Security

Certificates, web application firewalls and the security work that has to happen before an application is exposed to the internet.

A beam of cyan light sweeps along an old wall of interlocking stone blocks, lighting up glowing lime-green cracks, while a kneeling worker beside a toolbox repairs one of them.

23rd October 20266 min read

The end of an extraordinary week, or the beginning of a new era?

PHP2Shell was found with the help of AI. How we patched our clients overnight, and whether AI's thoroughness means more security flaws are about to come to light.

Screen-print illustration of a crowd reaching towards a monitor, in layered teal and lime silhouettes

2nd March 20267 min read

High availability strategies for websites and web applications on AWS

High availability is not a single feature toggle. It is the accumulation of sensible decisions around traffic patterns, autoscaling, caching, edge filtering and multi-AZ resilience. We explore practical strategies for keeping websites and web applications available on AWS when real life happens.

17th June 20253 min read

AWS ACM Exportable Certificates

AWS now lets you export public SSL/TLS certificates from Certificate Manager, private key and trust chain included, for use outside AWS services.