Magento 2 Patching at Scale
Demo monorepo showcasing approaches for distributing patches across lots of Magento 2 Projects at scale, with practical examples and best practices.
< 5 minutes
Rollout Time / site
95%
Cost Savings
Magento 2 & Adobe Commerce
Production-tested guides, tools, and insights from 8+ years of building, securing, and scaling Magento 2 stores in production.
Magento 2 (now Adobe Commerce) remains one of the most powerful and flexible ecommerce platforms available - but it demands deep operational knowledge to run well. From navigating Adobe's patching strategy to configuring Varnish correctly, from defending against real-world attacks to building reliable deployment pipelines, there's a lot that separates a Magento store that works from one that works well.
This resource hub brings together everything I've written about Magento across blog posts, technical documentation, and open-source projects. Whether you're a Magento developer looking for debugging tips, a DevOps engineer building CI/CD pipelines, or a technical lead evaluating your store's security posture — you'll find practical, production-tested content here.
Every guide is based on 8+ years of hands-on experience operating Magento stores in production for UK agencies and merchants. I've responded to active security incidents, analysed real malware samples, reported vulnerabilities to Adobe, and built CI/CD tooling used across multiple teams — not theoretical knowledge.
Magento Security
CVE response guides, malware analysis, security hardening, and DevSecOps practices for Magento 2 stores.
22 articles & guidesMagento DevOps
CI/CD pipelines, deployment automation, infrastructure as code, and operational best practices.
34 articles & guidesMagento Performance
Varnish caching, frontend optimisation, build tuning, and performance monitoring for production stores.
9 articles & guidesMagento AI
Practical AI-assisted development for Magento 2 — what works, what needs oversight, and how to do it safely.
1 articles & guidesLatest Magento Articles
Recent blog posts covering Magento development, security, DevOps, and more.
Operational Maturity Before AI Velocity: What Your Magento Team Needs First
AI is a force multiplier for Magento development — but it multiplies whatever processes you already have. Here's the operational stack your team needs before leaning heavily into AI-generated output.
Copy Fail 2 / DirtyFrag (CVE-2026-31431): Container Escape & LPE Follow-Up
The sequel to CopyFail: DirtyFrag extends the CVE-2026-31431 exploit chain to container escape. Covers the new attack surface, detection, and mitigations beyond the algif_aead workaround.
CopyFail (CVE-2026-31431): Linux Kernel LPE — Detection, Mitigation & Distro Patch Status
CVE-2026-31431 is a Linux kernel local privilege escalation via algif_aead. Covers exploit mechanics, detection, the algif_aead mitigation, and patch status across Ubuntu, Fedora, Debian, RHEL, and more.
Magento 2 Polyshell RCE: Technical Breakdown, PoC & Patch Guide
Deep dive into the Magento 2 Polyshell remote code execution vulnerability — how it works, how to test if you're affected, and how to apply the patch.
Adobe's Isolated Patch Strategy: A Community Response
Adobe's new monthly isolated patch approach for Magento creates maintenance burden. Here's how a community meta-package can help restore sanity to security patching.
Strengthening Magento 2 Security in CI/CD Pipelines with Sansec Ecomscan
Learn how to integrate Sansec Ecomscan into Magento 2 CI/CD pipelines to detect malware, enforce security patches, and secure build artifacts. Step-by-step guides for GitHub Actions and Bitbucket Pipelines included.
Documentation & Guides
In-depth technical docs and step-by-step guides for Magento developers and operators.
Getting Started with Magento
Setup guides and essential configuration for new Magento projects
Magento Development
App/code structure, debugging, and RequireJS guides
Magento Operations
Updates, patching, media management, and SCD optimisation
Magento Security
CVE response guides and pre-production security
Magento Cloud & Commerce
Adobe Commerce Cloud configuration and store codes
Magento Debugging
Database schema comparison and troubleshooting tools
Open-Source Projects & Tools
Magento-related tools, modules, and infrastructure projects.
Ephemeral Feature Environments
Automated deployment of temporary Magento 2 environments for pull requests, using anonymised production data to reduce risk and speed up reviews
Removed
Blocked Releases
Reduced
Production Bugs
CosmicSting Vulnerability Validator
Public tool for validating Magento stores against the critical CosmicSting vulnerability (CVE-2024-34102)
6,500+
Stores Scanned
2,300+
Vulnerable Stores
Ansible Ecomscan Role
Ansible role for either triggering ondemand Sansec Malware scans or configuring scheduled scanning across an entire fleet of distributed infrastructure
✅
Galaxy Role
✅
Molecule Tests
Fully Automated Magento Updates
Zero-touch Magento core and module updates using Dependabot, automated E2E testing, and continuous deployment - enabling non-technical teams to manage security patches independently.
95%
Time Saved
Same Day
Patch Speed
FishPig WordPress Theme Builder
Composer package for the FishPig WordPress theme with automated build system, enabling modern dependency management in professional WordPress workflows via Packagist.
Packagist
Registry
Automated
Updates
Magento 2 development and platform engineering
I’ve been working with Magento for 8+ years, based in Cardiff, Wales. Focusing on performance, security, and scalability across UK agencies and merchants. Happy to connect with other developers and engineers.