Guides from real jobs.
Short and specific. Each one comes from a site we actually worked on or a question we get asked: what we saw, what it meant, and the order we fixed it in.
Hacked WordPress: the cleanup order that holds
Most hacked sites get cleaned twice. The first time removes what you can see. Here is the full order we use so the second time is never needed: contain, find the door, clean, rotate, patch, watch.
Your website is not getting leads. It is usually one of five things
A website that gets visitors but no enquiries is not a traffic problem. It is one of five fixable things, and you can find which one from your own analytics in an afternoon. Here they are, in the order we check them.
What website maintenance actually includes, and what it should cost
Website maintenance is sold as a vague monthly fee, so people skip it. Then the site gets hacked, or an update breaks it, or it slowly turns into the old site nobody wants. Here is what maintenance actually consists of, month by month, and what a fair price covers.
SEO for a small business website: the part that brings results
Most small business SEO advice is written for people with a marketing team. You do not need one. A short list of things done properly brings most of the results, and you can do the first half yourself in a week. Here is that list, in order.
Is my website hacked? Twelve signs, and a five-minute check
Most hacked sites look normal to their owners for weeks. The signs show up in Google, in your inbox and on other people's phones first. Here are the twelve we check, and a five-minute routine that catches most of them.
Website redesign or rebuild: how to tell which one you need
People ask for a redesign when they need a rebuild, and the other way round. The difference is not the look, it is what is underneath. Here is how we decide in ten minutes, and what each one costs you in time and money.
Website not showing up on Google: the checks, in order
You search for your business and the site is not there. It is nearly always one of eight causes, and most of them take minutes to find and fix. Here they are, in the order to check, from a setting someone forgot to a site that is simply new.
Is your website outdated? Nine signs, and what fixing each one costs
You stop seeing your own website after a while. Customers do not. Here are the nine things that make a site look and feel old, in the order visitors notice them, with what each one takes to fix.
Why your website is slow, and the fixes in order
Slow sites lose visitors before the page appears and rank lower for it. The causes are few and they come in a predictable order of impact. Here is how to measure properly, what the numbers mean, and the fixes from most to least effective.
How much does a website cost in 2026, and what the price buys
A business website costs anywhere from a few hundred to fifty thousand, and the number tells you almost nothing on its own. Here is what sits behind each price band, what a good brief looks like, and the two places where cheap becomes expensive.
Deceptive site ahead: what it means and the fix order
Chrome is not warning about your design. Google Safe Browsing found phishing or malware on your domain. Here is what the red screen means, how to find the cause, and how to get the flag removed without it coming back.
Rankings dropped after a redesign: why it happens and how to stop it
A new site launches, it looks better, and within a month search traffic has halved. It is one of the most common and most avoidable disasters in web work. Here are the seven causes, in order of frequency, how to find which one hit you, and the recovery order.
Security headers, explained by what our scanner sees
Five short lines in your server response stop most clickjacking, script injection and downgrade attacks. Most sites we scan send none of them. Here is what each one does, in plain terms, and how to add them on Apache, Nginx and Cloudflare.
Mobile-friendly websites: why it matters and how to check yours
Google ranks the mobile version of your site, not the desktop one, and most of your visitors are on a phone. Here is what mobile-friendly actually means in 2026, a five-minute check you can do yourself, and what the fixes involve.
Website backups: the rule of three, and how to test a restore
Everyone has a backup until they need one. The host's backups vanish with the account, the plugin backups fill the same disk, and nobody has ever restored one. Here is the rule that makes backups real, and the quarterly test that proves it.
Title tags and meta descriptions: writing the ones that get the click
The blue link and the grey text under it are the whole of your advert in Google. Most sites leave them to defaults. Here is what each one does, the lengths that survive, a way of writing them that takes two minutes per page, and the mistakes that lose the click.
Website redirecting to another site: the malware and the fix
Your site sends visitors to a spam page, a fake update or a gambling site, but it looks fine when you open it. That is a redirect hack, and it hides on purpose. Here is where the code lives, how to see it, and the order to remove it in.
You cannot edit your own website. Here is how to change that
Changing a headline should not need a developer. If it does, the site was built for the person who built it, not for you. Here is why that happens, what a site you can edit looks like, and the honest trade-offs of each option.
Local SEO: getting found on Google Maps and in near me searches
For any business that serves a place, the map results matter as much as the website, and they run on different rules. Here is what decides who appears in the map pack, the profile setup that takes an afternoon, and the monthly habits that keep you there.
WordPress security: the ten settings that stop most attacks
Most WordPress break-ins are not clever. They walk through the same few open doors. Here are the ten settings that close them, in the order they matter, with what each one takes and what it stops.
PHP 7 in 2026: what is at risk and how to move off it
PHP 7.1 stopped getting security fixes in December 2019. We still scan live business sites running it. Here is what that exposes, what breaks when you upgrade, and the order that gets you to a supported version without a dead site.
