Network changelog.

Our public stats page now shows 30-day impression totals, click-through rates, data served, and live edge-security metrics — and we fixed a brief publishing glitch that showed zeros on Monday morning.

• Improvement: The /stats page now reports 30-day ad impressions (with daily average), ad clicks, network CTR, and premium-placement CTR from our first-party pixel — real measured numbers, updated weekly.

• Improvement: New Edge Security section: threats stopped, malicious requests blocked, and bot challenges issued across the network, measured daily at the Cloudflare edge. Advertisers see the traffic-quality enforcement that happens before an impression ever counts.

• Fix: Fixed the weekly stats publication, which briefly showed zeros on Monday morning due to an expired automation credential and a data-volume milestone (our events store passed 8 million rows, outgrowing the old queries). The pipeline now fails loudly rather than ever publishing incorrect numbers.

We fixed a measurement issue that was over-counting ad impressions from inactive browser tabs, expanded our best-performing placement to rotate more partner offers, and added new bot-mitigation and security-visibility measures across the network.

• Improvement: Ad rotation now pauses in background or idle browser tabs and resumes when the reader returns. Previously, a tab left open kept rotating ads indefinitely, inflating impression counts. Reported impressions are now a more faithful measure of ads a person could actually see.

• Notice: Stats note: because of the measurement fix above, expect a one-time step down in reported network impressions from Jul 13 onward. This is the removal of over-counted background-tab impressions — reader traffic and ad delivery are unchanged.

• Improvement: Expanded our highest-engagement placement (the sticky bar) to rotate additional privacy-hardware partner offers alongside existing campaigns, improving relevance and giving partners access to the network's best-converting inventory.

• Improvement: Added bot-mitigation challenge rules across the content network (verified search-engine crawlers and feeds are unaffected) and began recording daily security-mitigation metrics per property, so we can track and report on blocked or challenged traffic over time.

We fixed a subtle bug that occasionally dropped tracking beacons during bursts of activity, and extended our proven edge security protections to every property in the network. Reported stats get slightly more accurate; nothing changes for readers or partners.

• Fix: Fixed a rare race condition in the analytics pixel that could drop a tracking beacon when several events fired in the same instant (well under 0.1% of traffic). Recovered events mean impression and engagement counts may tick up marginally from Jul 10 onward — that's the fix, not a traffic change. Verified live after deployment.

• Improvement: Rolled our battle-tested edge security rules out to every property in the network: automated-probe blocking, per-endpoint rate limits, and bot challenges now protect all properties uniformly instead of just the busiest ones. Also closed a set of alternate service URLs that could bypass edge protections.

• Notice: During a full security sweep we observed (and fully blocked) a spoofed-crawler bot flood aimed at the analytics pixel — none of it reached the stats. Advertiser-facing numbers remain clean: layered validation rejects fake or malformed events before they're counted.

Our affiliate program is live — earn commissions for referring customers to CISO Marketplace, with reliable tracking and automated payouts. We also added rate-limiting protections across the platform.

• Notice: Launched the affiliate program end-to-end: affiliates get a referral link, share it, and earn a commission when a referred visitor purchases — credited on the confirmed sale (not browser cookies, so it holds up against ad-blockers and privacy controls). Commissions, rates, and Stripe-powered payouts are managed centrally.

• Improvement: Hardened the platform edge with rate-limiting and abuse protections across our affiliate, payments, and analytics endpoints, as part of our ongoing Cloudflare Workers deployment. No change to the experience.

We retuned how ads are prioritized and which slots they fill across the network — matching the most relevant offers to the best-performing placements and opening up more standard inventory for partners. No change to the reading experience.

• Improvement: Rebalanced the network's priority tiers and slot/zone allocation (our internal 'slot matrix') so each placement is matched to the best-fitting campaigns. High-engagement placements are now reserved for the offers that perform best there, while standard banner inventory (leaderboard and medium-rectangle) opens up to a wider rotation of partner offers.

• Improvement: Dedicated the high-engagement sticky placement to our own event promotion (where it earns the strongest engagement) and freed premium banner slots for rotating partner campaigns — improving relevance and fill without adding clutter.

• Notice: Stats note: because this changes how impressions are distributed across placements, this period's per-placement breakdown reflects the one-time inventory retune, not a change in traffic. Overall pageviews and reader experience are unaffected.

We migrated all of our content properties to Cloudflare Workers — same content, same URLs, just a faster runtime with stronger security. No change you need to make.

• Improvement: All 10 Astro blog properties moved from Cloudflare Pages to Cloudflare Workers in a single day. Every URL, redirect, sitemap, and the first-party analytics pixel were preserved 1:1 — it's a platform swap, not a content change, so organic traffic and SEO continue uninterrupted.

• Improvement: Added modern security headers to every property (HSTS, Content-Security-Policy, X-Frame-Options, and more) — most had none before. Also fixed IndexNow search-engine submissions and the shared contact-form captcha network-wide.

• Notice: If you notice a brief, minutes-long blip on a single property on Jun 12, that's the secure-certificate handover as each domain moved — not a real outage. Analytics collection carried over without a gap.

