<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>I Got A Site 4 That</title><description>Building full-stack platforms, AI systems, and security infrastructure — and writing about the craft behind it.</description><link>https://igotasite4that.com/</link><language>en</language><item><title>Building Site 4 That: An AI-Powered Tools Platform for Real Life</title><link>https://igotasite4that.com/blog/building-site4that-ai-tools-platform/</link><guid isPermaLink="true">https://igotasite4that.com/blog/building-site4that-ai-tools-platform/</guid><description>How I built Site 4 That — a SaaS platform with 40+ AI tools for ADHD, relationships, productivity, and parenting using Next.js 15, Claude, and Stripe.</description><pubDate>Mon, 06 Apr 2026 00:00:00 GMT</pubDate><category>ai-tools</category><category>nextjs</category><category>saas</category><category>side-project</category></item><item><title>Why Most CLAUDE.md Files Are Too Big: A Better Multi-Stack Claude Code Setup</title><link>https://igotasite4that.com/blog/claude-md-modular-multi-stack-setup/</link><guid isPermaLink="true">https://igotasite4that.com/blog/claude-md-modular-multi-stack-setup/</guid><description>Most CLAUDE.md files try to do too much. Here is a modular approach using conditional rules, subagents, and hooks that keeps context lean and Claude focused.</description><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>claude-code</category><category>developer-tools</category><category>ai-coding</category><category>vs-code</category></item><item><title>Claude Code Setup in VS Code: Build a Better Multi-Stack CLAUDE.md Starter</title><link>https://igotasite4that.com/tutorials/claude-code-vscode-multistack-starter/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/claude-code-vscode-multistack-starter/</guid><description>Step-by-step guide to building a modular Claude Code config for VS Code with conditional rules, subagents, hooks, and stack detection.</description><pubDate>Wed, 01 Apr 2026 00:00:00 GMT</pubDate><category>claude-code</category><category>vs-code</category><category>ai-coding</category><category>developer-tools</category></item><item><title>React SPA Monorepo CI/CD: How to Automate Testing and Deploy Only What Changed</title><link>https://igotasite4that.com/blog/react-spa-monorepo-cicd/</link><guid isPermaLink="true">https://igotasite4that.com/blog/react-spa-monorepo-cicd/</guid><description>Learn how React SPA monorepo CI/CD works with 7 validation gates, Playwright E2E testing, intelligent change detection, selective deploys, and staging-to-production release workflows.</description><pubDate>Tue, 17 Mar 2026 00:00:00 GMT</pubDate><category>cicd</category><category>monorepo</category><category>github-actions</category><category>gitlab-ci</category><category>playwright</category><category>react</category><category>devops</category></item><item><title>How to Set Up CI/CD and Automated Tests for a React SPA Monorepo</title><link>https://igotasite4that.com/tutorials/react-spa-monorepo-cicd-testing-pipeline/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/react-spa-monorepo-cicd-testing-pipeline/</guid><description>Step-by-step React SPA monorepo CI/CD tutorial: configure 7 validation gates, Playwright E2E tests, selective deploys, staging gates, and production releases with GitHub Actions and GitLab CI.</description><pubDate>Tue, 17 Mar 2026 00:00:00 GMT</pubDate><category>cicd</category><category>monorepo</category><category>github-actions</category><category>gitlab-ci</category><category>playwright</category><category>react</category><category>devops</category></item><item><title>LLM API Rate Limiting and Cost Control: Manage Token Budgets, Per-Key Throttling, and Cost Dashboards</title><link>https://igotasite4that.com/blog/llm-api-rate-limiting-cost-control/</link><guid isPermaLink="true">https://igotasite4that.com/blog/llm-api-rate-limiting-cost-control/</guid><description>Stop LLM API costs from spiraling. A practical guide to rate limiting, per-user token budgets, exact-match caching, and cost dashboards with a deployable open-source proxy.</description><pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate><category>llm-cost-optimization</category><category>api-rate-limiting</category><category>platform-engineering</category><category>ai-infrastructure</category></item><item><title>Implement LLM API Rate Limiting and Cost Controls: Token Budgets, Per-Key Throttling, and Usage Dashboards</title><link>https://igotasite4that.com/tutorials/implement-llm-rate-limiting-cost-controls/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/implement-llm-rate-limiting-cost-controls/</guid><description>Build and deploy an LLM API proxy with per-key rate limiting, token budgets, exact-match caching, cost dashboards, and webhook alerting using TypeScript and SQLite.