Guides
In-depth guides
Longer walkthroughs for specific setups: real screenshots, code you can paste and the reason behind every step. The short fix page for each check lives under Learn.
All guides
385 guides, page 12 of 33.
- Security10 min read
TLS 1.2 vs 1.3: what changed, and turning TLS 1.0 and 1.1 off
TLS 1.3 is faster and simpler than TLS 1.2, and both are safe when configured well; TLS 1.0 and 1.1 are not. The differences, a 1.2-plus-1.3 config for every server, and how to prove the old versions are off.Updated 27 Sept 2026 - WordPress12 min read
Too many plugins in WordPress? Measure what each one costs
How many WordPress plugins is too many depends on what each one loads, not on the count. Measure every plugin's cost per page, then remove, replace or restrict the heavy ones.Updated 27 Sept 2026 - Speed13 min read
Total Blocking Time: find the long tasks and cut main-thread work
Total Blocking Time adds up how long JavaScript froze the page during load. Find the long tasks behind it, then remove, defer, split and offload the work until TBT is under 200 ms.Updated 27 Sept 2026 - Accessibility12 min read
Touch target size: the 24 px WCAG minimum, the 44-48 px guideline and the exceptions
Touch targets need to be at least 24 × 24 CSS px under WCAG 2.2, and 44 to 48 px is comfortable. The rule, its exceptions, what "clickable elements too close together" means, and the CSS that fixes it.Updated 27 Sept 2026 - Speed22 min read
TTFB (time to first byte): what it is, what is good and how to fix it
TTFB (time to first byte) is the wait between requesting a page and the first byte of the answer. What it includes, what a good TTFB is, how to measure it and how to fix a slow server.Updated 27 Sept 2026 - SEO13 min read
Website launch checklist: 30 checks before a new site goes live
A website launch checklist of 30 checks for a new site or redesign, from noindex and redirects to forms and backups, with how to verify each one and a launch-day sequence to copy.Updated 27 Sept 2026 - Checklists13 min read
Website redesign SEO: benchmark, protect and compare so rankings survive
Website redesign SEO in three steps: benchmark your key pages before design starts, gate the new templates on staging, and compare lab and field data at 7 and 28 days after launch.Updated 27 Sept 2026 - Security11 min read
WordPress backup: a plan you have actually test-restored
To back up a WordPress site, copy the database and wp-content off the server on a schedule, keep the copies out of the web root, and prove they work with a restore every quarter.Updated 27 Sept 2026 - Security13 min read
WordPress hacked? Clean it and keep it clean, step by step
WordPress hacked? Contain it, preserve the evidence, find the way in, reinstall clean, verify what Google sees, harden and request a review, with the wp-cli commands for each step.Updated 27 Sept 2026 - WordPress11 min read
WordPress user enumeration: stop it and replace "admin"
WordPress user enumeration lets anyone list your login names through /?author=1, the REST API and the login form. Close each leak and replace the "admin" user safely.Updated 27 Sept 2026 - WordPress12 min read
WordPress vulnerabilities: find and replace risky plugins
Almost every WordPress vulnerability is in a plugin or theme. Find the vulnerable, abandoned and closed ones on your site, judge a replacement and swap it safely.Updated 27 Sept 2026 - Security10 min read
X-Frame-Options, frame-ancestors and nosniff: stop clickjacking
X-Frame-Options and CSP frame-ancestors stop other sites framing your pages for clickjacking; X-Content-Type-Options nosniff stops MIME sniffing. What to send and where to set it.Updated 27 Sept 2026
Guides tell you how. Your report tells you what.
Run a free report to see which of these guides apply to your site.