Most Security Controls Assume a Team You Don't Have
Security checklists only ever grow, because nobody who writes them pays the cost of a control a small team cannot staff. Which to defer, and which never wait.
Writing · Tag
Posts tagged founders
38 posts on founders, page 2 of 4. Or browse the full writing index →
Posts tagged founders
Nobody Got Replaced. Agents Got Added.
McKinsey didn't swap 25,000 people for AI agents. What its CEO actually said is more useful to founders, and changes the question to ask before hiring.
What I Check When I Inherit a Vibe-Coded App
The consultant's playbook for taking over an undocumented AI-built app after the builder walks away: what to audit first, and how to price it.
Schlep Blindness Is the Only Moat Agents Can’t Cross
Paul Graham’s schlep blindness, updated for 2026: agents made the fun half of your product free to copy, so the tedious half is the only part left worth owning.
What Four Months of Embedded AI Engineering Ships
What a sixteen-week embedded AI engineering rotation ships, month by month, from the first merge to the handoff artifacts that let it end.
Detection Got Cheap. Remediation Didn't.
Microsoft just made vulnerability detection cheaper and more accurate. For a 12-40 person AI startup, that was never the bottleneck.
What Reverse Acqui-Hires Actually Diligence
What a buyer's technical reviewer checks in a reverse acqui-hire when the code isn't the asset: key-person risk, IP scope, and contribution forensics.
Why We'd Pick Elixir for an AI Startup Backend
A founder-readable case for Elixir as an AI startup's backend: what the BEAM gets right for agents, streaming, and durable jobs, and when to skip it.
Shadow AI at a Startup That Can't Buy a CASB
The enterprise shadow-AI playbook assumes a CASB budget you don't have. Here's the free, no-blame version for a 5-15 person team: three steps, zero procurement.
What Cyber Insurance Underwriters Ask AI Startups
The cyber insurance application is a security audit in disguise. What underwriters check in 2026, the AI exclusions creeping in, and when coverage is real.
Why Auto-Filled Security Questionnaires Kill AI Deals
Why auto-filling an enterprise security questionnaire backfires on an AI startup: the answers that kill deals, and the questions your SOC 2 won't cover.
Surviving Technical Due Diligence as an AI Founder
What the investor's technical reviewer opens first, the AI-specific flags that re-price rounds in 2026, and the gaps you should deliberately leave alone.