Also on bkdevops.lk: https://bkdevops.lk/wordpress-speed-checklist-sri-lanka-smes/ ​ A slow WordPress site rarely looks dramatic—it just feels “heavy.” Visitors on mobile data in Kurunegala, Colombo, or out of town wait, tap away, and message a competitor on WhatsApp instead. For Sri Lanka SMEs that live on enquiries, speed is not a vanity metric. It is how many people ever reach your form, call button, or product page. ​ This guide is a practical speed checklist —what to check first, what to fix yourself, and when hosting or a deeper cleanup is the real bottleneck. It pairs with our WordPress maintenance checklist (routine upkeep) and choosing web hosting for Sri Lanka SMEs (when the server is the weak link). It is not a Core Web Vitals lab manual. ​ Why site speed matters for local leads ​ Most of your customers browse on phones. They may be on 4G that fluctuates, or Wi‑Fi that is busy at peak hours. A homepage that feels instant on your office fibre can still crawl for a pa...

Also on: https://bkdevops.lk/wordpress-maintenance-checklist-sri-lanka-smes/ A WordPress website is not “set and forget.” For Sri Lanka SMEs—shops, clinics, hotels, tuition centres, and service firms in Kurunegala and beyond—quiet neglect often hurts more than a dramatic hack. Pages slow down, forms stop sending, plugins conflict after an unsupervised update, or an old admin account sits unused for months. This guide is proactive upkeep : a checklist you can run monthly (plus a few weekly checks) so the site stays trustworthy. It is not incident recovery. If you already suspect malware or blacklisting, read signs your WordPress site is hacked and how to recover firstthen return here to stay healthy. Why routine maintenance beats firefighting Most local businesses use WordPress for leads: contact forms, WhatsApp CTAs, product pages, or bookings. When upkeep slips, you often see broken layouts after unsupervised updates, spam forms, slow mobile pages, outdated plugins, or ex-staff...

Also on: https://bkdevops.lk/wordpress-site-hacked-signs-recovery/ If your WordPress site suddenly looks wrong, sends spam, or Google warns visitors away, you may be dealing with a compromise. For Sri Lankan service businesses, a hacked site can mean lost leads, damaged trust, and days of downtime. This guide covers warning signs, a calm recovery sequence, and ways to reduce repeat attacks. Common signs your WordPress site is hacked 1. Unexpected redirects or fake pages Visitors may be sent to gambling, pharma, or unrelated sites. Sometimes only mobile users or Google visitors are redirected. 2. Strange admin users or locked-out access New administrator accounts appear that nobody created, or the usual login fails while someone else has access. Check Users in wp-admin. 3. Spam content, SEO spam, or injected links Hidden pages, odd posts, or footer links you never added are classic signs. Search Google for site:yourdomain.lk . 4. Browser or Google Safe Browsing warnings Chrome or Searc...

Also on: https://bkdevops.lk/local-seo-basics-sri-lanka-service-businesses/ If you run a clinic, hotel, garage, salon, tuition centre, or any service business in Sri Lanka, most of your best customers are nearby—or at least searching with a place in mind. Local SEO is how you show up for those searches: “dentist near Kurunegala,” “web design Sri Lanka,” “AC repair Negombo,” and similar queries. You do not need a huge ad budget to start. You need clear business information, a useful website, and steady reviews. This guide covers the basics that matter for regional SMEs—without jargon overload. What local SEO actually means Local SEO helps search engines connect your business to a place and a service. When someone searches with intent + location (or Google detects they are nearby), you want to appear in: The Map Pack (the map + three business listings) Organic results for local landing pages Sometimes Knowledge Panel / Business Profile details For many Sri Lanka service firms, the Map P...

Also on: https://bkdevops.lk/choosing-web-hosting-sri-lanka-smes/ Picking hosting is one of those decisions that feels technical—until the site goes down on a busy Friday or email stops reaching customers. For Sri Lankan SMEs, hosting should be boring in the best way: stable, recoverable, and matched to how you actually use the website. This article focuses on decision criteria for small and mid-sized businesses , not a vendor scorecard. Start with how you use the site Different sites need different hosting shapes: Brochure / lead-gen WordPress site — shared or managed WordPress hosting is often enough if traffic is moderate and you keep plugins lean. Online store/bookings — needs stronger resources, reliable SSL, good database performance, and tested backups. Email on your domain — confirm whether email is included, limited, or better on a separate mail provider. Multiple sites — one account can host several sites, but one malware incident can affect neighbours on the same plan. W...

Also on: https://bkdevops.lk/domain-and-business-email-setup-checklist/ A polished website on a random free address rarely builds the same trust as one yourbrand.lk with a matching email like hello@yourbrand.lk . For Sri Lankan SMEs—shops, clinics, agencies, hotels—the domain and mailbox are part of how customers decide you are real. This checklist walks through registering a domain, pointing it correctly, and launching business email without the usual DNS confusion. Follow it in order; most “email not working” problems come from skipped steps. Before you start: decide ownership and naming Pick a name you can live with Prefer a name that matches your brand and is easy to say on a phone call Check spelling variants customers might type Avoid names that are hard to pronounce in Sinhala, Tamil, and English conversations Confirm trademark/brand conflicts at a basic level before you print signage Common extensions for local businesses include .lk and .com . Decide who owns the accoun...

  We’ve all been there: choosing a complex password with uppercase letters, symbols, and numbers, thinking our accounts are “unhackable.” But in 2025, a password alone is no longer enough. Data breaches and sophisticated phishing attacks have made passwords the weakest link in the security chain. Enter  Two-Factor Authentication (2FA) —the single most effective way to protect your website, hosting account, and digital identity. What is 2FA? Two-factor authentication is a security process that requires  two different forms of identification  before granting access to an account. It relies on a combination of: Something you know:  Your password or PIN. Something you have:  A smartphone (authenticator app), a physical security key (YubiKey), or a one-time code sent via SMS. Why 2FA is a Game-Changer for Website Owners 1. Neutralises Stolen Passwords According to recent security data, stolen credentials are the source of nearly  90% of basic web applicatio...