We're surfacing our own free, interactive CISO calculators and the CISO Marketplace vendor directory across the network — useful tools for readers, no signup required.

• Improvement: Ten free interactive tools (calculators and assessments) now rotate across the network and inside articles — SASE readiness, SOC build-vs-buy, firewall sizing, endpoint licensing, cloud egress, IoT/OT risk, IAM TCO and more. Free to use, no login.

• Improvement: The CISO Marketplace vendor directory (48 vetted suppliers across MDR/XDR, SASE, compliance/GRC, IoT/OT, edge/WAF, backup/DR and physical security) is now showcased contextually so readers can find the right vendors by category.

Brands can plug into the CyberAdX pixel network through major affiliate networks — Impact, CJ, and PartnerStack among others — plus direct deals.

• Improvement: New partner avenue: if your program runs on Impact, CJ (Commission Junction), PartnerStack, or another major affiliate network, partnering with CyberAdX is simple — we onboard your creatives and rotate them across our first-party pixel network, contextually matched to the right properties.

• Improvement: Beyond banners, partners can run coupon/promo cards, deal placements, and native in-article tool cards — all measured with our own cookieless, first-party tracking, so attribution doesn't depend on third-party cookies.

• Improvement: We match partners by category — security & privacy tooling, and home / office / IoT tech — to the properties where they fit best across the network.

Our public /stats page now refreshes automatically, so the numbers you see stay current.

• Improvement: A scheduled job now pulls our first-party and edge analytics on a regular cadence and updates /stats automatically — no more manual refreshes.

• Notice: Heads up on the numbers: compliancehub.wiki — normally one of our highest-traffic properties — was offline for a few days in early June (a brief domain lapse, now resolved), which temporarily lowered network-wide pageviews for that week. Traffic is recovering toward its normal baseline.

Two issues affected the network over the past few weeks. Both are now fixed, and ad fill plus click reporting are back to normal.

• Incident: Lower ad fill (mid-May–Jun 6): a bot-protection change we rolled out in mid-May turned out to be over-aggressively filtering legitimate ad requests, so many slots showed our house “ad space available” card instead of live ads. We identified the cause and fixed the validation — fill has recovered to normal levels. Bot protection is being re-introduced more carefully.

• Fix: Click reporting restored: a tracking bug was under-reporting ad clicks network-wide. It's fixed, so click and CTR figures are now accurate again.

• Notice: compliancehub.wiki downtime (Jun 2–5): the domain briefly lapsed and was promptly renewed. Traffic and ad serving on the property are back to normal.

Following the launch we expanded the formats advertisers can run across the network.

• Improvement: New ad formats: a sticky anchor unit, a billboard placement, coupon/promo cards, and a network-wide hard-bottom sponsor package for always-on premium reach.

• Improvement: Launched native in-article “tool promo” cards across the blog network — non-intrusive text placements that surface free security tools (microsec.tools, RateMySOC, PhishingRisk, AI Risk Assess and more) to readers mid-article.

• Improvement: Separated placement (where an ad appears) from format (what it looks like), so new creative types roll out without disrupting existing campaigns.

• Improvement: Added cisoinsights.show to the carousel network.

Network-wide upgrades to ad placements and serving consistency across all properties.

• Improvement: New sticky anchor ad unit (mobile + desktop, dismissible) rolled out across all 13 properties.

• Improvement: Fixed several properties where ad slots weren't firing on non-article pages, improving overall fill rate.

• Improvement: Added a self-promo fallback so empty slots never sit blank when a passback ad isn't available.

After months of rebuilding, CyberAdX launched its own privacy-first, first-party ad network — monetization we fully own and control.

• Improvement: First-party pixel deployed across 13 properties — cookieless, no third-party trackers, DNT/GPC honored.

• Improvement: 6-position carousel ad system with priority-based rotation and server-side, tamper-proof click tracking.

• Improvement: Public transparency stats published at /stats — real first-party numbers, refreshed weekly.

Consolidated the network's hosting onto Cloudflare Pages.

• Improvement: Migrated from Netlify to Cloudflare Pages — bringing serving, edge analytics, and bot protection together at the network edge.

• Improvement: This is the foundation the first-party ad pixel and bot mitigation now run on.

CyberAdX was accepted into the Cloudflare for Startups program.

• Improvement: Gained access to edge-grade bot mitigation, analytics, and serving infrastructure to rebuild the network on — directly addressing the bot-traffic problem that started this journey.

We rebuilt our properties from the ground up for speed and resilience.

• Improvement: Migrated off the Ghost CMS onto static Astro sites — lighter, faster, and far more resistant to the kind of automated abuse that took us down.

• Improvement: Initial hosting on Netlify while the network was being rebuilt.

Where this all started. A large automated bot network flooded our sites with fake traffic, which led to our removal from Ezoic — the third-party ad platform we relied on at the time. Rather than depend on a platform we didn't control, we chose to rebuild monetization on infrastructure we own.

• Incident: A botnet generated large volumes of fake, non-human traffic across our properties.

• Notice: The inflated traffic led to our removal from Ezoic. We treated it as a turning point, not a dead end.

• Improvement: Decision: build a first-party, privacy-respecting ad network we fully control — the beginning of CyberAdX.