Join my community / free newsletter — sign up here

WAF

By Greg Nowak, 9 August, 2026

The AI Crawler in Your Logs May Be Wearing a Borrowed Name

A User-Agent is a claim, not proof. See how to verify AI crawler traffic before it shapes reporting, robots.txt decisions, or WAF exceptions.

Tags

WAF

Review Greg on Google

The AI Crawler in Your Logs May Be Wearing a Borrowed Name

2026-08-09

A User-Agent is a claim, not proof. See how to verify AI crawler traffic before it shapes reporting, robots.txt decisions, or WAF exceptions.

AI Agents Need a Spending Brake, Not Just a Billing Dashboard

2026-08-08

AI agent costs can climb inside a single workflow. Runtime budgets, loop detection, outcome metrics, and safe handoffs keep that spending under control.

Drupal 12 Slipped to December. Drupal 10 Still Runs Out of Road

2026-08-07

Drupal 12 arrives as Drupal 10 support ends in December 2026. Moving to Drupal 11.3+ first keeps two mandatory upgrades manageable.

EU OpenAI Residency Is a Migration Project, Not a Dashboard Toggle

2026-08-05

An EU-resident OpenAI API setup needs a new project, regional routing, dependency and state migration, compatibility testing, and clear governance evidence.

AI Images Need a Chain of Custody, Not Just a Disclosure Label

2026-08-04

AI image labels are only the endpoint. Learn how to test C2PA credentials through editing, CMS, CDN and agency handoffs while preserving evidence.

MCP Just Went Stateless: Audit the Integrations Behind Your AI Tools

2026-08-03

The 28 July 2026 MCP release removes protocol sessions and changes discovery, tasks, caching, OAuth and tracing. A practical guide to auditing the move.

SEO Trends for 2026: What Actually Changed Since 2024

2026-08-03

A practical guide to what changed in SEO between 2024 and 2026, from AI and multimodal search to Core Web Vitals, privacy and local visibility.

INP and Green SEO Share a Backlog: Cut the Work Every Visit Repeats

2026-08-03

INP and sustainable web work often expose the same waste. Use field data, profiling, caching and performance budgets to build one practical backlog.

AI crawler policy now has verbs: separate search, RAG, and training

2026-08-02

AI crawler rules now need separate decisions for search, RAG, and training, backed by practical testing across robots.txt, CDNs, WAFs, and CMS controls.

WordPress Supports Old PHP; Your Production Server Shouldn’t

2026-08-01

WordPress still runs on legacy PHP, but compatibility is not a security policy. Build and test your upgrade path before PHP 8.2 support ends.