Agent That Broke GitHub Records: What It Means for Your Business
OpenClaw went from a weekend project to 250,000 GitHub stars in 60 days. It connects AI models to 50+ messaging platforms and runs autonomously on your infrastructure. Here's what it is, how it works, and why it matters.12 min readRunning an Outdated WordPress Site: The Security Risks You're Actually Taking
Once a WordPress vulnerability is publicly disclosed, exploit code typically appears within 24-72 hours. Here's what running outdated plugins, themes, or core means for your business, with real CVEs from 2024-2025.6 min read