Web design, SEO, technology and the digital economy – the key developments from 26 October to 1 November 2026, with figures, original sources and context for businesses responsible for their own website and online visibility.
Two stories shaped this week. In Germany, spending on IT security is rising sharply while business sentiment recovers only slowly. And the international freelance marketplace Fiverr used its quarterly report to show how hard changing search habits can hit a business model that relies on search traffic.
On top of that came an important WordPress security release, Google’s plans for a shared way to control AI training, and the general availability of agentic workflows on GitHub. For businesses, the picture is this: digital output is getting ever easier to produce automatically. But someone still has to be responsible for security, quality, findability and commercial value.
Figure of the week: –24.7% marketplace revenue at Fiverr
Fiverr’s marketplace revenue fell 24.7% to $55.4 million in the third quarter of 2026 compared with the same quarter a year earlier. Annual active buyers dropped 25.8% to 2.4 million. Annual spend per buyer, meanwhile, rose 12.9% to $373. Total revenue fell 15.8% to $90.9 million.
Fiverr points to weak demand and to falling traffic from traditional search channels, which it links to the shift towards AI-driven discovery. It now expects a steeper decline in marketplace traffic through 2027 than it had previously assumed. In response, the platform is expanding its AI-based matching and focusing more on higher-value projects. These are company figures from a single marketplace, not a measurement of the freelance market as a whole.
What it means: Fiverr’s numbers can’t simply be transferred to other industries. But the underlying question applies to any business that wins customers mainly through Google or a single platform: where did your enquiries come from over the last twelve months, how many of them depend on a handful of search terms, and which channels would remain if that traffic fell significantly?
Source: Fiverr: Third Quarter 2026 Results, 29 October 2026.
1. Germany is spending €14.3 billion on IT security
On 28 October, the German digital association Bitkom published new market figures based on IDC data. According to these, IT security spending in Germany is set to rise 11.7% to €14.3 billion in 2026. For 2027, the forecast is €15.8 billion, a further increase of 10.7%. Security software accounts for around €7.8 billion in 2026 and security services for about €5.3 billion.
These totals cover far more than websites, including endpoint security, cloud protection, access management and professional security services. But a company website is part of the picture too. Updates, backups, secure forms, permissions and monitoring aren’t optional extras. They’re part of running a dependable digital operation.
What it means: Check whether it’s clearly settled who installs updates on your website, who tests the backups and who responds in an emergency. If that isn’t written down anywhere, chances are nobody will feel responsible when it counts. Website maintenance has its limits too: it doesn’t replace a full IT security concept or advice on the EU’s NIS2 directive.
Source: Bitkom: German IT security market grows by double digits, 28 October 2026 (in German).
2. German business sentiment brightens slightly, especially among IT service providers
On 26 October, the ifo Institute reported a rise in its Business Climate Index from 89.9 to 90.2 points. Companies were more optimistic about the coming months, while rating their current situation slightly lower. The climate weakened across the service sector overall, though IT service providers stood out positively.
A higher index doesn’t automatically mean bigger marketing or website budgets. It does show that expectations are improving in parts of the economy while purchasing decisions remain cautious.
What it means: The index doesn’t tell you which way to take a budget decision. Digital projects should be measured against a specific problem: faster pages, lower maintenance risks, simpler ways to get in touch and enquiries you can trace. That holds in a better economy just as it does in a worse one.
Source: ifo Institute: Business climate index rises, 26 October 2026 (in German).
3. WordPress 7.1.4 closes security holes; version 7.2 reaches Beta 2
WordPress 7.1.4 was released as a security update on 28 October. The fixes include a weakness in the upgrade process that can allow remote code execution during the upgrade, several stored cross-site scripting vulnerabilities and issues in the Interactivity API. WordPress recommends updating immediately.
A day earlier, on 27 October, WordPress 7.2 Beta 2 came out. Work continues on the Abilities API, server-side registration for DataViews and DataForm, a more flexible REST API and modern SVG icons in the admin area. The final release is still scheduled for 8 December 2026. The beta isn’t intended for production websites.
What it means: If your website runs on WordPress, version 7.1.4 should be installed by now. If someone else looks after your site, ask whether the update is in place. If you use custom themes or plugins, have them checked against version 7.2 before the December release, on a test environment rather than your live site.
Sources: WordPress 7.1.4, 28 October 2026 · WordPress 7.2 Beta 2, 27 October 2026.
4. Google plans a shared standard for controlling AI training
On 30 October, Google announced that it will support a shared control for AI training in robots.txt. The idea comes from the work of the AIPREF working group at the Internet Engineering Task Force. In future, website operators should be able to state their preferences to several participating AI providers using one shared policy signal.
Google aims to support this in 2027. For now it’s an announced solution that isn’t generally available yet. Existing company-specific controls such as Google-Extended are set to continue alongside it. It’s also important to keep AI training, search engine crawling and visibility in AI answers apart: they aren’t the same thing and need to be assessed separately when you configure your site.
What it means: This announcement doesn’t call for any action today. But the question behind it is already live: don’t rush to block all AI access. First decide whether you want to restrict training, preserve your findability or manage the two separately.
Source: Google Search Central: Supporting a shared AI training control for websites, 30 October 2026.
5. Google gets more specific about fighting spam in user-generated content
On 26 October, Google updated its documentation on preventing user-generated spam. It now highlights measures that let operators keep content meant only for sharing via links out of the index, and spot abuse early in Search Console.
This mainly affects websites with public profiles, comments, forums, directories or other user-generated pages. For ordinary company websites without such features, the immediate relevance is lower.
