writing

Field notes.

Occasional write-ups from shipping things — what broke, what I tried, what finally worked. Source of truth lives at ruddybuilds.substack.com.

Apr 11, 2026
I checked security headers on 10 SaaS startups. Some of them are security companies. It's not great.
Last week I was putting together a prospect list for my freelance work and figured, why not actually scan these companies before I pitch them? I ran curl -sI on 10 open-source, developer-focused SaaS…
read on substack ↗

I checked security headers on 10 SaaS startups. Some of them are security companies. It's not great.