Practical tips on websites, branding, and getting found online. From CTF Designs. Named after Cheddar the Floof. 🐾
Most of what I write about security is the scary half: what happens when things are left open. Fair enough, that's the half that costs money.
Every small business hits this fork eventually. There's a process that needs software, and there are two roads: subscribe to something that exists, or build something that's yours.
Ask "what does an app cost?" and you'll get answers from $500 to $500,000, which is another way of getting no answer at all.
"Security scan" sounds like something out of a movie. Green text, a progress bar, a voice saying "we're in."
The most profitable software I build is software nobody ever sees.
I talk a lot of people out of building apps.
There's a moment in almost every app project where the client asks, "so once it's built, it's in the App Store, right?"
Security advice for small business owners tends to come in two flavors. Either it's so vague it's useless ("be careful online") or so technical it might as well be in another language.
Let me tell you a story. Fair warning up front: this is a composite, built from the kinds of incidents I see in security work, with details changed and blended. No real client, no real names. But every piece of it happens, constantly, to businesses this size.
There's a sentence I hear from small business owners all the time: "Nobody's going to hack us. We're too small."
A real TV-style ad used to cost five figures and a film crew. This month I made one from a couch. Here is what AI video actually costs in 2026, what it does well, and where it still falls on its face.
A visitor decides whether to stay or leave almost instantly. Your homepage has one job in those first seconds, and it's not looking pretty. It's answering four questions, fast.
The gap between having the idea and having the thing is where most small businesses die on the vine. Here is why a one-person studio closes it in days, not months.

You have about a twentieth of a second to convince a stranger your new business is real. Here is what actually earns that trust, backed by the research, and what you can safely ignore.

Every hour, automated bots probe small-business websites looking for one easy way in. The good news is you don't need enterprise security to shut them out. You need the basics done right.
I studied how the internet's biggest free tools actually get their traffic. It was not TikTok. It was not Instagram. Here is what the cold numbers say about how your business website really gets found, and what to do about it.

Why I started The Floof Factor, a manifesto for the local business owner the marketing world keeps locked out.
Most small-business sites don't fail loudly. They leak customers quietly, one bounce at a time. Here are five signs yours is doing it.