Essays, playbooks, and the occasional post-mortem. Engineering, design, SEO, and what it takes to ship real software in 2026 — written by the people doing the work.
A practical guide to migrating a live product from Bubble, Framer, or Webflow into a real codebase — without the big-bang rewrite that kills momentum. The playbook we use on every rebuild we take on.
[ FIG. 001 ] · Featured
01
Every scanner finds a different class of flaw; none, on its own, tells you what to fix first. How the tools actually work in 2026 — and why buying more rarely makes an app more secure.
Read analysisA fair comparison of managed ASPM and open-source vulnerability triage — native scanning, dedup, false positives, the real cost of "free", and who should pick which.
Read analysisThe free SAST, DAST, SCA, secrets and IaC scanners worth running — and the honest point where a DIY open-source stack starts costing more than it saves.
Read analysis
MarketIn the Gulf, modernization is set by the regulator's calendar, not the CFO's budget. The 201–1,000 mid-market is legally in scope, and too lean to build in-house.
Read analysis
MarketInvestors killed growth-at-all-costs while DORA and PSD3 imposed bank-grade compliance regardless of size. The mid-band is caught in a buying window.
Read analysis
MarketNot the megabanks (they build in-house), not the seed neobanks (no budget). The 201–1,000-employee tier can't hire or fundraise its way to modernization — it has to buy.
Read analysis
MarketEveryone studies Nubank's 123M customers. If you sell into LatAm fintech, that's the wrong company to study. The reachable buyers are the 200–1,000-person tier below it.
Read analysis
EngineeringTypes aren't about purity — they're about shipping faster with fewer nights on call. What we use, what we skip, and the two rules we enforce on every project.
Read essay
ProcessFive days, four artefacts, one honest number. The shape of our discovery engagement and why we never send a multi-page proposal.
Read essay
SEOEngineering-grade SEO for 2026 — Core Web Vitals, structured data, content architecture. No content farming, no link swaps.
Read essay
ShopifyWhat the new extensibility surface gets right, what it still gets wrong, and the patterns we've arrived at after shipping twelve of them.
Read essay
DesignTokens, primitives, composition — how we structure design systems so they survive a handoff, a team change, and three years of product drift.
Read essay
EngineeringWe audited fourteen greenfield stacks we've shipped since 2023. In every one of them, Postgres plus a decent ORM was the right default. Here's why.
Read essay
ProcessNo hour-by-hour invoicing, no scope creep, no mystery. The cadence we've used on forty-plus engagements and why clients renew on it.
Read essay
DesignWhat magazines do better than product designers, and how to borrow from them without your dashboard turning into a zine.
Read essay
EngineeringYou don't need a platform team to know what your app is doing. A minimal observability stack that costs less than one senior engineer's monthly coffee.
Read essayOne essay every other Tuesday. Engineering, design, and the craft of shipping software. No tracking pixels, unsubscribe in one click.