Penetration testing, often abbreviated as pen testing, is an essential process to ensure you maintain a safe and secure website. But what exactly does pen testing involve, and how can you rest assured your agency partner is covering all potential vulnerabilities for you? 

This article will provide a detailed guide to penetration testing, helping you minimise your security risks and ensure your website is fully protected. 

In a recent series of articles published in our resource library, we provided an in-depth explanation of the end-to-end process of building a high-performance, enterprise-grade website. (If you’d like to read that series first before learning about pen testing, you can start here). 

After you’ve worked with your agency partner to successfully build your website, you’ll also need to ensure your site is protected from cyber security threats.  With that in mind, you should understand the important role that pen testing plays in effective website security and maintenance. 

What is Penetration Testing? 

Penetration testing is a form of website testing that’s used to identify security vulnerabilities When conducting pen testing on your site, your agency will simulate a range of cyber attacks that could be used by cyber criminals or malicious software (malware). 

The purpose of this is to identify security weaknesses within your site and take action to prevent them from being exploited in the real world. This approach goes beyond basic tests, as it doesn’t just list the vulnerabilities, it examines how they could be exploited and helps to prevent that from happening. 

Why is it Crucial for an Agency to Conduct Penetration Testing? 

Website security is critical in today’s digital business landscape. Cyber security threats have become highly intelligent and sophisticated, now capable of penetrating even the strongest security networks. 

For instance, global technology giant Acer was the victim of a cyber security attack that demanded a ransom of $50 million USD in recent years. 

The outcomes of a cyber attack on your website could be catastrophic, either through sensitive data being stolen, lengthy losses of business continuity, or even reputational damage. 

Remember, your site’s security isn’t just vital to you as a business, it’s also something your clients need assurance with when they agree to work with you. You should be taking as many proactive steps as possible to ensure your security measures are rigorous enough to match high levels of risk. 

Covering All Bases for Robust Security (in WordPress)

It’s useful to be conscious of the common security weaknesses and pitfalls cyber criminals typically aim to take advantage of. 

Security vulnerabilities can be created when your website is running on outdated versions of your platform, or if something hasn’t been configured or integrated properly. Other common pitfalls include weak authentication measures and insufficient protection from the perspective of your users. 

With platforms like WordPress, there are some areas in which less experienced agencies could allow security vulnerabilities to creep in as well. For instance: 

• Auto-updates – When your platform’s software is automatically updated, changes in the code can cause new security weaknesses to arise. 
• Plugins – Using WordPress plugins from untrustworthy sources, or neglecting to update and maintain your plugins properly, can also cause security issues. 

This is one of many reasons why it’s important to work with an experienced agency partner who has proven platform-specific knowledge and expertise. Your agency should know your CMS of choice inside out, and should therefore be well aware of all the most common security pitfalls and targets for cyber attacks. 

What Does Effective Penetration Testing Involve? 

To conduct pen testing, your agency’s security experts will run through a process that attempts to penetrate your site’s security measures. 

This is usually done in stages, as follows: 

1 – Planning and Preparation

1. Review the results and analysis of any previous tests (if there are any)
2. Define the scope of the testing, including which tests will be performed
3. Gather all necessary data and information on the system to conduct the testing
4. Determine the criteria of success or failure for the tests.

2 – Running the Tests 

1. Use automated tools to scan for vulnerabilities and identify weaknesses 
2. Attempt to exploit the identified weaknesses 
3. Repeat the tests with different types of user roles and permissions
4. Measure the outcomes against criteria for success or failure 
5. Create a report on the outcomes and results of the tests. 

3 – Post-Testing 

1. Review the reports and analyse the results 
2. Remediate and resolve the vulnerabilities that were able to be exploited
3. Re-test the vulnerabilities to ensure remediation was successful.

The Benefits of Thorough Penetration Testing

Working with an agency partner who can support you with ongoing pen testing is a necessary step towards gaining enterprise-grade security for your website.

Technology changes so quickly today. Your platform receives updates regularly, your site is always growing, and cyber criminals are constantly finding new ways to breach your defences and gain access to your data. Penetration testing allows you to keep the pace with new emerging vulnerabilities. 

Conducting regular pen testing can also help improve client relationships and create competitive advantages as well. In certain industries, a demonstrable commitment to security will be greatly appreciated by your target audience. This can help to differentiate you from the competition and provide the trust required to attract more prospective clients to work with you.

Website Security is a Never-Ending Battle 

While every business with a website faces tremendous security risks today, this is a proven process that can help to minimise that risk and give you the confidence you need in your site’s security.

