THE JOURNAL
Notes on building, shipping & securing the web.
FEATURED · AI
AI Support Agent vs Chatbot: Which Fits Your Business?
Explore how AI support agents and chatbots differ in handling customer support tasks, from scripted responses to connected actions that resolve issues effectively.
Daniel Reyes
Oct 14, 2026 · 11 min read
Security · 11 min
WordPress Security Scan Checklist for Your Site
This checklist helps you prioritize findings from external scans to active enumeration, ensuring you record evidence and rank risks for your WordPress site.
Leo Tanaka · Oct 05, 2026
Security · 19 min
WordPress Security Audit Checklist for Businesses
This checklist guides businesses through inventory, access control, code review, backups, and incident response to secure WordPress sites with clear accountability.
Leo Tanaka · Oct 02, 2026
Security · 19 min
How to Remove Malware from a WordPress Site
This guide walks you through containing infections, preserving evidence, and cleaning your WordPress site methodically to prevent recurring malware issues.
Leo Tanaka · Sep 30, 2026
Security · 19 min
How to Restore Hacked WordPress Files Safely
This guide walks you through restoring hacked WordPress files without losing valuable data, emphasizing evidence preservation and controlled recovery methods.
Leo Tanaka · Sep 29, 2026
Security · 6 min
The WordPress security baseline we apply to every site
Twelve controls that stop the vast majority of attacks we see in our care plans.
Maya Okafor · Jul 15, 2026
Security · 5 min
GDPR for website owners: the security side most teams miss
Cookie banners get the attention, but GDPR also expects appropriate security, data minimization and a breach plan. What that means in practice.
Maya Okafor · Apr 21, 2026
Security · 5 min
Uptime monitoring that catches real problems without alert fatigue
A monitor that pages you for every blip gets muted within a month. How we choose checks, thresholds and escalation paths that stay trusted.
Leo Tanaka · Feb 10, 2026
Security · 5 min
Secrets management for small web teams
API keys in repositories and passwords in chat threads are how many breaches start. A lightweight approach that fits a team of five.
Leo Tanaka · Dec 16, 2025
Security · 5 min
Admin access hygiene: two-factor, roles and offboarding
Stolen and forgotten accounts cause more breaches than exotic exploits. A practical process for who gets access, how, and for how long.
Maya Okafor · Oct 21, 2025
Security · 5 min
Penetration test or security audit: which one you actually need
They are often sold interchangeably, but they answer different questions. How to choose, scope and budget for each.
Maya Okafor · Aug 26, 2025
One email a month. Only the good stuff.
Field notes from real client projects. No spam.