</description><pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate><category>llm-cost-optimization</category><category>api-rate-limiting</category><category>platform-engineering</category><category>ai-infrastructure</category></item><item><title>Securing AI Coding Agent Workflows: Sandbox, Permission, and Review AI-Generated Code in Production Pipelines</title><link>https://igotasite4that.com/blog/securing-ai-coding-agent-workflows/</link><guid isPermaLink="true">https://igotasite4that.com/blog/securing-ai-coding-agent-workflows/</guid><description>Stop AI-generated code from reaching production unchecked. A practical framework for detection, policy-as-code, sandboxed execution, and risk-tiered review gates.</description><pubDate>Sat, 14 Mar 2026 00:00:00 GMT</pubDate><category>ai-coding-agents</category><category>devsecops</category><category>ci-cd-security</category><category>application-security</category></item><item><title>Lock Down AI Coding Agent Pipelines: Sandbox Configuration, Permission Boundaries, and Automated Review Gates</title><link>https://igotasite4that.com/tutorials/lock-down-ai-coding-agent-pipelines/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/lock-down-ai-coding-agent-pipelines/</guid><description>Learn how to lock down AI coding agent pipelines with detection, policy-as-code, security scanning, sandboxed test execution, risk-tiered review gates, and audit logging.</description><pubDate>Sat, 14 Mar 2026 00:00:00 GMT</pubDate><category>ai-coding-agents</category><category>ci-cd-security</category><category>devsecops</category><category>application-security</category></item><item><title>Building Custom MCP Servers: Extend AI Agents with Domain-Specific Tools</title><link>https://igotasite4that.com/blog/building-custom-mcp-servers/</link><guid isPermaLink="true">https://igotasite4that.com/blog/building-custom-mcp-servers/</guid><description>Learn how to build production-grade MCP servers that connect AI agents to your internal databases, APIs, and tools with proper security, validation, and deployment.</description><pubDate>Fri, 13 Mar 2026 00:00:00 GMT</pubDate><category>mcp</category><category>ai-coding-agents</category><category>developer-tools</category><category>platform-engineering</category></item><item><title>Build, Secure, and Deploy a Custom MCP Server: From Tool Definition to Production</title><link>https://igotasite4that.com/tutorials/build-secure-deploy-custom-mcp-server/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/build-secure-deploy-custom-mcp-server/</guid><description>Step-by-step tutorial to build an MCP server beyond hello-world with PostgreSQL, authentication, query sandboxing, and Docker deployment.</description><pubDate>Fri, 13 Mar 2026 00:00:00 GMT</pubDate><category>mcp</category><category>ai-coding-agents</category><category>developer-tools</category><category>platform-engineering</category></item><item><title>Serverless Contact Forms with AWS SAM: Why They Win on Cost, Security, and Simplicity</title><link>https://igotasite4that.com/blog/serverless-contact-form-aws-sam/</link><guid isPermaLink="true">https://igotasite4that.com/blog/serverless-contact-form-aws-sam/</guid><description>Why a serverless contact form backend built with AWS SAM, Lambda, DynamoDB, and SES beats traditional server setups on cost, security, and operational simplicity.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate><category>serverless-architecture</category><category>aws-sam</category><category>contact-forms</category><category>api-security</category></item><item><title>How to Deploy a Serverless Contact Form with AWS SAM, Lambda, and DynamoDB</title><link>https://igotasite4that.com/tutorials/deploy-serverless-contact-form-aws-sam-lambda-dynamodb/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/deploy-serverless-contact-form-aws-sam-lambda-dynamodb/</guid><description>Step-by-step guide to building and deploying a serverless contact form backend with AWS SAM, API Gateway, Lambda, DynamoDB, and SES, including rate limiting, spam prevention, and multi-site support.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate><category>serverless-architecture</category><category>aws-sam</category><category>aws-lambda</category><category>dynamodb</category></item><item><title>Post-Quantum Cryptography Migration Roadmap for IT Teams</title><link>https://igotasite4that.com/blog/post-quantum-cryptography-migration-roadmap/</link><guid isPermaLink="true">https://igotasite4that.com/blog/post-quantum-cryptography-migration-roadmap/</guid><description>NIST has moved post-quantum cryptography into a real migration phase. Here&apos;s how IT teams should inventory, prioritize, and plan the transition.</description><pubDate>Wed, 11 Mar 2026 00:00:00 GMT</pubDate><category>post-quantum-cryptography</category><category>pqc</category><category>crypto-agility</category><category>enterprise-security</category></item><item><title>How to Roll Out Enterprise Passkeys and Phishing-Resistant MFA</title><link>https://igotasite4that.com/tutorials/roll-out-enterprise-passkeys-and-phishing-resistant-mfa/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/roll-out-enterprise-passkeys-and-phishing-resistant-mfa/</guid><description>Learn how to roll out enterprise passkeys and phishing-resistant MFA with a practical pilot plan, fallback strategy, recovery model, and adoption metrics.