# 7IT Solutions > 7IT Solutions is Lior Aharonov, a senior software engineer (in technology since 2005, independent since 2012) who designs and builds custom software, automation, eCommerce and AI tools for US businesses. Every engagement starts with a fixed-scope first phase: one outcome, one price, and the client owns the code. Every article, guide, Field Kit and service page is also available as Markdown: request it with "Accept: text/markdown", or add index.md to its URL. Contact: lior@7it.co.il or https://7it.co.il/#contact. Based in Israel, working in US business hours, English and Hebrew. ## Tools - [Store Speed Grader](https://7it.co.il/tools/speed/): tests an online store on an emulated phone with Google PageSpeed Insights, compares it with up to two competitors, names the third-party apps slowing it down, and ranks fixes by time saved. Shareable as /tools/speed/?url=&vs=, - [Automation ROI Calculator](https://7it.co.il/tools/automation-roi/): the hours and dollars a team spends on repetitive work, what automation could give back, and the budget at which automating it pays for itself - [7IT Guard, a Claude Code plugin](https://7it.co.il/tools/guard/): checks a deployed web app from outside before it ships, on the user's own machine (MIT, github.com/XLSV777/7it-guard; formerly Ship Check): security headers, public source map, email authentication, speed, accessibility, SEO and reliability, plus exposed files, keys in browser code and the Supabase or Firebase backend on an app the user owns; eight graded categories and one prioritized fix list; when the app publishes an MCP server, says whether it is on 7Maps. Install: /plugin marketplace add XLSV777/7it-guard, then /plugin install 7it-guard@7it-guard (also listed in the 7Maps marketplace). Nothing about the checked app is sent to 7IT - [MCP server for AI assistants](https://7it.co.il/ai/): the same tools, callable from ChatGPT, Claude, Cursor and other MCP clients; endpoint https://7it.co.il/mcp (Streamable HTTP, MCP 2026-07-28 and 2025 revisions, public, read-only; AI Catalog at https://7it.co.il/.well-known/ai-catalog.json, MCP Server Card at https://7it.co.il/mcp/server-card) - [7Maps, the map of MCP servers for AI agents](https://7it.co.il/7maps/): a map of software, not geography: every remote server in the official MCP registry (over 20,000 servers) checked daily with initialize and tools/list only; each tool given an automated risk estimate (read-only, needs approval or high risk); change history, agents' ratings, tool search (find_tool) and routing to the right server and tool for a task. Remote MCP server https://7it.co.il/7maps/mcp (registry name io.github.XLSV777/7maps), paid per call in USDC on Base via x402; live coverage and tools at https://7it.co.il/.well-known/7maps.json; one page per server at https://7it.co.il/7maps/s//; owners can add a server at https://7it.co.il/7maps/submit/ - [7Maps monthly report](https://7it.co.il/7maps/report/): the state of public MCP servers each month: share that answer with tools, need sign-in or do not answer, tools by risk level, tool-list changes, average tokens to load a tool list, and a table by category; JSON and CSV at /7maps/report/.json and .csv - [State of MCP uptime](https://7it.co.il/7maps/state/): one page over every server on the 7Maps map, computed daily: share answering with tools, needing sign-in or not answering, uptime distribution, median handshake by category, tool-list token cost, hour-of-day pattern; dated permanent snapshots at /7maps/state/ and JSON at /7maps/state.json - [Most reliable MCP servers by category](https://7it.co.il/7maps/reliable/): servers ranked by data only: days answering at the daily check over the last 30 (at least 14 observed), then handshake time; method stated on the page, placement never sold; JSON at /7maps/reliable.json and /7maps/reliable/.json - [7Maps compared with other MCP status and directory services](https://7it.co.il/7maps/compare/): what 7Maps, AliveMCP, Glama, MyMCPTools and PulseMCP state on their public pages, each row with its source and date - [7Maps for MCP server owners](https://7it.co.il/7maps/owners/): what every MCP server owner gets at no charge (a page on the map, daily checks, ownership verification at /7maps/claim/, five-minute checks for verified servers, down and up alerts to ntfy, Slack, Discord or a webhook, a README badge, a status widget, Atom feeds, the public count of what agents looked for) and what the owner plans add: Owner Insights (demand keywords, shown and picked counts, servers picked instead, failure reasons, comparison with similar servers; also the my_server_report MCP tool); placement on the map cannot be bought - [7Maps personal key](https://7it.co.il/7maps/me/): optional: create a random key without an account or email, send it as the X-7Maps-Key header, and see what 7Maps did for you (calls, servers checked, an estimate of the tokens saved, failures avoided); the MCP tool my_7maps_usage returns the same numbers - [7Maps plugin for Claude Code, Cursor and Gemini CLI](https://7it.co.il/7maps/plugin/): documentation of the 7Maps plugin (MIT, github.com/XLSV777/7maps; current version on the page): install commands for Claude Code (/plugin marketplace add XLSV777/7maps, then /plugin install 7maps@7maps; optional /7maps:always and /7maps:never add or remove a marked 7Maps section in a project CLAUDE.md), Cursor, Gemini CLI and VS Code; the tools and which are not charged; the optional personal key; exactly what the plugin sends and what is kept; uninstall; support through GitHub issues - [Verify 7Maps](https://7it.co.il/7maps/verify/): check in the browser that a day of 7Maps history is the one that was signed (root, Ed25519 signature, chain), and whether a 7Maps badge is genuine; machine-readable badge check at /7maps/verify/badge?server=
- [7Maps methodology](https://7it.co.il/7maps/methodology/): how 7Maps checks MCP servers: requests sent, how often, timeouts, what counts as up or down, how tool risk levels are estimated and their limits, uptime, signed daily history and how to verify it, retention, what is never collected, and opt-out; versioned, with