form-security

By Greg Nowak, 14 June, 2026

Cloudflare Turnstile on Lead Forms: Beyond the Widget

A Turnstile widget is only the front end: secure lead forms also need server-side token checks, replay handling, hostname controls, secret rotation, and analytics.

Tags

form-security

Review Greg on Google

One Timeout, Two Orders: Make AI Actions Safe to Retry

2026-07-25

A timed-out AI action may already have succeeded. Stable keys, durable ledgers, queues and stored results prevent a routine retry from duplicating real work.

Your AI Visibility Dashboard Needs a Methodology, Not More Charts

2026-07-24

A practical framework for measuring AI-search visibility with fixed prompts, repeated tests, separate metrics, retained evidence, and honest reporting.

AI Admin APIs Are Here—But Your Directory Is Still the Source of Truth

2026-07-23

New AI admin APIs can automate access and spend controls, but reliable governance still starts with authoritative directory data and clear ownership.

OpenAI Presence Arrived—But Is Your Workflow Ready for an Agent?

2026-07-22

Before an AI agent can take on real work, its workflow needs clear scope, permissions, handoffs, evaluation cases, and production monitoring.

Chatbot Transcripts Quietly Became a Retention and Redaction Problem

2026-07-21

Chatbot transcripts spread across providers, logs and support tools. Here is how to map each copy, redact sensitive data and test deletion properly.

Cloudflare Service Keys Stop in September: Find Every Caller

2026-07-20

Cloudflare Service Keys stop working on September 30, 2026. Here is how to find every caller, move to scoped API tokens and avoid a late outage.

Your AI Workflow Needs an Acceptance Test Before It Meets Customers

2026-07-19

A practical way to test AI workflows using realistic scenarios, tool checks, human rubrics, regression suites, and clear release gates.

Three cover candidates for The Goats Were Load-Bearing fanned on a dark background: an ember-lit door, three slow knocks, and a founders' ledger

The Goats Were Load-Bearing: a fantasy where the bill always comes due

2026-07-19

A teaser for the upcoming darkly comic fantasy novel The Goats Were Load-Bearing — a village, a door that must stay poor, and the worst possible time to sell the herd. Readers pick the cover.

Vegan Power game: the yellow player catches falling fruit while a chicken and a cow look on

Vegan Power: The Little Game About Eating Fruit, Not Friends

2026-07-19

Vegan Power is a free browser game where you catch fruit, dodge the animals, protect seven hearts, and chase a better high score.

KotobaMon: Shipping a 3D Browser Game With No Build Step and Self-Hosted Voice

2026-07-19

A look at fantasy.grn.dk, a browser-based 3D game that teaches Japanese with no build step, procedural art and self-hosted AI voice, and what its constraints show about shipping interactive products fast and cheap.