</description><pubDate>Wed, 11 Mar 2026 00:00:00 GMT</pubDate><category>identity</category><category>passkeys</category><category>mfa</category><category>enterprise-security</category></item><item><title>API Security for AI Apps and Modern SaaS Integrations</title><link>https://igotasite4that.com/blog/api-security-best-practices-ai-saas/</link><guid isPermaLink="true">https://igotasite4that.com/blog/api-security-best-practices-ai-saas/</guid><description>Modern apps depend on APIs more than ever. Learn the API security practices that matter most for AI applications and SaaS integrations in 2026.</description><pubDate>Tue, 10 Mar 2026 00:00:00 GMT</pubDate><category>api-security</category><category>ai-app-security</category><category>saas-integrations</category><category>owasp</category></item><item><title>How to Stand Up an AI Gateway on Kubernetes for Inference Workloads</title><link>https://igotasite4that.com/tutorials/ai-gateway-kubernetes-inference-workloads/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/ai-gateway-kubernetes-inference-workloads/</guid><description>Learn how to stand up an AI gateway on Kubernetes for inference workloads, with practical routing, reliability, observability, and security patterns.</description><pubDate>Tue, 10 Mar 2026 00:00:00 GMT</pubDate><category>kubernetes</category><category>ai-gateway</category><category>gateway-api</category><category>inference</category></item><item><title>How to Audit and Lock Down APIs Using the OWASP API Security Top 10</title><link>https://igotasite4that.com/tutorials/audit-and-lock-down-apis-owasp-api-security-top-10/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/audit-and-lock-down-apis-owasp-api-security-top-10/</guid><description>Learn how to audit and lock down APIs using the OWASP API Security Top 10 with a practical review workflow, code checks, and a remediation plan.</description><pubDate>Mon, 09 Mar 2026 00:00:00 GMT</pubDate><category>api-security</category><category>owasp</category><category>application-security</category><category>devsecops</category></item><item><title>How to Start a Post-Quantum Cryptography Migration: Inventory, Prioritize, Pilot</title><link>https://igotasite4that.com/tutorials/start-post-quantum-cryptography-migration-inventory-prioritize-pilot/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/start-post-quantum-cryptography-migration-inventory-prioritize-pilot/</guid><description>Learn how to start a post-quantum cryptography migration with inventory, prioritization, crypto agility checks, a pilot scope, and a phased roadmap.</description><pubDate>Sun, 08 Mar 2026 00:00:00 GMT</pubDate><category>post-quantum-cryptography</category><category>pqc</category><category>crypto-agility</category><category>security-architecture</category></item><item><title>Zero Trust Architecture in Practice for Hybrid and Multi-Cloud</title><link>https://igotasite4that.com/blog/zero-trust-architecture-hybrid-cloud/</link><guid isPermaLink="true">https://igotasite4that.com/blog/zero-trust-architecture-hybrid-cloud/</guid><description>A practical Zero Trust guide for hybrid and multi-cloud environments, based on real implementation patterns and operational lessons.</description><pubDate>Sat, 07 Mar 2026 00:00:00 GMT</pubDate><category>zero-trust-architecture</category><category>hybrid-cloud-security</category><category>identity-security</category><category>network-security</category></item><item><title>How to Secure an Agentic AI App: Guardrails, Tool Permissions, and Audit Logs</title><link>https://igotasite4that.com/tutorials/secure-agentic-ai-app-guardrails-tool-permissions-audit-logs/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/secure-agentic-ai-app-guardrails-tool-permissions-audit-logs/</guid><description>Learn how to secure an agentic AI app with guardrails, per-tool permissions, user approvals, and audit logs using a practical production-ready baseline.</description><pubDate>Sat, 07 Mar 2026 00:00:00 GMT</pubDate><category>ai-security</category><category>agentic-ai</category><category>application-security</category><category>owasp</category></item><item><title>AI Coding Agents in 2026: How MCP Is Changing Software Development</title><link>https://igotasite4that.com/blog/ai-coding-agents-2026-mcp/</link><guid isPermaLink="true">https://igotasite4that.com/blog/ai-coding-agents-2026-mcp/</guid><description>Learn how AI coding agents work in 2026, why MCP matters, and how GitHub Agent HQ and Xcode are changing modern software development.</description><pubDate>Fri, 06 Mar 2026 00:00:00 GMT</pubDate><category>ai-coding-agents</category><category>mcp</category><category>developer-tools</category><category>software-development</category></item><item><title>How to Harden Your CI/CD Pipeline with Sigstore, SLSA, and SBOMs</title><link>https://igotasite4that.com/tutorials/harden-cicd-pipeline-sigstore-slsa-sboms/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/harden-cicd-pipeline-sigstore-slsa-sboms/</guid><description>Learn how to harden your CI/CD pipeline with Sigstore, SLSA, and SBOMs using artifact signing, provenance, verification gates, and minimum policy checks.