Stronger browser protections and search engine rules
Published 7 October 2026 by Adrian Angol-Henry · Prompted by internal audit
Live from 07/10/2026. Our admin, HR and Protect sites now enforce a content security policy, and duplicate protective settings were removed (from 06/10/2026). Internal apps are no longer listed by search engines, while public pages on Protect and Support still are. Dependencies with a known serious weakness were replaced (from 06/10/2026).