What it means: If you offer user accounts or public input of any kind, spam prevention, moderation and monitoring of your indexing status belong in your ongoing website care. Even without such features, it’s worth checking Search Console now and then for indexed pages you don’t recognise.
Source: Google Search Central: Documentation changes from 26 October 2026.
6. GitHub makes agentic development workflows generally available
On 28 October, GitHub made its Agentic Workflows generally available. Recurring tasks such as issue triage, analysing failed CI runs, keeping documentation up to date or writing tests can now be defined in natural-language Markdown files. The system compiles these into standard GitHub Actions workflows.
GitHub emphasises safeguards such as read-only permissions by default, isolated execution and checks on proposed changes. The feature is available on GitHub Free, Team and Enterprise; using the default Copilot CLI engine requires a Copilot licence.
What it means: With an in-house development team, recurring review and documentation tasks may become cheaper. A sensible starting point is low-risk work such as suggesting tests or spotting outdated documentation, not unattended changes to production systems. If you work with external developers, ask where AI agents are used and who checks their output.
Source: GitHub Changelog: Agentic Workflows generally available, 28 October 2026.
7. Astro shows how performance can be tied to business results
The Astro project’s monthly round-up, published on 31 October, points to a case from restaurant technology: the company Owner rebuilt its website infrastructure with Astro. According to Owner’s own write-up, largest contentful paint on its menu pages fell from 5.4 to 0.7 seconds at the 75th percentile, about 87% faster. It also reports a revenue increase of more than 4% per restaurant across its network.
These figures come from one specific case and are not an independent, general claim that Astro automatically delivers four per cent more revenue. The story is still interesting because it connects technical metrics with a business result. The same round-up also mentions Astro 7.4 and its new --timings build flag; that version came out on 15 October and is not a new release from this week.
What it means: Load times aren’t an end in themselves. If you invest in performance, decide beforehand how you’ll measure success: through technical metrics, user behaviour and business figures such as enquiries, orders or conversion rates. Owner sells directly through its pages; on a website that mainly generates enquiries, the effect is harder to measure.
Sources: Astro: What’s new in Astro – October 2026, 31 October 2026 · Owner: Project Speed, 13 October 2026.
What do these developments mean for your business?
The week’s news comes down to three points.
Security and operations need clear ownership
German security spending is rising even though the economy remains subdued. That doesn’t mean every business has to spend more, but it does show a priority: money goes where risks and benefits can be understood. The same applies to your website. It isn’t a finished project but a system in continuous operation.
When you compare proposals, it’s worth looking at building and running a website separately. The one-off build can cover concept, design, development and technical SEO. Ongoing operation can cover updates, monitoring, backups, functional checks and regular reports. Ask which of these services are actually delivered and documented.
Findability becomes a deliberate decision
Google’s plans for AI training controls and its revised spam documentation show that website operators have more and more decisions to make about which systems may access which content. It would be a mistake to treat all bots and AI applications alike. The technical setup has to fit your publishing and business strategy.
Then there’s the commercial angle from Fiverr’s results: if people move from classic search results to AI-generated answers, existing traffic models may come under pressure. It’s becoming more important for businesses to track brand awareness, qualified enquiries and actual results, not just rankings or impressions.
Automation doesn’t replace responsibility
GitHub’s Agentic Workflows illustrate how quickly software development is changing. Repeatable tasks can increasingly be handled by automated systems. That can free up development time, but it also creates new demands around review, approval and liability.
For clients, this changes what matters when choosing a partner. Whether every line of code is written by hand matters less. What matters more is who understands the requirements, makes sound technical decisions, checks the results and takes responsibility for what goes live.
Three practical steps for your business
First: settle who is responsible for operations. Put in writing who handles updates, backups, monitoring and technical checks, and how quickly they’ll respond in an emergency. If that sits with a service provider, ask to see what has actually been done recently.
Second: connect performance to business goals. Lighthouse scores and Core Web Vitals are important technical measures. They become more meaningful when you look at them alongside enquiries, form completions or other relevant conversions.
Third: broaden your enquiry channels. Organic search remains relevant, but it shouldn’t be your only route to new customers. Expert articles, documented project examples, referrals and looking after existing customer relationships are a sturdier foundation than depending on a single channel.
Conclusion: a website needs owners, not just a launch
The key message this week lies in the contrast between Fiverr and the German IT security market. On one side, a business model that depends heavily on search traffic is under pressure. On the other, spending on security and dependable operations is growing.
For businesses, this is no cause for alarm, but it is a good reason to take a sober look at your own website: what counts isn’t only that it’s online, but that it stays secure, findable and commercially useful over the long term.
If you’d like to know where your website stands on these points, the Digital Audit from Creatives Berlin analyses your digital starting point in a structured way and prioritises the next steps.
Editorial note: This review covers publications from 26 October to 1 November 2026. Where sources contain forecasts, company statements or individual case studies, they are labelled as such. There was no comparably significant, reliable primary news on local search or new Google Search Console features during this period, and older news has not been recycled as new.
Original sources and further reading
- Fiverr: Third Quarter 2026 Results (29 Oct 2026)
- Bitkom: IT security market in Germany (28 Oct 2026, in German)
- ifo Institute: Business climate, October 2026 (26 Oct 2026, in German)
- WordPress: Security release 7.1.4 (28 Oct 2026)
- WordPress: 7.2 Beta 2 (27 Oct 2026)
- Google Search Central: Shared AI training control (30 Oct 2026)
- Google Search Central: Documentation changes (26 Oct 2026)
- GitHub: Agentic Workflows GA (28 Oct 2026)
- Astro: What’s new in October 2026 (31 Oct 2026)
- Owner: Project Speed (13 Oct 2026)