Guides
Guides worth the reading time
Three subjects we can write about from deployment experience rather than from research. Each one includes the parts that argue against buying from us.
Private AI
Private AI for business
A practical guide to running AI inside your own business, written for the person who has to decide whether to do it rather than for somebody evaluating model benchmarks.
Read the private ai guide
How self-hosted AI actually works for a business: what it is, when it beats a cloud subscription, what hardware it needs, what it costs, and how to deploy it without a failed project.
What does it cost to self-host an AI model?
The question has no single answer, but it has a reliable method. Here is how to get a number you can defend, using your own figures rather than ours.
Can a private AI system meet HIPAA requirements?
Self-hosting removes the hardest part of the problem. It does not make you compliant, and any vendor implying otherwise is selling you a risk.
Should you fine-tune a model or use retrieval?
Nearly everyone who asks us to train a model on their data wants retrieval. The distinction is worth ten minutes because getting it wrong costs months.
AI receptionists
AI receptionists, honestly
Written for a business owner deciding whether to put an AI on their phone, including the parts that argue against it.
Read the ai receptionists guide
What an AI receptionist actually does, how it differs from an answering service, what it costs, where it fails, and how to deploy one without annoying your customers.
How long does an AI receptionist take to set up?
Days, not months — but the days are spent on things most buyers do not expect.
Can an AI receptionist handle emergency calls?
Yes — and it is the single thing to interrogate hardest before you buy, because getting it wrong is worse than having no AI at all.
Will your customers hate it?
Some will. The question is what they are comparing it against, and whether you have made the human path easy.
AI governance
AI governance without the framework theatre
Most AI governance material is written for organisations with a compliance department. This is written for a business with AI already in production and nobody watching it.
Read the ai governance guide
A practical AI governance guide for businesses: what controls actually matter, how to build an AI inventory, how to verify output, and how to document decisions defensibly.
How to build an AI inventory
The first governance control, the one everything else depends on, and the one that finds money immediately.
A one-page AI policy
Long policies do not get read, and an unread policy is not a control. Here is the short version, and what each part is for.
How do you verify AI output?
The weakest point in most AI deployments is not the model. It is the assumption that somebody is checking.
Website security
Website security for small businesses
Most small-business websites were built once and never looked at again. In October 2026 that stopped being a theoretical problem. This is what to check, in plain English, and what to do about it.
Read the website security guide
A practical website security guide for small businesses: what PHP2Shell (CVE-2026-109618/9) means for your site, the 27 checks that matter, and how to fix them. Free Feli-Scan included.
What is PHP2Shell, and how do I fix it?
Two critical flaws in PHP itself. Here is what they mean for your website and the order to fix things in.
A WordPress security checklist you can finish in an afternoon
WordPress is safe when it is maintained. Most compromised WordPress sites were not maintained. Here is the short list.
Can someone send email pretending to be my business?
Yes, unless two small DNS records are in place. This is one of the most common gaps a Feli-Scan finds, and one of the cheapest to fix.
Rather just ask?
Most of what is written here started as a question on a call.