Skip to main content
Home

Main navigation

  • Services
  • Accessibility
  • Partner Program
  • Blog
    • All Blog Posts
    • Ask Freelock
    • Dev Corner
    • Sustainable/Open Business
    • Off Topic
    • Newsletters
  • About
    • About Freelock
    • Meet the Team
    • Portfolio
    • Client Feedback
    • Typical Hosting Options
    • Invoice Payment
    • Advent 2025 - 24 days of accessibility
  • More ...
    • Topics
      • Reach
      • Engagement
      • Delivery
      • Security
      • Performance
      • Usability
    • Analytics
    • Support and Improvements
      • Drupal Development
      • WordPress
      • Migration
Grand Prismatic, Yellowstone National Park
August 2026

For the Long Haul: AI can build it. Who’s maintaining it next year?

Featured Story

WordPress Has Thousands of Maintainers. Does Your Replacement?

Last month, a critical WordPress vulnerability triggered emergency patching across the web — and reignited a familiar argument: if WordPress keeps having security problems, why not let AI build something new instead?

It’s a reasonable question.

AI has made software dramatically cheaper and faster to create. But somebody still has to understand it, patch it, test it, and keep it running eighteen months from now.

That’s the part of the “AI instead of WordPress” pitch we think is getting overlooked.

Read more

A couple weeks on the road

We've spent a fair amount of August driving to and from Idaho. Our daughter headed out for a two-week NOLS backpacking trip, which meant one road trip to drop her off and another to pick her up.

We took the scenic route home: Grand Teton, Yellowstone, Beartooth Pass, Grand Prismatic, Old Faithful and Artist Point. At Grand Targhee we hiked up Fred Mountain and, in an arrangement I highly recommend, rode the chairlift back down. Our daughter even managed to fit in some horseback riding after two weeks carrying a backpack.

It was also a good excuse to get away from screens for a while — which, after the amount of thinking we've been doing about AI lately, was welcome.

Against Inevitability

Earlier this summer I tried to put into words something bigger than our position on any particular technology.

There's a story in tech that consolidation is inevitable: bigger platforms, bigger clouds, bigger AI models, fewer companies controlling more of the infrastructure everybody depends on.

We don't think it is.

Against Inevitability is about why Freelock continues to bet on open source, ownership, diversity, human-scale systems and small organizations cooperating instead of consolidating — and why we think those choices matter even more in the age of AI.

As I wrote there: “Inevitability is a sales pitch.”

Read Against Inevitability →

Case Study

From Drupal 5 to Drupal Canvas: Keeping KSER on the Air Through Two Decades of the Web

KSER is a community radio station. Community radio doesn’t get downtime — or a huge IT budget.

We started maintaining KSER’s Drupal 5 site in 2013, even though Drupal 5 had already reached end-of-life. For more than a decade, we kept it secure, stable, and useful while the station put its resources where they mattered most.

Now KSER has a new home on Drupal 11 and Drupal CMS, with Drupal Canvas for easier content management and a persistent audio player that keeps the station streaming while visitors move through the site.

Sometimes the right answer isn’t “rebuild now.” It’s maintain what you have well, then replace it when the time is right.

Read More
Visit Site

Freelock News

We published our AI Use Policy

We use AI a lot. We also think companies using it should be clear about how.

Our new AI Use Policy spells out where we use AI, how we handle client information, and where human review and responsibility fit into the process. It's the practical companion to Against Inevitability: AI is useful technology, not something we think should be adopted uncritically just because everyone says it's inevitable.

Read our AI Use Policy →

Making WordPress hosting harder to knock over

We've been doing a lot of work behind the scenes on high-traffic WordPress hosting.

For one of our clients, that has included dialing in Nginx FastCGI caching, blocking attack patterns that were tying up WordPress workers, and building better ways to handle the traffic spikes their newsletters generate.

One interesting piece: rather than permanently paying for substantially more server capacity, we're working on cache warming and automatically turning stronger bot protection on when it's actually needed. The goal is to handle the peaks without tripling the idle hosting bill — and without making another giant internet intermediary such as Cloudflare a required part of the architecture.

Taming the premium-plugin mess

WordPress's premium plugin ecosystem has another problem: every vendor seems to have its own licensing system.

That gets particularly painful when copying production databases into development environments. Suddenly plugins think they've moved, licenses need to be reactivated, and somebody has to go find credentials in a collection of vendor dashboards.

We're building tooling to export and restore that license state automatically, and rolling it into a new WP Flake project modeled after the Drupal Flake environment we've been using for Drupal development.

It's not glamorous work. It is exactly the sort of work that makes maintaining a site substantially less painful six months or six years from now.

That’s really the theme of this issue: build what makes sense, maintain it well, and don’t give up control of the things your organization depends on.

