Website foundations
Core checks that keep your site findable, contactable, and trustworthy once the homepage is live.
Plain English guides on domains, email, websites, Cloudflare, logging, analytics, and governance, written for SMEs, charities, and community projects.
These articles come from real work, not theory. Each one is designed so a manager, trustee, or founder can read it once, understand the risk, and decide what to do next.
A short selection of recent pieces. Start with whichever matches the problem on your desk today.
How a simple browser based PGP form lets people send you encrypted messages, reduces what can leak in a breach, and gives whistleblowers a safer way to reach you.
What makes logs usable as evidence, how they support you in complaints and investigations, and why small organisations can get most of the benefit with simple tools.
What Cloudflare actually does, which controls matter for small sites, and how to set it up so you gain protection without breaking logins, forms, or emails.
A structure for privacy wording that matches what you actually do in practice, avoids empty claims, and gives you less to fix when someone reads it closely.
Common problems that block enquiries or damage trust, from broken contact routes to odd security warnings, with a checklist you can work through in an hour.
How a small text file shapes what search engines and other crawlers see, the mistakes that hide whole sections of a site, and a safe starting template.
Each theme collects short, focused pieces. You can dip into one area, fix the obvious problems, and move on without turning it into a full project.
Core checks that keep your site findable, contactable, and trustworthy once the homepage is live.
Using Cloudflare to add a sensible layer of protection around your site without turning it into something only a specialist can change.
Practical steps that reduce what can leak in a breach and give you better evidence when a complaint or investigation reaches your door.
Wording, policies, and simple data handling decisions that lower your risk when someone reads what you publish or exercises their rights.
Quiet adjustments that help people and search engines reach the right content without flooding your site with extra tools.
Use these guides to sense check what you already have. You do not need to understand every technical term. If something sounds off for your setup, make a note and ask whoever looks after your site or email.
Treat this as a way to get up to speed on web foundations without sitting through a sales pitch. If you are responsible for risk, safeguarding, or oversight, these articles are written with you in mind.
If you read something here and realise your current setup is fragile or confusing, you can hand over the messy list and let me map it properly.