For people building apps with AI tools
Practical help for the app you built with AI, page 10.
Latest articles
Deployment
DevOps for startups with one app: the 13 controls of a release path you can trust
Maintainability
Engineering standards for AI-assisted teams: the 11 code health controls, each with a test
Security
The environment variables security risk nobody lists: one set of keys for development, staging and production
Security
Examples of security questions: the standard list, why they are a weak recovery factor, and what to use instead
Security
File upload testing: the limits to set, the bucket to lock, and the 8 tests that prove a stranger cannot read a file
Stability
The Flask logger and FastAPI logging: one JSON format for a Python web app, and getting it out of the container
Launch Readiness
Fractional CTO vs agency vs a fixed-scope sprint: who to buy when the app already works
Deployment
GitHub branch protection for a small team: required checks, reviews, a PR template and a contributing guide
Launch Readiness
The go live checklist for a web app: every switch to set, and the evidence it is set, before real customers arrive
Maintainability
Guardrails for AI coding agents: the rules file, the protected patterns, and the CI check that stops an agent undoing them
Stability
How can you prevent insufficient logging and monitoring? The OWASP A09 gap, an audit checklist and a policy template
Stability
How to do logging in a web app: one event shape, a correlation id on every line, and what must never reach a log
Launch Readiness
How to hand over an app to a client: ownership, access, documentation and the pack that proves it runs without you
Data Safety
How to harden managed database settings: who can connect, which role the app uses, TLS, and the encryption you already have
Security
How to rotate API keys safely: the overlap, the dependents list, and the rollback
Deployment
How to self host an exported app: your own repository, your own hosting, and no step that needs the builder
Security
How to test OWASP Top 10 vulnerabilities on a small web app: one test per category and the evidence to record
Maintainability