Set the access.
Prove the value. Keep a human checkpoint.
The platforms are doing more on your behalf. That makes the settings around access, budget and verification more important—not less.
Get the next issue by email
Short, practical, low-volume. Marketing, web, production and communications from the people who do the work.
More from Signal
Next issue: The Interface Is Changing.
Previous issue: Better Tools Make Weak Inputs More Expensive
This issue went out by email on September 22, 2026. Read the emailed version.
The platforms are doing more on your behalf. That makes the settings around access, budget and verification more important—not less.
More tools are moving from “available” to “working on your behalf.” That’s useful. It also means businesses need to be more deliberate about what they pay for, what they allow and what they hand over.
Three shifts
worth your attention.
Meta is putting more business tools behind a subscription.
Meta launched Meta One, a new set of subscription plans across Facebook, Instagram and WhatsApp. The business tiers bundle things like verification, more access to Meta Business Agent, publishing tools and additional account-management features.
The Advanced business plan starts at $49.99 per month and adds features including links in organic posts and Reels, exportable analytics, deeper audience insights, story scheduling and team access without sharing the account password.
The takeaway: Treat this like software, not a badge. If team access, direct links or better reporting fixes a real workflow problem, the subscription may earn its keep. If it doesn’t, it’s just another monthly charge.
Your website can stay searchable without volunteering for AI training.
Cloudflare introduced a new “Disallow AI Training” control designed to separate two things that have often been bundled together: letting search engines index your site and letting the same crawler use your content for AI training.
Cloudflare is now treating Search, Training and user-directed Agents as separate crawler behaviors. Apple, Google and Microsoft either support or have committed to support the new no-training approach without penalizing normal search visibility.
The takeaway: AI access to your site is becoming a business decision, not just a technical default. Decide what you actually want crawlers to do instead of choosing a blanket “allow everything” or “block everything.”
AI is making old security gaps compound faster.
Microsoft’s latest security guidance makes a useful point: AI is changing the speed and scale of attacks, but attackers are still getting in through familiar weaknesses—excessive permissions, poorly protected authentication, unpatched systems, exposed execution paths and gaps between controls.
What’s changing is how quickly one small weakness can turn into a much larger problem across identities, devices, applications and cloud services.
The takeaway: Before buying another shiny security layer, tighten the fundamentals. Know who has access, keep permissions narrow, protect authentication and patch the systems you already have.
Set the access.
Prove the value.
Keep a human checkpoint.
Three things
I’d check this week
Make every new platform subscription earn its seat.
Before adding another paid tier, name the exact problem it solves. Team access? Better reporting? Direct links? Customer response automation? If you can’t point to the workflow or outcome it improves, leave it off for now.
Review what your website is allowing bots to do.
If you’re on Cloudflare, look at Search, Training and Agent access separately. If you’re not, review your robots.txt and the controls offered by the search and AI platforms that matter to you. Don’t assume yesterday’s crawler policy still matches what you want today.
Do a 30-minute admin-access sweep.
List the people with administrator access to your email, website, cloud services and major business platforms. Remove stale accounts, confirm strong authentication is turned on, narrow permissions where you can and check for outstanding patches on anything exposed to the internet.
An early look
at AZLU.
If you lead a church, there’s something new taking shape alongside Sidestreet that I wanted to let you see before we officially launch it.
AZLU is being built specifically for the local church—bringing strategy, story, technology and practical tools together under one senior team. The name comes from the Aramaic word for go, and that’s really the idea: helping churches take the next faithful step with clarity and purpose.
It’s still pre-launch. We’re not making a big announcement yet, but the site is far enough along that I wanted church leaders who read Signal to get an early sneak peek.
If you’re thinking about outreach, your website, Sunday production, communications, guest follow-up or just how all of those pieces should work together, take a look around.
Senior help,
without the layers.
If either of these priorities is sitting on your list, our senior team can help shape the plan and stay on the work through launch.
Decide what search engines, crawlers and agents can do with your site.
Websites, hosting and Cloudflare configuration managed as one working system, including a crawler policy you chose on purpose.
Explore web & digitalIdentity, MFA and the boring security work that stops the expensive problems.
Managed IT and technology services for growing organizations that need someone accountable for the stack.
Explore managed technologyNeed a second set
of senior eyes?
Send us the thing you're trying to improve: a campaign, website, growth question, technology problem or half-formed idea. We'll tell you plainly whether we can help.
Issue 06 Questions Answered
Can't find the answer you're looking for? Get in touch
Meta One is a set of subscription plans Meta launched in September 2026 across Facebook, Instagram and WhatsApp. The business tiers bundle verification, more access to Meta Business Agent, publishing tools and account-management features. The Advanced business plan starts at $49.99 a month and adds links in organic posts and Reels, exportable analytics, deeper audience insights, story scheduling and team access without sharing the account password.
Only if it fixes a real workflow problem. If your team needs shared access without passing around a password, direct links in posts, or reporting you can export, it may earn its keep. If you can't name the specific workflow or outcome it improves, it's just another monthly charge.
It separates letting search engines index your site from letting the same crawler use your content to train AI models. Cloudflare now treats Search, Training and user-directed Agents as separate crawler behaviors, so you can stay searchable while opting out of training.
According to Cloudflare, Apple, Google and Microsoft either support or have committed to support the new no-training approach without penalizing normal search visibility. That's the point of separating the two: you can make a deliberate call on training without giving up search.
List everyone with administrator access to your email, website, cloud services and major business platforms. Remove stale accounts, confirm strong authentication is on, narrow permissions where you can, and check for outstanding patches on anything exposed to the internet. Thirty minutes is usually enough to find something worth fixing.
Sidestreet Signal is a short, practical newsletter from Sidestreet Media in Spartanburg, SC. Each issue picks a few real changes across marketing, web, production, technology and communications, explains what they mean for a growing business, and pairs them with specific moves you can make that week. It's written by founder Josh Kuhn, sent by email through Kit, and archived here on hellosidestreet.com.
Want This in Your Inbox
Before It's on the Site?
Sidestreet Signal goes out by email first. Subscribe below, or bring us the thing you're trying to fix and we'll tell you plainly whether we can help.
Talk to usRelated Guides
How AI Should and Shouldn't Be Used in Marketing
Where AI earns its keep, where it fails, how to tell whether an agency is using it responsibly, and what to change about your website because of it.
Read the guideWhen Should You Redesign Your Website?
The specific signals that warrant a rebuild, the ones that do not, and how to run the project correctly.
Read the guideWhat to Ask a Marketing Agency Before You Sign
The questions that separate a partner you keep for a decade from one you replace in a year, with red flags and how we answer each one.
Read the guide