For people building apps with AI tools
Practical help for the app you built with AI, page 8.
Latest articles
Security
What a security review actually checks, and the baseline an early-stage startup needs before its first customers
Security
A security.txt file example, the disclosure contact behind it, and how to prove a report gets through
Stability
Sev1, Sev2, Sev3: severity levels a five-person team can apply
Data Safety
What is soft delete? When a deleted record should be recoverable, and how to add it without breaking every query
Maintainability
Software architecture for a small SaaS: what the word means, the views that matter, and how to write yours down
Performance
Tail latencies, p95 and p99: the number to hold your app to, and how to measure it honestly
Security
Threat modelling a small web app: STRIDE without the ceremony
Security
What a web application security audit is, how one is run, and what the report has to contain
Performance
Web performance optimization for an AI-built app: seven controls, five numbers, one test each
Maintainability
What does a developer handoff look like? The seven things you should leave with
Stability
What is a site reliability engineer, what the role actually does, and what a five-person SaaS needs instead of hiring one
Deployment
Add https to website traffic and keep it there: HSTS, a CAA record, a locked registrar, the DNS export and the TLS scan
Launch Readiness
Affordable penetration testing for a small app: what it costs, what the accreditations mean, and what a cheap test leaves out
Security
API authentication best practices: keys, tokens, mTLS, and what to use between services, cloud identities and agents
Security
API key leaked what to do now: the first hour, in order, and how to be sure the old key is dead
Security
API keys exposed on frontend code: which keys can live in the browser, which must never leave the server, and how to check your bundle
Stability
Application monitoring best practices for a small SaaS: the signals worth watching and the smallest setup that covers them
Security