Skip to main content
Insights

Security

8 articles
Security & privacySep 9, 20265 min read

The security review we run on a website we inherit

Every few months a business comes to us with a website that somebody else built, often years ago, and a simple question: is it in good shape? Sometimes the question is prompted by a story in the news....

Frontend & SDXAug 28, 20265 min read

Forms that are helpful, accessible, and spam-resistant

For a lot of businesses, the most important thing on the entire website is a form. The contact form, the quote request, the sign-up. It is the point where an anonymous visitor decides to raise their h...

Security & privacyJul 28, 20265 min read

The password habits we recommend to every client team

Passwords are one of those topics where everyone quietly suspects they are doing it wrong, and almost nobody enjoys talking about it. So let us take the judgment out of it right away. The habits most ...

Security & privacyJul 13, 20265 min read

How security patches reach your site

Every so often a client forwards us a news article about a security vulnerability and asks whether their site is affected. It is one of our favorite messages to answer, because the answer is almost al...

Security & privacyJul 2, 20265 min read

How staging stays safe: scrubbed data and no accidental emails

Behind every live website there is a quieter family of copies. A developer runs one on their own machine to build a new feature. A staging environment holds the next release so it can be reviewed befo...

Security & privacyJun 18, 20265 min read

How we verify backups: retention, restore drills, and proof

There is a sentence we repeat internally whenever backups come up: a backup is only real once it has been restored somewhere. Until that moment it is a file you hope is complete, produced by a job you...

Frontend & SDXJun 9, 20265 min read

A web application firewall your visitors never notice

A web application firewall is a filter that sits in front of a website and inspects every request before the site ever sees it. Requests that look like attack attempts get stopped at the door; everyth...

PerformanceApr 20, 20265 min read

Keeping automated traffic in its lane

A meaningful share of the traffic reaching any public website is not people. It is software: search engine crawlers building their index, feed readers checking for updates, uptime monitors, link previ...

Have a Drupal question your team is trying to think through?

If you are weighing a rebuild, a migration, a support decision, or a technical direction change, we are happy to talk it through.