Google Search Console: the five reports worth reading every month
Search Console is free, it is Google telling you directly what it sees, and most owners have never opened it. You do not need all of it. Five reports, twenty minutes a month, catch nearly everything that goes wrong with a site in search.
Broken website: fix it, or rebuild it?
A white screen after an update, a form that stopped working, a layout that fell apart on phones. The first hour is about getting the site back. The next decision is whether this keeps happening. Here is both.
Website malware removal: what a proper cleanup includes and costs
Malware removal is sold at every price from fifty to five thousand, and the cheap version is often a scan and a delete. Here is what a proper cleanup includes, step by step, how long it takes, what drives the cost, and what should come with it.
Updating WordPress, plugins and themes without breaking the site
Updates are how security holes get closed, and they are also how a site breaks at the worst moment. Both are true. Here is the routine that keeps the first and prevents the second, including the one setup that makes updates boring.
Core Web Vitals in plain terms: LCP, INP, CLS and what moves them
Google measures three things about how your pages feel to real visitors, and uses them in ranking. The names are unfriendly; the ideas are simple. Here is what each one means, what a good number is, what usually causes a bad one, and how to fix it.
When your website no longer represents your business
The business grew, the clients got bigger, the work got better, and the website still shows what you did in the first year. Here is how that costs you, how to tell if it is happening, and what to keep when you fix it.
Japanese keyword hack: why Google shows Japanese text under your site
Your search results show Japanese titles for pages selling watches or handbags you have never heard of. That is a specific, common hack with a specific fix. Here is what it does, the one step most cleanups miss, and how to get the results out of Google.
Technical SEO checklist: sitemap, robots, canonicals, redirects
Technical SEO is the plumbing: things that are either right or wrong, that nobody sees, and that quietly decide whether Google can index and trust the site. Here is the checklist we run at every launch and every quarter, in plain language, with what each item prevents.
Adding features to an existing website without a rebuild
Online booking, payments, a members area, a second language, a shop. Most of these can be added to a healthy site in days. Here is what each one needs underneath, and the three cases where adding it is the wrong move.
'Not secure' warning or expired SSL certificate: the fix
A browser warning next to your name costs you visitors within minutes, and it is nearly always one of four things. Here is what each warning means, how to tell which one you have, and the fix, which is usually free and takes under an hour.
Website down? How to know before your customers do
Sites go down quietly: an expired card, a full disk, a bad update at midnight. Without monitoring, the first person to notice is a customer. Here is what uptime monitoring is, the five checks worth running, and what to do in the first ten minutes when the alert arrives.
Leaving Wix or Framer without losing your rankings
The site builder got you started, then capped you on speed, SEO and control. Moving off it is straightforward if you do the URL work first. Here is the checklist we use, and the one mistake that costs people their traffic.
Website firewall: what a WAF blocks, and Cloudflare versus plugins
A web application firewall is the single most useful thing you can put in front of a site, and most sites have none. Here is what a WAF actually does, the real difference between an edge firewall and a plugin, and the setup we use.
Schema markup for a business website: which types matter
Schema markup tells Google what your pages are in a language it reads without guessing: a business, an article, a product, a service. Most business sites have none. Here are the four or five types that matter, what each earns you, and how to add them without a plugin doing it badly.
WordPress, Next.js or a site builder: choosing the stack
Everyone has a favourite. We build on all of them and the honest answer is that the right choice depends on four things about your business, not on what is fashionable. Here is how we decide, with the trade-offs nobody puts on the sales page.
Contact form spam, and a website that sends spam: stopping both
Two problems share the word spam. Your form fills your inbox with junk, or your server is sending junk to other people and your real email is bouncing. One is a nuisance, the other is a security incident. Here is how to tell them apart and fix each one.
AI search and your website: what changes, and what does not
Google now answers many searches itself, at the top of the page, using AI. Clicks on informational searches have fallen. Business searches have not. Here is what actually changed in the traffic we see, what still brings customers, and the practical things worth doing about it.
Securing a Node.js or Laravel app: the checks we run before launch
Custom applications get hacked through a different set of doors than WordPress: debug pages, leaked environment files, unpatched packages, missing rate limits. Here is the list we run through before any Node.js or Laravel app goes live.
Outdated plugins: how attackers find your site, and the fix
A vulnerability in a popular plugin gets published, and within days scripts are testing every site on the internet for it. Yours included. Here is how that works, how to know which of your plugins are exposed, and a monthly routine that takes an hour.
Nothing matches that. Try another word, or show all.
Not sure where your site stands?
Paste the address. Security, speed, SEO and how old the tech is, in about ten seconds.
Tell us about the site.
A straight answer and a fixed quote, usually the same day.