No security team, no budget line, one person — and the site still takes payments, fetches URLs server-side, and delivers paid files. Here's the real threat model I built against and the concrete defenses in production right now: database-backed rate limiting, an SSRF-hardened importer, a CSP allowlist, and HMAC-gated downloads.
Using AI for website copy often leads to generic, buzzword-heavy text that breaks trust. Here is how I prompt AI to keep my voice, leverage its structure, and edit the draft before anything goes live.
This site's mobile Total Blocking Time was 670ms, and the biggest single cause was the JavaScript animation library powering some fade-ins. I removed it, rebuilt every effect with CSS and a 20-line scroll observer, and TBT dropped to 170ms — with the animations looking identical. Here's the exact technique, copyable, plus the two tests that make sure the win never quietly reverses.
A plain look at the AI coding tools I pay for while building sites like this one: Claude (mainly Claude Code), ChatGPT, and Grok. What each does well, where they fall short, pricing notes, and who should pick what.
I optimize content so ChatGPT, Perplexity, and Google AI Overviews cite it. Lead with direct answers, add Article and FAQPage JSON-LD, and keep claims consistent. Here's the simple process.
A $20-a-month AI website builder can get a simple site live fast. Here’s where those tools win—and where hiring a human still makes sense for a small business.
Next.js 16.3 ships first-party agent Skills, including next-dev-loop. Here is what it is, how I set it up, and how it changes building with a coding agent.
The React Compiler is stable and built into Next.js 16, but it is still opt-in. Here is what it does, when I would turn it on as a solo dev, and where I still write useMemo by hand.
I upgraded this site to Next.js 16 — Turbopack builds, Promise-shaped params, and a partial-rendering behavior change that quietly turned one of my security assumptions false. Here's the real upgrade: what broke, what was a non-event, which headline features I deliberately didn't adopt, and the habit that caught the subtle stuff.
