Hi, I’m Tim Nash
I like to scare people at conferences
I talk (a lot) about WordPress and security as well as subjects like performance and system administration at events and even occasionally on my blog
I’m a WordPress security consultant. These days, this site is home to my writing, talks and the occasional random muttering.
We took an enormous amount of value from the short session and can highly recommend Tim's expertise and approach.
Candle Digital
WordPress Security Consultant, System Administrator & Developer
How many hats does one person need? Tim has certainly tried his hand at most of them. Tim’s background is in both development and security, he has run a development agency as well as developing and managing one of the largest WordPress hosting platforms in the UK. Tim is not currently taking on new clients, either personally or through Tempered.
Part of the WordPress community
Tim has been actively involved in the UK community since, well, there has been a UK community. He has helped organise WordPress Leeds, the oldest User Group in the country, for over 10 years. He is one of the admins for the WordPress Community UK Slack group as well as having spoken at nearly every UK WordPress User Group.
Tim Talks a lot at conferences and at smaller user groups
While normally focusing on WordPress and Security, his topics have been pretty varied, from testing methodologies through to robbing banks. His talks tend to be entertaining and informative. His goal is to make things accessible but also to make it easy for people to research.
Tim is nearly always happy to come and talk to your group or conference; for information, see his Speaking Page.
“I hired Tim to do an audit on one of our most popular plugins, not only was this one of the best business decisions I have made. It was an invaluable experience and one I would highly recommend to any other plugin/theme developers. The takeaways from this have been super beneficial to my business (both in coding and business) and I now have the confidence to grow and take it to the next level!”
“Our team have built countless WooCommerce sites but this was our first foray into releasing a product and we wanted to be sure on the code quality, scalability and security of our code. Tim was thorough, detailed and exceptional at walking us through the issues in our code. For me what was more important though, was that he did so in a very kind and insightful way that motivated the team, improved the plugin but also helped us implement tools and processes into our workflow that has benefitted us across the board in all work we do. I could not recommend this service more highly and I wish we'd done it sooner!”
Nothing is truly random
Random thoughts about wp_rand()
A deep dive into how WordPress’s wp_rand() works, what a CSPRNG is, and why some warnings about it are misplaced.
The Long Way to WordCamp Gdynia: LoopConf, WPLDN and a Lot of Coffee
Conferences, community, and the chaos of travel
What started as a polite “sorry, too far” turned into a week of planes, panels and Poland. From WPLDN to LoopConf, then on to WordCamp Gdynia, it turned out getting to Poland was quicker than getting to London. Along the way I found myself talking security, debating AI, and discovering the joys (and delays) of Luton Airport.
What the ‘eck is the UK’s Cyber Security and Resilience Bill?
Is your WordPress business ready for the UK’s Cyber Security Bill? From risk assessments to vulnerability reporting, this upcoming legislation could change how developers and agencies operate. Here’s what you need to know and why it matters
Advisory: Advanced Custom Fields changes
Action maybe required for some users
Tim has published an advisory to his clients on changes to ACF and is publshing them in public.