Blog · all articles
The articles that apply to the websites these organizations run, in one place, with a feed of their own. The market page is here.
Every website has four plain-text files no visitor ever sees: robots.txt, sitemap.xml, security.txt, and llms.txt. Search engines, security scanners, and AI agents read them on every visit.
What each one is, who actually reads it, what to put in it, and the one rule that keeps all of them safe. We went through this list on our own site this week and found gaps, so the free audit now checks for them.
For weeks the hero on three of our own pages vanished for a second and a half on iPhones, on a cold load only. Nothing reproduced it in a lab.
A fifty-line field trace found it in three page loads: an ad blocker was hiding any element whose class started with ad-.
The series finale: where a submission actually goes. The record before the notification, the email path that rots silently, the confirmation with substance, and the monitoring that notices the week your form goes quiet.
CAPTCHAs tax the humans and barely slow the professionals. The quiet alternative: a honeypot, a clock, a rate limit, and a content check that flags instead of blocking, all on the server where the visitor never sees any of it.
In-page submission done honestly: the four states a submit button owes the visitor, why typed work must survive every failure, and how to make success audible as well as visible.
Password resets, spam folders, domain trust, and why important website emails should never look suspicious to inbox providers.
Capacity, waitlists, QR tickets, and a check-in screen on a phone: what event registration actually has to do, why per-registration fees are rent, and a live RSVP you can try right here.
Once a month: one number from our census of sites like yours, one fix, and what we published. No sequence, no sales calls.
One confirmation email first. Nothing sends until you click it. Or follow by RSS.
Check your inbox. A confirmation is on its way.