{ "ready": true, "site": { "id": 0, "domain": "devops.nz", "display_name": "DevOps New Zealand", "primary_country_code": "NZ", "category_name": "Developer Tools" }, "metrics": { "global_rank": 11535, "country_rank": 9, "category_rank": 3232, "daily_pageviews_per_visitor": 4.19, "daily_time_on_site_seconds": 375, "bounce_rate": 24.96, "search_visits_percent": 41.79, "total_sites_linking_in": 1, "monthly_unique_visitors": 143, "recorded_at": "2026-04-02 00:15:07" }, "audit": { "score": 98 }, "traffic_sources": { "direct_percent": 26.68, "search_percent": 36.57, "social_percent": 6.49, "referral_percent": 17.01, "email_percent": 6.49, "paid_percent": 6.76 }, "seo_profile": { "backlinks_total": 1, "referring_domains": 1, "dofollow_backlinks_percent": 0, "organic_keywords": 81, "indexed_pages": 733, "page_speed_score": 97, "mobile_friendliness_score": 91, "authority_score": 39, "spam_risk_score": 37 }, "crawl_report": { "robots_status": 200, "sitemap_status": 200, "sitemap_total_urls": 733, "crawl_blocked": false, "crawl_blocked_by": "", "crawl_blocked_reason": "", "notes": [], "created_at": "2026-04-02 00:15:07" }, "keywords": [ { "keyword": "DevOps New Zealand", "position": 21, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "DevOps New Zealand developer tools", "position": 23, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "DevOps New Zealand reviews", "position": 25, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "devops", "position": 27, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "new", "position": 29, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "zealand", "position": 31, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "kiwi", "position": 33, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true }, { "keyword": "collaboration", "position": 35, "search_engine": "Estimated", "checked_at": "2026-04-18 14:42:27", "is_estimated": true } ], "rating": { "overall": 14, "label": "Weak", "breakdown": [ { "label": "Technical foundation", "score": 18, "max": 18 }, { "label": "Authority & trust", "score": 12, "max": 30 }, { "label": "Reach & market presence", "score": 2, "max": 18 }, { "label": "Search visibility", "score": 4, "max": 12 }, { "label": "Engagement & retention", "score": 9, "max": 10 }, { "label": "Channels & diversification", "score": 4, "max": 6 }, { "label": "Registry stability", "score": 3, "max": 6 }, { "label": "Quality system", "score": 100, "max": 100 }, { "label": "Reputation system", "score": 41, "max": 100 }, { "label": "Safety system", "score": 100, "max": 100 }, { "label": "Evidence confidence", "score": 99, "max": 100 }, { "label": "External intelligence", "score": 52, "max": 100 }, { "label": "API intelligence", "score": 54, "max": 100 } ], "authority_score": 39, "quality_score": 100, "reputation_score": 41, "safety_score": 100, "confidence_score": 99, "fraud_score": 0, "authority_signals": { "backlinks": 1, "referring_domains": 1, "organic_keywords": 81, "indexed_pages": 733, "monthly_visitors": 143, "global_rank": 11535, "engagement_score": 85, "crawl_quality_score": 100, "brand_completeness_score": 75, "link_diversity_score": 92, "technical_reliability_score": 94, "whois_score": 45, "whois_age_years": 0, "whois_stability_score": 100, "spam_penalty": 3 }, "whois_signals": { "age_years": 0, "days_to_expiry": null, "days_since_last_registry_update": null, "stability_score": 100, "registrar_changes": 0, "ownership_changes": 0, "nameserver_changes": 0, "status_changes": 0, "history_entries": 1, "privacy_protected": false, "dnssec_enabled": false, "has_registrant_country": false, "registrant_country": "", "nameserver_count": 0, "status_count": 0 } }, "authority_score": 39, "trust_score": 16, "domain_tags": { "primary_tag": "Uncertain", "primary_tag_score": 68, "primary_candidate": "Uncertain", "primary_candidate_score": 68, "tag_codes": "Uncertain,T,C", "tags": [ { "code": "Uncertain", "label": "Uncertain", "tone": "unknown", "description": "External checks stayed inconclusive, so the model avoided a harder verdict.", "reason": "The evidence is mixed and external checks stayed inconclusive, so the system kept an uncertainty buffer instead of a harder automated verdict.", "message": "The evidence is materially mixed or partially corroborated, so the model is avoiding a harder verdict.", "priority": 68, "score": 68, "match_percent": 68, "threshold_band": "strong" }, { "code": "T", "label": "Trusted", "tone": "good", "description": "Strong trust, stability, and low-risk signals were detected.", "reason": "Low spam indicators plus strong trust, quality, registry, and stability signals were detected. Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "message": "The site shows a reasonably trustworthy and stable profile.", "priority": 66, "score": 66, "match_percent": 66, "threshold_band": "strong" }, { "code": "C", "label": "Caution", "tone": "caution", "description": "Signals are mixed or weak, so this domain should be treated carefully.", "reason": "Review carefully: low trust score. Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "message": "The signal mix leans cautious and the site should be treated carefully until more evidence arrives.", "priority": 62, "score": 62, "match_percent": 62, "threshold_band": "strong" } ], "tag_breakdown": [ { "code": "Uncertain", "label": "Uncertain", "tone": "unknown", "description": "External checks stayed inconclusive, so the model avoided a harder verdict.", "reason": "The evidence is mixed and external checks stayed inconclusive, so the system kept an uncertainty buffer instead of a harder automated verdict.", "message": "The evidence is materially mixed or partially corroborated, so the model is avoiding a harder verdict.", "priority": 68, "score": 68, "match_percent": 68, "threshold_band": "strong" }, { "code": "T", "label": "Trusted", "tone": "good", "description": "Strong trust, stability, and low-risk signals were detected.", "reason": "Low spam indicators plus strong trust, quality, registry, and stability signals were detected. Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "message": "The site shows a reasonably trustworthy and stable profile.", "priority": 66, "score": 66, "match_percent": 66, "threshold_band": "strong" }, { "code": "C", "label": "Caution", "tone": "caution", "description": "Signals are mixed or weak, so this domain should be treated carefully.", "reason": "Review carefully: low trust score. Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "message": "The signal mix leans cautious and the site should be treated carefully until more evidence arrives.", "priority": 62, "score": 62, "match_percent": 62, "threshold_band": "strong" }, { "code": "Crypto", "label": "Crypto drainer risk", "tone": "toxic", "description": "Wallet-connect or seed-phrase theft patterns were detected.", "reason": "Wallet-connect or seed-phrase theft patterns were detected.", "message": "No meaningful crypto-drainer signals were detected.", "priority": 0, "score": 0, "match_percent": 0, "threshold_band": "none" }, { "code": "D", "label": "Dangerous", "tone": "toxic", "description": "Strong signs of phishing, malware, or other harmful behaviour were detected.", "reason": "Multiple high-risk signals pushed this domain into the dangerous range. Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "message": "No meaningful dangerous-signal match was detected.", "priority": 0, "score": 0, "match_percent": 0, "threshold_band": "none" } ], "nsfw_score": 0, "trust_score": 17, "manual": { "has_changes": false, "verified_status": "", "tag_codes": "", "rating_delta": 0, "authority_delta": 0, "trust_delta": 0, "note": "", "adjusted_by": 0, "adjusted_at": "", "lock_scores": false, "lock_flags": false }, "summary": "Uncertain (68% match) because the evidence is mixed and external checks stayed inconclusive, so the system kept an uncertainty buffer instead of a harder automated verdict.", "external_intel": { "domain": "devops.nz", "candidate_tag": "", "checked_at": "2026-03-19T13:51:01+00:00", "status": "fresh", "snapshot_version": 9, "summary": "Showing the stored external intelligence snapshot. New search and review intelligence only runs after a visitor uses Refresh data manually.", "search_intelligence": { "queries": [ "site:trustpilot.com \"devops.nz\" -site:devops.nz -site:www.devops.nz", "site:bbb.org \"devops.nz\" -site:devops.nz -site:www.devops.nz" ], "focused_queries": [ "site:trustpilot.com \"devops.nz\" -site:devops.nz -site:www.devops.nz", "site:bbb.org \"devops.nz\" -site:devops.nz -site:www.devops.nz" ], "relaxed_queries": [ "site:wikipedia.org \"devops.nz\"", "site:en.wikipedia.org \"devops.nz\"", "site:wikipedia.org \"devops\"", "site:en.wikipedia.org \"devops\"", "devops company profile", "devops reviews", "devops wikipedia", "devops linkedin", "devops crunchbase" ], "providers": [ "brave" ], "provider_result_counts": { "brave": 0 }, "provider_query_attempts": { "brave": 2 }, "provider_error_counts": { "brave": 2 }, "provider_failure_reasons": { "brave": "Brave hourly hard cap reached." }, "provider_block_signals": [], "results_found": 1, "external_results_found": 0, "used_direct_fallback": true, "results": [ { "provider": "direct-domain-fallback", "url": "https://devops.nz/", "host": "devops.nz", "title": "devops.nz", "snippet": "First-party fallback captured directly from the domain when public search engines returned no usable results.", "is_direct_fallback": true, "source_meta": { "host": "devops.nz", "source_type": "official_site", "label": "Official site", "trust_weight": 55, "evidence_weight": 26, "noise_penalty": 0, "requires_exact_domain_match": true, "supports_positive_verdicts": false, "supports_negative_verdicts": false, "freshness_ttl_days": 21 }, "entity": { "score": 100, "exactness": "exact_domain", "reasons": [ "The result host matches the exact domain.", "The exact domain is mentioned in the page snippet or document text.", "The result URL contains the exact domain string." ] }, "query": "direct-fallback", "rank": 1 } ], "source_mix": { "official_site": 1 }, "entity_coverage_score": 100, "high_trust_result_count": 0, "exact_match_result_count": 1, "high_entity_result_count": 1, "query_hit_count": 0, "query_count": 2, "used_failover_provider": false, "inferred_candidate_tag": "", "used_relaxed_queries": false, "search_passes": [ { "name": "focused-primary", "queries": 2, "providers": [ "brave" ], "results_added": 0, "external_results_added": 0, "deadline_hit": false } ], "deadline_hit": false }, "review_intelligence": { "documents_fetched": 1, "external_documents_fetched": 0, "documents": [ { "provider": "direct-domain-fallback", "url": "https://devops.nz/", "host": "devops.nz", "title": "devops.nz", "snippet": "First-party fallback captured directly from the domain when public search engines returned no usable results.", "is_direct_fallback": true, "source_meta": { "host": "devops.nz", "source_type": "official_site", "label": "Official site", "trust_weight": 55, "evidence_weight": 26, "noise_penalty": 0, "requires_exact_domain_match": true, "supports_positive_verdicts": false, "supports_negative_verdicts": false, "freshness_ttl_days": 21 }, "entity": { "score": 100, "exactness": "exact_domain", "reasons": [ "The result host matches the exact domain.", "The exact domain is mentioned in the page snippet or document text.", "The result URL contains the exact domain string." ] }, "query": "direct-fallback", "rank": 1, "body": "DevOps New Zealand | Kiwi Collaboration, Culture and Technolology DevOps New Zealand About Contact DevOps, Security, and Getting It Right First Time New Zealand's small size is our superpower. With tight-knit teams and limited resources, we can't afford to get things wrong. Security and reliability aren't just nice-to-haves, they're essential. Our national identity is built on making things work with what we've got, and that means getting software delivery right the first time.DevOps and strong security practices help us punch above our weight. Smaller budgets and teams mean we must be smarter, faster, and more secure from day one. This beach is full of silicon dioxide, but do we have a Silicon Beach?PostsStatica - how I run some of my favourite AppSec toolsStatic analysis is a powerful technique for catching security issues. But tools that depend on compilation aren’t always easy, especially if you don’t have the right dependencies or you’re