Case studies
Click on a case to read the details.
NapoliBene.it
Security
RFI attack via SVG with Base64 payload. Webshell installed on the server. Migration to KeideaCMS with no downtime. Native WAF active with real-time Telegram alerts.
RomaBene.it
SEO & Migration
News outlet with over 400 articles invisible on Google. Migrated to KeideaCMS in March 2026. Result: 436 pages indexed, steadily growing impressions, native SEO structure active.
blog.fallowme.it
Migration & Security
Website with several issues related to major security vulnerabilities and duplicate canonical URLs. Through a well-known exploit found on the Joomla 5 version, attackers had uploaded a shell that collected administrator data.
blog.opportunitycommerce.com
Migration
Website with several issues related to uncompressed images. The home page took over 4 seconds to load. Current loading time: 0.3 seconds. A significant improvement, a gain of 3.7 seconds.
Pellegrinobrothers.it
WordPress Migration
International agency of Floriano Pellegrino and Isabella Potì. Extremely slow WordPress site, home page not loading, non-responsive design. Migrated to KeideaCMS with a fully custom design. Result: high-performing site, tailor-made design, zero plugin dependencies
The situation today
The integrated KeFirewall monitors every request in real time. The Telegram notifications received on
April 28, 2026 show the WAF in action: a blacklisted IP blocked at 11:44 AM, a scanner bot blocked at 1:17 PM while attempting path probing on /wp-includes/wlwmanifest.xml — a WordPress path that doesn't exist on KeideaCMS, immediately recognized as reconnaissance.
KeideaCMS's FileUploadScanner analyzes every file with 6 layers: PHP detection, webshell signatures, Shannon entropy, polyglot detection, MIME type verification, extension blacklist. The type of attack that compromised NapoliBene is blocked before it even reaches the filesystem.
Security
NapoliBene.it
- RFI: Attack vector via SVG + Base64
- 0: Hours of downtime during migration
- 24/7: WAF monitoring with Telegram alerts
The problem
NapoliBene.it ran on Joomla with the Astroid template. A Remote File Inclusion vulnerability allowed an SVG file with a Base64-obfuscated payload to be uploaded. A webshell was installed from that file — full backdoor access to the filesystem, the database, and the credentials configured on the server.
The compromise wasn't visible to users: the site continued to work normally on the surface. The vector — RFI via SVG with Base64 encoding — is designed to bypass systems that only check the file extension without analyzing its actual content.
Why Joomla + Astroid was vulnerable
The problem was the dependency architecture. Astroid handles media file uploads with its own validation pipeline — separate from Joomla's. Validation stopped at the extension: SVG is considered an image, so it was accepted. The content wasn't analyzed. With 20-30 third-party components installed, each component is a potential attack surface with its own independent update cycle.
The migration
KeideaCMS includes a native importer from Joomla. Articles, categories, images and URLs were migrated while keeping 301 redirects to preserve SEO rankings. The site remained operational throughout the entire process — no maintenance window, no editorial interruption.
The migration
Migration completed with KeideaCMS's native Joomla importer around March 20, 2026. URLs mapped with 301 redirects, XML sitemap regenerated with canonical content only, native Schema.org configured for every editorial section. Zero downtime, editorial publishing never interrupted.
The results in Search Console
The GSC indexing chart shows a clear curve: from almost zero indexed pages at the end of February, to 436 indexed pages by the end of April — a green curve growing steadily from the moment of migration. Daily impressions went from 3-14 to a peak of 43 in a single day. The economy and finance page reached an average position of 5.1.
What the migration changed at the SEO level: semantic URLs with no dynamic parameters, XML sitemap with canonical content only, native Schema.org on every article (Article, NewsArticle, BreadcrumbList), automatic canonical tags, per-page meta tags manageable by the editor without plugins.
Case Study 02 — SEO & Migration
RomaBene.it
- ~5 Pages indexed before the migration
- 436 Pages indexed after the migration
- ~30 days From migration to first GSC results
The problem
RomaBene.it is a news publication focused on Rome — economy, real estate, lifestyle, culture. Over 400 articles published on Joomla, almost invisible on Google. Search Console data from the pre-migration period (January-mid March 2026) show daily impressions between 3 and 20, unstable rankings, zero clicks on many keywords covered by the content.
The technical causes
Joomla generates URLs with dynamic parameters that Google struggles to normalize. The XML sitemap included non-canonical URLs, system pages and parameterized variants — scattering crawl budget across dozens of versions of the same page. Schema.org structured data required third-party extensions with partial integration. Result: Google was unable to correctly read a significant editorial archive.
The migration
Migration completed with KeideaCMS's native Joomla importer around 05 May 2026. URLs mapped with 301 redirects, XML sitemap regenerated with canonical content only, native Schema.org configured for every editorial section. Zero downtime, editorial publishing never interrupted.
