How to launch a vibe-coded app securely: a step-by-step guide
Take an app built with Claude Code, Cursor, Lovable or Bolt live safely: find leaked keys and open data, deploy, add Cloudflare, test and monitor.
Blog
Researched, sourced guides. Cloud security, DevOps and AI coding agents come from my day-to-day work; the startup, freelancing and money guides are for people who, like me, live and work across borders.
Security
Cloudflare security and performance settings for every plan
What to switch on in Cloudflare on the Free, Pro, Business and Enterprise plans, what each upgrade adds, and how to check your setup from outside.
Compromised Linux server: what to do in the first hour
A minute-by-minute runbook for a hacked Linux server: isolate without powering off, snapshot disks, capture evidence, hunt persistence, rotate secrets.
Dependency scanning tools compared: SCA, SBOMs and malware
Dependabot, Renovate, OSV-Scanner, Trivy, Grype, Syft, Snyk, Socket, npm audit and pip-audit compared, with CI snippets and a layered setup.
Linux server hardening checklist for Ubuntu 24.04 LTS
A tested Ubuntu 24.04 hardening checklist: SSH keys only, sudo, automatic updates, firewall, fail2ban, auditd, sysctl, logs, backups and CIS checks.
SAST tools compared: SonarQube, Semgrep, CodeQL and Snyk
SonarQube, Semgrep, GitHub CodeQL, Snyk Code and Bearer compared on free tiers, pricing, CI setup and false positives, with a small-team setup.
Security review skills for AI coding agents in 2026
How /security-review, Claude Security, Codex Security, Cloudflare's audit skill and Semgrep Guardian work, what they miss, and how to vet skills.
DevOps
AWS cost optimisation checklist for small teams
An AWS cost-cutting checklist for small teams: budgets, anomaly alerts, rightsizing, Savings Plans, Graviton, Spot, gp3, idle resources, S3 and log retention.
CI/CD tools compared: GitHub Actions, GitLab, Jenkins and more
GitHub Actions, GitLab CI/CD, Jenkins, CircleCI, Buildkite and Argo CD compared for small teams: free limits, runners, OIDC, caching and a decision table.
Host a website for free on Cloudflare Workers (static assets)
Host a low-traffic static site free on Cloudflare Workers: plan limits, wrangler.jsonc, custom domain, _headers with CSP and HSTS, redirects and CI deploys.
MCP servers for DevOps engineers: what to install in 2026
The MCP servers worth adding to Claude Code and Codex for DevOps and cloud work, how to scope their credentials, and how to contain prompt injection.
New Relic free tier: free infrastructure monitoring in 2026
What New Relic's free tier includes, how to install the Linux agent, add APM, logs, synthetics and alerts, and stay under 100 GB a month.
AI engineering
Best Claude Code and Codex plugins and skills in 2026
A fact-checked list of Claude Code and Codex plugins and skills worth installing, with install commands, who each suits, and how to vet them first.
Claude Code vs Codex CLI: how I split work between them
Claude Code and Codex CLI compared in November 2026: install, CLAUDE.md vs AGENTS.md, config files, sandboxes, approvals, models, plans and when to use each.
Everything Claude Code (ECC) plugin: a practical setup
How to install the Everything Claude Code (ECC) plugin, what its agents, skills, hooks and rules do, what to switch off, and how it sits with your CLAUDE.md.
How I set up Claude Code for real infrastructure work
A Claude Code setup for infrastructure repos: install, CLAUDE.md, permission rules, plan mode, hooks, MCP, subagents, skills, plugins and secret handling.
oh-my-claudecode (OMC) plugin: a multi-agent Claude Code guide
What oh-my-claudecode (OMC) does, its modes, how to install it safely, why .omc belongs in .gitignore, and when multi-agent orchestration is worth the tokens.
skills.sh agent skills directory: install, write and vet
What skills.sh is, how SKILL.md Agent Skills work in Claude Code and Codex, how to install and write one, and how to vet third-party skills before they run.
Tech news
AI coding and DevOps in 2026: what changed this year
A dated, sourced review of 2026 in AI coding agents, MCP and Agent Skills, npm supply-chain worms, cloud security and dev tool funding, for small teams.
Startups
Dubai free zone company setup: a guide for tech founders
How a tech founder sets up a Dubai free zone company: FZCO basics, IFZA, DMCC, Meydan and DSO compared, visas, banking, corporate tax and a checklist.
Mercury vs Brex for startups: fees, eligibility and yield
Mercury vs Brex, with Relay and Wise Business: who qualifies, non-US founders, wire and FX fees, cards, treasury yield, perks and Brex under Capital One.
Startup perks and credits 2026: what to claim right now
Stripe Atlas's $500 Treasury offer plus Cloudflare, PostHog, AWS, Google, Microsoft and Claude startup credits, each checked on 11 November 2026.
Freelancing
How to become a Fiverr Top Rated seller and join Fiverr Pro
Fiverr's current Top Rated criteria and Pro vetting, checked against its Help Center, plus what technical buyers expect from a DevOps or cloud freelancer.
Money
Credit cards in India, the UAE and the US compared (2026)
Forex markups, lounge access, transfer partners, fees and eligibility for credit cards in India, the UAE and the US, checked on issuer pages in November 2026.
Crypto debit cards compared: RedotPay, Bybit, Crypto.com and more
RedotPay, Binance Card, Bybit Card, Crypto.com and Coinbase cards compared: fees, top-ups, KYC, India, UAE and US availability, tax and custody risk.
Free ATM withdrawals worldwide: the Schwab card and alternatives
How the Schwab Investor Checking card refunds ATM fees worldwide, who can open it, and the Fidelity, Wise, Revolut, India and UAE alternatives.
International payments: how to cut forex fees and markups
Card markups, dynamic currency conversion, Wise, getting paid in USD or EUR, India's LRS and TCS rules and UAE remittances, with a USD 1,000 cost comparison.
Money tips for freelancers and founders earning across borders
Money tips for freelancers and small founders paid across borders: separate accounts, runway, pricing, invoices, records, and India and UAE tax basics.
Travel
Popcorn.Space eSIM guide: plans, setup and alternatives
What the Popcorn.Space global eSIM plan includes, how to set up an eSIM on iPhone and Android, and how it compares with Airalo, Holafly and Nomad.