stuck on Apple Silicon with legacy code.So I built Oct 3, 2025Pipeline Pull Request Pain on ADO?I ran into this issue a couple of times recently, so here’s my notes on the matter.I’ve needed to make a YAML pipeline on Azure DevOps, using ADO Git hosting. It’...Oct 31, 2022Securikube Part 1: Linting and Vulnerability Checking( this post carries on from Securikube Part 0) It’s all good to secure your servers, be they Kubernetes or anything else. Sometimes the applications make that job harder: the applications will break if you stop them doing insec...Oct 18, 2022Addition on the command lineHow much did our household spend on power last year? I wish I had an app that would parse all my bank statements and tell me what it costs just to stay alive, but my bank doesn’t do integrations well. In fact, given that my power company sunset their consumer API, things seem to be even less ...Jun 25, 2022Securikube, part 0I’ve been avoiding unnecessary outings because of COVID cases in our household. This is a perfect opportunity to do some research. I’ve done plenty with Docker: I’ve found it great for externalizing dependencies in development environments. I have also done security work around the edges of <...Jun 6, 2022The fish rots from the headers downOK, the real saying is the fish rots from the head down: if your CEO allows awful behaviours to happen at work without intervention, then they should take the blame when those behaviours become normalised in the organisation that they r...Jan 26, 2022Misadventures in securing IaCI’ve had an Infrastructure-as-Code repo since around 2005. That used to be Puppet code, and included config for bind, apache/nginx, dovecot IMAP, and postfix. There were a few years of apathy in which I hosted DNS elsewhere: this cascaded into all sorts of pain.I’ve since pulled ne...Aug 7, 2021Using SAST tools to prevent disasterStatic analysis tools help people write better software, by telling them how they goofed. SAST tools are the evolution of static analysis: tools that point out the security goofs in your code. No tool is perfect, or the ...May 25, 2021Site improvementsI’ve had a little time to clean up this website. There were a few issues:The site still had stylesheets loading for Bulma, which I stopped using in favour of my own minimal CSS. I also had references to Bulma classes because the stylesheet was still there.I hadn’t...May 21, 20213 lessons learned from a decade in startupsI’m currently working in the 5th venture funded organisation in my career. It’s almost 10 years since I started working with Neo4j: I was consulting for them around the 3rd quarter of 2011, an…", "html": "DevOps New Zealand | Kiwi Collaboration, Culture and Technolology

DevOps, Security, and Getting It Right First Time

New Zealand's small size is our superpower. With tight-knit teams and limited resources, we can't afford to get things wrong. Security and reliability aren't just nice-to-haves, they're essential. Our national identity is built on making things work with what we've got, and that means getting software delivery right the first time.

DevOps and strong security practices help us punch above our weight. Smaller budgets and teams mean we must be smarter, faster, and more secure from day one.

\"a
This beach is full of silicon dioxide, but do we have a Silicon Beach?

Posts

Statica - how I run some of my favourite AppSec tools

Static analysis is a powerful technique for catching security issues. But tools that depend on compilation aren’t always easy, especially if you don’t have the right dependencies or you’re stuck on Apple Silicon with legacy code.

So I built

Pipeline Pull Request Pain on ADO?

I ran into this issue a couple of times recently, so here’s my notes on the matter.

I’ve needed to make a YAML pipeline on Azure DevOps, using ADO Git hosting. It’...

Securikube Part 1: Linting and Vulnerability Checking

( this post carries on from Securikube Part 0) It’s all good to secure your servers, be they Kubernetes or anything else. Sometimes the applications make that job harder: the applications will break if you stop them doing insec...