Hugo
2026
I Rebuilt My Site Without PHP
I rebuilt this site with Hugo, strict security checks, accessible templates and no PHP or database.
- Support, share and post layouts
I rebuilt the blog’s support cards, sharing controls and post layout around safer copying, progressive enhancement and measured dimensions.
- A threat model for a static site
A static Hugo site still has a publishing pipeline, credentials, third parties, and readers to protect. I put those risks into an OWASP Threat Dragon model and made CI keep the model tied to controls that actually exist.