Blog
HSTS missing from HTTPS server
If a scan reports "HSTS missing from HTTPS server", an HTTPS response from your site came back without a Strict-Transport-Security header. That header tells a browser to use only HTTPS for your host for the next max-age seconds. Without it, a visitor who types your address or follows an old http:// link starts on plain http until your redirect sends them to HTTPS.
Two SPF records break SPF
A mail service's setup guide usually asks you to add a TXT record that starts with v=spf1. If your domain already has one, adding another means mail from every sender on the domain stops passing SPF.
Scripts can now manage your Netonica monitors
Your public endpoints and your vendors' endpoints can change quietly. If you watch them for security changes, you also need to keep your monitors up to date. You can now manage Netonica monitors from a script or a deploy pipeline.
Is your DMARC policy still quarantine or reject?
Your DMARC policy can change to none without bouncing your mail. The record still exists, so checking that it's present won't tell you whether it still asks receivers to act on forged mail.
A DNS alias that points at nothing
When you delete a site at a hosting provider but leave its DNS record in place, your subdomain still points at the provider. If someone else can claim that name there, they can serve their own content on your subdomain.
Free check results now have share links
An endpoint can serve something different by the time a teammate checks it. If you're trying to explain a result, you need to show what you saw and when you saw it.
MCP 2026-07-28 drops the old handshake
An MCP server you depend on can start refusing your client's first request after a protocol upgrade. If the server speaks only MCP 2026-07-28, clients that still open with initialize can't connect. The tools can stay the same while the way clients reach them changes.