Blog · all articles
The articles that apply to the websites these organizations run, in one place. Follow them with the RSS feed for professional services, or read what LFW does for professional services.
Every website has four plain-text files no visitor ever sees: robots.txt, sitemap.xml, security.txt, and llms.txt. Search engines, security scanners, and AI agents read them on every visit.
What each one is, who actually reads it, what to put in it, and the one rule that keeps all of them safe. We went through this list on our own site this week and found gaps, so the free audit now checks for them.
The media library is not a private folder, in WordPress or anywhere else. What that means for the drafts and packets that get uploaded to grab a link, why switching the API off is the wrong fix, and how to mark a file private without breaking anything.
Everything in this article is public. It is what a curious visitor, a vendor sizing you up, a journalist, or a scanner run by someone less friendly can read about your website in about a minute.
The free audit is that minute, run on your behalf. This is what it looks at, in the order a stranger would.
Labels, placeholders, no-reload submissions, confirmation messages, and the delivery problems that start after someone clicks submit.
Placeholder-only forms look clean in a mockup and fall apart in use. Why the label has to stay visible, what placeholders are actually good at, and what a screen reader hears when the label is missing.
CAPTCHAs tax the humans and barely slow the professionals. The quiet alternative: a honeypot, a clock, a rate limit, and a content check that flags instead of blocking, all on the server where the visitor never sees any of it.
A form's error messages are the only conversation it ever has. What a useful error says, where it belongs on the page, when it should speak up, and who has to be able to perceive it.
Password resets, spam folders, domain trust, and why important website emails should never look suspicious to inbox providers.
Color contrast, image headers, link behavior, and the small interface choices that determine whether a page works for everyone.