Website Audit API: A Developer Guide to Scans and Webhooks
A developer's guide to using a site audit API: queue scans, poll or use webhooks, verify HMAC signatures, handle rate limits and run crawls and batches safely.
Guides
Practical guides on websites, email, security and AI automation, picked for software & saas.
A developer's guide to using a site audit API: queue scans, poll or use webhooks, verify HMAC signatures, handle rate limits and run crawls and batches safely.
JSON vs YAML compared: syntax, comments, data types, where each is used, the YAML 1.1 yes/no trap, indentation errors and how to convert between them safely.
Cron expressions explained: the five fields, ranges, lists and steps, ready-made examples, time zone and daylight saving traps, and how GitHub Actions differs.
Google updated its user-generated spam guidance on October 26, 2026: keep share links and new users' pages out of the index and watch Search Console for abuse.
A support ticket triage and release notes workflow for software teams: consistent tagging, urgent escalation, linked bugs, drafted notes and customer follow-up.
Emails landing in spam? Learn the four real causes: missing authentication, poor sender reputation, risky content and dirty lists, plus the fixes for each one.
Fix SPF PermError too many DNS lookups: how the 10-lookup limit is counted, how to audit nested includes, and safe ways to trim, move to subdomains or flatten.
The current Gmail, Yahoo and Outlook.com sender rules: 5,000-a-day thresholds, SPF, DKIM, DMARC, one-click unsubscribe, 0.3% spam rate and enforcement dates.
Draft UK subscription regulations were laid in October 2026 for contracts from 1 January 2027. Reminders, online exit and cooling-off rules explained for SMEs.
A practical SaaS SEO checklist: docs on subdomains, JavaScript rendering, pricing and comparison pages, SoftwareApplication schema and a changelog that ranks.
An AI startup website checklist for UK founders: AI crawler controls, llms.txt, trust and security pages, headers, and claims that satisfy the ASA and CMA.
UUID v4 vs v7 explained: how RFC 9562 defines each, why time-ordered v7 IDs suit database indexes, the collision odds, and when v4 is still the better pick.
What is a JWT? How JSON Web Tokens are structured, what the claims mean, how signing works, and the security mistakes (alg none, weak keys, storage) to avoid.
How ChatGPT search chooses sources to cite: OAI-SearchBot, search partners, query rewriting and freshness, plus what you can control and how to track referrals.
Should you block AI crawlers like GPTBot, ClaudeBot and PerplexityBot? Learn which bots train models, which power AI search, and what each block costs you.
Is a subdomain good for SEO? Google can rank both, but subdomains run as separate hosts. The real trade-offs, a decision checklist and how to move safely.
Free checklist (PDF)
31 practical checks for software & saas: website speed and mobile, Google Business Profile and reviews, email security, booking and enquiry handling, and AI search visibility. Each one says why it matters, and many link to a free tool that checks it.
Software companies spend their days making other people's work flow. The handoffs between their own teams deserve the same care: a customer's words reaching the roadmap, a fix reaching the person who reported it, an answer reaching the next person who asks.
Usually a reply within one business day. No sales sequence, no obligation.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy