Cloudflare & web security

Securing the future: WebControl insights

Naming Conventions for Cloudflare WAF Rules (and Why Ours Needed Fixing) (Cloudflare WAF)

Naming Conventions for Cloudflare WAF Rules (and Why Ours Needed Fixing)

Here’s a question that sounds boring until it’s 11pm and a customer can’t get into your website: what’s that rule called, and what does it actually do? When Cloudflare blocks

Read More

Is Your Host Running an End-of-Life PHP Version? (WordPress)

Is Your Host Running an End-of-Life PHP Version?

Backups That Actually Work: The 3-2-1 Rule for Small Business Websites (Backups)

Backups That Actually Work: The 3-2-1 Rule for Small Business Websites

Cloudflare Turnstile vs reCAPTCHA for Small Business Forms (Spam protection)

Cloudflare Turnstile vs reCAPTCHA for Small Business Forms

Why Your WordPress Login Page Shouldn’t Be Public (Cloudflare WAF)

Why Your WordPress Login Page Shouldn’t Be Public

Our Contact Form Was Silently Rejecting Customers (Case study)

Our Contact Form Was Silently Rejecting Customers

PHP2Shell: What It Is, and How to Protect Your WordPress Site (Security alert)

PHP2Shell: What It Is, and How to Protect Your WordPress Site

Fewer Plugins, Safer Site: Why We Cut Our Plugin List (WordPress)

Fewer Plugins, Safer Site: Why We Cut Our Plugin List

Staging Sites: Test Changes Without Breaking Your Live Site (WordPress)

Staging Sites: Test Changes Without Breaking Your Live Site

Full (Strict) SSL and Authenticated Origin Pulls in Plain English (Cloudflare SSL)

Full (Strict) SSL and Authenticated Origin Pulls in Plain English