Working notes, not marketing.
What we actually see when we test, build and run these systems — written the way we'd explain it to you on a call. No gated PDFs, no scare tactics, and no numbers we can't stand behind.
Everything we've published.
Drafted with AI assistance, then reviewed and signed off by the founder named on each piece. If something here is wrong, tell us and we'll correct it in public.
- Security
What a penetration test actually finds on a small business website
Nobody clever is targeting your plumbing company. Someone patient with a scanner is — and they are looking for the same short list of mistakes on every site. Here is that list, what each one costs you, and three checks you can run yourself this afternoon.
Read it - Security
The five things we check first on any website
Before we quote a penetration test, we run a fifteen-minute pass that costs nothing and finds most of what matters. Here is exactly what we look at, in order, and the free tools you can use to run the same checks yourself today.
Read it - ERPNext
ERPNext or a stack of subscriptions?
If your monthly software bill is a list of logins that barely talk to each other, this is for you. What ERPNext actually replaces, the real economics of owning versus renting, and where it is genuinely worse — said plainly by a team that runs it in production.
Read it - Security
What a SOC 2 auditor actually wants from your penetration test
SOC 2 does not technically require a penetration test. Nearly every auditor and enterprise customer asks for one anyway. Here is what the report actually needs to contain, what scope and retest mean in practice, and the honest boundary on what we are — and are not — licensed to sign.
Read it - Websites
How much should a small business website actually cost?
Quotes for the same five-page site run from $500 to $50,000, and most owners have no honest way to tell which one is fair. Here are the real market bands, what you actually get in each, and why the cheapest quote is usually the most expensive.
Read it - Websites
Seven signs your website needs a redesign, not just a refresh
Not a feeling — a checklist. Every sign here is something you can test yourself in under five minutes, without logging in to anything, and each one is quietly costing you customers while you read this.
Read it - How we work
How to hire a web developer you have never met
We are an offshore firm that asks American small businesses to send money to people they will never shake hands with. Here is exactly how we would vet us — what to verify, how to pay, and the red flags we would run from ourselves.
Read it - Get Found
Why isn't my website showing up on Google?
There are only five reasons a small-business website is invisible in search, and every one of them is checkable in minutes. Here they are, in the order you should check them — with the exact checks, and honest timelines for the fixes.
Read it - Get Found
The local SEO checklist for small businesses
Most local search advice exists to sell you software. Here is the actual list — the Business Profile done properly, consistent listings, reviews, and the handful of website changes that matter — plus the popular tactics you should skip.
Read it - Get Found
You can't improve what you don't measure: GA4 and call tracking for small businesses
Most small-business websites have analytics installed and measuring nothing that matters. Four events tell you almost everything — forms, calls, bookings, directions. Here is how to set them up, and how to read them in fifteen minutes a month.
Read it
Only things we've done.
We write about work we've actually done: application security testing, the way small-business websites break in production, why a site isn't showing up on Google, and running ERPNext and Frappe for real users.
We don't publish client details, client data or findings from any engagement — not anonymised, not "a client we worked with". Everything here is either general technique or something from our own systems.
Want a specific question answered?
If you've got a question about your own site — why it's slow, whether a finding is real, what a quote should include — send it to us. We answer plainly, and if it's useful to other people we'll write it up here.
Rather just talk it through?
Twenty minutes with the engineer who'd do the work. You get a straight answer — including an honest "you don't need us for this" when that's the truth.