Any agency partner you work with should have the knowledge and expertise to understand the importance of pen testing, and should insist on making this an integral, ongoing part of your site’s maintenance. 

Would you like these insights straight to your mailbox?

Your emailSubmit

I consent to my submitted data being processed and stored by SoBold in compliance with Privacy Policy

When looking at content management systems (CMS), scalability refers to the ability to expand and grow your site with more content, capabilities, features, and functionality.

Your CMS is a long-term investment, and its scalability will have a strong influence on whether or not that investment is successful.

“When sustainable business growth is a top strategic objective, you need full confidence that your web presence can seamlessly scale and evolve to support that growth.”

This requires a platform that allows you to quickly and easily create new features and functionality. Ideally, you should be able to do this without having to invest significant time and resources into additional costly development work.

WordPress is One of the Most Scalable Platforms Around

Evidence of WordPress’s great scalability can be found in the fact that almost 45% of the world’s websites are built on the platform. That includes global enterprises such as investment firm Blackstone, research and advisory leader Forrester, the NHS England, and leading pharmaceutical company Hutch Med.

This is because WordPress websites can seamlessly scale as your needs change and your business grows. You can easily add a high volume of new content to your site at speed without compromising on quality. 

WordPress is also renowned for how easily you, or your development partner, can build bespoke features and functionality, so your site can keep evolving with new capabilities to support more advanced requirements. 

“No matter the size or complexity of your site, WordPress can provide fast, intuitive development capabilities with ongoing growth acting as a natural outcome.”

Using WordPress at Scale 

Developing, managing, and maintaining a high-performance website at scale is a complex challenge. For that reason, it’s important to work with an experienced web design and development agency who can enable continual growth and support you through it.

Part of your agency’s services will include configuring your platform, and building your site in the back-end, in a way that encourages long-term scalability. We’ll explain our own approach to this in more detail in the next section. But first, let’s look at some of the fundamental ways to use WordPress at scale: 

Bespoke Features and Functionality

If you want to build out your website with new capabilities, WordPress stands above all its competitors thanks to its ability to develop bespoke features that are unique to your site. 

WordPress is built on PHP, which is the most popular development language around, as it’s currently used by over three quarters (77.5%) of all websites with a known server-side programming language. With PHP, WordPress has a significant advantage over other CMSs, because it allows you to create virtually anything and integrate it with the platform.

Selecting an agency partner with WordPress-specific skills provides you with the opportunity to leverage the platform for almost limitless scalability, among other benefits. 

WordPress Plugins 

WordPress also comes with a vast range of plugins, which can help with adding to, and enhancing, the existing functionality of your site. Plugins are an essential aspect of WordPress development, but it’s crucial that you only choose the most reputable, tested, and proven plugins. 

Your agency partner should be experienced in this plugin selection and use their past experience to recommend the best ones to use for your specific requirements. Your agency partner should also be able to advise you on how plugins will scale with increases in website size or traffic volume to help preserve your site’s performance.

Using plugins that are not regularly updated, or that come from unknown development owners, could harm your site by making it heavier, slowing down your page loading times, and possibly even creating security vulnerabilities. 

Using a particularly large number of plugins is another situation that could result in slower loading speeds or other performance issues. Be mindful that use of plugins can reduce the bespoke development time needed to build your site, and the use of too many plugins could cause performance issues. If you find yourself in this situation, it could be an indication that your development partner might actually be taking shortcuts.

The Importance of a Trusted Partner 

Whether you’re using plugins or building new bespoke features, your agency will be able to take care of all of these crucial aspects of your development for you. Their support and guidance will ensure you can expand your site freely without running into any technical issues. 

Once you have everything you need in place, your agency will then be able to accelerate the speed at which you can scale moving forward. A great agency partner will also provide you with ongoing education and support, allowing you and your team to build your site out easily and efficiently by yourself too, whenever you want or need to.

Taking a More Scalable Approach – Building with Blocks 

While many agencies still use a more traditional method of developing sites with WordPress, taking a block-based approach provides even greater opportunities for dynamic scalability. 

As an alternative to the time-consuming practice of inputting text and images into a rich text editor in your CMS, the block-based approach allows you to create each page on your site more easily with a set of pre-built components. 

Components are blocks of code with pre-defined style and input types. You can use and re-use these components across multiple pages of your site to scale it at a much faster pace. Any time you want to create a high volume of new content, you simply pick your already-built components and place them in the correct positions. 

