Blog
Field notes on WordPress performance, health, and security.
October 30, 2026
How many other servers is your WordPress loading from?
Of about a hundred WordPress sites we watch, 79% pulled content from other companies' servers. Some from one. A few from eleven. Here's why that number matters.
Read article →
October 30, 2026
We measured ~100 WordPress sites. The host brand barely mattered — the cache did
Across the sites we watch, nginx + WP Rocket beat managed hosting on speed. The pattern wasn't the host's logo — it was whether a real page cache was running.
Read article →
October 30, 2026
The vulnerable plugin on your site is probably your page builder
37% of the WordPress sites we watch had a known-vulnerable component. It's almost never obscure — it's Elementor, Divi, WPBakery, or the add-ons bolted onto them.
Read article →
October 30, 2026
AI crawlers are already reading your WordPress. Here's how to see them
ClaudeBot and GPTBot show up in your access log whether you invited them or not — and the first thing they grab is your sitemap. How to spot them and what to do.
Read article →
October 30, 2026
What we found scanning 99 real WordPress sites
We run Site Doctor on about a hundred live WordPress sites. 62% were missing security headers, 37% had a known-vulnerable plugin or theme, and 3 were running a live skimmer.
Read article →
August 17, 2026
The checkout bug that was a card skimmer
Three weeks debugging a broken checkout — and Wordfence Premium said the site was clean. It was a card skimmer. How we found it, and the lesson.
Read article →
May 12, 2026
Why your WordPress site is slow (and GA has no idea, but Radar sees it)
A real case: 67,000 bot hits nobody was watching. Why Google Analytics misses what slows your WordPress site — and how server-side Radar sees it.
Read article →
April 29, 2026
SysWP Shield is live — and we’re showing you exactly what kind of traffic your site actually serves
Of the requests hitting your site right now, how many are real humans, scrapers or AI bots? SysWP Shield shows exactly what your site serves.
Read article →
April 25, 2026
Lightweight APM Alternatives to Datadog & New Relic for SMBs
Datadog and New Relic are overkill for most SMBs. Lightweight APM alternatives that give you real monitoring without the enterprise bill.
Read article →