Knowledge Base
Security & Privacy
-
Certificates and patching
- SSL certificates now expire much sooner: what changes and what to do
- Keeping servers patched to avoid vulnerabilities
- WordPress plugins and Drupal modules: choosing, updating, and removing them safely
- PHP2Shell (CVE-2026-109618 and CVE-2026-109619): what it is and what to do
-
Access and protection
- Multi-factor sign-in and passkeys for your CMS, AWS, and hosting accounts
- Web application firewalls, DDoS protection, and bot traffic, including AI crawlers
- Least-privilege access and offboarding for websites and cloud accounts
- Email authentication for your domain: SPF, DKIM, and DMARC
- Adding a new service that sends email as your domain
-
Resilience and privacy
- Backups and ransomware recovery: making sure you can actually restore
- Privacy on your website: cookies, analytics, forms, and data retention
- If your site is hacked: what to do in the first hour