This is an approach that enables virtually limitless growth of your website at speed with a high level of quality and accuracy. Building components that can be reused across your site will also deliver added benefits like increased efficiency and reduced costs. This in turn provides you with more time to focus on developing better services and experiences for your site visitors. 

The block-based approach to building websites is another way to make your WordPress platform leaner for better performance as well, because it removes the need for a bloated library of unnecessary plugins and features. 

You can read a more in-depth explanation of how to use this block-based approach for your own benefit in our related article here. 

An Enterprise-Grade CMS 

Scalability should be a key aspect of your criteria when selecting a CMS to build a website. Rapid growth and flexibility are crucial for your platform of choice.

Despite some still mistakenly thinking it might not be up to the task, you can use WordPress to build large, robust, high-performance sites at speed, and easily adapt them as your requirements change. 

This arguably makes WordPress one of – if not the – best CMS options available today. When you look at some of the world’s leading businesses currently using the platform to great success, that argument becomes much easier to appreciate.

Like with any CMS, though, the key to successful scalability is having the support of an experienced, trusted agency partner behind you, ensuring you’re leveraging the platform to its full potential. 

If you’d like more support in selecting the right CMS for your business, read our in-depth guide to understanding and evaluating the enterprise options for bespoke development.

Would you like these insights straight to your mailbox?

Your emailSubmit

I consent to my submitted data being processed and stored by SoBold in compliance with Privacy Policy

When you’re responsible for managing a new website development process, you’ll have some difficult decisions to make. Two of the most difficult decisions will be finding an agency that you can trust, and finding a content management system (CMS) that will give you the flexibility and performance to drive your business forward online.  

Your CMS will play a significant role in helping you meet your specific website requirements and enabling you to achieve your strategic goals. 

We’ve compared lots of different CMSs in our recent series of articles, and each of them have their own strengths and weaknesses. In this article, we’ll compare WordPress and Craft.

Ease-of-Use

It’s vitally important to ensure that the platform you choose is straightforward to manage. You’ll want a platform that’s approachable, with a low barrier for entry, to avoid any challenges in the daily running of your website.

Craft’s Ease-of-Use

Whilst Craft is an open-source CMS, it requires technical development expertise in order to manage the platform once built. Management for non-technical teams will likely be difficult, thus limiting you in your ability to build out content and new features over time. 

If you do have expertise in-house, that will allow you to manage your website more easily, as the CMS itself is efficient for publishing and managing content.

Craft also makes it easy to collaborate and share responsibilities across teams without any interference or complications. For example, you can save draft versions of pages and share them with colleagues – with private links that don’t even require you to be signed in – before publishing live on your site. 

WordPress’s Ease-of-Use

Conversely, WordPress is specifically built so that content can be managed in-house. WordPress provides you with a convenient, intuitive user interface (UI) that allows quick and easy publishing, management, and editing of content on your sites.

Put simply, WordPress is a more traditional CMS that’s suitable for a wider range of users and teams. It allows you to easily manage the content on the front-end, whilst also facilitating a quick time-to-market for the development of your website.

This ease-of-use also helps to share responsibilities throughout your team.

Flexibility

Flexibility will always be high on your list of priorities when looking for a CMS. Tailoring your platform to fit your own unique requirements is a crucial capability in today’s digital business landscape. 

How Flexible is Craft?

Craft is all code-based, which allows you to build virtually any type of website you want, with great flexibility. The only limitations, really, will be with the platform-specific development capabilities of your agency.

How Flexible is WordPress?

WordPress also offers a great deal of flexibility and customisation, but the difference here is that it’s unlikely you’ll need to alter much about WordPress’s pre-existing tools and features to be able to build a website you’re happy with.

With WordPress, you have everything you need to build a high-performance website. But that’s complemented by the flexibility to make enhancements and seamlessly scale the platform with new bespoke features if you wish to. 

Integrations

Before you select a CMS, you’ll need to ensure it can easily integrate with any existing systems your business has in place. Whilst most CMSs will be able to integrate well with a variety of third party systems, it’s important to be aware of any limiting capabilities of the platforms.

Craft’s Integrations

Integrations with the most popular third-party platforms are typically supported in Craft through plugins. However, you may need to integrate manually with platforms using API’s.

While this gives you more control over your CMS’s functionality and security, it’s another area in which you’ll likely have to spend more time and money on agency development work. Those integrations will also need to be maintained and updated manually as well, which may be a financial and time burden on your agency. 

WordPress’s Integrations 

WordPress’s global popularity means that it’s readily compatible with most of the third-party systems you’ll already have within your business. 

