The blog

Notes on building websites, design, and the brands I love working with.

All 7 paladins ai ai development animals architecture behind the scenes build vs buy business business software conversion custom software cybersecurity data privacy data protection data residency design encryption enterprise game dev okay but actually performance process saas security small business software development solo developer supabase threat modelling vibe coding women-led

6 October 2026

Okay, But Actually… Your Six-Figure Business Does Not Need Enterprise Cosplay

Apparently a small business cannot own custom software without recreating the IT department of a multinational bank. Before buying the costume, it might be worth finding out what the application actually stores.

custom softwaresmall businesssecurityarchitectureenterpriseai development

Read post

5 October 2026

Okay, But Actually… A Pile of Security Vocabulary Is Not a Security Review

Apparently you can review an application without knowing what it does, as long as you mention California, Brazil, envelope encryption, blast radius and lawsuits quickly enough. Here is what those terms actually mean, and what a useful security conversation sounds like.

securitycustom softwaredata protectionencryptionthreat modellingai development

Read post