Journal

Websites explained: notes on building things properly

Design, accessibility, performance, security, SEO and AI search, written for the people who run a website rather than the people who build it.

A shield with a check mark, surrounded by four labels: updates, backups, access and plugins.
Security

Website security, explained without the jargon

Website security is layers, not a single product. What each layer does, and which questions to ask whoever looks after your site.

An ageing browser window marked with seven numbered warning points
WordPress

Seven signs your WordPress site is overdue a rebuild

Slow on a phone, impossible to edit, a plugin list nobody reviews. The seven signs that decide between a WordPress rebuild and a few targeted fixes.

A page half scanned by a tool, with an eye checking the part it misses
Accessibility

What automated accessibility tools cannot see

Automated accessibility tools catch about a third of WCAG failures. Here is the two-hour manual check that finds the rest.

Tangled nested boxes becoming one clean page layout
WordPress

Why WebRen does not build sites in Elementor

Elementor and other page builders mean four times the markup, an accessibility ceiling you cannot raise, and a license you cannot leave.

Nested security layers around a padlock, five numbered points
Security

Five habits that keep a WordPress site secure

Five habits that keep a WordPress site secure: updates, accounts, backups, headers and vetted plugins. The everyday routine that does most of the work.