You’ll have a wide range of native plugins available that will integrate your WordPress site with virtually any other tool. Even if you have more advanced requirements, it’s usually easier for your agency partner to do this bespoke development work in WordPress than it is with other CMSs. 

Developer Communities 

Investing in a platform that’s supported by a community of developers will provide you with additional benefits and advantages. It’s always helpful to have other users working to continuously create additions and updates to help the CMS grow and improve.

Craft’s Community 

Craft has a passionate community working hard to help enhance the platform, but it’s only a fraction of the size when compared to more mainstream CMSs like WordPress. 

Still, size isn’t all that counts here. Craft’s community is very supportive and highly active on channels like Slack and Discord. Craft also has a StackExchange, which is a Q&A forum that many developers use to share learnings as they work through projects.

The WordPress Community

At 20 years old now, WordPress’s popularity and global market share means it has an enormous community supporting it. 

WordPress’s community consists of millions of users who work tirelessly to offer support, collaboration, knowledge sharing, events, and much more. 

Any questions, problems, or requirements you have are often answered very quickly by members of the WordPress community. This also results in exciting new enhancements and features being released on a near-constant basis to drive the platform forward. 

Being part of the WordPress community will also give you access to free events that help users learn to get as much value as possible from the platform. 

Cost and TCO 

Cost is a key factor when choosing a CMS. It’s also important to remember the up-front costs aren’t the only thing you need to consider here. Since your CMS is a long-term investment, you should be looking for a low total cost of ownership (TCO) for all your related costs over time.

Craft’s Initial Investment and Ongoing Costs

With Craft, you’ll need to purchase either the pro or enterprise plan. Pro comes with a one-time payment of £250 per project, and an additional annual payment to continue receiving updates. The cost of the enterprise plan will vary depending on your requirements and usage.

As mentioned earlier, the costs associated with the platform may also be high. This is due to the need for agency support across many aspects of your project, from setting up your website, to integrations, to ongoing maintenance. 

The actual costs of development with Craft may also be higher than with other CMSs because of the smaller scale and more specialist nature of the platform. 

It’s also worth mentioning that Craft CMS hosting services are more limited than those of WordPress, again likely making them more expensive.

WordPress Cost and TCO 

On the most part, WordPress is a more cost-effective platform than Craft, with a lower TCO.

WordPress is free-to-use, limiting your initial costs to just hosting, development agency fees, and post-deployment support. 

As touched on earlier, achieving a much faster time-to-market will allow you to launch a quality website quickly so you can begin gaining strong ROI right away.

Another cost-related benefit of WordPress’s ease-of-use is that if there’s bespoke development work you need your agency to complete, it will usually come at a reasonable cost. Because Craft is such a niche and technical platform, bespoke development work often comes at a premium in comparison to the more widely-used WordPress.

When the WordPress platform receives updates, it’s often fairly quick and straightforward for your agency partner to test and maintain your site.

These advantages add up to create a lower TCO for WordPress than you’ll have with other enterprise CMSs.

Conclusion 

Both Craft and WordPress are both great CMSs in their own right, and would serve most businesses. Although, it’s difficult to deny that WordPress is a much more approachable platform than Craft for the average user.

If you’re a team with a great selection of existing development skills, Craft can provide you with some innovative capabilities and could be the right platform for you. 

The key thing to remember when making this evaluation is that you should select the platform that directly aligns with your own specific circumstances and requirements. 

Every business, and every web development project, is different. Carefully consider your objectives, budget, users, in-house skills, and any other factors that may come into play. That should allow you to determine which CMS is the right one to deliver what you need. 

If you need more help finding a CMS for your new website project, read our comprehensive guide to understanding and evaluating the options for large businesses here.

Would you like these insights straight to your mailbox?

Your emailSubmit

I consent to my submitted data being processed and stored by SoBold in compliance with Privacy Policy

SoBold are delighted to announce that they have been awarded the world’s most recognised Quality Management System Standard, ISO 9001.

SoBold have worked incredibly hard over the past few years to set and follow processes and procedures as a company that ensure they are providing quality work to their clients. 

As the number of enterprise clients grows, SoBold’s ISO 9001 certification will be able to give their clients the assurances they need around SoBold’s consistency and quality services in the work they produce. 

ISO 9001 is one of the most commonly used management system across the world and SoBold believes this is going to open up considerably more opportunities with winning tenders and contracts to ensure SoBold continues to be one of the leading WordPress Website Design and Development Agencies in the UK.

