Newsletter
A monthly email about what breaks between a working AI prototype and a real launch — the security holes, the performance cliffs, and the exact fixes we ship. Written for founders who are shipping, not for a mailing list.
Get the next issue
What you get
Anonymised findings from real audits — the RLS hole, the N+1, the key in the bundle — and the diff that fixed each one.
SQL, config, and code you can run against your own project the same day, not advice to go and read a spec.
The lists we work through before signing off a launch, updated as we learn what actually catches problems.
If you want to hire us there's a button for that on every other page. This is the useful one.
A sample of the writing
Every Cursor session brings its own idea of your architecture, so the codebase drifts one prompt at a time. How to measure the drift, undo it, and write rules that keep the next session in line.
8 min read
Every Server Action in a v0 project can be called by anyone on the internet with any arguments, whatever your UI shows. Here is what that means and the four checks each one needs.
4 min read
Replit Agent builds and hosts your app in one place. Here is how to tell whether that still fits once real users arrive, what to fix regardless, and how to move the database or the hosting without losing anything.
5 min read
In 48 hours you'll know what's broken and what each fix costs — before you spend a dollar.