Insights
Notes on building secure software that pays for itself
Practical writing on owning your platform, data protection, and the engineering behind it.
Stop paying commission on your own customers
Third-party platforms can take 15–25% of every booking. Here is the maths on owning your platform instead — and how fast it pays for itself.
ReadJWT auth that won’t get you hacked
httpOnly cookies, short-lived access tokens, and refresh-token rotation — how real session auth works, with the code this site runs.
ReadGDPR for Irish SMEs without the binder
GDPR is mostly sensible engineering defaults. The five questions you must be able to answer about every piece of personal data you hold.
ReadParameterized SQL, and why no ORM
SQL injection is still the most damaging web vulnerability. Why a small, explicit, parameterized data layer closes the class of bug entirely.
ReadWhy fixed-scope beats open-ended hourly
Paying by the hour puts all the risk on you. How fixed-scope, phased delivery gives you predictability without a blank cheque.
Read