Join my community / free newsletter — sign up here

origin security

By Greg Nowak, 14 May, 2026

Cloudflare’s Enforce DNS-Only Switch: Test Your Origin Before an Incident

Cloudflare’s account-wide DNS-only switch can bypass its proxy in an emergency. Test certificates, firewalls, capacity, and rollback before relying on it.

Cloudflare Tunnel in 2026: Better Visibility, Harder Questions

Cloudflare’s 2026 Tunnel updates improve inventory, replica monitoring, log streaming, and handover—while exposing weak ownership, failover, and logging practices.

Tags

origin security

Review Greg on Google

MCP Just Went Stateless: Audit the Integrations Behind Your AI Tools

2026-08-03

The 28 July 2026 MCP release removes protocol sessions and changes discovery, tasks, caching, OAuth and tracing. A practical guide to auditing the move.

SEO Trends for 2026: What Actually Changed Since 2024

2026-08-03

A practical guide to what changed in SEO between 2024 and 2026, from AI and multimodal search to Core Web Vitals, privacy and local visibility.

INP and Green SEO Share a Backlog: Cut the Work Every Visit Repeats

2026-08-03

INP and sustainable web work often expose the same waste. Use field data, profiling, caching and performance budgets to build one practical backlog.

AI crawler policy now has verbs: separate search, RAG, and training

2026-08-02

AI crawler rules now need separate decisions for search, RAG, and training, backed by practical testing across robots.txt, CDNs, WAFs, and CMS controls.

WordPress Supports Old PHP; Your Production Server Shouldn’t

2026-08-01

WordPress still runs on legacy PHP, but compatibility is not a security policy. Build and test your upgrade path before PHP 8.2 support ends.

The AI-built tool your team relies on needs an owner

2026-07-31

AI-built internal tools can become business-critical before anyone owns them. Here is how to secure, review, monitor, and retire them without blocking useful work.

Your AI model has an expiry date: build the migration lane now

2026-07-30

AI models retire on a schedule. Learn how to map dependencies, test replacements, release safely and preserve a working rollback route.

Copilot Has Repo-Level Metrics Now. What Should Teams Measure?

2026-07-29

GitHub’s repo-level Copilot metrics show where AI is active, but not whether it adds value. This scorecard connects usage with delivery, quality, and cost.

Not Every AI Job Needs an Instant Answer: Batch the Backlog

2026-07-28

Move delay-tolerant AI work into dependable batch queues to cut processing costs without compromising quality, data controls, or urgent workflows.

A stray Set-Cookie can waste your CDN: audit the cache at the edge

2026-07-27

Cloudflare Cache Response Rules can recover wasted CDN capacity, but first you need a route-level audit of public, personal and authenticated responses.