a changelog and a JSON twin at /7maps/methodology.json - [7Maps news](https://7it.co.il/7maps/news/): short, dated notes on what changed for MCP servers and the agents that use them, each with why it matters and its sources; Atom feed at https://7it.co.il/7maps/news/feed.xml; newest: Only 7 of 72 MCP endpoints answered on the newest revision. The other 65 used older ones. (2026-10-02, https://7it.co.il/7maps/news/2026-10-02-mcp-revision-census/); MCP server cards may not live at a fixed address after all. A catalog would point to them. (2026-10-01, https://7it.co.il/7maps/news/2026-10-01-server-cards-and-trust-extensions/); Microsoft Copilot now imports Agent Plugins. The commands may still change under you. (2026-09-30, https://7it.co.il/7maps/news/2026-09-30-microsoft-copilot-agent-plugins/); ChatGPT quietly changed the rules. Some companies just lost a channel and don't know it. (2026-09-29, https://7it.co.il/7maps/news/2026-09-29-chatgpt-plugin-suggestions/); The Claude plugin directory now takes submissions. The scan starts the second you submit. (2026-09-25, https://7it.co.il/7maps/news/2026-09-25-claude-plugin-directory-portal/) ## Research - [US Store Speed Index (weekly)](https://7it.co.il/research/us-store-speed-index/): a fixed panel of 100 US online stores tested every Monday; latest (2026-10-01) median score 35/100, main content after 11.7 s. CSV at https://7it.co.il/research/us-store-speed-index/weeks.csv - [What each store app costs on a phone](https://7it.co.il/research/us-store-speed-2026/apps/): one page per common store app (Klaviyo, Google Tag Manager, Meta Pixel, Yotpo, Attentive and more) with its share of stores, size, phone time and stores with versus without it - [US Store Speed 2026](https://7it.co.il/research/us-store-speed-2026/): 7IT tested the home pages of 367 US direct-to-consumer online stores with Google PageSpeed Insights (mobile) in 2026-09. Median performance score 34/100; median Largest Contentful Paint 11.7 s in the lab; 0.8% within 2.5 s; 46.2% of stores with Chrome UX Report data pass all Core Web Vitals; median page weight 7.1 MB; median 20 third parties per store. Aggregates only, CC BY 4.0, CSV at https://7it.co.il/research/us-store-speed-2026/aggregates.csv - [US Store Accessibility 2026](https://7it.co.il/research/us-store-accessibility-2026/): automated accessibility audit of 363 US stores; 86.8% fail at least one machine check, median score 92/100 - [AI Shopper Readiness 2026](https://7it.co.il/research/ai-shopper-readiness-2026/): 307 US stores checked for AI shoppers; 50.8% give a product page complete machine-readable data, 0% block an AI search crawler - [US Store Email Authentication 2026](https://7it.co.il/research/us-store-email-auth-2026/): email authentication of 360 US stores; 66.1% enforce DMARC, 29.7% publish a policy that blocks nothing - [AI-Built Apps Security Hygiene 2026](https://7it.co.il/research/ai-built-apps-2026/): security hygiene of 436 apps built with AI builders; 93.6% ship with no Content Security Policy ## Fixed-price offers - [Store Speed Sprint](https://7it.co.il/offers/speed-sprint/): $2,900 fixed, 1 to 2 weeks: main content under 2.5 s in Google's phone test on home, collection, product and cart pages; if the target is missed, the next week is on 7IT - [Automation Sprint](https://7it.co.il/tools/automation-roi/): $3,900 fixed, 2 to 4 weeks: one workflow automated end to end, up to three systems ## Services - [Custom Software](https://7it.co.il/services/custom-software/): Web applications, internal tools and platforms, designed and written by the person you talk to. You own the code, the data and the keys from day one. - [Automation & Integration](https://7it.co.il/services/automation/): Connect the tools you already use so data moves once, correctly, without anyone copying it by hand. CRMs, accounting, inventory, payments, messaging. - [eCommerce](https://7it.co.il/services/ecommerce/): Custom Shopify apps, WooCommerce development, and headless storefronts for the rare stores that earn one. Fewer plugins, faster pages, one source of truth. - [AI-Built Apps](https://7it.co.il/services/ai-built-apps/): Lovable, Replit, Bolt or your own prompts got you a working app. Before customers, payments or real data touch it, a senior engineer checks what is exposed, makes sure every account and key is in your name, and connects it to the systems the business runs on. - [AI Tools](https://7it.co.il/services/ai/): Assistants and automations grounded in your own documents and data, scoped to answer only what they know, and handing the rest to a human fast. ## Work - [customs-invoice.com](https://7it.co.il/work/customs-invoice/): A platform for shippers, brokers and importers: compliant commercial invoices, EU CBAM cost calculations and tamper-evident PDFs. - [Loxu](https://7it.co.il/work/loxu/): A content protection platform that embeds forensic tracking into shareable links and exports court-ready evidence. - [LeO-Optic](https://7it.co.il/work/leo-optic/): A direct-to-consumer contact lens store on a headless stack: a Next.js storefront on Vercel with WooCommerce behind it. - [WooSmiths](https://7it.co.il/work/woosmiths/): My WooCommerce studio: migrations from Shopify or Magento, custom plugins, API integrations, and dashboards that live outside the standard WordPress admin. - [Blockal Ravid](https://7it.co.il/work/blockal-ravid/): A wall-properties calculator for a concrete-block manufacturer. Architects and engineers build a wall layer by layer and get its thermal, acoustic and energy properties at once. ## Guides - [Custom Software for US Businesses: Build vs Buy, Real Costs, and Timelines](https://7it.co.il/guides/custom-software-for-us-businesses/): A practical, no-hype guide for US small and mid-size businesses deciding whether to build custom software, what it really costs, how long it takes, and how to de-risk the whole thing with a first phase that pays for itself. - [Shopify vs WooCommerce for US Businesses: How to Choose in 2026](https://7it.co.il/guides/shopify-vs-woocommerce/): A straight, no-hype guide for US stores deciding between Shopify and WooCommerce, what each one is