For people building apps with AI tools
Practical help for the app you built with AI, page 7.
Latest articles
Security
How to detect Log4j vulnerability in what you run, and how to tell whether a published CVE is actually exploitable in your app
Stability
How to set a timeout on fetch, and on every other external call: AI, email, payments and the database
Security
How to set up a web application firewall or CDN in front of your app, and prove it absorbs a flood
Data Safety
How to wrap multiple writes in a transaction, so a failed signup or order leaves nothing half-finished
Stability
Incident response plan template for a team of five: a security incident response template you can fill in today
Performance
JMeter, k6, Locust or Gatling: which load-testing tool to run against a small web app, and how to tell the pick was right
Performance
Lambda concurrency, the timeout ceiling, and the serverless limit that actually bites first
Performance
Load testing a web application: how to run one, what to measure, and how to fix the first bottleneck
Security
Man in the middle attack: what it is, how it works, and what actually stops one on a modern web app
Security
The npm malware package incidents: what the compromised versions did, and how to check your lockfile
Data Safety
The object storage security checklist: signed links, upload limits, and the bucket that is public by accident
Performance
OOM kill: how to read one, the score that picked your process, and what to change so it stops
Maintainability
Owning an app someone else built: the takeover checklist for the repository, accounts, domain, keys and hosting
Launch Readiness
The production readiness checklist for a SaaS: every item, by area, with how to verify it
Maintainability
Production readiness review: how to run a PRR for a small team in one hour, and the questions the reviewer asks
Stability
The RCA meaning software teams use: root cause analysis after an outage, and the postmortem that makes the fix stick
Maintainability
The runbook template for a small SaaS: deploy, rollback, key rotation, restore, and one runbook per alert
Performance