Writing
Notes on accessibility law, AI visibility, and building fast websites - written to be quoted, not to rank.
-
There is no 100% secure website
Anyone selling absolute invulnerability is selling something else. What exists is a site that costs more to break than it is worth, degrades instead of collapsing, and comes back exactly as it was.
-
The 2026 attack surface, by category
OWASP moved the map in 2025: two new categories, SSRF folded into the top one, and supply chain arriving with the highest incidence rate on the list. What that says about how sites actually get broken into.
-
Beyond the webshop: what the law requires of every kind of site
A municipality, a tourist board, a B2B consultancy, a five-person shop, a volunteer association - four different statutes, four different thresholds, and nobody fully exempt.
-
Who NN 89/2025 actually binds
Most Croatian micro-businesses are outside the accessibility act entirely - the line sits at ten employees and two million euro.