Rolling hills and trees in morning mist

Blog

Notes from the studio.

What we've learned building, securing and shipping software.

· 12 min read

Application Security Checklist for SaaS Startups

A prioritised security checklist for early-stage SaaS teams: auth, access control, secrets, dependencies, headers, logging, backups and pen testing.

cybersecurityapplication securitystartups

· 10 min read

Prompt Injection: How to Protect LLM-Powered Apps

What prompt injection is, why prompts alone can't fix it, realistic attacks on RAG and agent systems, and a defence-in-depth checklist for engineers.

AI securitycybersecurityLLM

· 8 min read

How to Hire a Software Developer (Without Getting Burned)

A practical guide to hiring software developers — what to look for, red flags to avoid, questions to ask, and how to choose between freelancers, agencies, and in-house hires.

hiringsoftware developmentbusiness

· 5 min read

Custom Software vs SaaS: When Should You Build Your Own?

A decision framework for founders and CTOs choosing between off-the-shelf SaaS tools and custom-built software. Real costs, trade-offs, and when each option wins.

strategystartupssoftware development

· 5 min read

How Much Does Custom Software Development Cost in 2025?

Honest pricing breakdown for custom software projects: what drives costs, typical ranges for MVPs, web apps, and Shopify builds, and how to avoid getting overcharged.

pricingsoftware developmentstartups

· 5 min read

Why We Build Client Sites with Astro

A technical breakdown of how Astro's island architecture, content collections, and build pipeline make it the right default for most production web projects.

astroperformanceweb development