# Ideas: custom software, AI and cybersecurity for SMEs

Custom software and AI projects for SMEs and healthcare, updates not to put off, vulnerabilities to close. What is happening, what to do and what we did on the 110+ servers we manage. Every article cites its sources.

- [Google Workspace, Microsoft 365, Proton or Kerio: which email for your business](https://cloudfactory.it/en/ideas/business-email-google-workspace-microsoft-365-proton-kerio/index.md): Google Workspace, Microsoft 365, Proton Mail and managed Kerio Connect: prices, privacy, where data lives and when each one makes sense, with the migrations we have done.
- [Getting found by ChatGPT and AI assistants: what you really need and what you can skip](https://cloudfactory.it/en/ideas/get-found-by-chatgpt-and-ai-assistants/index.md): Rules for AI bots, Content Signals, a Markdown version, llms.txt: what we do on the sites we manage, in what order, and what we leave out because it is not needed.
- [PHP2Shell: our perimeter, third-party rescues and rebuilt hosting](https://cloudfactory.it/en/ideas/php2shell-perimeter-rescues-rebuilds/index.md): Inventory, patching, mitigations on end-of-life systems, compromise checks and rebuilds from scratch: the method we used after PHP2Shell, including on servers that are not ours.
- [The death of WordPress? What is really changing and what to do with your website](https://cloudfactory.it/en/ideas/is-wordpress-dead/index.md): From 43% to 40% in nine months: why WordPress is losing share, what developers say, Bedrock and headless as middle paths, and a grid to decide whether to stay or move.
- [Two critical PHP vulnerabilities: what to do, and what we did](https://cloudfactory.it/en/ideas/critical-php-vulnerabilities-october-2026/index.md): CVE-2026-109618 and CVE-2026-109619: versions to install, temporary mitigations and the method we followed on the day of the fix, from inventory to verification.
- [Custom software with AI: when to build it and when to buy](https://cloudfactory.it/en/ideas/custom-software-ai-smes/index.md): Software is not in crisis: the way it is sold is. Data, risks and a practical grid for deciding what to build and what to buy.
- [Custom software in healthcare with AI: what you can build and where to stop](https://cloudfactory.it/en/ideas/custom-software-healthcare-ai/index.md): GDPR, NIS2, medical devices and the AI Act: what a healthcare provider can build in-house and what it should buy certified.
- [October 2026 Patch Tuesday: what to update right now on Windows servers](https://cloudfactory.it/en/ideas/patch-tuesday-october-2026-windows-server/index.md): 1,413 vulnerabilities in one month and a zero-day already exploited: the priorities for DHCP, Active Directory, Hyper-V and Remote Desktop, and what to do with end-of-life servers.
- [Kerio Control and Kerio Connect: public exploits and updates you should not put off](https://cloudfactory.it/en/ideas/kerio-control-connect-vulnerabilities-2026/index.md): Three vulnerabilities rated 9.8 out of 10 and exploits now public: which Kerio Control and Kerio Connect versions to install, which ports to close and when to reinstall the firewall.