HSTS Explained: max-age, includeSubDomains and Preload Risks
How HSTS forces HTTPS, how to choose max-age, when includeSubDomains is safe, and why the HSTS preload list is a commitment you cannot quickly undo.
332 practical guides to website speed, SEO, email deliverability, DNS, security and automation, with fixes you can copy and paste.
How HSTS forces HTTPS, how to choose max-age, when includeSubDomains is safe, and why the HSTS preload list is a commitment you cannot quickly undo.
NCSC retired Mail Check on 31 March 2026 as phishing still hits 38% of UK businesses. How to keep DMARC monitored and protect email deliverability in the UK.
Build an internal linking strategy that helps Google find and rank your pages: topic clusters, descriptive anchor text, fixing orphan pages and editorial links.
Lighthouse 13 merged PageSpeed audits into insights and 2026 releases added an Agentic Browsing category. What it means for a website audit UK teams run.
A practical website launch checklist covering DNS, HTTPS, redirects, SEO, email authentication, security headers and post-launch checks, with copy-paste config.
The ICO says 99% of the top 1,000 UK websites now pass its cookie banner checks after letters and enforcement notices. What smaller UK businesses should learn.
Commerce.com and Cloudflare enabled WebMCP on nearly 100,000 store domains on October 21, 2026, giving AI agents shopping tools. What store owners should know.
Chrome 155 and Firefox 158 added JPEG XL support in October 2026, joining Safari. What it means for image SEO, page speed and how to serve JXL safely.
The FTC is asking whether ad platforms should do more to stop scam ads impersonating businesses. Comments close November 30, 2026. What owners can do now.
EU governments agreed their Digital Omnibus position on October 21, 2026, with fewer cookie consent cases and GDPR tweaks. What it means for websites.
Eight eMudhra intermediate CA keys were found to be weak in October 2026 and browsers pulled trust. How to check whether your SSL certificate is affected.
Cloudflare and OpenAI shared results of a pilot that fed network signals to ChatGPT search on October 15, 2026, plus new checks on bot behavior. What to do.
Popular topics
Free website audit
Speed, SEO, DNS, email (SPF/DKIM/DMARC) and security in one scan, with a prioritised fix list.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy