Guides
Practical guides on websites, email, security and AI automation, picked for it support & msps.
Is there a broken link checker in SharePoint? What Microsoft offers natively, plus community tools, scripts and crawlers for SharePoint Online and 2013.
Cron expressions explained: the five fields, ranges, lists and steps, ready-made examples, time zone and daylight saving traps, and how GitHub Actions differs.
Let's Encrypt scheduled 64-day staging certificates from October 14, 2026, before they become the default on February 10, 2027. How to check your renewals.
Drupal fixed a critical Field UI remote code execution flaw on October 14, 2026, rated 19/25. Which versions are safe, the stopgap and a patch checklist.
A user onboarding and offboarding workflow for MSPs and IT teams: verified requests, role templates, approved account changes, access removal and audit trails.
NCSC retired Mail Check on 31 March 2026 as phishing still hits 38% of UK businesses. How to keep DMARC monitored and protect email deliverability in the UK.
Eight eMudhra intermediate CA keys were found to be weak in October 2026 and browsers pulled trust. How to check whether your SSL certificate is affected.
PHP fixed two critical remote code execution flaws on 21 October 2026. Which versions are safe, what the NCSC advises and a patch checklist for UK websites.
Microsoft began disabling Exchange Web Services in Exchange Online in October 2026, ahead of full shutdown in April 2027. What UK firms should check now.
A repeatable email security audit for MSPs and IT providers: check SPF, DKIM, DMARC, MTA-STS, TLS and blacklists on every client domain, then report clearly.
Check which TLS versions your server accepts, find out who still uses old ones, then disable TLS 1.0 and 1.1 on Apache, Nginx, IIS, cPanel and Cloudflare.
Cyber Essentials v3.3 took effect in April 2026 with automatic fails for missing MFA and slow patching. What UK businesses with websites need to check now.
Stop scammers spoofing your email domain with SPF, DKIM and a DMARC policy of p=reject, plus lookalike domain monitoring. A step-by-step plan for any business.
How to check if your domain or IP is blacklisted, what a listing means, how to request delisting for free, and how to stop it happening again.
Understand DMARC p=none, quarantine and reject, how SPF and DKIM alignment work, what changed in RFC 9989, and a step-by-step plan to reach enforcement safely.
Free checklist (PDF)
31 practical checks for it support & msps: website speed and mobile, Google Business Profile and reviews, email security, booking and enquiry handling, and AI search visibility. Each one says why it matters, and many link to a free tool that checks it.
An MSP is trusted with the systems other businesses depend on. That trust is earned in the small things done reliably, every day: the leaver removed on time, the backup actually tested, the alert that mattered noticed first.
Usually a reply within one business day. No sales sequence, no obligation.
Make It Flow assistant
Tools, guides and AI automation
Hi! I can find the right free tool, explain an audit result, or tell you how Make It Flow can automate any part of your business. What do you need?
Book a free 15-minute call
Pick a time that suits you. Times are shown in your time zone ().
A Make It Flow agent will confirm the call by email within 24 hours.
AI answers can be wrong. Chats are stored so the team can follow up. Privacy