diff --git a/app/priv/blog/engineering/2026/10-23-reduced-the-attack-surface-of-an-old-wordpress-blog-by-shutting-it-down.md b/app/priv/blog/engineering/2026/10-23-reduced-the-attack-surface-of-an-old-wordpress-blog-by-shutting-it-down.md
new file mode 100644
index 0000000..2bd26f3
--- /dev/null
+++ b/app/priv/blog/engineering/2026/10-23-reduced-the-attack-surface-of-an-old-wordpress-blog-by-shutting-it-down.md
@@ -0,0 +1,17 @@
+%{
+  title: "I reduced the attack surface of an old Wordpress blog by shutting it down",
+  author: "Willem van den Ende",
+  tags: ~w(security pi.dev),
+  description: "Converting an interactive site like a blog to a static site is now very easy. Static sites have a tiny attack surface. They are not great for interaction, but for blogs and marketing sites they may be enough, and let you sleep at night.",
+  published: true
+}
+---
+I reduced the attack surface on an old Wordpress blog by shutting it down, and then converting it to a static site from the backup, without running wordpress at all. The data, code and images was enough. It only took a single prompt (!) to get the basics done, then a few more to fix up the layout. Most of it happened while I was free to do other things.
+
+A static site conversion had been on my mind for years, but the devil is in the details, and eventually would take a couple of days of fiddling. Now most of it happened while I was taking a nap, thanks to Pi.dev and GLM 5.3 Flash, and a feedback loop so the model could do exploratory testing with a web browser.
+
+Seeing [Bert Hubert](https://www.linkedin.com/in/bert-hubert-b05452/)'s call yesterday to take your PHP server offline, and reading about 'Black October' was the push I needed. 
+
+The creaking old VM my blog ran on was fine, it had trouble responding to requests - a server that does not respond can not get hacked  😄 . So maybe there is no need to panic, but to take steps regardless.
+
+I'm happy to write out the details if you want to do the same, but I'm only going to do it if there is interest, these kind of write-ups do take time - the devil is in the details, as always.