The Tanvir journal

Notes for building a safer, stronger web.

Clear, practical reads on website security, recovery, development, and search—made for the people behind the websites.

From the journal

Practical guidance for the work behind the web.

What to expect from web application penetration testing

A useful penetration test starts with an agreed purpose—not a scan of anything that happens to be online. Before testing, confirm who owns the application, what environments and accounts are in scope, when testing may happen, and which actions are off limits.

Read full article

First steps when you suspect a WordPress website has been hacked

If a WordPress website is showing unexpected changes, redirects, or warnings, avoid making rushed edits that could erase useful evidence or a clean recovery point. Record what you see and when it started, and contact your hosting provider if the site is affecting visitors.

Read the article

Preserve available backups and logs, and use a known-clean device when changing account credentials. Review administrator access, hosting and domain accounts, and any connected services. If you have an incident-response or web-maintenance provider, share the timeline and the steps already taken.

Recovery depends on how the site was compromised and whether a trustworthy backup is available. After restoring service, review updates, plugins, credentials, and monitoring so you can address the cause—not only the visible symptoms.

See recovery process and requirements

Build a useful SEO foundation for a business website

Start with the questions your customers actually ask. Give each important service a clear page, explain who it is for and what the next step is, and use descriptive headings that help people scan the content.

Read the article

Keyword research can reveal how people describe a problem, but a phrase belongs on a page only when it fits that page. Avoid repeating keywords unnaturally or publishing thin pages for locations or services you do not genuinely serve.

A sound technical foundation matters too: make pages easy to use on mobile, keep navigation understandable, use meaningful page titles, and check that important content is accessible to visitors and search engines. SEO is ongoing work, not a guaranteed ranking shortcut.

Explore SEO and Google Ads