By Greg Nowak. Last updated 2026-07-20.
Cloudflare Service Key authentication stops working on September 30, 2026. From that date, requests using the X-Auth-User-Service-Key header will no longer authenticate. Integrations need to use API tokens with the permissions required for their work.
The credential change itself is usually the easy part. The harder question is whether you have found every caller.
By Greg Nowak. Last updated 2026-07-19.
An AI workflow can look flawless in a demonstration and still be nowhere near ready for customer contact. Demos tend to be cooperative: the input is clean, the tools are available, the request is familiar, and someone is standing by to intervene. Production is less obliging. Customers are ambiguous. Records have gaps. APIs fail. Permissions vary. A plausible answer may hide the fact that the wrong action was taken.
Every village has rules nobody remembers the reason for. Underbeck has
three: pay the goatherd, hold the Tallowing on time, and keep the door
poor.
Vegan Power began as a simple Android game in 2020 with a very plain joke at its heart: eat fruit, not friends.
It is now playable at veganpower.grn.dk in any modern browser. There is no app store, no sign-up and no setup. Open the page, move the little yellow hero, and start catching fruit.
By Greg Nowak. Last updated 2026-07-19.
KotobaMon (コトバモン, “Word Monster Safari”) is a small 3D game that runs entirely in a web browser. You walk a low-poly island, meet wild monsters and catch them — and because every monster is a Japanese word, catching them is how you pick up vocabulary. It is live at fantasy.grn.dk, needs no download, and was built as a self-contained side project.
By Greg Nowak. Last updated 2026-07-18.
WordPress 7.0.2 was published on July 17, 2026 to fix one critical and one high-severity security issue. WordPress recommended installing it immediately and, given the severity, switched on forced updates through its automatic-update system for affected sites.
That should protect a large part of the WordPress estate quickly. It does not prove that every site you are responsible for has been patched.
By Greg Nowak. Last updated 2026-07-17.
Most IndexNow projects start in the obvious place: notify search systems when a page goes live. The trouble usually comes later. A price changes. An office moves. An offer expires. A product is withdrawn. Guidance is corrected. If the integration only listens for the original publish event, none of those changes may reach the notification queue.
By Greg Nowak. Last updated 2026-07-16.
The EU AI Act’s next transparency deadline is not just a concern for model developers. From 2 August 2026, Article 50 applies to customer-facing bots, synthetic text and media, deepfakes, certain public-interest publications, emotion recognition, and biometric categorisation.
By Greg Nowak. Last updated 2026-07-15.
A voice agent can sound natural, respond quickly and sail through a polished demo. None of that proves it is ready for customers.
The real test starts when a caller changes direction halfway through a sentence, an account lookup fails, or the request requires authority the agent should never have. The same applies when a promising sales enquiry becomes too complex for automation. What happens next matters more than how fluent the opening exchange sounded.
By Greg Nowak. Last updated 2026-07-14.
Open a company website in a browser and everything may appear to be in place: service descriptions, prices, navigation, contact details and supporting metadata. An AI crawler can request the same URL and receive far less.
The gap often comes down to JavaScript. A visitor’s browser runs the code that adds content after the initial page loads. A crawler that reads only the original HTML response may never see those additions, even when they contain the facts someone would need to understand or contact the business.
By Greg Nowak. Last updated 2026-07-13.
Social posts are now part of the Search Console reporting picture. In July 2026, Google began rolling out platform properties for Instagram, TikTok, X and YouTube. Connect an account or channel, and its owner can see which Google queries and individual posts produce impressions and clicks.
That fills a genuine measurement gap. It also creates some less glamorous work around ownership, definitions and maintenance.
By Greg Nowak. Last updated 2026-07-12.
WordPress plugins no longer need a separate integration for every AI provider. Since WordPress 7.0, a plugin can describe the result it needs through a provider-agnostic PHP AI Client. WordPress then routes the request to a suitable model configured by the site owner.
By Greg Nowak. Last updated 2026-07-11.
Google’s new generative AI control in Search Console looks like a simple switch: let your content appear in covered AI features, or exclude it. For a business that relies on search discovery, the decision is much bigger than the interface suggests.
By Greg Nowak. Last updated 2026-07-10.
OpenAI has set an end date for Agent Builder. From November 30, 2026, the visual workflow product will no longer be available on the OpenAI platform.
That does not mean every part of AgentKit is disappearing. But if your business relies on the canvas for an active workflow, you now have a migration project, even if nobody has put it on the delivery plan yet.
By Greg Nowak. Last updated 2026-07-09.
A browser-using AI agent is not just a chatbot with a screen attached. It can read a page, press buttons, fill fields, move through a multi-step workflow, and sometimes keep going until it decides the job is done.
That changes the question for a business. The first question is not simply, can the agent do this? It is, what is it allowed to touch, and where must it stop?
By Greg Nowak. Last updated 2026-07-08.
AI integrations are no longer just helping someone write a first draft. They are being wired into practical jobs: update a CRM record, create a support ticket, prepare invoice data, route a lead, publish metadata, notify a team.
That is where the risk changes. A weak paragraph usually gets noticed by a person. A bad field inside a JSON object can move quietly through an API workflow and only show up later as a messy record, a wrong status, or an automation that did exactly what the software allowed it to do.
By Greg Nowak. Last updated 2026-07-07.
AI search has made an old SEO bargain feel much less reliable. The old bargain was clear enough: let search engines crawl the site, win visibility, and turn the resulting visits into revenue, leads, subscribers, support deflection, or product discovery.
By Greg Nowak. Last updated 2026-07-07.
Product visibility used to look like a mostly front-end job. Improve the copy. Tighten the category pages. Add reviews. Tune the ads. Make the search result more appealing.
That work still matters, but it is no longer enough. For ecommerce teams, a lot of the commercial risk now sits underneath the page: identifiers, feed attributes, structured data, crawlable product content, return policies, prices, availability, and the checks that keep those things saying the same thing.
By Greg Nowak. Last updated 2026-07-07.
Drupal AI has moved past the lab-demo stage. Drupal’s AI overview presents it as an enterprise-grade open source AI solution, with AI-human collaboration, governance, model flexibility, and demos for content, accessibility, and marketing work. That is a good sales story. It also means agencies need to treat client demos with more discipline than a polished prompt walkthrough.
By Greg Nowak. Last updated 2026-07-06.
Most support bot projects start with a reasonable assumption: the answers are already in the help center. Often, they are. The awkward part comes later, when the help center changes and nobody is quite sure what the bot still has access to.