Blog
Notes from the work
Short and practical: what a security release means for you, why a gateway beats a database connection, what two days of assessment contain. Written by the person who does the work.
PHP 8.4.27, 8.3.36 and 8.5.12: what the 21 October security release means for you
Two critical bugs that allow remote code execution without logging in, fixed in every supported PHP version. What to do today, and what it says about running on an unsupported version.
Read →Why I put an MCP server in front of an API instead of giving the model the database
Customers ask for an AI assistant on their data. The safe way to say yes is a small gateway with named tools, the user's own rights and a log of every call.
Read →What two days of Health Check buy you
Twelve hours, read-only, a written report. Here is what I look at, what you get back, and what it costs: EUR 1,080 excl. VAT.
Read →A question these notes do not answer?
Ask it. If it needs a proper look before I answer, the first reply says what I will look at.