The blog

Notes on building websites, design, and the brands I love working with.

All 7 paladins ai ai development animals architecture behind the scenes build vs buy business business software conversion custom software cybersecurity data privacy data protection data residency design encryption enterprise game dev okay but actually performance process saas security small business software development solo developer supabase threat modelling vibe coding women-led

4 October 2026

Okay, But Actually… Custom Does Not Mean Homemade Security

Using Supabase, Stripe or managed hosting does not make a product less custom. I am much more concerned about the person who chose the whole stack because AI sounded confident and now cannot explain what any of it is doing.

aicustom softwaresecuritysupabasesoftware developmentvibe coding

Read post

1 October 2026

Okay, But Actually… Custom Software Is Not the Problem Here

Some AI-built apps should not be anywhere near real customer data. Before hiring anyone, ask who controls access, what happens after launch, and whether the person building it can explain their own security decisions without secretly asking AI.

aicustom softwaresecurityvibe codingprocess

Read post