HTTP Security Headers: A Copy-Paste Guide for Nginx and Apache
The HTTP security headers every site should send, what each one does, and ready-to-paste configs for Nginx, Apache and Cloudflare Transform Rules.
332 practical guides to website speed, SEO, email deliverability, DNS, security and automation, with fixes you can copy and paste.
The HTTP security headers every site should send, what each one does, and ready-to-paste configs for Nginx, Apache and Cloudflare Transform Rules.
Cloudflare and OpenAI shared results of a pilot that fed network signals to ChatGPT search on October 15, 2026, plus new checks on bot behavior. What to do.
Cloudflare replaced Block AI Bots with Search, Training and Agent controls on 15 September 2026. What sites should check to stay visible in search.
When a CDN actually speeds up a small business site, when it does little, what can go wrong when you set one up, and how to choose between the options.
TLS 1.3 explained for website owners: what changed from TLS 1.2, the faster handshake, 0-RTT risks, disabling TLS 1.0 and 1.1, and how to check your server.
Post-quantum encryption for websites: harvest now, decrypt later, hybrid X25519MLKEM768 key exchange, NCSC timelines and the steps a small business needs.
HTTP/3 and QUIC explained: when they make a website faster, browser and CDN support, and how to enable and test HTTP/3 on Cloudflare, LiteSpeed and Nginx.
Should you block AI crawlers like GPTBot, ClaudeBot and PerplexityBot? Learn which bots train models, which power AI search, and what each block costs you.
IPv6 for small business websites: how many users have it, whether you need an AAAA record, hosting and CDN support, IPv6 email PTR and SPF rules, and testing.
The best Cloudflare free plan settings for a small business: SSL mode, HTTPS, HSTS, TLS, caching, cache rules, bot and AI controls, WAF and DNS, step by step.
A web application firewall (WAF) blocks malicious requests such as SQL injection and bad bots before they reach your site. See if you need one and free options.
How to redirect HTTP to HTTPS with a single 301 in Apache, Nginx, cPanel, Cloudflare or WordPress, plus how to avoid redirect loops and chains that hurt SEO.
Popular topics
Free website audit
Speed, SEO, DNS, email (SPF/DKIM/DMARC) and security in one scan, with a prioritised fix list.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy