For people building apps with AI tools
Practical help for the app you built with AI, page 12.
Latest articles
Deployment
The release readiness checklist for one app: an automated staging deploy, a promotion gate, and the check after
Security
Remote file inclusion, local file inclusion and path traversal: how the bugs happen in a modern app and how to close them
Security
The SaaS security checklist for the product you built, not the SaaS you buy: every control, with the check that proves it
Security
SAST vs DAST, SCA and IAST: which scan proves what, and which ones a small team needs
Launch Readiness
The scaling readiness checklist for startups: what has to be true before more users arrive than the app has ever seen
Security
Secret scanning for a small app: find every key in the repo and its history, then prove the old one is dead
Security
Secrets management best practices for an AI-built app: nine controls, each with a test
Stability
Sentry vs Datadog, or the free tier: picking logging and monitoring tools for a small SaaS, and what they cost
Compliance
SOC 2 compliance consultants, compliance platforms, auditors, pen testers and engineering: what each one actually does
Launch Readiness
Software testing services for a small app: the six kinds of seller, what each costs, and who owns the test suite afterwards
Security
SQL injection prevention in an AI-generated app: parameterized queries, the three backstops, and the tests that prove it
Security
Static code analysis tools for an AI-built codebase: what a SAST scan finds, and which to run
Launch Readiness
Technical due diligence consultant, fractional CTO, code audit firm or fix first: what you are buying, and which seat you are in
Data Safety
The time zone handling checklist: store UTC, display local, and stop the off-by-one-day bug
Security
Vulnerability management tools for a small team: reading the scanner output, scoring it, and fixing in order
Security
Web app security for an app you did not write: 12 controls, each with a test
Security
Web application penetration testing: what it covers, how a small scope is agreed in writing, and what comes back
Launch Readiness