The WitsCode Blog
Field notes on web, AI search & growth.
Practical, opinionated writing from the team, what we ship for clients, what we are testing, and the patterns that actually move the needle.
- Shopify & Ecommerce
Mar 5, 2026 · 10 min read
Custom Shopify Theme vs Buying One: The Break-Even Analysis
At what point does a custom Shopify theme pay back against a $300 paid theme plus customizations? A break-even framework built on 25+ theme builds.
Read more
- WordPress
Mar 4, 2026 · 9 min read
Custom Gutenberg Blocks: When to Build and How Long It Takes
Should you build a custom Gutenberg block or use ACF? A native block vs ACF block comparison, real effort ranges, and the four scenarios that justify the cost.
Read more
- AI & Vibe Coding
Mar 4, 2026 · 10 min read
The Three-Hour AI-Generated Code Audit We Do Before Production
What a fixed-scope AI code audit actually looks like: the five categories we check, what gets patched in the PR, what we flag for later, and what you pay for.
Read more
- WordPress
Mar 3, 2026 · 11 min read
WordPress as a Headless CMS for a React App: The Setup We Use
How to set up WordPress as a headless CMS for a React app: WPGraphQL, ACF Pro, custom post types, and the preview-mode hookup that keeps editors happy.
Read more
- For Founders
Mar 2, 2026 · 9 min read
Self-Hosted Automation: What It Actually Costs To Run
A real monthly bill for self-hosting n8n on a VPS, the time cost nobody quotes, the breakeven point against Zapier, and when managed self-host wins.
Read more
- Shopify & Ecommerce
Mar 2, 2026 · 10 min read
Online Store 2.0: What Sections Everywhere Actually Changes for Shopify Stores
Sections now live on every template, not just the homepage. What this unlocks for merchants, what it means for developers, and the migration quirks we have hit when modernizing legacy themes.
Read more
- AI & Vibe Coding
Mar 1, 2026 · 12 min read
Turning a Vibe-Coded MVP Into a SOC-2-Ready App
Audit trail, access controls, encryption, backup policy, vendor review, SLAs. What SOC-2 actually costs, how fast it moves, and the six gaps AI-built MVPs always have.
Read more
- Shopify & Ecommerce
Feb 28, 2026 · 12 min read
WooCommerce vs Shopify: The Migration Decision Matrix We Use With Clients
A weighted scoring framework across twelve criteria, with the weighting logic explained so you can make a defensible platform choice before any agency pitches you.
Read more
- WordPress
Feb 28, 2026 · 10 min read
Headless WordPress with Next.js: When to Choose It and What It Costs
When to choose headless WordPress with Next.js, the full stack bill of materials, the three SMB scenarios where it genuinely fits, and honest cost framing.
Read more
- WordPress
Feb 27, 2026 · 9 min read
Is Headless WordPress Worth It for SMBs? An Honest Cost-Benefit
Is headless WordPress worth it? For 90% of SMBs, no. The real numbers on rebuild cost, double hosting and lost editor preview, plus the 10% where it pays.
Read more
- For Founders
Feb 26, 2026 · 10 min read
Automation Cost Creep: The Month-Three Audit Every Founder Should Do
Zapier tasks, Make operations, OpenAI tokens, Anthropic tokens. The audit template that catches creeping costs before they become a budget problem.
Read more
- AI & Vibe Coding
Feb 26, 2026 · 9 min read
The Secrets Management Mistake We Find in 70% of Vibe-Coded Apps
The four ways AI builders leak API keys, Stripe tokens, and database credentials, each with the fix we ship when WitsCode audits a vibe-coded app.
Read more
- Shopify & Ecommerce
Feb 25, 2026 · 10 min read
The Shipping Plugin That Broke Our Client's Black Friday (And What We Replaced It With)
A real postmortem from a WooCommerce Black Friday incident. The plugin category, the query pattern that killed the database, the ninety-minute response, and a red flag checklist you can run against...
Read more
- WordPress
Feb 24, 2026 · 9 min read
WordPress Domain & DNS: The 9 Settings Every Agency Should Lock Down
The 9 WordPress DNS settings every agency should lock down to prevent domain hijacks: registrar locks, DNSSEC, CAA records, and the SPF, DKIM and DMARC triad.
Read more
- Shopify & Ecommerce
Feb 24, 2026 · 10 min read
Why Your WooCommerce Backend Is Slower Than Your Frontend
Admin slowness is a revenue problem. Here is the full diagnosis, from autoload bloat to HPOS order search, with the real numbers from a client we took from 11.2s to 1.8s.
Read more
- WordPress
Feb 23, 2026 · 8 min read
Multisite or Separate WordPress Installs? A Decision Framework for Agencies
Should you use WordPress multisite or separate installs? Five decision questions, the lock-in pain agencies hit later, and how to choose it correctly.
Read more
- For Founders
Feb 22, 2026 · 10 min read
CodeWords, Activepieces, and the New Wave of AI-First Automation Tools
The 2026 cohort of chat-first automation builders. Compared on prompt quality, integration depth, pricing model, and team features. Who each is actually for.
Read more
- AI & Vibe Coding
Feb 22, 2026 · 11 min read
Why 40% of AI-Generated Code Has a Security Flaw (And How to Be in the Safe 60%)
The research behind the 40-62% vulnerability rate in AI-generated code, the Q1 2026 study showing 91.5% of vibe-coded apps ship with at least one flaw, and the four-practice testing loop that moves...
Read more
- Shopify & Ecommerce
Feb 21, 2026 · 9 min read
WooCommerce Checkout Blocks vs Shortcodes: The 2026 Reality
The blocks based checkout is no longer experimental, but migrating from the shortcode still breaks things. Here is when to migrate, what breaks, and the theme edits we always redo afterwards.
Read more
- AI & Vibe Coding
Feb 20, 2026 · 10 min read
Prompt Injection in AI-Built Apps: What We Look For in Every Audit
When your AI-built app accepts user input into a prompt, you have a new attack surface. The five injection patterns we test for, and the defensive prompting rules we apply.
Read more
- WordPress
Feb 20, 2026 · 8 min read
WordPress on Cloudways vs Kinsta: A Side-by-Side for SMB Agencies
Cloudways vs Kinsta after 12 months running both. Pricing, performance, support and DX compared, plus the threshold where Kinsta's premium earns its keep.
Read more
- WordPress
Feb 19, 2026 · 10 min read
How to Move a WordPress Site to a New Host (Zero Downtime Method)
The exact zero-downtime runbook for WordPress migration to a new host: lower DNS TTL early, test before the flip, delta-sync orders, and a rollback plan.
Read more
- For Founders
Feb 18, 2026 · 10 min read
Pipedream vs n8n vs Make: The Decision Tree for Founders
Three automation platforms, one decision. Pipedream for developers, n8n for self-hosters, Make for non-technical operators. Walk the decision tree through three founder personas.
Read more
- Shopify & Ecommerce
Feb 18, 2026 · 9 min read
Object Caching in WooCommerce: Redis vs Memcached vs Nothing
Benchmarks from two identical WooCommerce stores show where Redis actually helps, where Memcached holds up, and when the default advice to install Redis is wrong.
Read more
