← Back to HomeNotes from Arkonos Labs

    Blog

    What we've learned building and auditing real websites for real businesses. No filler, no vague tips.


    18 October 2026 · Kieran

    The IPv6 Bug That Could Have Undone Our Own Security Fix

    We fixed a real SSRF bug, then found our own fix had a gap -- because of how browsers and servers silently rewrite IPv6 addresses.

    17 October 2026 · Kieran

    Why a Fast Website Sells More: The Real Mechanism Behind It

    Everyone says speed helps conversions, but few explain why. Here's what actually happens in a visitor's head, and on their phone, during the first few seconds on your site.

    4 October 2026 · Kieran

    Why We Attack Our Own Tools Before We Trust Them With Yours

    Before we hand a piece of software to a client -- or build it as a product of its own -- we try to break it ourselves first. Here's what that actually looked like this week.

    23 September 2026 · Kieran

    Security Headers: The Invisible Settings Protecting Your Website

    Security headers are a handful of instructions your website sends to every visitor's browser, and most small business sites are missing them entirely. Here's what they actually do and why it's worth five minutes of your web developer's time.

    19 September 2026 · Kieran

    What Actually Makes a Website Look Dated to a First-Time Visitor

    It's rarely the colour scheme. Here are the specific, fixable things that make a website feel old the moment someone lands on it, and why each one matters more than people think.

    17 September 2026 · Kieran

    The 6 Things We Check Before We Touch Your Website

    Most website audits are a Lighthouse score and a shrug. Here is exactly what we measure across performance, security, SEO, conversion, accessibility and design before we say a word about what needs fixing.


    What we write about

    Speed. Why a slow page costs enquiries, how Google measures it, and the fixes that make the biggest difference on a phone over a weak signal.

    Security. The settings and checks that keep a small business site and its visitors safe, including the ones we found by testing our own tools first.

    Search and design. What makes a site look dated to a first-time visitor, and what Google needs to see before it will send you traffic.

    Every post comes from work on real sites. If you'd like us to look at yours, start with our £95 site health check or the in-depth audit of every page.