For people building apps with AI tools
Practical help for the app you built with AI, page 11.
Latest articles
Security
Implement two factor authentication for owner and admin accounts: in the app, on every provider dashboard, and how to prove it is enforced
Security
The input validation web app builders skip: a schema on every write endpoint, and the malformed payloads that prove it
Maintainability
License scanning for an AI-built web app: the license audit, the report and the SBOM a reviewer asks for
Stability
Logging and monitoring for a small SaaS: the eight controls that tell you when something breaks
Security
How to mitigate cross-site scripting in an AI-built web app: where it gets in, how to stop it, and how to test for it
Security
Mobile app security best practices for an AI-built product: what changes when there is a native client
Security
The npm audit command, read honestly: what it reports, what to fix first, and how to upgrade without breaking the build
Security
OpenID Connect vs SAML when a customer asks for SSO: what each one does, where OAuth fits, and which one you actually have to build
Security
What OWASP is, and which of its projects a small team actually uses
Security
PCI DSS penetration testing: what Requirement 11.4 actually asks for, how often, and whether it reaches a SaaS on a hosted checkout
Security
Pen test vs vulnerability assessment, red team, bug bounty and audit: how each one is done, and how to tell them apart
Security
The penetration test report format, the agreement you sign first, and what to do with the findings
Deployment
The production deployment checklist for one app: what to check before, during and after every release
Launch Readiness
Production hardening for an AI-built app: what it is, the 13 areas, and where to start
Stability
Prometheus metric types for a small SaaS: what to count, what to time, and the queries that read it
Security
What a race condition in cyber security is, and the 16 other web vulnerability classes an AI builder leaves behind
Security
Rate limiting in API and web app endpoints: where the limit goes, what numbers to start with, and how to test it
Security