INSIGHTS / TECHNICAL DECISIONS
Answers for
ambitious projects.
Detailed, evidence-based articles about the decisions behind reliable AI products, maintainable Laravel systems and effective IT security.
Freelance penetration tester or pentest team: which model fits?
When a directly embedded freelance penetration tester makes sense, when a specialist team is the better fit and what to clarify before commissioning work.
Embedding a penetration tester in the product team without losing independence
How an external penetration tester can work with developers on releases, attack hypotheses and fixes without losing an independent testing perspective.
Taking over a Laravel project: when security testing belongs in the plan
Which attack surfaces deserve attention when taking over a Laravel application and how code understanding and penetration testing reinforce each other.
Supporting pentest findings through to the fix: more than a retest
How testers and developers turn a reproducible finding into root-cause analysis, a regression test and a robust fix.
From 60 to over 90 percent: fine-tuning embeddings for German legal research
How German court decisions, questions evaluated by practising lawyers and a fine-tuned embedding model became a production research and answer system.
Fine-tuning embedding models with domain data: from expert judgement to training pairs
How specialist questions, positive documents, hard negatives and separate evaluations adapt a general embedding model to a concrete retrieval task.
Laravel security audit: a practical checklist for production applications
A prioritised audit checklist covering attack surface, configuration, dependencies, authorisation, data flows, jobs and deployment.
When is an AI agent ready for production? Boundaries, evals and approvals
A production-ready agent needs explicit states, restricted tools, measurable quality and human decisions at high-impact boundaries.
Taking over an existing Laravel project: a technical entry plan
How team leads use LLM-assisted code mapping, targeted tests, Xdebug and a controlled first delivery to take ownership of a Laravel system.