The WitsCode Blog
All articles
Every article, newest first.
- WordPress
Mar 3, 2026 · 11 min read
WordPress as a Headless CMS for a React App: The Setup We Use
How to set up WordPress as a headless CMS for a React app: WPGraphQL, ACF Pro, custom post types, and the preview-mode hookup that keeps editors happy.
Read more
- For Founders
Mar 2, 2026 · 9 min read
Self-Hosted Automation: What It Actually Costs To Run
A real monthly bill for self-hosting n8n on a VPS, the time cost nobody quotes, the breakeven point against Zapier, and when managed self-host wins.
Read more
- Shopify & Ecommerce
Mar 2, 2026 · 10 min read
Online Store 2.0: What Sections Everywhere Actually Changes for Shopify Stores
Sections now live on every template, not just the homepage. What this unlocks for merchants, what it means for developers, and the migration quirks we have hit when modernizing legacy themes.
Read more
- AI & Vibe Coding
Mar 1, 2026 · 12 min read
Turning a Vibe-Coded MVP Into a SOC-2-Ready App
Audit trail, access controls, encryption, backup policy, vendor review, SLAs. What SOC-2 actually costs, how fast it moves, and the six gaps AI-built MVPs always have.
Read more
- Shopify & Ecommerce
Feb 28, 2026 · 12 min read
WooCommerce vs Shopify: The Migration Decision Matrix We Use With Clients
A weighted scoring framework across twelve criteria, with the weighting logic explained so you can make a defensible platform choice before any agency pitches you.
Read more
- WordPress
Feb 28, 2026 · 10 min read
Headless WordPress with Next.js: When to Choose It and What It Costs
When to choose headless WordPress with Next.js, the full stack bill of materials, the three SMB scenarios where it genuinely fits, and honest cost framing.
Read more
- WordPress
Feb 27, 2026 · 9 min read
Is Headless WordPress Worth It for SMBs? An Honest Cost-Benefit
Is headless WordPress worth it? For 90% of SMBs, no. The real numbers on rebuild cost, double hosting and lost editor preview, plus the 10% where it pays.
Read more
- For Founders
Feb 26, 2026 · 10 min read
Automation Cost Creep: The Month-Three Audit Every Founder Should Do
Zapier tasks, Make operations, OpenAI tokens, Anthropic tokens. The audit template that catches creeping costs before they become a budget problem.
Read more
- AI & Vibe Coding
Feb 26, 2026 · 9 min read
The Secrets Management Mistake We Keep Finding in Vibe-Coded Apps
The four ways AI builders leak API keys, Stripe tokens, and database credentials, each with the fix we ship when WitsCode audits a vibe-coded app.
Read more
- Shopify & Ecommerce
Feb 25, 2026 · 10 min read
The Shipping Plugin That Broke Our Client's Black Friday (And What We Replaced It With)
A real postmortem from a WooCommerce Black Friday incident. The plugin category, the query pattern that killed the database, the ninety-minute response, and a red flag checklist you can run against...
Read more
- WordPress
Feb 24, 2026 · 9 min read
WordPress Domain & DNS: The 9 Settings Every Agency Should Lock Down
The 9 WordPress DNS settings every agency should lock down to prevent domain hijacks: registrar locks, DNSSEC, CAA records, and the SPF, DKIM and DMARC triad.
Read more
- Shopify & Ecommerce
Feb 24, 2026 · 10 min read
Why Your WooCommerce Backend Is Slower Than Your Frontend
Admin slowness is a revenue problem. Here is the full diagnosis, from autoload bloat to HPOS order search, with the real numbers from a client we took from 11.2s to 1.8s.
Read more
- WordPress
Feb 23, 2026 · 8 min read
Multisite or Separate WordPress Installs? A Decision Framework for Agencies
Should you use WordPress multisite or separate installs? Five decision questions, the lock-in pain agencies hit later, and how to choose it correctly.
Read more
- For Founders
Feb 22, 2026 · 10 min read
CodeWords, Activepieces, and the New Wave of AI-First Automation Tools
The 2026 cohort of chat-first automation builders. Compared on prompt quality, integration depth, pricing model, and team features. Who each is actually for.
Read more
- AI & Vibe Coding
Feb 22, 2026 · 11 min read
Why 40% of AI-Generated Code Has a Security Flaw (And How to Be in the Safe 60%)
The research behind the 40-62% vulnerability rate in AI-generated code, the Q1 2026 study showing 91.5% of vibe-coded apps ship with at least one flaw, and the four-practice testing loop that moves...
Read more
- Shopify & Ecommerce
Feb 21, 2026 · 9 min read
WooCommerce Checkout Blocks vs Shortcodes: The 2026 Reality
The blocks based checkout is no longer experimental, but migrating from the shortcode still breaks things. Here is when to migrate, what breaks, and the theme edits we always redo afterwards.
Read more
- AI & Vibe Coding
Feb 20, 2026 · 10 min read
Prompt Injection in AI-Built Apps: What We Look For in Every Audit
When your AI-built app accepts user input into a prompt, you have a new attack surface. The five injection patterns we test for, and the defensive prompting rules we apply.
Read more
- WordPress
Feb 20, 2026 · 8 min read
WordPress on Cloudways vs Kinsta: A Side-by-Side for SMB Agencies
Cloudways vs Kinsta, compared from running client sites on both. Pricing, performance, support and DX compared, plus the threshold where Kinsta's premium earns its keep.
Read more
- WordPress
Feb 19, 2026 · 10 min read
How to Move a WordPress Site to a New Host (Zero Downtime Method)
The exact zero-downtime runbook for WordPress migration to a new host: lower DNS TTL early, test before the flip, delta-sync orders, and a rollback plan.
Read more
- For Founders
Feb 18, 2026 · 10 min read
Pipedream vs n8n vs Make: The Decision Tree for Founders
Three automation platforms, one decision. Pipedream for developers, n8n for self-hosters, Make for non-technical operators. Walk the decision tree through three founder personas.
Read more
- Shopify & Ecommerce
Feb 18, 2026 · 9 min read
Object Caching in WooCommerce: Redis vs Memcached vs Nothing
Benchmarks from two identical WooCommerce stores show where Redis actually helps, where Memcached holds up, and when the default advice to install Redis is wrong.
Read more
- Guides & Insights
Feb 17, 2026 · 15 min read
Future-Proofing Your AI Search Strategy: Preparing for 2027 and Beyond
Eighteen months ago, most marketers treated AI search as a curiosity. Today, it drives measurable pipeline.
Read more
- WordPress
Feb 17, 2026 · 9 min read
Squarespace to WordPress Migration: When It's Worth the Effort
Should you move from Squarespace to WordPress? The size and growth thresholds where migration pays back, the partial-export reality, and the rebuild path.
Read more
- Shopify & Ecommerce
Feb 16, 2026 · 9 min read
WooCommerce Performance: The Hosting Tier Decision Tree
Shared vs VPS vs managed WordPress vs dedicated for WooCommerce. Real TTFB numbers, PHP worker ceilings, order capacity per tier, and the signs you have outgrown your host.
Read more