genuinely good at, where each quietly costs you later, the real three-year picture, and a simple way to choose that you will not regret. - [How to Secure an Admin Panel: Google Auth, 2FA, and Sessions on Vercel](https://7it.co.il/guides/secure-admin-panel/): A technical guide to locking down an admin panel when both your client app and admin run on Vercel. Google sign-in with an allowlist, real 2FA, why httpOnly cookies beat tokens in the browser, server-side role checks, security headers, and the mistakes that get admins breached. - [Webhooks That Never Lose an Event: A Technical Guide](https://7it.co.il/guides/reliable-webhooks/): A technical guide to building webhook integrations that survive the real world. Signature verification, acknowledging fast and processing later, idempotency, retries and ordering, reconciliation for missed events, and dead-letter handling, with code you can lift into a Vercel or Node app. - [Replace Zapier With Serverless on Vercel: When and How](https://7it.co.il/guides/replace-zapier-with-serverless-vercel/): A technical guide to moving automations off Zapier and onto serverless functions on Vercel. When no-code is still right, the signs you have outgrown it, how to map a Zap onto Vercel Cron and queues, and how to own secrets, retries, and idempotency yourself. - [Connecting Two Systems Without Breaking Either: API Integration Patterns](https://7it.co.il/guides/api-integration-patterns/): A technical guide to building integrations that hold up. Deciding the source of truth, handling API keys and OAuth token expiry, respecting rate limits and pagination, choosing sync versus async, surviving partial failure, and reconciling drift, with code you can adapt. - [Custom WhatsApp Automation With the Cloud API: A Technical Guide](https://7it.co.il/guides/whatsapp-automation-cloud-api/): A technical guide to building WhatsApp automation on the official Cloud API instead of a third-party builder. When to graduate from ManyChat, how the API works, receiving messages by webhook, the 24-hour window and templates, conversation state, opt-in and human handoff, with code. - [Scheduled Jobs and Background Work on Vercel: A Technical Guide](https://7it.co.il/guides/scheduled-jobs-on-vercel/): A technical guide to running cron and background work on Vercel despite short-lived functions. Vercel Cron, offloading long work to a queue, preventing overlapping runs with a lock, making jobs idempotent and resumable, and knowing when a job fails or never ran, with code. - [Build a RAG Assistant on Your Own Data: A Technical Guide](https://7it.co.il/guides/rag-assistant-own-data/): A technical guide to building a retrieval augmented generation assistant grounded in your own documents. Why RAG beats fine-tuning for most businesses, the ingest-chunk-embed-retrieve pipeline, getting chunking right, grounding to stop hallucinations, access control, and evaluation, with code. - [Putting an LLM in Production Safely: A Technical Guide](https://7it.co.il/guides/llm-in-production/): A technical guide to taking an LLM feature from demo to production. Treating prompt injection as a real threat, controlling cost and latency, planning for failure and nondeterminism, input and output guardrails, protecting your data and keys, and abuse limits, with code. - [Structured Output and Tool Calling: Making an LLM Act on Your Systems](https://7it.co.il/guides/structured-output-tool-calling/): A technical guide to getting reliable structured data out of an LLM and letting it safely call your functions. Why parsing free text fails, JSON schema output with validation, designing tools like a careful API, the execution loop, and guardrails, with code. - [A Stripe Integration That Survives the Edge Cases](https://7it.co.il/guides/stripe-integration-edge-cases/): A technical guide to integrating Stripe so it holds up in production. Why you fulfill on the webhook and not the redirect, idempotency on the way in and out, Strong Customer Authentication, refunds and disputes, reconciliation, and testing, with code. - [Subscriptions and Billing Done Right: A Technical Guide](https://7it.co.il/guides/subscriptions-billing/): A technical guide to building recurring billing that holds up. Why subscriptions are harder than one-time payments, letting the processor own the recurring logic, granting access from subscription state, proration, dunning for failed payments, trials and cancellations, and a self-serve portal, with code. - [PCI Without the Pain: Taking Card Payments the Safe Way](https://7it.co.il/guides/pci-compliance-checkout/): A technical guide to handling card payments without drowning in PCI compliance. The one rule that collapses your scope, keeping card data off your servers with hosted fields and tokenization, what you must never do, locking down the checkout page, and hosted versus embedded checkout. - [Going Headless: A Next.js Storefront on Shopify or WooCommerce](https://7it.co.il/guides/headless-storefront-nextjs/): A technical guide to building a headless storefront. What headless actually means, when it is worth it and when it is not, the architecture on Vercel, why you keep the platform's checkout, caching and revalidation, and protecting SEO and speed, with code. - [Make Your Store Fast: Core Web Vitals and Revenue](https://7it.co.il/guides/store-speed-core-web-vitals/): A technical guide to a fast online store and why it matters to the bottom line. What the Core Web Vitals mean in plain terms, optimizing images, taming third-party scripts, edge caching, shipping less JavaScript, and measuring real users, with practical fixes. - [Replatform Without Losing SEO: A Technical Migration Guide](https://7it.co.il/guides/migrate-platform-without-losing-seo/): A technical guide to changing eCommerce platforms without losing your search rankings. Why replatforms tank SEO, building a complete URL map, 301 redirects done right, preserving on-page SEO, launching fast and indexable, and monitoring afterward, with code. - [From Idea to MVP: Scoping a First Phase That Pays for Itself](https://7it.co.il/guides/idea-to-mvp-first-phase/): A practical guide to turning a software