A nonprofit’s WordPress site moves from a shared server with 34 other sites to a dedicated VPS. Along the way: a server stack built from scratch, a two-major-version PHP jump with zero fatal errors, and the painstaking work of proving a staging environment is actually safe before trusting it with production.
Read Details
A plugin audit uncovers 395 MB of database bloat, 88 plugins, orphaned integrations dating back three years, and a shared server at 95% capacity. Here’s what a thorough pre-migration assessment actually looks like.
Read Details
A routine WordPress audit uncovered full-site backups publicly downloadable for six months, a contact form routing submissions to a stranger, phantom login entries, and email authentication that looked fine until it wasn’t.
Read Details
A nonprofit’s donation form became a testing ground for stolen credit cards. What looked like a sophisticated bot attack turned out to be one person running scripts after dinner. Here’s how I shut them down.
Read Details
A wedding photographer’s contact form was drowning in spam despite captcha protection. The investigation revealed something more sophisticated: paid human solvers and residential proxy networks that make spam look legitimate. Here’s how we stopped it.
Read Details
A nonprofit’s emails began failing authentication, triggering warnings of a possible compromise. The investigation revealed a long-standing SPF omission and a well-intentioned workaround that caused DMARC failures.
Read Details
A Shopify store owner’s friend gets redirected to a scareware page. By the time I’m called in, the suspected app has been uninstalled and the only witness who can reproduce the issue accidentally infects his own Mac. A forensic investigation into what happens when the evidence is destroyed before you arrive.
Read Details