How to vet an AI vendor's sales pitch: 7 questions that separate signal from hype
August 12, 2026
How to vet an AI vendor's sales pitch: 7 questions that separate signal from hype
Back to home
Blog
Practical writing on WordPress security, AI agents, and SMB cybersecurity.
Security & AI insights for SMBs
No fluff. Unsubscribe any time.
WordPress security alerts, AI agent use cases that actually pay back, and tools I use with real clients — delivered to your inbox.
Local SEO for service businesses in San Diego: the ranking factors that actually move the needle in 2026
August 12, 2026
Local SEO for service businesses in San Diego: the ranking factors that actually move the needle in 2026
AI voice agents for service businesses: where they actually work in 2026 (and where they still fail)
August 12, 2026
AI voice agents for service businesses: where they actually work in 2026 (and where they still fail)
Password managers for small business teams: which one, how to roll it out, what your team will resist
August 12, 2026
Password managers for small business teams: which one, how to roll it out, what your team will resist
Subdomain takeover: the DNS attack that hijacks your brand overnight
August 12, 2026
Subdomain takeover: the DNS attack that hijacks your brand overnight
HTTPS and SSL certificates for small business: what happens when yours expires (and how to make sure it never does)
August 12, 2026
HTTPS and SSL certificates for small business: what happens when yours expires (and how to make sure it never does)
Cybersecurity insurance for small business: what it costs, what it covers, and what carriers won't pay for anymore
August 12, 2026
Cybersecurity insurance for small business: what it costs, what it covers, and what carriers won't pay for anymore
Website accessibility (ADA) lawsuits: what small business owners actually need to know in 2026
August 12, 2026
Website accessibility (ADA) lawsuits: what small business owners actually need to know in 2026
Why your small business website is losing leads (and the fixes that take under a week)
July 28, 2026
Why your small business website is losing leads (and the fixes that take under a week)
Next.js vs WordPress for your small business website: a plain-English decision guide
July 28, 2026
Next.js vs WordPress for your small business website: a plain-English decision guide
Three AI agent workflows for service businesses that pay for themselves in 60 days
July 28, 2026
Three AI agent workflows for service businesses that pay for themselves in 60 days
How to write a system prompt for your AI agent that actually controls its behavior
July 28, 2026
How to write a system prompt for your AI agent that actually controls its behavior
What to do when your business email domain gets blacklisted
July 28, 2026
What to do when your business email domain gets blacklisted
How to back up WordPress properly (and why most backup plugins leave you exposed)
July 28, 2026
How to back up WordPress properly (and why most backup plugins leave you exposed)
How to choose a WordPress host that doesn't undermine your security
July 28, 2026
How to choose a WordPress host that doesn't undermine your security
WordPress two-factor authentication: the 10-minute setup that stops brute-force attacks
July 28, 2026
WordPress two-factor authentication: the 10-minute setup that stops brute-force attacks
I built skills you can buy with USDC — no account, no checkout
July 9, 2026
I built skills you can buy with USDC — no account, no checkout
WordPress security for agencies: how to protect 20+ client sites without burning out
June 22, 2026
WordPress security for agencies: how to protect 20+ client sites without burning out
The AI handoff: how to escalate from agent to human without losing the customer
June 22, 2026
The AI handoff: how to escalate from agent to human without losing the customer
How to build a knowledge base your AI agent can actually use
June 22, 2026
How to build a knowledge base your AI agent can actually use
What happens when an AI agent gets it wrong: guardrails, fallbacks, and recovery
June 22, 2026
What happens when an AI agent gets it wrong: guardrails, fallbacks, and recovery
How to measure ROI on an AI agent before you build it (and after)
June 22, 2026
How to measure ROI on an AI agent before you build it (and after)
AI agent vs chatbot vs live chat: a decision guide for small business owners
June 22, 2026
AI agent vs chatbot vs live chat: a decision guide for small business owners
AI agents and customer data: what actually happens to information your customers share
June 22, 2026
AI agents and customer data: what actually happens to information your customers share
WordPress plugin vulnerabilities: how to know when a plugin is a liability
June 22, 2026
WordPress plugin vulnerabilities: how to know when a plugin is a liability
The real cost of a hacked small business website (beyond the cleanup bill)
June 22, 2026
The real cost of a hacked small business website (beyond the cleanup bill)
How to get Google's Deceptive Site warning removed: a step-by-step guide
June 22, 2026
How to get Google's Deceptive Site warning removed: a step-by-step guide
WooCommerce security checklist: what changes when customer money is involved
June 22, 2026
WooCommerce security checklist: what changes when customer money is involved
Wordfence vs Sucuri vs Solid Security: which WordPress security plugin actually wins in 2026
June 22, 2026
Wordfence vs Sucuri vs Solid Security: which WordPress security plugin actually wins in 2026
WordPress security in 2026: the patches, plugins, and habits that actually matter
June 16, 2026
WordPress security in 2026: the patches, plugins, and habits that actually matter
Building your first AI ops agent: a step-by-step walkthrough on a real workflow
June 15, 2026
Building your first AI ops agent: a step-by-step walkthrough on a real workflow
What your hosting provider's free security scan actually catches (and what it misses)
June 14, 2026
What your hosting provider's free security scan actually catches — and what it quietly misses.
Hiring a freelance AI consultant: what to ask, what to avoid
June 13, 2026
Hiring a freelance AI consultant: what to ask, what to avoid
What a self-healing WordPress backdoor actually looks like
June 12, 2026
What a self-healing WordPress backdoor actually looks like
How we build an AI customer support agent: the 2-week pilot, end to end
June 11, 2026
How we build an AI customer support agent: the 2-week pilot, end to end
AI agents for small business: where they actually work and where they don't
June 10, 2026
AI agents for small business: where they actually work and where they don't
SPF, DKIM, and DMARC: a plain-English guide for small business owners
June 9, 2026
SPF, DKIM, and DMARC: a plain-English guide for small business owners
Small business cybersecurity in San Diego: what actually matters under 50 employees
June 8, 2026
Small business cybersecurity in San Diego: what actually matters under 50 employees
The WordPress security hardening checklist we use after every malware removal
June 7, 2026
The WordPress security hardening checklist we use after every malware removal
WordPress malware removal: what it actually costs and what's in the price
June 6, 2026
WordPress malware removal: what it actually costs and what's in the price
How to tell if your WordPress site has been hacked (and what to do in the first hour)
June 5, 2026
What to do in the first hour if you think your WordPress site is compromised — the signals, the don'ts, and minute-by-minute triage.