Guides
Guides
Practical, technical guides to monitoring your site — how the monitors work and how to read them.
Hacks and security
What to do when a site is hacked, why malware returns, and what each kind of scan actually finds.
Let's Encrypt 64-day certificates
From 10 February 2027, Let's Encrypt certificates last 64 days, not 90. Which renewal setups keep working, which break, and how to check yours.
WordPress security headers
The six response headers a security scan asks for, the three that are safe to add today, and how to roll out HSTS and CSP without breaking anything.
WordPress hacked checklist
The places a server scan can't see — the admin's browser and computer, hosting, email, Google and registrar accounts — and the order to lock them down.
WordPress malware keeps coming back
The eight places self-healing malware hides, the order to clean them in, and how to catch it the hour it returns.
Exposure scanning vs vulnerability scanning
Open doors vs vulnerable code vs a full pentest — what each finds, and where Relvato's exposure scan fits.
Updates and breakage
Why sites break when nobody touched them, and how to keep updating without breaking things.
Why regression testing is critical today
AI made shipping faster and confident mistakes normal. The types of regression testing, and which layer catches what.
Why you can’t disable WordPress auto-updates anymore
AI finds plugin vulnerabilities faster and exploits land within hours. Why switching auto-updates off now backfires — and how to update without breaking your site.
Site drift: 10 reasons websites break
WordPress updates, AI-written code, third-party scripts, firewall rules — the changes that quietly break sites, and how to catch each one.
Visual vs structure monitoring
Pixel diffing vs DOM fingerprinting — what each catches, what it misses, and why you want both.
Search, speed and AI
Staying visible in Google and to AI assistants, measuring speed the right way, and letting AI work on your site.
Connect Claude to WordPress
Let an AI assistant update your WordPress site with WP-CLI, then check checkout, logins and speed with Relvato, in one conversation.
Why SEO regression monitoring matters
Most search drops you can fix are ones you caused — and Bing's index now reaches into AI answers. What to watch, and how.
Why AI bots can't crawl your site
The server- and WAF-level blocks that keep GPTBot, PerplexityBot and ClaudeBot out — how to find them and safely unblock.
Core Web Vitals vs RUM
Lab (synthetic) vs field (real-user) data — how they differ, and when to use each.
Accessibility
What the European Accessibility Act asks of a website, and how to stay accessible after updates.
Choosing a tool
How the WordPress monitoring tools compare, and what you get from building your own.
DIY monitoring with AI vs Relvato
What it really costs to build website monitoring with Claude or ChatGPT — money, time, tools, maintenance — and when building it yourself wins.
WordPress monitoring compared (2026)
Manual vs Google's tools vs dedicated monitors vs continuous verification — honestly compared, with a chart.
WordPress Site Health vs Relvato
The built-in Site Health tool vs continuous, outside-in monitoring — what each one covers and where Relvato excels.