idea into a first phase that ships and pays for itself. Finding the one workflow worth building first, cutting scope to the core, defining done before you start, building in thin slices, and choosing durable tech. - [Escaping No-Code Lock-In: Moving From Bolt or Lovable to Code You Own](https://7it.co.il/guides/escape-no-code-lock-in/): A technical guide to graduating from no-code AI builders to software you own. Why builders are great until they are not, the signs you have outgrown one, what owning your app means, and how to move your code and data to Vercel incrementally without downtime. - [Database Design for Non-DBAs: A Practical Technical Guide](https://7it.co.il/guides/database-design-for-non-dbas/): A practical guide to designing a database you will not regret. Modeling real entities and relationships, choosing keys and types, letting the database enforce integrity, normalizing sensibly, indexing for your queries, and changing the schema safely with migrations, with code. - [Don't Lose Your Data: Backups and Disaster Recovery for Small Businesses](https://7it.co.il/guides/backups-and-disaster-recovery/): A technical guide to backups and disaster recovery that actually work. Why an untested backup is not a backup, what to back up, the 3-2-1 rule, point-in-time recovery, defining RPO and RTO, testing restores, protecting against ransomware, and writing a runbook, with code. - [Observability for Small Apps: Logs, Errors, Uptime, and Alerts](https://7it.co.il/guides/observability-for-small-apps/): A technical guide to seeing inside your app without enterprise tooling. Structured logging, error tracking, uptime checks, useful metrics, alerts that page you instead of spamming you, correlating with a request id, and catching silent failures, with code. - [Shopify Functions: Custom Discounts and Cart Logic Without an App](https://7it.co.il/guides/shopify-functions-custom-discounts/): A technical guide to Shopify Functions, the modern way to add custom discounts, cart, and checkout logic that used to need Scripts or a paid app. How Functions work, writing a discount Function, the input query, deploying with the CLI, and when a Function beats another subscription, with code. - [Customizing Shopify Checkout: Checkout Extensibility After checkout.liquid](https://7it.co.il/guides/shopify-checkout-extensibility/): A technical guide to Shopify's Checkout Extensibility, the supported way to customize checkout now that checkout.liquid is deprecated. Checkout UI extensions, custom fields and banners, the branding API, validation with Functions, and what no longer works, with code. - [Shopify Metafields and Metaobjects: Custom Data Without the App Bloat](https://7it.co.il/guides/shopify-metafields-metaobjects/): A technical guide to modeling custom data in Shopify with metafields and metaobjects instead of installing apps. The difference between them, defining fields, rendering in Liquid, querying with the Storefront and Admin APIs, and connecting them to products, with code. - [Replace Your App Stack: When to Build a Custom Shopify App](https://7it.co.il/guides/shopify-custom-app-replace-stack/): A technical guide to deciding when a custom Shopify app beats a stack of subscriptions, and how one is built. The real cost of app stacking, what a custom app can do, the Remix and App Bridge stack, the Admin API, webhooks, and a five-apps-to-one case, with code. - [Online Store 2.0 Theme Development: Custom Sections and Blocks](https://7it.co.il/guides/shopify-theme-sections-os2/): A technical guide to building a custom Shopify theme the merchant can still edit. How Online Store 2.0 works, building sections and blocks with schema, JSON templates, app blocks, and metafield-driven content, so the design is bespoke but editable in the theme editor, with code. - [Your AI Built the App. Before Real Customers Use It, Check These Five Things](https://7it.co.il/guides/launch-ai-built-app-safely/): A practical guide for owners of apps built with Lovable, Replit, Bolt, v0 or Cursor. How to find exposed keys, check who can read your database, make sure you own every account, survive failures, and keep building with AI without breaking what matters. ## Field Kits (working checklists, one per guide) - [Cost and Scope Scorecard](https://7it.co.il/library/cost-and-scope-scorecard/): Decide whether to build or buy, and size the smallest first phase that pays for itself. - [eCommerce Platform Scorecard](https://7it.co.il/library/ecommerce-platform-scorecard/): Score Shopify against WooCommerce on fit, cost and trajectory, then choose once. - [Admin Security Checklist](https://7it.co.il/library/admin-security-checklist/): Audit an admin panel on Vercel, from sign-in to revocation, and find the real gaps. - [Webhook Reliability Checklist](https://7it.co.il/library/webhook-reliability-checklist/): Make a webhook endpoint that survives duplicates, delays, and missed events. - [Zapier-to-Code Migration Worksheet](https://7it.co.il/library/zapier-to-code-migration-worksheet/): Decide which automations to move to Vercel, which to leave, and how to switch safely. - [Integration Design Checklist](https://7it.co.il/library/integration-design-checklist/): Design a sync between two systems that survives expired tokens, rate limits and failure. - [WhatsApp Automation Blueprint](https://7it.co.il/library/whatsapp-automation-blueprint/): Decide when to move to the Cloud API and build automation that is truly yours. - [Background Jobs Checklist](https://7it.co.il/library/background-jobs-checklist/): Run scheduled work on Vercel that finishes, never doubles, and never fails silently. - [RAG Architecture Blueprint](https://7it.co.il/library/rag-architecture-blueprint/): Plan an assistant that answers from your own documents, with citations and permissions. - [LLM Production Readiness Checklist](https://7it.co.il/library/llm-production-readiness-checklist/): Decide whether an LLM feature is ready for real users, and what to fix before it ships. - [Tool-Calling Design Checklist](https://7it.co.il/library/tool-calling-design-checklist/): Design an AI assistant that acts on your systems while your code stays