Blog
Practical guides on website monitoring, GDPR/EAA compliance, security headers, SEO and Core Web Vitals — from real work with XICTRAQ.
Website Carbon: Digital Sustainability and CSRD in 2026
How estimation models derive a carbon value from page weight, what CSRD and Scope 3 have to do with it, and how to steer transfer bytes as a lever.
GEO Metrics: Measure Visibility in ChatGPT and Perplexity
GEO makes content visible in AI answers. Which metrics count and how to detect AI referral traffic first-party instead of losing it as direct traffic.
AI Crawler Traffic: Track GPTBot and ClaudeBot Load
In 2026, bots are the majority of HTML traffic for the first time. Here is how to track AI crawler traffic from GPTBot and ClaudeBot, separate it from real visitors and steer it via robots.txt.
DORA 2026: Digital Operational Resilience for Financial Services
DORA has applied since 17 Jan 2025: 22,000+ financial entities, 4 h/72 h/1 month deadlines and an ICT register. How to evidence the web layer with monitoring.
BIMI and VMC: Secure Your Brand Logo in the Inbox 2026
BIMI shows your verified brand logo in Gmail, Apple Mail, and Yahoo. Learn to secure the chain of DMARC, BIMI record, SVG logo, and VMC or CMC certificate.
OWASP Top 10:2025: The New Web Risks Explained
The OWASP Top 10:2025 brings two new categories, Security Misconfiguration at rank 2 and SSRF folded into Broken Access Control. What it means for website operators.
PCI DSS 4.0.1: Client-Side Security Mandatory in 2026
Since 31 March 2025, PCI DSS requirements 6.4.3 and 11.6.1 demand a script inventory and weekly monitoring of payment pages. Here is how to meet both.
Filter Bot Traffic From Analytics: Clean Data Quality 2026
About half of web traffic is automated. Here is how to filter bot traffic server-side by ASN and data-center detection and keep sessions, engagement and conversion rate clean.
p95 and p99, Not Averages: Measure Response Times Right
The average response time hides outliers. Learn how percentiles p50, p95 and p99 reflect real user experience and become alert rules and SLO targets.