As SoBold continue to scale as a business, the need for efficiency has never been greater. It is absolutely essential that all internal communication works to the same processes and agenda and the ISO 9001 certification allows this to be possible.

In order to achieve our ISO 9001 certification, SoBold worked closely with QMS International, who provide expert consultancy to businesses looking to achieve their certification. QMS have a team of over 50 consultants and auditors and they ensure the experience they provide is streamlined and uncomplicated. 

SoBold Technical Director, Sam Phillips said:

We are delighted to have been issued with our ISO 9001 certification, recognising our commitment to quality. Over the past 12 months we’ve spent a great deal of time improving and documenting our internal processes to help streamline delivery of projects and ensure we continue to deliver on the high standards we set for ourselves. Achieving this certification is a reflection of all this work.

Would you like these insights straight to your mailbox?

Your emailSubmit

I consent to my submitted data being processed and stored by SoBold in compliance with Privacy Policy

The end-to-end process of web design is made up of a number of different phases that should all inform and complement each other. 

When working with a web design and development agency, they should use their expertise and experience to guide you through this process, which consists of:

• In-depth research and careful planning
• Visual exploration and mood boards
• User experience (UX) design 
• User interface (UI) design.

Once you’ve completed each of those phases and you have a design that you’re proud of, your agency partner will be tasked with preparing your website for development.

This article will explain the process of preparing a website for development, helping you understand what’s involved, what to expect, and how to approach it.

Designing  Your Website Across Different Break-Points 

In a recent article, we explained how the purpose of your UX is to help your visitors complete a task or process on your website as easily as possible, ultimately leading them to follow a call-to-action. 

Your UX is brought to life by your UI, which includes all the visual and interactive elements of your website, from colour and font to buttons and scrolling. 

Towards the end of the UI design phase, the next step will be to roll out your designs across a number of break-points. 

Break-points are the screen sizes of devices that your design will fit within. This allows your website to be designed as responsive and optimised for use across a wide range of different devices and channels. 

This is important because certain aspects of your site may not translate down perfectly across different screen sizes. 

Here at SoBold, we design sites across the following break-points, but this may vary from agency to agency:

• 1,920px – For most external computer monitor sizes
• 1,366px – For most laptop screen sizes
• 992px – For most Notebook and iPad devices
• 768px – For most other tablet devices
• 375px – For most smartphones.

If you want your website to be designed as mobile-first, it’s important to raise it at the beginning of the project so your agency can create your wireframes in that context. However, you should only ever make that decision based on real data regarding your target audience’s preferences. 

In this case, your agency should work with you to conduct some additional research and determine the best screen size for your particular audience. This will ensure the UX designers work with the right starting point for your high-fidelity wireframes.

A Thorough Hand-Over from Design to Development 

This phase of a website project involves a process that takes a lot of careful work and close collaboration between the different teams within an agency. 

Here at SoBold, we make a point to ensure the design team talks the development team through all the work they’ve done on your mood boards, UX design, and UI design in detail. This includes explaining the decision making process behind everything they’ve designed.

While a lot of agencies will just hand the designs to the developers and ask them to start building, we believe this is something that should be treated as more of a team effort. Doing so as a core part of our process has proven to add tremendous value to the work our clients have received in recent years. 

It’s beneficial to the overall project for the developers to fully understand why the decisions have been made about the designs. It’s also important that they’re given a detailed run through of what they’re building within the context of the whole site.

For example, there may be a fairly complex block which is built early on in the development process. If the developers are made aware that slight variations of this same block will be used several times throughout the site, they can save valuable time and work more efficiently by repurposing the first block when it’s first built. 

This hand-over is crucial in ensuring the development process runs smoothly, providing you with a high-performance website that meets your expectations, delivered on time and within budget.

A Well Designed Website Ready to Be Built 

After the hand-over is complete, your agency will be able to export all your design assets and the developers will begin building your website. 

While web design may seem straightforward when explained like this, in reality it’s a complex process that requires a great deal of specialist skills and expertise. That’s why it’s so important to have the support of an agency partner you can trust and rely on to guide you. 

Working with a talented agency will ensure you’re able to create a unique design that will resonate with your target audience and help you achieve your strategic business goals through your new website. 

Keep an eye out for our upcoming blog series where we’ll walk you step-by-step through the web development process, making it far more approachable and easy to manage for you.

If you’d like to discover how generative AI technology is transforming the web design and development space, read our recent article here. 

Would you like these insights straight to your mailbox?

Your emailSubmit

I consent to my submitted data being processed and stored by SoBold in compliance with Privacy Policy