For people building apps with AI tools
Practical help for the app you built with AI, page 9.
Latest articles
Security
Authentication best practices for the six flows that hold: signup, login, logout, password reset, email verification, and OAuth callbacks
Security
The authentication checklist for an AI-built app: who can reach what, and how you prove it
Data Safety
A business continuity plan template for a small SaaS: the one-page plan, the impact analysis, and the parts that apply to a two-person company
Data Safety
Cannot execute INSERT in a read-only transaction: what put your database in read-only mode, and how to get writes back
Maintainability
When a new developer cannot run the project locally: one command, an env example, pinned versions and seed data
Security
How to cap monthly usage on a metered API: keep the key server-side, set a ceiling, and hear about it before the invoice does
Deployment
CI CD best practices for one repo: lint, typecheck, build and tests on every pull request before anything merges
Deployment
CI CD security best practices for a small app: permissions, secrets in CI, and what is worth scanning
Stability
How to clear Docker logs safely: where Docker keeps them, how to read them, and how to stop them filling the disk
Security
Cloud application security assessment for a small SaaS: what the provider secures, what is yours, and what CASA is
Maintainability
Code quality checks when you cannot read the code: the checks, the numbers, and what they are worth
Maintainability
The code review checklist and template: a test for every line, the report it produces, and the setup that makes it happen
Security
Content security policy unsafe inline: how to remove it without breaking the app, add HSTS and framing protection, and check the headers you actually send
Data Safety
The data consistency checklist for SaaS: 14 database checks between a demo and production
Data Safety
The database backup checklist for startups: what your host keeps, the retention to set, and the off-site copy
Data Safety
Database encryption for a small SaaS: what at rest and in transit already cover, and the fields worth encrypting yourself
Data Safety
The database migration checklist: moving dashboard schema changes into ordered, version-controlled migrations
Security