This is a case study of a small business website we designed and built. To see whether the design held up, we read its own edge logs over a 28-day window. Nothing here is a client’s data, and the site is not named. It is a Next.js application on Node behind a reverse proxy, and a worked example of how a modern site is actually attacked, and how building it carefully answered that. Start with the single most-requested URL in those 28 days: /wp-admin/install.php, hit 518 times. The site has nev...