Writing
Notes and investigations
What actually visits websites, how much of it can be identified, and where the honest answer is “you can't tell.” Findings from real server logs, with the method included so you can check.
Which AI bots are reading your site, and what to actually do about them
A practical guide for people who own a website and don't have a security team.
State of Agent Signing — July 2026
I built the wrong product first, and the research that killed it took an hour
I asked an AI to read my site. It told me how it identifies itself. The logs disagreed.
July 2026
474 requests from the same iPhone, from 38 different countries