Guided paths that mix auditors and hands-on steps. Start a journey on a monitored URL and pick up where you left off.
Patch what is vulnerable, close the endpoints Liferay exposes by default, and harden TLS, cookies and headers. Part one of the Liferay series.
Measure, fix how pages are delivered, then tune the JVM, Liferay and Elasticsearch. Part two of the Liferay series.
Catch what expires, make the site fail cleanly, limit what can overload it, and be able to lose a server. Part three of the Liferay series.
Your site is live. Now make sure it's finished, findable, shareable and measurable — then tell people about it.
Inspired by Zeno's post we created a step by step journey where you can apply it to your site.
Patch what you run, close what is exposed, and harden HTTPS, cookies and browser headers, one checked step at a time.
Stop others from sending as your domain, make sure your own mail arrives, and keep the mailboxes behind it safe.
APIs, auth, docs and discovery files that AI agents can actually read and use, from your marketing site to your MCP server.
Catch what expires, make the site fail cleanly, take load off the origin, and be able to lose a server or restore from backup.