in charge. - [Stripe Integration Checklist](https://7it.co.il/library/stripe-integration-checklist/): Confirm your Stripe integration holds up once real money moves. - [Subscription Billing Checklist](https://7it.co.il/library/subscription-billing-checklist/): Keep access and billing correct through every change a subscriber makes. - [PCI Scope Reduction Checklist](https://7it.co.il/library/pci-scope-reduction-checklist/): Take card payments while keeping PCI down to a short self-assessment. - [Headless Readiness Checklist](https://7it.co.il/library/headless-readiness-checklist/): Decide whether a headless storefront is worth it, and launch one without losing SEO. - [Store Speed Audit Checklist](https://7it.co.il/library/store-speed-audit-checklist/): Find what slows your store and fix it in order of impact. - [SEO-Safe Migration Plan](https://7it.co.il/library/seo-safe-migration-plan/): Move your store to a new platform and keep the search rankings you already earned. - [MVP Scoping Worksheet](https://7it.co.il/library/mvp-scoping-worksheet/): Turn an idea into the smallest first phase that ships in weeks and pays for itself. - [No-Code Exit Checklist](https://7it.co.il/library/no-code-exit-checklist/): Decide if you have outgrown Bolt or Lovable, and move to code you own without downtime. - [Schema Design Checklist](https://7it.co.il/library/schema-design-checklist/): Design a schema that keeps data clean, queries fast and changes safe as the app grows. - [Backup and Recovery Checklist](https://7it.co.il/library/backup-and-recovery-checklist/): Find out whether your backups would actually bring the business back, and fix the gaps. - [Observability Starter Checklist](https://7it.co.il/library/observability-starter-checklist/): Set up enough visibility to hear about problems before your customers do. - [Shopify Functions Starter](https://7it.co.il/library/shopify-functions-starter/): Decide if a rule belongs in a Shopify Function, then build and ship it cleanly. - [Checkout Extension Checklist](https://7it.co.il/library/checkout-extension-checklist/): Plan and verify a move from checkout.liquid to Checkout Extensibility, piece by piece. - [Metafields Modeling Guide](https://7it.co.il/library/metafields-modeling-guide/): Model your store's custom data natively in Shopify, and decide what still needs an app. - [Custom App Decision Guide](https://7it.co.il/library/custom-app-decision-guide/): Decide which Shopify apps to keep, and which to replace with one custom app. - [Theme Development Checklist](https://7it.co.il/library/theme-development-checklist/): Build a custom Shopify theme that looks bespoke and stays editable by the merchant. - [AI-Built App Launch Checklist](https://7it.co.il/library/ai-built-app-launch-checklist/): Before an app built with Lovable, Replit, Bolt, v0 or Cursor meets real customers: secrets, data rules, ownership, failures and safe change. ## Articles - [Custom Software vs Off-the-Shelf: When to Build for Your Business](https://7it.co.il/blog/custom-software-vs-off-the-shelf/): A clear framework for US businesses choosing between off-the-shelf SaaS and custom software: the trade-offs in cost, speed, fit, and ownership. - [Afraid to Build Custom Software? The Benefits and Flexibility You're Missing](https://7it.co.il/blog/afraid-to-build-custom-software/): The honest case for building custom software: the ownership and flexibility you can't get off the shelf, and a milestone process that keeps it safe. - [You Don't Have to Build It All at Once: Custom Software, Step by Step](https://7it.co.il/blog/custom-software-built-step-by-step/): Custom software isn't all-or-nothing. Here's the milestone way a system gets built: a phased roadmap, regular demos, and value at every step. - [From ManyChat to a Custom WhatsApp Assistant for WooCommerce, with Claude as the Brain](https://7it.co.il/blog/manychat-to-custom-whatsapp-woocommerce/): Why WooCommerce stores outgrow ManyChat, and how a custom WhatsApp assistant wired into your store handles presale and support without a middleman. - [Leaving Bolt.new for Vercel: Own Your Project and Stop Paying to Iterate](https://7it.co.il/blog/leave-bolt-new-for-vercel/): Why teams move a Bolt.new project to Vercel: the ownership you gain, the features you can finally build, and how Claude and Git cut iteration costs. - [How to Migrate a Website from Bolt.new to Vercel: A Simple, Safe Guide](https://7it.co.il/blog/migrate-bolt-new-to-vercel/): A step-by-step guide to moving a website from Bolt.new to Vercel with no lost work and no downtime, from GitHub export to your custom domain. - [Smart Scraping Bots That Fake an iPhone: How Cloudflare and Vercel Fight Back](https://7it.co.il/blog/stop-scraping-bots-cloudflare-vercel/): Modern scrapers spoof a real iPhone from a datacenter. Why blocking by user agent fails, and the Cloudflare and Vercel features that stop them. - [What Custom Software Actually Costs (and What Drives the Price)](https://7it.co.il/blog/what-custom-software-costs/): An honest look at what drives the cost of custom software: scope, integrations, and the choices that make a build cheaper or more expensive. - [Build vs Buy: A Practical Decision Framework for SMBs](https://7it.co.il/blog/build-vs-buy-framework/): A simple, repeatable build vs buy framework US small businesses can use to decide whether to build software, buy it, or combine both. - [WooCommerce vs Shopify in 2026: Which Fits Your Store?](https://7it.co.il/blog/woocommerce-vs-shopify-2026/): A practical comparison of WooCommerce and Shopify for US store owners, ownership, costs, flexibility, and when each platform is the right call. - [The Hidden Cost of Manual Workflows (and What to Automate First)](https://7it.co.il/blog/what-to-automate-first/): How to spot the manual work quietly draining your team, and a simple way to pick the first automation that pays for itself for a US business. - [Adding an AI Assistant to Your Website: What Actually Works](https://7it.co.il/blog/ai-assistant-for-your-website/): A grounded guide to adding an AI assistant to your website that helps visitors and captures leads: what works, what backfires, and what to avoid. - [Headless WooCommerce: When a Next.js Storefront Pays Off](https://7it.co.il/blog/headless-woocommerce-nextjs/): What headless WooCommerce actually means, the real benefits and costs, and how to tell whether a Next.js storefront on Vercel is worth it for your store. - [Practical AI for Small Businesses: 5 Automations Worth Building](https://7it.co.il/blog/practical-ai-for-small-business/): Five down-to-earth ways US small businesses can use AI to save time and serve customers better, no hype, just automations that pay for themselves. - [How to Speed Up a Slow WooCommerce Store: A Practical Checklist](https://7it.co.il/blog/speed-up-woocommerce/): A no-nonsense checklist for diagnosing and fixing a slow WooCommerce store, the changes that actually move load time and conversion for US shops. - [API Integrations: Why Connecting Your Stack Beats Copy-Paste](https://7it.co.il/blog/api-integrations-beat-copy-paste/): Why manually moving data between your business tools is costing more than you think, and how API integrations make your software work as one system. - [From Idea to MVP: A Founder's Guide to Shipping Fast](https://7it.co.il/blog/idea-to-mvp-guide/): How to take a software idea to a real, usable MVP without overbuilding, scoping, sequencing, and the discipline that gets you to launch and learning. - [Migrating to WooCommerce Without Losing Your SEO](https://7it.co.il/blog/migrate-to-woocommerce-without-losing-seo/): A step-by-step plan for moving from Shopify, Magento, or another platform to WooCommerce while protecting your rankings, traffic, and revenue. - [Should You Build an AI Chatbot or Buy One?](https://7it.co.il/blog/build-vs-buy-ai-chatbot/): A clear-eyed comparison of buying an off-the-shelf AI chatbot versus building a custom one, cost, control, accuracy, and which fits your business. - [7 Signs You've Outgrown Spreadsheets (and Need Custom Software)](https://7it.co.il/blog/signs-youve-outgrown-spreadsheets/): Spreadsheets are great until they aren't. Here are the warning signs that your business has outgrown them and what to do before they cause a costly mistake. - [When You Need a Custom WooCommerce Plugin (and When You Don't)](https://7it.co.il/blog/when-you-need-a-custom-woocommerce-plugin/): How to tell whether your WooCommerce store needs a custom plugin or whether an existing one will do, and how custom code can cut plugin bloat. - [How to Hire a WooCommerce Developer in 2026 (Without Regret)](https://7it.co.il/blog/how-to-hire-a-woocommerce-developer-2026/): What US store owners should look for when hiring a WooCommerce developer: the questions that reveal real expertise and when to go custom. - [CBAM Compliance Software for US Importers: What You Actually Need in 2026](https://7it.co.il/blog/cbam-compliance-software-us-importers/): A practical guide to EU CBAM reporting for US importers: what to automate, and how the right software turns compliance into minutes of work. - [The Hidden Cost of Shopify App Stacking: When 15 Apps Should Become One You Own](https://7it.co.il/blog/shopify-app-stacking-cost/): Every Shopify gap gets patched with another app until the bill and slowdown bite. How to tell when a stack should become one app you own. - [Shopify B2B and Wholesale: Why the Apps Still Fall Short (and What to Build Instead)](https://7it.co.il/blog/shopify-b2b-wholesale-custom/): Customer-specific pricing, net terms, quote-to-order, and approvals are where Shopify B2B apps break down. What a custom wholesale layer looks like. - [Real Multi-Channel Inventory Sync: Why Shopify Connectors Keep Breaking](https://7it.co.il/blog/shopify-inventory-sync-custom/): Multi-location stock, kits and bundles, and 3PL or ERP sync are where Shopify connectors fail and oversells start. What a custom sync layer does. - [Made-to-Order on Shopify: Building a Product Configurator the Apps Can't Handle](https://7it.co.il/blog/shopify-product-configurator/): Custom dimensions, conditional options, live pricing, and a clean handoff to production are where Shopify configurator apps run out of road. - [Subscriptions Your Way: When Off-the-Shelf Shopify Billing Doesn't Fit](https://7it.co.il/blog/shopify-custom-subscriptions/): When subscription apps' fees and rigid logic stop short of build-a-box, prepaid, and custom dunning, it pays to own your Shopify billing. - [Returns, Warranties, and RMAs That Match Your Real Process](https://7it.co.il/blog/shopify-returns-warranty-rma/): Returns apps handle the standard flow, but warranties, repairs, and conditional approvals get rigid. A returns system built around your real process. - [The Customer Portal Shopify Doesn't Give You (Reorders, Invoices, Approvals)](https://7it.co.il/blog/shopify-customer-portal/): Fast reorders, invoice and PO access, saved carts, and buyer approvals are where Shopify accounts stop. What a real customer portal looks like. - [One Dashboard for True Profit: Unifying Shopify, Ads, Fees, and COGS](https://7it.co.il/blog/shopify-profit-dashboard/): Shopify analytics show revenue, not real profit. Why one dashboard that unifies orders, ad spend, fees, returns, and COGS matters, and how we build it. - [An AI Assistant That Actually Knows Your Store (Not a Generic Bot)](https://7it.co.il/blog/shopify-ai-assistant-store-data/): Most AI chat apps don't know your catalog, policies, or orders. What an AI assistant grounded in your real store data can do, and how we build it. - [Advanced Shipping and Fulfillment Logic Shopify Rules Can't Express](https://7it.co.il/blog/shopify-advanced-shipping-rules/): Freight, hazmat, multi-origin routing, and delivery scheduling are where Shopify shipping rules run out. Custom logic on the Carrier Service API. - [Selling Across Borders on Shopify: Customs, EU CBAM, and Compliance the Apps Don't Cover](https://7it.co.il/blog/shopify-cross-border-customs-cbam/): Shopify Markets handles currency and basic duties but stops short of customs documents, HS codes, and EU CBAM. Where cross-border compliance breaks. - [Embedding Stripe in a Headless WooCommerce and Next.js Store: What Actually Matters](https://7it.co.il/blog/stripe-woocommerce-headless-nextjs/): A field-tested guide to wiring Stripe into a headless WooCommerce and Next.js store: keys, PaymentIntents, authorize-then-capture, and webhooks. - [Revolut Merchant API on Vercel: Wallets, 3D Secure, and the Sync vs Async Trap](https://7it.co.il/blog/revolut-merchant-api-vercel-wallets/): A field guide to the Revolut Merchant API on Vercel: the order-first flow, Apple Pay and Google Pay, 3D Secure, and the sync vs async trap. - [Revolut for WooCommerce: Why I Built My Own Integration](https://7it.co.il/blog/revolut-woocommerce-custom-checkout/): Why I rebuilt the Revolut gateway for a WooCommerce store around the secure card field, fixing unreliable wallets and a checkout that cost trust. - [How a Custom Calculator Became a Competitive Edge: The Blockal Wall-Properties Tool](https://7it.co.il/blog/custom-engineering-calculator-blockal/): A case study: how a custom web calculator turned a tedious compliance calculation into a quiet sales asset for a concrete-block manufacturer. - [Role-Based Access for Your Team: Why "Everyone Is an Admin" Is a Ticking Bomb](https://7it.co.il/blog/role-based-access-for-your-team/): Why 'everyone is an admin' is a risk waiting to happen, how role-based access works in plain language, and a simple three-role model to start. - [Data Validation: Stop Bad Data at the Door, Not in Next Quarter's Reports](https://7it.co.il/blog/data-validation-stop-bad-data/): One wrong SKU or price compounds into wrong reports. The validation layers that catch bad data at entry, and when a spreadsheet rule is enough. - [E-Signatures Built Into Your Workflow: Stop Losing Momentum in the Print-Sign-Scan Loop](https://7it.co.il/blog/e-signature-workflow/): Building e-signatures into your own workflow turns the days-long print, sign, scan, chase loop into minutes. When a standalone tool is enough. - [The Installable Website: Why a Progressive Web App Beats Building "An App](https://7it.co.il/blog/progressive-web-app-installable/): Customers rarely download new apps, but they'll add your site to their home screen. What a progressive web app can do, and how to ship one. - [Custom Software ROI: The Honest Math, and the Timeline Until It Pays for Itself](https://7it.co.il/blog/custom-software-roi-timeline/): The honest math on custom software ROI: a simple worksheet, the payback timeline phase by phase, and the cases where the numbers say don't build. - [Scope Creep Kills Software Projects: How Good Ideas Drown Good Builds](https://7it.co.il/blog/scope-creep-kills-software-projects/): Software projects drown in good ideas added one at a time. Why scope creep happens, the parking lot system that stops it, and fixed-scope milestones. - [Build an Internal Dashboard Your Team Actually Opens Every Morning](https://7it.co.il/blog/build-internal-dashboard-team/): Most internal dashboards die with thirty charts nobody opens. The one-question rule that builds a dashboard your team checks every morning. - [Your Software Maintenance Budget, Explained: Why "Done" Was Never the Point](https://7it.co.il/blog/software-maintenance-budget-explained/): What a software maintenance budget actually covers, why most of it is growth not repair, and how to set aside a sane yearly slice for upkeep. - [Turning Word of Mouth Into a Referral Program: From Happy Accident to Sales Channel](https://7it.co.il/blog/referral-program-word-of-mouth/): A referral program gives word of mouth a link, a two-sided reward, and tracking to the sale. How to build one, and when an app is enough. - [From Spreadsheet to App: A Migration Plan That Never Requires a Brave Weekend](https://7it.co.il/blog/spreadsheet-to-app-migration-plan/): The safe way off a business-critical spreadsheet is a parallel run: build the app, feed it the same data, and retire the sheet once the numbers agree. - [Why Custom Software Projects Fail: They Rarely Die of Code](https://7it.co.il/blog/why-custom-software-projects-fail/): One in six IT projects becomes a runaway, and the causes are rarely technical. What actually sinks custom builds, and the one-meeting defense. - [No-Code Limits: How to Know When It Is Time to Go Custom](https://7it.co.il/blog/no-code-limits-when-to-go-custom/): The four walls that signal you've hit your no-code platform's ceiling, and how to judge it on the next 12 months instead of the last two years. - [Document Your Business Process Before Building Software: The Highest-ROI Hour You Will Spend](https://7it.co.il/blog/document-business-process-before-building/): Why to document your business process before building software: the 100x cost curve, how process mapping works in discovery, and what skipping it costs. - [Audit Trails for Small Business Software: Know Who Changed What and When](https://7it.co.il/blog/audit-trail-know-who-changed-what/): What an audit trail is, why small business systems need one, what to log first (money and permissions), and how a change log ends disputes. - [How to Write Software Requirements Without Tech Jargon](https://7it.co.il/blog/software-requirements-without-tech-jargon/): How to write software requirements without tech jargon: plain-language user stories, the Tuesday morning test, and what a good requirements doc includes. - [Questions to Ask Before Accepting a Software Development Quote](https://7it.co.il/blog/build-quote-questions-to-ask/): The questions to ask before accepting a software development quote: code ownership, what is not included, red flags, and why honest quotes differ 3x. - [A Simple Field Service App: Jobs, Photos, Signatures, Offline, and One of the Fastest Paybacks in Custom Software](https://7it.co.il/blog/field-service-app-quick-win/): Why a simple field service app (jobs, photos, signatures, offline) is one of the fastest-payback builds, and when off-the-shelf FSM tools are enough. - [Is a Client Portal Worth Building? When to Replace Email and Spreadsheets](https://7it.co.il/blog/client-portal-worth-building/): Is a client portal worth building for your business? The email signals that say yes, what belongs in version one, login basics, and how to measure payback. - [How to Roll Out New Software to Your Team