Notes on building and running business software
Practical writing on the things that keep custom software useful and safe — backups, security and getting invoicing right. Written by the team that runs it.
Search the blog…
Featured
One global load balancer, Cloud Armor in front, DNSSEC-signed DNS and identity-gated operations — the road a request travels before it reaches your application.
Read the post
A second copy, checked byte by byte
Encrypted nightly backups, an independent versioned second copy, and a monthly drill that compares byte for byte — the boring machinery under every instance.
Contact forms that don't lose messages
The message is in your database before any email is sent — store-first forms with quiet anti-spam and a GDPR-ready Inbox.
Why every client gets a dedicated database and pool
The isolation model behind Clonext — and why shared schemas were never on the table for us.
Our WAF and OWASP baseline, explained
What ships on day one to keep your application hardened against the OWASP Top 10.
Shipping a live SEO score with AI suggestions
How the core scores every page as you build and recommends concrete fixes in real time.
Upstream-first: updating the core without breaking you
How bespoke logic sits cleanly on top of a core we ship to every instance — safely.