The uploaded malware
As shown in the image, the situation was critical. The malware that had been uploaded would have allowed the user to gain complete control of the server.
After the migration to KeideaCMS we activated (natively) the software's firewall features.
As can be seen from the image, the system immediately blocked numerous attacks and permanently banned several IPs.
Case Study 03 — SEO & Migration & Security Audit
blog.fallowme.it
- ~0 Pages indexed before the migration
- 130 Pages indexed after the migration
- WAF active 24/7
The problem
blog.fallowme.it is the blog that enriches the current e-commerce site — fallowme.it, a well-known Italian sex shop. Over 130 articles published on Joomla, almost invisible on Google. Search Console data from the pre-migration period (January–mid-April 2026) showed scandalously low daily impressions, unstable rankings, zero clicks on many keywords covered by the content.
The technical causes
As already seen with Romabene, Joomla generates URLs with dynamic parameters that Google struggles to normalize. The XML sitemap included non-canonical URLs, system pages and parameterized variants — scattering the crawl budget across dozens of versions of the same page. The Schema.org structured data required third-party extensions with only partial integration. The result: Google was unable to properly read a significant editorial archive.
The serious damage
By exploiting a known Joomla 5 vulnerability, the blog was unfortunately compromised and several highly dangerous webshells were uploaded, preventing Alessandro (the owner) from managing the blog.
The migration
Migration completed with KeideaCMS's native Joomla importer around May 6, 2026. URLs mapped with 301 redirects, XML sitemap regenerated with canonical content only, native Schema.org configured for every editorial section. Zero downtime, editorial publishing never interrupted. Thumbnails regenerated with KeideaCMS's native compressor, which interfaces with the Tinypng APIs. Savings of around 150 megabytes of excess
Post-Migration
After migrating to KeideaCMS we activated (natively) the software's firewall features.
Thumbnails regenerated
The site is optimized and high-performing. You can check the score in real time on Google PageSpeed.
Case Study 04 — SEO & Migration
blog.opportunitycommerce.com
- More than 4 seconds to load the homepage before the migration
- 0.3 Loading times improved by 3.7 seconds
- WAF active 24/7
The problem
blog.opportunitycommerce.com is the blog that complements the current e-commerce site — opportunitycommerce.com, a well-known Italian site for selling furniture and appliances offering quality products at competitive prices. The articles published on the old Joomla-based blog were invisible to Google, and the site was extremely slow.
The technical causes
As already seen for Romabene, Joomla generates URLs with dynamic parameters that Google struggles to normalize. The XML sitemap included non-canonical URLs, system pages, and parameterized variants — wasting crawl budget on dozens of versions of the same page. Schema.org structured data required third-party extensions with partial integration. The result: Google was unable to properly read a significant editorial archive.
The serious damage
Joomla's commercial themes come bundled with a huge number of plugins that, in addition to creating enormous security gaps, make the website extremely heavy
The project
Pellegrino Brothers is the international communication agency founded by Michelin-starred chefs Floriano Pellegrino and Isabella Potì — Bros' one Michelin star in Lecce, collaborations with Maserati, Nike, Forbes, Vanity Fair, MasterChef.
The previous website was on WordPress. The homepage wouldn't open due to loading times. The graphics were completely out of line with the brand identity. An agency that sells communication and image cannot afford a website that doesn't load and doesn't reflect its own positioning.
The solution
Completely bespoke graphic design, built around Pellegrino Brothers' visual identity. No template, no generic page builder — every section designed to reflect the positioning of an international brand of gastronomic excellence.
Migration to KeideaCMS with managed infrastructure, dedicated CDN and native WAF active. The website is now available at pellegrinobrothers.it.
The result
High-performing website, homepage loading under 0.3 seconds, design that reflects the brand identity, zero third-party plugins. An international agency that builds the image of other brands now has a digital infrastructure worthy of what it sells.
Case Study 05 — WordPress to KeideaCMS Migration
Pellegrino Brothers
- WordPress: homepage wouldn't load
- Inconsistent and non-responsive graphics
- 0.3s loading after migration
- 100% custom design on KeideaCMS
- WAF active 24/7
The client
Floriano Pellegrino — Chef, Bros' 1 Michelin star Lecce. Isabella Potì — Michelin-starred chef, 158K Instagram followers. Collaborations: Maserati, Nike, Land Rover, Forbes, Vanity Fair, MasterChef.
The technical causes
WordPress with multiple plugins generates a page weight and TTFB incompatible with a brand of this level. The graphics were based on commercial themes that didn't allow the customization required by the brand's international positioning.
Does your website have the same problems?
Whether it's a security issue or a blocked ranking, we analyze your situation for free and with no obligation.
How many dead plugins do you have on your site?
Find out your WordPress security level before it's too late
They chose us
Our clients
