diff --git a/src/content/blog/mfa-isnt-an-addon.mdx b/src/content/blog/fortitoken-alternative-vpn-mfa.mdx
similarity index 94%
rename from src/content/blog/mfa-isnt-an-addon.mdx
rename to src/content/blog/fortitoken-alternative-vpn-mfa.mdx
index fee357d0..f1e1c5be 100644
--- a/src/content/blog/mfa-isnt-an-addon.mdx
+++ b/src/content/blog/fortitoken-alternative-vpn-mfa.mdx
@@ -1,9 +1,11 @@
----
+---
title: "Security shouldn't cost extra — MFA isn't an add-on"
+seoTitle: "FortiToken Alternative: Why Legacy VPNs Overcharge for MFA"
publishDate: 2025-11-05
-description: "MFA is mandatory under frameworks like NIS2. See why legacy VPNs sell it as an add-on, how that creates cost and risk, and how Defguard builds it in by default."
+description: "Stop paying the 'security tax.' Legacy VPNs like Fortinet treat MFA as a costly add-on. See how Defguard's built-in MFA (a FortiToken alternative) meets NIS2."
author: "Robert (Co-Founder, Defguard)"
image: "/images/blog/mfa-isnt-an-addon/mfa-hero.png"
+draft: true
---

@@ -131,8 +133,8 @@ Yes. Defguard, as a modern WireGuard®-based platform, includes MFA by default
"@graph": [
{
"@type": "BlogPosting",
- "headline": "Security shouldn't cost extra — MFA isn't an add-on",
- "description": "MFA is mandatory under frameworks like NIS2. Learn why legacy VPNs sell it as an add-on and how Defguard builds it in by default.",
+ "headline": "FortiToken Alternative: Why Legacy VPNs Overcharge for MFA",
+ "description": "Stop paying the security tax. Legacy VPNs like Fortinet treat MFA as a costly add-on. See how Defguard's built-in MFA meets NIS2 compliance.",
"image": "https://defguard.net/images/blog/mfa-isnt-an-addon/mfa-hero.png",
"author": {
"@type": "Person",
@@ -154,7 +156,7 @@ Yes. Defguard, as a modern WireGuard®-based platform, includes MFA by default
"datePublished": "2025-11-05",
"mainEntityOfPage": {
"@type": "WebPage",
- "@id": "https://defguard.net/blog/mfa-isnt-an-addon/"
+ "@id": "https://defguard.net/blog/fortitoken-alternative-vpn-mfa/"
},
"articleSection": "Security, VPN, MFA, WireGuard",
"keywords": ["MFA", "FortiToken", "WireGuard", "NIS2", "VPN", "Defguard", "SSO", "IdP"]
@@ -199,3 +201,4 @@ Yes. Defguard, as a modern WireGuard®-based platform, includes MFA by default
]
}`}
+
diff --git a/src/content/config.ts b/src/content/config.ts
index 9615f445..c902fa4b 100644
--- a/src/content/config.ts
+++ b/src/content/config.ts
@@ -4,6 +4,7 @@ import { defineCollection, z } from "astro:content";
// Schema definitions
const blogSchema = z.object({
title: z.string(),
+ seoTitle: z.string().optional(),
publishDate: z.date(),
description: z.string(),
draft: z.boolean().optional().default(false),
diff --git a/src/pages/blog/[slug].astro b/src/pages/blog/[slug].astro
index 3b5acfc7..373837ad 100644
--- a/src/pages/blog/[slug].astro
+++ b/src/pages/blog/[slug].astro
@@ -28,7 +28,7 @@ const formatDate = (date: Date) => {
});
};
-const title = `${entry.data.title} | Defguard Blog`;
+const title = `${entry.data.seoTitle || entry.data.title} | Defguard Blog`;
const description = entry.data.description;
const url = `https://defguard.net/blog/${entry.slug}`;
@@ -162,8 +162,74 @@ const hasCaseStudy =