Insights
What we've learnt from building
Technical and market pieces, written to answer a specific question. No filler and no promises we can't keep.
CVE-2026-109618 and CVE-2026-109619: protecting a PHP website
CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2): which PHP releases fix them, urgent measures when an update is not yet possible, and how to verify the fix on the server.
What a professional website really costs in Spain
The real market bands, what each delivers, and why in the zone where standard development and bespoke engineering overlap what changes isn't the price but who has studied the business before starting.
What llms.txt is and why your site should have one
A text file at the root of the domain telling language models which pages matter and what each one contains. It isn't mandatory, isn't standardised, and costs nothing to get wrong.
Why we build on Astro and not on WordPress
WordPress runs a large share of the web and remains reasonable for many projects. For corporate platforms where performance is a commercial argument, static architecture wins by a margin that's hard to argue with.