SOLUTIONSRank Math PRO and UpdraftPlus Breaches: What to Do Now
Rank Math PRO 3.0.123 shipped a backdoor and TeamUpdraft's customer database was breached. Who is affected, warning signs and how to clean up WordPress.
Read articleBlog
Engineering notes for people who build.
Practical guides from the Naarvix engineering team on Next.js, web and mobile app development, technical SEO, AEO and AI search, software engineering and hiring.
Latest articles
October 2026 Supply Chain Attacks: npm, PyPI and GitHub
LiteLLM, tensorlake, @subql/common and GhostAction: what was compromised in October 2026, who is affected and a checklist to protect your builds and secrets.
Read articleGoogle AI Mode Links Update: What Site Owners Should Do
Google's October 2026 changes add more links and an official-sites test to AI Mode and AI Overviews. What changed, what didn't and how to earn the click.
Read articleNext.js October 2026 Security Update: Upgrade to 16.4.1
Next.js fixed two critical RCE flaws and a Server Actions DoS on 14 October 2026. Who is affected, which versions are safe and how to upgrade.
Read articleHow Much Does a Website Cost in 2026? Prices Explained
What a small business website costs in 2026: build prices by page count, redesigns, ongoing costs, what drives the price up and how to avoid overpaying.
Read articleHow to Outsource Software Development to India (2026 Guide)
A practical guide to outsourcing software, web or app development to India: engagement models, choosing a partner, contracts, IP, time zones and red flags.
Read articleAgent Skills, Open Responses and the New AI Agent Standards
The Agentic AI Foundation added Agent Skills, Open Responses, OpenEnv and OpenSandbox. What each one is and what it means if you are building AI features.
Read articlePHP2Shell: Critical PHP Flaws and How to Patch Your Site
PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets attackers run code on PHP servers. Fixed versions, how to check WordPress hosting and what to do now.
Read articleAI Agents Hacked 100+ Websites: How to Protect Yours
One attacker used AI agents to breach 100+ company websites for about $5,000. What the agents looked for and a practical checklist to protect your site.
Read articleOctober 2026 Security Roundup: What to Patch Now
October 2026's biggest security fixes: a record Patch Tuesday, the PHP2Shell flaws, a CVSS 10 GitLab bug and exploited edge devices, with a patch list.
Read articleAEO and GEO: How to Get Cited by AI Search
What AEO and GEO mean, how AI assistants choose sources, and a checklist to help ChatGPT, Perplexity, Claude and Google AI Overviews cite your site.
Read articleTechnical SEO Checklist for Next.js Websites
A developer's technical SEO checklist for Next.js: rendering, metadata, canonicals, sitemaps, robots, structured data, Core Web Vitals and internal links.
Read articleNext.js vs WordPress for Business Websites
Next.js vs WordPress for business websites: editing, performance, SEO, security, maintenance and when a headless CMS makes sense.
Read articleCore Web Vitals Explained: LCP, INP and CLS
What LCP, INP and CLS measure, the thresholds for a good Core Web Vitals score, and the most effective fixes for each metric.
Read articleFlutter vs React Native: Which Should You Choose?
How Flutter and React Native differ in language, rendering, ecosystem and team fit, and how to choose the right cross-platform framework for your mobile app.
Read articleHow to Build an Online Tutoring Platform
Features, architecture and product decisions behind a 1-to-1 online tutoring platform, from tutor discovery to live classrooms, from building HomieTutor.
Read articlePrevent Duplicate Form Submissions with Idempotency Keys
Why retries and double clicks create duplicate records and emails, and how to make submissions idempotent with a client key, unique index and fingerprint.
Read articleHow to Scope a Useful First Release (MVP)
A small release should answer a big question. A practical method for scoping an MVP around one assumption and one complete user journey.
Read articleHow to Write a Hiring Brief for a Better Shortlist
Align the role, evaluation criteria and interview process before sourcing begins: a practical hiring brief guide for any role.
Read articleBrowse by topic
Web Development
Practical guides on building fast, maintainable business websites and web applications with Next.js, React and WordPress.
SEO & AI Search
Technical SEO, answer engine optimisation (AEO) and generative engine optimisation (GEO): how to be found by search engines and AI assistants.
App Development
Choosing frameworks, planning releases and building mobile apps for iOS and Android.
Software Engineering
Engineering patterns we use in production: reliability, data integrity and building systems that are easy to operate.
Product Building
Scoping, building and launching software products, including lessons from building our own platform, HomieTutor.
Security
Plain-English breakdowns of the latest vulnerabilities and attacks, and what website and business owners should patch or change.
- Rank Math PRO and UpdraftPlus Breaches: What to Do Now
- October 2026 Supply Chain Attacks: npm, PyPI and GitHub
- Next.js October 2026 Security Update: Upgrade to 16.4.1
- PHP2Shell: Critical PHP Flaws and How to Patch Your Site
- AI Agents Hacked 100+ Websites: How to Protect Yours
- October 2026 Security Roundup: What to Patch Now
Hiring & Talent
Writing better role briefs, evaluating candidates and building teams that can run what you ship.