6 min read
OWASP Top 10:2025 in plain language: the main web application risks
The ten main classes of web application vulnerabilities in the OWASP 2025 edition, with examples, questions for your vendor and a minimum set of process checks.
- Security
(Blog)
Blog
Answers to the questions clients bring us: stack, timelines, budget, SEO. Short and to the point.
- All articles
- MVP 5
- Laravel 3
- Node.js 2
- Project estimation 7
- Nuxt 1
- SEO 5
- Working with vendors 6
- Team 5
- Architecture 7
- Backend 11
- Development process 13
- Product 7
- Security 6
- Frontend 7
- Vue 1
- React 3
- Databases 4
- AI 7
- API 4
- News 2
- Mobile 4
- Startups 3
- Performance 6
- Python 2
- Support 3
- Analytics 3
- SaaS 2
- FinTech 3
- E-commerce 2
- QA and testing 3
- DevOps 4
- Automation 2
- EdTech 2
- Technical debt 1
6 min read
How to write a software requirements specification developers understand
A specification you can estimate and accept against describes roles and scenarios with acceptance criteria. Here is the structure, a scenario template and common mistakes.
- Development process
- Product
6 min read
Monolith or microservices: what to choose when starting a project
A new product almost always needs a modular monolith, not microservices. Here is when services are justified and how to build a monolith you can split later.
- Architecture
- Backend
6 min read
Outsourcing vs an in-house development team: which pays off
An in-house team pays off when the product is your core business; outsourcing wins for launches and one-off work. Here is how to compare the full cost, not rates.
- Working with vendors
- Team