Blog

Accessibility, security, legal and fixes, in plain words

What ADA, security basics and search engines actually expect from a website, what a lawyer or Google checks first, and how to fix it — no course needed.

• The surprise bill in a vibe-coded app: what actually drives it up, and a check before you launchAI page builders ship features fast but never ask what happens at ten thousand visits in one afternoon. The three things that turn a good launch into a bill you did not expect, and a five-minute way to check your own app first.Sep 24, 2026
• Is your Supabase or Firebase database public? A five-minute check for vibe-coded appsSupabase and Firebase both ship with a public key that's meant to be seen. What decides whether it can read your data is Row Level Security or Security Rules, the one setting AI-generated app setups usually skip. A five-minute way to check your own database.Sep 22, 2026
• Does an app you built with AI need to be ADA accessible?AI app builders and coding assistants ship fast but skip accessibility by default. What the law actually requires from a weekend project, and how to check it without rewriting the app.Sep 21, 2026
• Exposed API keys in your vibe-coded app: how to check before you shipAI coding tools paste API keys straight into the frontend by default. What actually leaks, a five-minute way to check your own app, and how to fix it without rewriting anything.Sep 21, 2026
• Accessibility statement example for a small online store: what to actually put in itA plain-language example of what to put in an accessibility statement for a small online store: what standard to name, what to admit is unfinished, and the two mistakes that make one worse than no statement at all.Sep 18, 2026
• ADA Title II: why U.S. universities and governments will ask you for a VPAT in 2026The Department of Justice rule requires states, cities and public universities to meet WCAG 2.1 AA by April 2027. They pass it on to their vendors. What they will ask for and how to have it ready.Sep 16, 2026
• How to make a VPAT for a website (and when you do not need one)What a VPAT is, which edition to pick, how to fill each row honestly and what it costs. With the list of the 56 WCAG 2.2 A/AA criteria.Sep 16, 2026
• WordPress accessibility: the 10 most common failures and where to fix them without codeWhat comes up again and again when scanning WordPress sites: undescribed images, theme contrast, plugin forms without labels, carousels. And the exact menu where each one is fixed.Sep 16, 2026
• Shopify and accessibility: where each error is fixed without touching the themeProduct photos, buttons, colours, forms, language: the exact Shopify admin menu where each accessibility failure is fixed, and what does need code.Sep 16, 2026
• European Accessibility Act (EAA 2025): what it requires from an online store and how to complySince 28 June 2025 the EAA applies to e-commerce, including non-EU companies selling to Europeans. What it asks for, the fines, and what to check today.Sep 14, 2026
• How to avoid an ADA accessibility lawsuit when your store runs on ShopifyOver 4,000 lawsuits a year in the US, mostly against small businesses and online stores. What plaintiffs' lawyers look for, what you can fix from the Shopify admin, and what you cannot.Sep 14, 2026
• A Lighthouse accessibility score is not a WCAG audit: how they differLighthouse gives one number for one page at one screen size and does not say how to fix anything. What it really measures, what it misses, and what a lawyer or developer actually needs.Sep 14, 2026