Securing your Sitecore XM Cloud environment is critical to protecting your content, your users, and your brand. This post walks through key areas of XM Cloud security, including user management, authentication, secure coding, and best practices you can implement today to reduce your security risks. We’ll also take a step back to look at the […]
Luke Pace
Luke is a Lead Technical Consultant who started his Sitecore career as a certified back-end developer but has transitioned to DevOps for the last 6 years.

Blogs from this Author
Boost Sitecore Performance with Vercel Fluid Compute
Are you using Vercel to supercharge your Sitecore experience? If so, you’re already benefiting from a powerful, globally optimized platform designed for modern web applications. But did you know you can take your performance even further? Vercel Fluid Compute is a game-changer, optimizing workloads for higher efficiency, lower costs, and enhanced scalability—perfect for high-performance Sitecore […]
Install Sitecore Hotfixes on Azure PaaS with Azure DevOps Pipeline
Why Automate Sitecore Hotfix Deployment to Azure PaaS? Sitecore frequently releases hotfixes to address reported issues, including critical security vulnerabilities or urgent problems. Having a quick, automated process to apply these updates is crucial. By automating the deployment of Sitecore hotfixes with an Azure DevOps pipeline, you can ensure faster, more reliable updates while reducing […]
Pro Tips for Accessing and Managing Sitecore XM Cloud
Introduction Sitecore XM Cloud is a powerful platform for managing and deploying Sitecore instances. In this blog post, we will explore various a few tips for accessing XM Cloud, including user permissions, project and environment management, as well as different types of client credentials. Understanding these concepts will empower you to effectively leverage the capabilities […]
Sitecore Identity Configuration with Azure Front Door
Use Case I want all requests to my Azure PaaS Sitecore 10.3 + Identity 7.x site to use Azure Front Door. I do not want to configuring custom domains on my web apps and the web apps should be secured with private endpoints. Problem By default, Sitecore Identity uses the host, protocol, and port from […]
Sitecore Headless DevOps Best Practices – Part 3
Welcome back for the final post in my series on DevOps Best Practices related to Sitecore Headless implementations. In Part 3 we are going to look at the continuous deployment of our Sitecore and Next.js applications following a zero downtime model. If you haven’t checked out Part 1 and/or Part 2, I would recommend pausing […]
Sitecore Headless DevOps Best Practices – Part 2
Welcome back to my series on DevOps Best Practices related to Sitecore Headless implementations. In Part 2 we are going to create the build pipelines for our Sitecore and Next.js solutions and see how they can be included in the PR process. If you haven’t checked-out Part 1 yet, I recommend doing so before continuing […]
Sitecore Headless DevOps Best Practices – Part 1
Welcome to my series on DevOps Best Practices related to Sitecore Headless implementations. In Part 1 we will do a review of Git DMZ Flow and see how to implement the principals in Azure DevOps. What is Sitecore Headless? Before we dive into the technical details, let’s align on what Sitecore Headless is. Sitecore […]
Sitecore Headless DevOps Best Practices Blog Series
Sitecore Headless (formerly JSS) has been around for several years now but with its recent promotion in the Sitecore 10 releases, it is generating more buzz than ever. So as customers begin to evaluate this “new” model and more choose to adopt it, we need to begin defining standards for implementation. This series will outline […]