Projects

Case study

Torimpex — Performance and Security

Torimpextorimpex.pl

WooCommerce
Performance
Security
2FA
Core Web Vitals
Bots
Caching

WooCommerce — pages took dozens of seconds and the admin was open to brute-force. Fragment cache, Core Web Vitals, 2FA and bot mitigation → faster store and tighter backend.

Performance and security — Torimpex

Context

Part of an ongoing engagement on torimpex.pl (WooCommerce grocery wholesale, since 2023) — this thread: performance and security. The store was slow and unstable under traffic; scrapers and AI crawlers further loaded PHP and the database. The admin panel needed access hardening (2FA, password rotation).

Scope

  • Fragment cache and TTFB — caching dynamic blocks, reducing SQL loops and improving Core Web Vitals; bots get a cached response instead of hitting PHP/MySQL.
  • Admin protection — 2FA, enforced password rotation, monitoring of unauthorized logins.
  • Bot limits — ASN rate limiting, WAF rules for AI crawlers, honeypots; ASN blocks under aggressive traffic.
  • Maintenance — updates, audits and ongoing technical care.

Result

  • Catalog no longer drops connections under load; admin is no longer an open brute-force target.
  • WooCommerce performance + hardening — fragment cache, CWV, 2FA, ASN/WAF bot mitigation.