Nikolay Spangelets
CTO · founderI run engineering at Pleenx. Before this, a decade across frontend and backend at consumer SaaS — a lot of the boring lessons baked into Pleenx come from cleanups I've personally lived through: silent SSL expiries on Black Friday, DNS that got 'tidied up' by a junior, WHOIS auto-renews failing because a card got rotated.
I write about the unsexy half of running a web product — what breaks, how to know early, and how to stop apologizing to clients.
White-label monitoring reports: what to actually put in a client deliverable
The 'pretty PDF with your logo' isn't the value — it's what's in the report that justifies the retainer. Agency-tested template for monthly client monitoring deliverables.
2026-05-11 · 8 minMonitoring for Webflow agencies: what actually needs watching
Webflow hosts the site so you don't get traditional 'server' downtime. The failure modes are different — custom domains, SSL renewals, third-party scripts, CMS limits. Practical checklist.
2026-05-11 · 8 minSecurity headers for agencies: HSTS, CSP, X-Frame, and what your client's bank will ask
Security headers are the boring layer between 'site works' and 'site passes an audit.' Practical guide to which headers actually matter for agency-managed sites in 2026.
2026-05-11 · 7 minDNS hijack detection for agencies: how it happens and what catches it
DNS hijacks rarely look like Hollywood hacks — they're stolen registrar logins, expired domains repurposed, or a junior dev hitting the wrong button. Real attack patterns + practical detection.
2026-05-11 · 7 minDMARC for agencies: why your client's mail goes to spam (and how to actually fix it)
Client emails landing in spam isn't a Gmail bug — it's almost always missing SPF, broken DKIM, or a DMARC policy nobody set. Practical setup guide for agency operators.
2026-05-11 · 9 minCore Web Vitals for agencies: LCP, INP, CLS without the marketing rebrand
CWV affects Google rankings, but most of what gets sold to clients as 'page speed optimization' addresses metrics that don't matter. Here's what each CWV actually measures and what to fix.
2026-05-04 · 4 minWhat breaks when an SSL cert expires (and how to catch it before your client does)
Field guide to silent SSL expiry: what fails, what alerts you do and don't get, and how to catch the 30/14/3-day windows reliably.
2026-05-04 · 7 minDomain didn't auto-renew: 7 reasons your client's site went dark (and how to catch each one)
WHOIS auto-renewal fails quietly — until the WHOIS expiry date passes and the registrar parks the domain. The seven failure modes we keep seeing across agency portfolios, with detection commands and the alert thresholds that actually matter.
2026-05-04 · 8 minDNS for agencies: A, AAAA, MX, NS, TXT explained without the BIND manual
Practical DNS reference for agency operators — what each record type does, how it actually breaks in client portfolios, and the change-detection patterns that catch hijacks and accidental drift.