Engineering intelligence, AI strategies, and digital transformation guides for SMBs in Sydney's Hills District.
A war-story runbook. Fresh Mautic 7.1.2 install on Hetzner, DMARC archive, SES→SNS→SQS bounce worker, and the custom chatwoot-mautic-webhook middleware — the real infrastructure behind escaping HubSpot / Intercom bills.
Most SMB security posts are checklists. This one is a case study — a repeatable 1080° adversarial-audit methodology run across four production codebases, with the exact findings, the commits that fixed them, and the guardrails that stop them recurring. Real vulns. Real patches. Verifiable.
The alert-fatigue math: 200,000 daily alerts, 10% human capacity, 180,000 ignored. How AI-integrated WAFs close the 90% vulnerability gap — and what to do about the 6% that still slips through. With a companion video.
Most VPN reviews are written for consumers streaming Netflix. Australian small businesses need something else - central account admin, per-server IP whitelisting for SaaS access, split-tunnelling that does not break Zoom, and a device count that covers laptops plus phones plus the odd contractor. Here is how NordVPN maps to those requirements, what it costs in AUD, and when a business plan actually beats the personal one.
A single PR passed all CI checks and looked ready to merge. An adversarial plan-gate — a review pass that tries to prove the plan will fail — surfaced 16 flaws and cleanly split the work into two smaller, safer PRs. This is the DevOps practice most teams don't do that should.
Three sites in our constellation shipped without og:image in the same fortnight. Every one of them looked fine in the browser and returned 200s on every crawl. Every one of them was quietly getting shared on LinkedIn, Facebook, and Slack with no preview card at all. Here is the audit.