Blog
Practical guides on website monitoring, GDPR/EAA compliance, security headers, SEO and Core Web Vitals — from real work with XICTRAQ.
Tame Flapping Alerts: End the Up-Down Notification Noise
Why flapping alerts happen and how three remedies stop the up-down noise: require consecutive failures, confirm from multiple locations, and apply hysteresis.
SBOM and the CRA: Software Bill of Materials for Websites
The Cyber Resilience Act mandates a machine-readable SBOM. How to capture components, version, purl, hash and licence in CycloneDX or SPDX - and keep it current.
Website Defacement: Detect Attacks and Report Under NIS2
How website defacement attacks happen, the early indicators to watch, how incident response works and when NIS2 requires you to report the incident.
MTA-STS and TLS-RPT: Enforce Email Encryption in Transit
MTA-STS (RFC 8461) and TLS-RPT (RFC 8460) explained: policy modes, DNS records, the policy file, and pitfalls to enforce TLS between mail servers reliably.
Post-Quantum TLS 2026: Monitor ML-KEM in the Browser
X25519MLKEM768 is the 2026 default in Chrome, Firefox, and on Apple platforms. What ML-KEM (FIPS 203) means for your TLS configuration and how to monitor your post-quantum readiness.
Core Web Vitals 2026: Measuring SPA Performance Right
The 2026 CrUX update detects soft navigations. Learn how to measure LCP and INP for in-app transitions in single-page apps with real field data - before they cost conversions.
Ad Blockers Eat 40% of Your Data: First-Party Measurement 2026
Ad blockers, Safari ITP and consent rejection cut 15-40% of analytics data. Here is how first-party measurement on your own subdomain delivers reliable, GDPR-compliant numbers.
Error Budget and Burn Rate: Setting Up SLO Monitoring
99.9% sounds great but means 43 minutes of downtime per month. Learn to set up SLI, SLO, error budgets and multi-window burn-rate alerts the right way.
.de Outage 2026: Detecting DNSSEC Failures Early
The May 2026 .de DNSSEC outage pulled millions of domains out of resolution via SERVFAIL. Learn to detect such failures early with multi-resolver DNS monitoring.