Author
Shashank Ayyar
Co-Founder
Shashank co-founded NoDrama and is co-founder of Pangolin Marketing. He has spent eighteen years as a consultant and head of marketing to startups and growth-stage companies, work that centred on positioning and demand generation. He writes about positioning, buyer trust, and how businesses should evaluate whoever maintains their site.
Written by Shashank
WCAG conformance: four ways it quietly lapses after an audit
For a nonprofit that receives HHS funding, the Section 504 rule sets WCAG 2.1 Level AA from May 11, 2027 at 15…
WCAG 2.1 AA standards: what the standard actually requires
WCAG 2.1 Level AA is the standard HHS's Section 504 rule names for recipients' web content, from May 11, 2027 for recipients…
PCI DSS 6.4.3: does it apply if you use Stripe?
Your WooCommerce store takes cards through Stripe, and Stripe supplies the card fields. PCI DSS 6.4.3 covers scripts on the payment page,…
Lexcel accreditation and WordPress maintenance: who looks after the website
A practice that holds Lexcel accreditation has a written policy for each thing the standard asks for. What the policy cannot show…
Section 508 Compliance: Who Must Comply, and What Reaches a Funded Nonprofit
HHS funding now carries a dated web accessibility requirement: May 11, 2027 for an organization with 15 or more employees, and May…
Cyber Essentials Renewal: What Changes Each Year
A supplier on a central government contract renews Cyber Essentials certification every 12 months. The requirements and the question set can change…
Website Maintenance Contract Template
No standards body defines what a website maintenance contract has to contain. What exists instead is a converging set of vendor and…
How Do You Check If Your Website Is Secure?
There is no single test that confirms a website is secure. A green padlock, a clean blacklist result and a passing Google…
How Do I Know If My WordPress Site Is Hacked?
Something about the site looks off: a warning in search, an email from the host, or a visitor who landed somewhere strange.…
WordPress Update Management: Core, Theme and Plugin Updates Done Safely
WordPress core, themes and plugins each update on their own schedule, and WordPress ships a built-in auto-update toggle for all three. Core…
Do Websites Really Need Monthly Maintenance?
A website that launches clean does not stay in that state, because WordPress core, the theme and every active plugin are each…
WordPress Support Contract Template
A WordPress support contract only works if it names the same things a dispute would ask about later. This is a fill-in…
WordPress Security Hardening: What It Is and What It Actually Covers
You have a security plugin installed, updates mostly happen, and the site has never been hacked. That is a reasonable place to…
WordPress PCI Compliance: What Applies to Your Payment Page
Your checkout runs on WordPress, with card fields from Stripe or WooPayments, and once a year you complete a self-assessment questionnaire rather…
How Much Does WordPress Maintenance Cost?
You are comparing WordPress maintenance quotes and the numbers run from five dollars a month to five hundred. Two plans at the…
What Are the Security Risks of WordPress?
"WordPress is insecure" gets said a lot, and it is not quite the right claim. Nearly every disclosed WordPress vulnerability lives in…
How to Speed Up a WordPress Site
A slow WordPress site turns up under a search for "how to speed up wordpress" as a dozen unrelated tactics, with no…
The WordPress Maintenance Checklist
This is the checklist for what a WordPress site actually needs on a recurring basis: core, plugin and theme updates tested before…
What Is a WordPress Care Plan?
A live WordPress site needs someone keeping it running, and "WordPress care plan" shows up in every search for that help. Providers…