Ki-Ki

Web foundations for SMEs

Online safety for campaigners and movements

Campaigns live in messy spaces. One week you are ignored. The next week somebody clips a post, the traffic jumps, and a small team is suddenly dealing with pile ons, scraping, and pressure.

I set up and harden neutral infrastructure for campaigns and movements so your website remains the calm centre of gravity. Static builds, Cloudflare tuned for abuse patterns, and logs that show what actually happened when things get noisy.

Campaign safety Traffic spikes and pile ons Cloudflare hardening Abuse aware config Evidence grade logs

For the wider public interest picture, see Advocacy, campaign, and public interest sites.

Who this fits

This is for campaigns that are serious about their issue, aware that not everyone will like them, and keen to avoid preventable own goals.

  • Local and regional campaigns

    Groups pushing for changes in transport, housing, health, environment, or local services who sometimes land in the press or on talk shows.

  • National pressure groups

    Organisations that run petitions, brief MPs, and coordinate supporters across the country, with regular bursts of online attention.

  • Peer led and lived experience campaigns

    Movements built around people directly affected by an issue, including disability, mental health, criminal justice, or social security.

  • Issue based coalitions

    Loose groups of organisations and individuals who need one stable site to anchor joint statements, resources, and updates.

If you are likely to face hostile traffic, trolling, or targeted nuisance behaviour, the answer is rarely more social posts. It is a stable site with sane protections.

What usually goes wrong for campaigners online

The risks are predictable. The timing is not. Most groups only think about this after something has already gone sideways.

Campaign sites that fall over at peak attention

A story lands, a big account shares your link, and traffic wipes out a fragile CMS or cheap hosting plan at the exact moment you needed it most.

Contact forms used as a harassment channel

Open forms and email addresses flooded with abuse, spam, and automated junk, making it harder to spot genuine supporters or media enquiries.

Leaky or overcomplicated sign up flows

Supporter data scattered across platforms with no clear understanding of who holds what, where, or with what protections.

No visibility on hostile traffic

You know you are being watched or brigaded, but can only see vague stats. There is no clear picture of who is hitting the site and how often.

Platform dependence

Campaigns that only exist as social accounts, fully at the mercy of bans, algorithm shifts, or coordinated reporting.

Security advice that assumes a full time team

Long checklists and enterprise style frameworks that nobody on the campaign has time to implement or maintain properly.

Online safety for campaigners starts with one boring priority. A stable, hardened site that is not the easiest target in the room.

How I support campaigners in practice

The site becomes the reliable reference point. Everything else can be noisy, the core infrastructure should not be.

  • Static builds that serve your content quickly and predictably, without public login pages or plugin jungles. See Secure static sites.
  • Cloudflare rules tuned for campaign realities, including spikes, scraping, and nuisance access patterns.
  • Sensible controls on forms and inputs to limit spam and abuse without making life impossible for genuine supporters.
  • Evidence grade logging so you can see when a pile on started, what actually hit the site, and how it changed over time. See Evidence grade logging.
  • Optional lawful fingerprinting for higher risk campaigns facing institutional or targeted monitoring. See Fingerprinting and Edge Tracker.

Helping mixed skill teams stay on top of things

Campaign teams change. Volunteers cycle in and out, roles shift, and nobody has three spare hours a day for security admin. I design the foundations so new people can be brought in without breaking everything.

That includes short, plain language notes for coordinators and basic playbooks for what to do when something kicks off, grounded in how your site and Cloudflare have actually been set up.

Reducing digital noise so people can think

Some hostility is unavoidable. What you can reduce is the amount of friction your own infrastructure adds to the pile.

When the foundations are stable, you are not also dealing with a broken site, mysterious errors, or vanishing emails at the same time as a public row or a hostile media cycle. That gives campaigners more space to make good decisions under pressure.

Online safety is not only about blocking threats. It is also about removing pointless stress from the people doing the work.

Boundaries for campaign work

Clear roles keep everyone safer when politics and emotions are running high.

  • Ki-Ki provides technical services only. I do not manage your social media, moderate your communities, or act as a crisis communications adviser.
  • I do not draft or upload allegation content or naming and shaming pages. Your campaign messaging and legal position are your responsibility.
  • Any copy I help with is limited to neutral onboarding content and only goes live with your written approval.
  • You must not imply that Ki-Ki endorses your political position, campaign targets, or tactics.
  • If a campaign is clearly drifting into unlawful activity or unmanaged serious risk, I will say so and may decline or end the engagement.

The full position sits in the Neutral infrastructure policy, alongside the Terms of use and Privacy policy.

Questions campaigners usually ask

Can you help in the middle of a pile on?

Often yes. I can help stabilise the site, tighten Cloudflare rules, and get logging into a better state. I cannot run your social channels or take over public communications, but I can stop the infrastructure from adding to the chaos.

Will this stop all abuse and trolling?

No. Nobody can. What this work can do is reduce cheap attack routes, keep your primary site functioning, and give you clearer data about what is happening.

Do we need lawful fingerprinting for our campaign?

Not always. Many campaigns only need static sites, Cloudflare, and basic logs. Fingerprinting is reserved for projects facing repeated targeted or institutional attention and is never switched on automatically.

Can you help us pick platforms and tools?

I can give technical views on how different tools behave, how they integrate with your site, and where common pitfalls lie. Final choices about campaign tools and vendors remain with you.

What about the personal safety of named organisers?

I can advise on basic digital hygiene and site side exposure, but personal safety planning should involve specialist advice and, where needed, unions, employers, or police.

We are only a handful of people. Is it worth doing all this?

If your work is likely to attract hostility, it is better to put simple protections in place early than to rebuild in a rush later. The focus is on small, high value changes that you can actually live with.

Start the conversation

Set out what your campaign is about, where the pressure is likely to come from, and what currently feels fragile. I will tell you plainly what is worth fixing now and what can wait.

No mailing lists. NDA available for sensitive projects.