in Phases (Without a Big-Bang Cutover)](https://7it.co.il/blog/phased-rollout-new-software/): How to roll out new software to your team in phases: pilot group, parallel running, cutover, and rollback plan, and why big-bang switches fail. - [Technical Debt, Explained for Business Owners (What It Is and When It Hurts)](https://7it.co.il/blog/technical-debt-explained-for-owners/): Technical debt explained for business owners: what it is in plain terms, how it builds up, when it is fine, when it strangles, and how an audit finds it. - [CCPA and State Privacy Laws for a Small Business Website: A Practical Guide](https://7it.co.il/blog/privacy-compliance-ccpa-website/): CCPA compliance for a small business website in plain English: what data you collect, the notices you need, deletion requests, and opt-outs that work. - [Auto-Generate Branded PDFs: Quotes, Invoices, and Reports Straight From Your Data](https://7it.co.il/blog/auto-generate-branded-pdfs/): How to auto-generate branded PDFs, quotes, invoices, and reports, from your data, the copy-paste hours it kills, and what a first phase looks like. - [Automating Customer Onboarding: Give Every New Customer Your Best First Day](https://7it.co.il/blog/automate-customer-onboarding-flow/): How to automate new customer onboarding: instant welcome, account and data setup, kickoff scheduling, and the moments that should stay human. - [The Day a Third-Party API Goes Down: An Outage Plan for Small Business Software](https://7it.co.il/blog/third-party-api-outage-plan/): How to prepare for a third-party API outage: graceful degradation, queued retries, fast detection, honest customer messages, and a simple runbook. - [Automated Invoice Reminders: The Quiet Fix for Small Business Cash Flow](https://7it.co.il/blog/automated-invoice-reminders-cashflow/): How automated invoice reminders improve small business cash flow: the reminder schedule, the tone ladder, escalation, and when to stop and call. - [Five Channels, One Stockroom: How to Keep Inventory Truthful Everywhere You Sell](https://7it.co.il/blog/sync-inventory-across-channels/): How to keep inventory accurate across your store, marketplaces, and POS: a single source of truth, oversell prevention, and reconciliation. - [Speed to Lead: Automate Lead Routing So the Right Person Replies in Minutes](https://7it.co.il/blog/automate-lead-routing-fast-replies/): How to route inbound leads to the right person in minutes: the speed-to-lead evidence, routing rules that work, and after-hours handling. - [Automating the Boring 30 Percent of Every Job (Without Replacing Anyone)](https://7it.co.il/blog/automation-without-replacing-people/): How to automate the boring third of every job without replacing anyone, where the freed hours should go, and the honest conversation your team needs first. - [Webhooks, Explained for Business Owners Who Never Want to Write Code](https://7it.co.il/blog/webhook-basics-for-business-owners/): Webhooks explained in plain English for business owners: push vs poll, real examples like payment received, and reliability basics such as retries. - [Appointment Reminders That Actually Cut No-Shows: Timing, Channel, and the Rebooking Flow](https://7it.co.il/blog/automate-appointment-reminders-no-shows/): How automated appointment reminders cut no-shows: the timing that works, SMS vs email vs WhatsApp, confirmation vs reminder, and a rebooking flow. - [Killing the Monthly Reporting Grind: From Copy-Paste Spreadsheets to Reports That Build Themselves](https://7it.co.il/blog/automate-monthly-reporting-grind/): How to automate monthly reporting, replacing the copy-paste spreadsheet scramble with auto-refreshed dashboards and PDF packs, and what to automate first. - [Integrate or Replace? What to Do With the Tools You Already Have](https://7it.co.il/blog/integration-vs-replacement-decision/): When to integrate the tools you already have vs replace them outright, with the real switching costs, data gravity, and the connective-tissue option. - [Automate Your Backups Before You Lose Data: Why the Restore Is the Only Proof](https://7it.co.il/blog/automate-backups-before-you-lose-data/): How to automate backups for a small business before you lose data: what to back up, where the copies go, how to know the job ran, and the restore drill. - [Automate Review Requests After Purchase: The Timed Ask That Turns Happy Customers Into Public Proof](https://7it.co.il/blog/automate-review-requests-after-purchase/): How to automate review requests after purchase: the right delay, a message that gets replies, the channel, the incentive rules, and build vs buy. - [We Tested 367 US Online Stores on a Phone. Here Is What Slows Them Down.](https://7it.co.il/blog/us-store-speed-2026-findings/): We ran Google's phone test on 367 US direct-to-consumer stores. Median score 34, main content at 11.7 s in the lab, and the apps on the page explain most of it. ## News - [7IT news](https://7it.co.il/news/): short, dated notes written by 7IT on security, cloud platforms and AI for US businesses that build software, each with why it matters and its sources; Atom feed at https://7it.co.il/news/feed.xml - [GitHub app tokens grew about 13 times longer. Your code may still expect the old size.](https://7it.co.il/news/2026-10-02-github-app-tokens-520-characters/): 2026-10-02 - [An AI attack went from help desk to root in seconds. The flaws are now on CISA's list.](https://7it.co.il/news/2026-10-02-zammad-flaws-exploited/): 2026-10-02 - [The alarm went off at CISA on Thursday. If you run FortiMail, the clock is running.](https://7it.co.il/news/2026-10-01-fortimail-zero-day-no-patch/): 2026-10-01 - [OpenAI just set a shutdown date for three models. The countdown ends on 1 April 2027.](https://7it.co.il/news/2026-10-01-openai-model-deprecations/): 2026-10-01 - [Your iOS builds can fail on 5 October, and nobody on your team changed a thing.](https://7it.co.il/news/2026-10-01-github-actions-macos-14-retirement/): 2026-10-01 ## Optional - [About Lior Aharonov](https://7it.co.il/about/) - [Full text of the guides and Field Kits](https://7it.co.il/llms-full.txt) - [Privacy Policy](https://7it.co.il/privacy/)