BLOG

Notes on architecture, WordPress security, SQL and the craft of development - written after the work, not before it.

BotBlocker vs Cloudflare: why a generic shield fails WordPress

Cloudflare looks like a universal shield - until bots learn its patterns. Why a specialized WAF protects WordPress better. Read more 10 March 2026

The best WordPress security plugin: what actually matters

What actually matters in a WordPress security plugin: early filtering, real CAPTCHAs, 2FA and performance. Read more 23 February 2026

WordPress security plugin: why I built my own

Why I wrote my own WordPress security plugin after ten years of brute-force attacks, fake crawlers and overloaded logs. Read more 23 February 2026

BotBlocker Security: a WAF that starts before WordPress

BotBlocker Security is a WAF and anti-bot layer that starts before WordPress: early filtering, IP checks, CAPTCHA and logs. Read more 22 February 2026

Production hell: how a missing spec burns a project

Fifteen hours of launch day because nobody approved a spec. Why a technical specification saves the project and the team. Read more 21 February 2026

Password manager: five years with Bitwarden

Five years with Bitwarden: free, open source, self-hostable and safe across devices. Why a password manager is non-negotiable. Read more