Blog
Practical guides on website monitoring, GDPR/EAA compliance, security headers, SEO and Core Web Vitals — from real work with XICTRAQ.
EU AI Act from August 2026: Label Website Chatbots
From 2 August 2026 Article 50 of the EU AI Act applies: AI notice in chat, labelling of AI images and text, accessibility - and how to keep checking it.
NIS2 Registration in Germany: BSI Deadline 31 July
The BSI has set a grace period to 31 July 2026 for NIS2 registration. Scope, mandatory details, management liability under sec. 38 BSIG and the evidence needed.
Uptime Check Intervals: 1, 3 or 5 Minutes?
Choosing an uptime check interval: how detection time follows from interval and confirmation rounds, what a one-minute cadence costs and how your SLO decides.
Building an On-Call Rotation Without Burning Out
How many people a rotation needs, which alert may wake you at night - and what German employment law says about on-call duty.
LCP Subparts: Where Your Load Time Actually Goes
LCP is not one number but four subparts: TTFB, resource load delay, load duration and render delay. How to break it down and prioritise what actually moves it.
Registry Lock: Stop Domain Hijacking at the Registrar
Registry Lock explained: EPP status codes, registrar lock versus registry lock, DENIC specifics for .de and RDAP as an early indicator of a takeover.
After OCSP: Certificate Revocation Done Right in 2026
Let's Encrypt shut OCSP down and CRLs are mandatory. What really happens when you revoke a certificate in 2026 — and what your monitoring has to check now.
EUVD and CVE 2026: Using Vulnerability Feeds Properly
EUVD, CVE Program, NVD and CISA KEV compared: which feed answers which question, why 'exploited' beats CVSS, and how an inventory turns feeds into tasks.
NIS2 Supply Chain: Vetting Your Service Providers
NIS2 requires supply chain security: a provider inventory, risk classification, contract clauses and continuous technical evidence instead of a one-off questionnaire.