We've been hacked: what to do in the first hour
Hacked or think you might be? The first five things to do, what to avoid, and who you need to tell, in plain English.
guides
Plain-English guides
Straight answers to the server and security problems small businesses actually run into. What to do, in what order, and when to call someone.
Emergencies
Do I need to report a data breach to the ICO?
When a data breach has to be reported to the ICO, the 72-hour deadline, how to report, and what to do if you're not sure. In plain English.
Old and inherited servers
CentOS 7 is out of support: what now?
CentOS 7 stopped getting security updates in June 2024. What that means for your business, and your options, in plain English.
My developer left and nobody can access the server
Your developer has gone and nobody has the logins. How to get back control of your server, hosting account and domain, in the right order.
Costs
Why is my AWS bill so high?
The usual reasons small businesses pay too much for AWS, how to spot each one, and what to do about it. Plain English, with real prices.
Security
I built my app with AI: is it safe to launch?
Apps built with Lovable, Bolt or Replit can be great. The security gaps they often have, and how to check yours before customers use it.
API keys in your code: why it matters and how to fix it
Keys left in code are a common way businesses get breached. How to find them, what to do first, and how to stop it happening again.
What is Cyber Essentials and do I need it?
Cyber Essentials in plain English: what it checks, what it costs, what changed in 2026, and whether your business needs it.