Blog
Practical guides on website monitoring, GDPR/EAA compliance, security headers, SEO and Core Web Vitals — from real work with XICTRAQ.
Measuring Data Outflow: Where Your Website Sends Data
92% of sites embed a third party, 45% of requests go to third parties. Here is how to measure data outflow and flag third-country transfers with a network audit.
Detecting Vulnerable JavaScript Libraries on Websites
77% of websites ship a JavaScript library with a known vulnerability. Here is how to detect vulnerable libraries through version detection and CVE matching.
Monitor Your Contact Form: When Leads Quietly Vanish
An HTTP 200 and a thank-you page don't mean the lead mail arrives. How synthetic monitoring checks both the submit and the delivery path of your contact form.
Monitor the 5xx Error Rate: More Than Online or Offline
5xx error rate instead of just online or offline: how uptime and status-code monitoring catch 500, 502, 503 and 504 with error-rate thresholds and alerts.
Internal Site Search Analytics: Find What Users Want
Internal site search analytics without cookies: capture search terms first-party, read the zero-result rate and turn it into content, navigation and FAQ.
Speculation Rules and Prerender: Measure It Right
Prerendering makes navigations instant and distorts your counters. How to measure activation-based, check the hit rate and read Web Vitals per navigation type.
IPv6 Reachability Monitoring: Dual-Stack Done Right
Since late March 2026 the native IPv6 share at Google has passed 50 percent. Why dual stack needs separate checks per protocol version.
How to Monitor HTTPS and SVCB DNS Records in 2026
HTTPS records (RFC 9460) drive HTTP/3, ALPN, port and, since RFC 9849, the ECH keys. How to monitor SVCB records across multiple resolvers.
Exposed .git and .env Files: Find Them Before Attackers
4.96 million servers serve .git metadata. How to find exposed .git, .env and backup files, why a 403 proves nothing, and which server rules actually work.