If your site is getting harder to maintain, harder to secure, or harder to understand, get in touch. We’re happy to take a look.

And if you want the next issue — including a follow-up on what “getting close” really means for an AI-assisted migration — make sure you’re on the list.

 

Tags

  • Maintenance
  • WordPress
  • Artificial Intelligence

Recent Rants

software maintenance security patch vulnerability
🕑Aug 27, 2026 🖋John Locke 💬0

WordPress Has Thousands of Maintainers. Does Your Replacement?

Last month, a critical WordPress vulnerability triggered emergency patching across the web — and reignited a familiar argument: if WordPress keeps having security problems, why not let AI build something new instead?

It’s a reasonable question.

AI has made software dramatically cheaper and faster to create. But somebody still has to understand it, patch it, test it, and keep it running eighteen months from now.

That’s the part of the “AI instead of WordPress” pitch we think is getting overlooked.

sustainable business icon
Sustainable/Open Business
Drupal developer local environment setup tools
🕑Aug 01, 2026 🖋John Locke 💬0

Zero to new Drupal site in 133 seconds

Gabor asked in Slack about how people contributing to Drupal manage multiple different Drupal versions, and different contributed module branches, when using AI agents:

dev corner icon
Dev Corner
WordPress security vulnerability hacker cyberattack website
🕑Jul 21, 2026 🖋John Locke 💬1

We Patched wp2shell in 4 Hours. On a Friday Afternoon.

On July 17, WordPress shipped an emergency security release for a vulnerability chain now being called wp2shell.

sustainable business icon
Sustainable/Open Business
hacker cybersecurity website breach recovery
🕑Jul 09, 2026 🖋John Locke 💬0

Tempting Fate: What Happened When One of Our "Protected" Sites Got Hacked

A real client site got hacked and lost 35GB of files overnight. Here's how we diagnosed it, recovered in a few hours, and what we changed after.
sustainable business icon
Sustainable/Open Business
workshop board of old-school woodworking tools
🕑Jun 12, 2026 🖋John Locke 💬0

Against Inevitability

What Freelock is for, and what we're against
sustainable business icon
Sustainable/Open Business
fragmented data, multiple, coding agents, directory structure, context markers, documentation
🕑Jun 02, 2026 🖋John Locke 💬0

"Argo-nizing" Our Platform for AI Development

How grouping related repos into a single parent directory made AI coding assistants significantly more useful
dev corner icon
Dev Corner
Website management, Drupal, WordPress, security, automation, configuration management.
🕑May 28, 2026 🖋John Locke 💬0

Every Night, Argo Watches

While your site is running, things change. A content editor tweaks a configuration setting. A security vulnerability surfaces in a dependency. A production fix gets applied directly instead of going through the normal release process.

sustainable business icon
Sustainable/Open Business
Website security, data breaches, ransomware attacks, recovery solutions, cybersecurity practices
🕑May 19, 2026 🖋John Locke 💬0

Your Website Will Be Attacked. Here's How We Make Sure You Survive It.

The question used to be whether your website would face a serious security threat. That question has been answered. The question now is whether you'll be ready when it happens — and whether you can recover cleanly when something gets through.
sustainable business icon
Sustainable/Open Business
AI vulnerabilities, security incidents, resilience, Drupal WordPress, cybersecurity
🕑May 18, 2026 🖋John Locke 💬0

The Rules Have Changed: Security in the Age of AI-Assisted Attacks

Security is getting dramatically harder and more expensive. AI is simultaneously driving an explosion in vulnerability discovery and weaponizing the exploits that follow. The question for every organization with anything online is no longer whether to invest in resilience — it's whether that investment is already in place before the next incident arrives.
dev corner icon
Dev Corner
performance race track wrenches tuning speed obstacles
🕑May 06, 2026 🖋John Locke 💬0

When Your WordPress Site Launches Into a Performance Crisis

A real-world post-mortem on 15 performance issues we fixed in 4 days — and what every WordPress site owner should know before going live.
dev corner icon
Dev Corner

Footer

  • Contact
    • +1 206.577.0540
    • Sitemap
  • Freelock Blog
    • Ask Freelock
    • Dev Corner
    • Newsletters
    • Sustainable/Open Business
    • Topics
  • Services
    • Website Maintenance
  • About Us
    • Our Team
    • Client Feedback
    • Portfolio
  • Policies
    • Acceptable Use Policy
    • Copyright Infringement Policy
    • AI Use Policy
    • Privacy Policy
    • Security Statement
    • Standard Contract Terms

Contact

We are located in beautiful Seattle, WA.

 Freelock LLC
 PO Box 9625
 Seattle, WA 98109

User Menu

Social media

  • BlueSky
  • GitHub
  • LinkedIn
  • Mastodon
  • YouTube

1995-2026 Freelock LLC. Neonbyte theme by Dripyard.