Not 'more tests': every test in its layer. Fast unit tests for the domain, integration at the edges, a few E2E — and the anti-patterns that break any suite.
It's almost never a zero-day: it's the same ten mistakes. The three we find in almost every audit (IDOR, SQL injection, misconfiguration) and how to start defending today.
No retraining: index your documents, retrieve what's relevant on each question and generate answers with citations. The practical RAG guide, with pipeline and common mistakes.
Best Practices & Quality
1 min
The Testing Pyramid: A Practical Guide for Suites That Don't Fall Apart
Not 'more tests': every test in its layer. Fast unit tests for the domain, integration at the edges, a few E2E — and the anti-patterns that break any suite.
Security & Audits
1 min
OWASP Top 10: The 10 Critical Vulnerabilities Explained with Real Examples
It's almost never a zero-day: it's the same ten mistakes. The three we find in almost every audit (IDOR, SQL injection, misconfiguration) and how to start defending today.
Artificial Intelligence
1 min
RAG: How to Make an LLM Answer with Your Company's Data
No retraining: index your documents, retrieve what's relevant on each question and generate answers with citations. The practical RAG guide, with pipeline and common mistakes.
Business Guides
1 min
How Much Does Custom Software Cost? An Honest Guide to Budgets
Real ranges from the Spanish market, what actually moves the price, the cost that doesn't show up in the budget, and how to spot an unserious one before signing.
Web Development
1 min
Web Performance: A Practical Guide to Speeding Up Your Application
Measure before you touch: N+1, cache layers, OPcache and Core Web Vitals. The practical guide to speeding up web applications, with Symfony/PHP examples.
Web Development
1 min
REST vs GraphQL: How to Choose the Right API for Your Project
REST and GraphQL are not rivals: they solve different problems. The real strengths of each, GraphQL's hidden costs, and a practical framework to decide.
Software Architecture
1 min
What Is Domain-Driven Design? A Practical Guide with a Real Example
Ubiquitous language, bounded contexts, entities, value objects and aggregates explained with a real PHP example: how to make code speak the language of the business.
Software Architecture
1 min
What Is Hexagonal Architecture? A Practical Guide
Ports and Adapters explained with PHP examples: framework coupling, the three building blocks (domain, ports, adapters), and when (not) to use it.
Security & Audits
1 min
OWASP Top 10: The Vulnerabilities We Actually Find in Audits
Beyond the official list: the security flaws that keep showing up in real audits, how to spot them, and how to fix them.
We use first-party and third-party cookies to improve your experience, analyse traffic and personalise content. Technical cookies are necessary for the site to function and cannot be disabled.
You can manage your preferences or review our policy.
Your cookie preferences
Select the cookie categories you want to allow. You can change this setting at any time from the link in the footer.
Technical cookies (necessary)
Essential for the website to function. They cannot be disabled.
Preference cookies
Allow us to remember your language, region and other personalisation preferences.
Analytics cookies
Help us understand how you interact with the website so we can improve our services.
Marketing cookies
Used to show you personalised advertising based on your browsing profile.