The Cyber Resilience Act for product companies
What the CRA requires of connected products, the timeline up to 2027 and what your development team should do now.
What the CRA requires of connected products, the timeline up to 2027 and what your development team should do now.
How a design system connects UX, UI and code, shortens lead times and keeps the product consistent.
A comparison for leaders who are hiring or buying development capacity, with the trade-offs that job titles hide.
Frontend, backend or full-stack developer: which role do you need? Read More »
What data engineers, data analysts and data scientists actually do, how the roles depend on each other, and which one a mid-sized company should hire or buy first.
Data science, data engineering or data analytics: who do you need? Read More »
The difference between a penetration test, vulnerability scanning, threat modeling and red teaming, and when each method pays off.
Pentest, vulnerability scan or threat modeling: which one do you need? Read More »
What the 4.5:1 and 3:1 ratios measure, where they apply, what is exempt, and how design and development teams test it before release.
Colour contrast explained: the WCAG ratios and how to test them Read More »
How RAG connects a large language model (LLM) to your documents and systems, and what it takes to get secure, correct answers.
Retrieval augmented generation (RAG) in practice Read More »
How to build OWASP controls, dependency scanning and code review into CI/CD without slowing the team down.
A plain comparison of the three most common design artefacts, what question each one answers, and how to choose the cheapest one that still gives you a reliable answer.
Wireframes, mockups or prototypes: what to make and when Read More »
A decision table for product leads who need one app on iOS and Android, and want to know what each approach costs over the product’s life.
Native app, Flutter or React Native: how to choose Read More »