360SOFTY

Insights

Engineering Insights

Practical writing on software architecture, SaaS products, AI automation, legacy modernisation, and the business of building reliable systems.

RSS

Curated links from external sources — not 360Softy original articles.

ExternalSoftware Engineering
DEV Community

Your Infrastructure Has Bugs Too: Scanning Terraform with Checkov (IaC SAST)

TL;DR: Application code isn't the only thing that ships vulnerabilities — your Terraform does too. I wrote an intentionally insecure AWS configuration, scanned it with Checkov (a SAST tool for Infrastructure as Code, listed on the OWASP Source Code Analysis Tools page), went from 35 failed checks to 0, and wired the scan into GitHub Actions. Full code: GitHub repo → In my previous article I used Bandit to find security bugs in Python code. But modern applications are deployed with Infrastructure

securityterraformdevsecops
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Agentic Software Development Explained: A Frontend Developer's Learning Journey

For the last couple of years, AI has become a regular part of my development workflow. Whether it's debugging a React component, generating boilerplate code, or explaining an unfamiliar concept, AI has saved me a lot of time. Like many developers, I treated it as an assistant that responds to prompts. Recently, I started noticing a new term appearing in articles, conference talks, and developer discussions: Agentic Software Development and Now Looping. At first, I assumed it was just another AI

aiproductivityagents
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

PaperQuire v0.3.0 — Your AI Agent's PDF Tool

AI agents can now generate PDFs Large language models are great at producing Markdown. What they can't do is turn that Markdown into a polished, branded PDF. That's always been a manual step — copy the output, paste it somewhere, fiddle with formatting, export. PaperQuire v0.3.0 removes that step entirely. The app now includes a built-in Model Context Protocol (MCP) server. Any MCP-compatible AI agent — Claude, ChatGPT, Copilot, or others — can call PaperQuire directly as a tool to render Mark

releasemcpai
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Network service based on ZeroTier

I am developing a service to use on my computer, that allow the user to create a network on their system to connect to it from other part of the world. The problem is that i don't want to depend on a local ZeroTier to extract the authtoken.secret from it. Is there a way to create a token for each user that use this service once the system is online the first time? This network must be approved by ZeroTier because the user have to connect throw ZeroTier to this network.

backendinfrastructurenetworking
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Two AI reviews passed my change. The correct architecture was documented one file away.

Two separate models — one writing the code, one reviewing the diff — shipped a one-word bug to staging. Both ran local checks. Both came back green. The fix they missed was not exotic or subtle. It was written down, in plain English, in a file sitting in the same directory as the change. That last detail is the one worth staying with. This is not a story about a model being wrong. Both models were, within the job they were given, correct. It is a story about where verification stops looking — an

aivercelnode
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Project Log #12: I Spent a Week Auditing Apps. The Results Changed This Project.

Day 12. I tested 15 popular Android apps for accessibility. What I found revealed who gets left behind. I took a week off from coding. Not because I was stuck. Not because I was tired. But because I needed to understand something that had been nagging at me since Day 10. Why does my AI agent work flawlessly on WhatsApp but completely fail on my banking app? The answer took a week of testing, documenting, and thinking. And what I found changed the direction of this entire project. The Week-Long A

aiwebdevprogramming
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Why Your Microservices Need Circuit Breakers (And How to Add Them)

The Cascading Failure That Took Down Everything Our payment service went down for 3 minutes. No big deal, right? Except every service that called payments kept retrying. The retry storms consumed all available connections. Within 10 minutes, all 12 services were down. 3 minutes of one service failing became 45 minutes of total outage. Circuit breakers prevent this. State Machine: CLOSED ──(failures exceed threshold)──→ OPEN ↑ │ │

microservicesreliabilitysre
DEV CommunityRead original

Work with 360Softy

Building a SaaS product, AI system, or business platform?

Book a free consultation and we will tell you honestly whether we can help.

Book a consultationView our services →