Blog
Laws, performance and security of websites, in practice.
Sourced guides to website accessibility (WCAG 2.2 and Brazil's LBI), privacy under Brazil's LGPD, Core Web Vitals, security and technical SEO.
Topics
Accessibility
If your company has its headquarters or a commercial representative in Brazil, its website must be accessible to people with disabilities: that is what article 63 of Brazil's Inclusion Law (Lei Brasileira de Inclusão, Law 13,146/2015) requires.
5 guidesPrivacy
Brazil's LGPD (Lei Geral de Proteção de Dados, Law No. 13,709/2018) never mentions cookies, but it applies to any cookie, pixel or script that collects personal data from site visitors.
3 guidesPerformance
Core Web Vitals are three Google metrics that measure the real experience of visitors: LCP measures loading, INP measures responsiveness to clicks and taps, and CLS measures visual stability.
6 guidesSecurity
The first security step on a public website is to check what any visitor can see from the outside: whether every request goes to HTTPS with a valid certificate, whether the security headers are present, whether any files are exposed, whether the CMS and plugins are up to date and which third-party scripts run on the page.
3 guidesTechnical SEO
Google shows a page only after crawling it, processing the content and deciding to store it in the index.
5 guides
Latest
- Technical SEO
AI crawlers in robots.txt: search, user access and training
GPTBot, ClaudeBot, OAI-SearchBot, Google-Extended: what each AI crawler does, whether it respects robots.txt, and how to block training but stay in search.
- Technical SEO
Redirects: chains, loops and how to fix them
How Google handles 301, 302, 307 and 308, what chains and loops do to crawling and speed, and how to map, fix and test your redirects.
- Technical SEO
llms.txt: what it is, what it doesn't do and how to create one
llms.txt summarizes a site for AI agents. See the format, what Google and other companies say about it, when it's worth creating and how to write a good one.
- Technical SEO
Structured data: what Google uses and how to validate it
Which structured data still earns rich results on Google in 2026, the rules for reviews, and how to validate without confusing schema.org with Google.
- Security
PCI DSS 4.0: requirements 6.4.3 and 11.6.1 for checkout scripts
What PCI DSS v4.0.1 asks of payment page scripts, who it applies to, what changed in SAQ A in 2025 and how to implement it with CSP, SRI and monitoring.
- Security
HTTP security headers: CSP, HSTS and the rest
Which HTTP security headers to set, with starting values, what each one breaks if you get it wrong and how to roll out CSP without taking the site down.
- Performance
How to monitor performance across multiple sites and catch regressions
How an agency tracks Core Web Vitals across many sites: CrUX, its own RUM, scheduled tests, budgets, post-deploy alerts and client reports.
- Performance
Lighthouse, CrUX and RUM: which Core Web Vitals data to use
Lighthouse, CrUX and RUM measure different things. Where each comes from, the LCP, INP and CLS thresholds, and which to use to prioritize, debug and track.
- Performance
How to improve LCP: the four parts of LCP time
LCP breaks down into TTFB, resource load delay, load duration and render delay. How to measure each part and what to fix in each one.
- Performance
How to improve INP: what delays the response to a click
INP adds up input delay, processing and presentation. How to find the slow interaction and cut each phase, with scheduler.yield and LoAF.
- Performance
How to fix CLS: what makes the page jump
What counts in CLS, the common causes (images, ads, fonts, animations) and how to reserve space in HTML and CSS. How to find the element that moves.
- Privacy
Website privacy policy: what Brazil's LGPD requires
What Brazil's LGPD requires in a website privacy policy: purposes, third parties, rights, DPO, cookies, where to link it and how to keep it up to date.
Partners
Partner benefits with one coupon.
WPLIGHT20% OFFGet the offer from WP Rocket (opens in a new tab)
25% OFFGet the offer from Perfmatters (opens in a new tab)
Partner links. We may earn a commission at no extra cost to you.