</description><pubDate>Fri, 06 Mar 2026 00:00:00 GMT</pubDate><category>software-supply-chain</category><category>sigstore</category><category>slsa</category><category>sbom</category></item><item><title>How to Secure Agentic AI Applications: The 2026 Playbook</title><link>https://igotasite4that.com/blog/agentic-ai-security-2026/</link><guid isPermaLink="true">https://igotasite4that.com/blog/agentic-ai-security-2026/</guid><description>A practical guide to agentic AI security in 2026, including OWASP-aligned risks, guardrails, tool controls, logging, and deployment advice.</description><pubDate>Thu, 05 Mar 2026 00:00:00 GMT</pubDate><category>agentic-ai-security</category><category>ai-security</category><category>owasp</category><category>application-security</category></item><item><title>How to Migrate from Ingress NGINX to Gateway API Before Retirement</title><link>https://igotasite4that.com/tutorials/migrate-ingress-nginx-to-gateway-api-before-retirement/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/migrate-ingress-nginx-to-gateway-api-before-retirement/</guid><description>Learn how to migrate from ingress-nginx to Gateway API with a staged audit, translation, side-by-side validation, and safe cutover plan before support ends.</description><pubDate>Thu, 05 Mar 2026 00:00:00 GMT</pubDate><category>kubernetes</category><category>gateway-api</category><category>ingress-nginx</category><category>platform-engineering</category></item><item><title>Ingress NGINX Retirement: Your Kubernetes Migration Guide</title><link>https://igotasite4that.com/blog/ingress-nginx-retirement-migration/</link><guid isPermaLink="true">https://igotasite4that.com/blog/ingress-nginx-retirement-migration/</guid><description>Ingress NGINX retires in March 2026. Here&apos;s how to evaluate your exposure, choose a migration path, and avoid breaking production traffic.</description><pubDate>Wed, 04 Mar 2026 00:00:00 GMT</pubDate><category>kubernetes</category><category>ingress-nginx</category><category>gateway-api</category><category>devops</category></item><item><title>How to Set Up MCP-Powered Coding Agents in GitHub Copilot and Xcode</title><link>https://igotasite4that.com/tutorials/mcp-coding-agents-setup/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/mcp-coding-agents-setup/</guid><description>Learn how to set up MCP-powered coding agents in GitHub Copilot and Xcode, connect tools, run real tasks, and review output safely.</description><pubDate>Wed, 04 Mar 2026 00:00:00 GMT</pubDate><category>mcp</category><category>github-copilot</category><category>xcode</category><category>ai-coding-agents</category></item><item><title>Kubernetes for AI Workloads: Networking, Gateways, and Reliability</title><link>https://igotasite4that.com/blog/kubernetes-ai-workloads-networking/</link><guid isPermaLink="true">https://igotasite4that.com/blog/kubernetes-ai-workloads-networking/</guid><description>AI workloads put new pressure on Kubernetes networking and reliability. Learn what platform teams should change in 2026.</description><pubDate>Tue, 03 Mar 2026 00:00:00 GMT</pubDate><category>kubernetes-ai-workloads</category><category>gateway-api</category><category>llm-infrastructure</category><category>platform-engineering</category></item><item><title>How to Extend GitHub Copilot Coding Agent with MCP Tools</title><link>https://igotasite4that.com/tutorials/extend-github-copilot-coding-agent-with-mcp-tools/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/extend-github-copilot-coding-agent-with-mcp-tools/</guid><description>Learn how to extend GitHub Copilot coding agent with MCP tools, connect external context, validate tool use, and keep permissions safe.</description><pubDate>Tue, 03 Mar 2026 00:00:00 GMT</pubDate><category>github-copilot</category><category>mcp</category><category>ai-coding-agents</category><category>developer-tools</category></item><item><title>Software Supply Chain Security in the AI Era</title><link>https://igotasite4that.com/blog/software-supply-chain-security-ai/</link><guid isPermaLink="true">https://igotasite4that.com/blog/software-supply-chain-security-ai/</guid><description>AI speeds up software delivery, but it also amplifies dependency and provenance risks. Here&apos;s how to modernize software supply chain security in 2026.</description><pubDate>Mon, 02 Mar 2026 00:00:00 GMT</pubDate><category>software-supply-chain-security</category><category>sbom</category><category>devsecops</category><category>open-source-security</category></item><item><title>How to Implement Zero Trust Controls for Hybrid and Multi-Cloud Environments</title><link>https://igotasite4that.com/tutorials/implement-zero-trust-controls-hybrid-multi-cloud/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/implement-zero-trust-controls-hybrid-multi-cloud/</guid><description>Learn how to assess, prioritize, and implement Zero Trust controls across identity, devices, network, applications, and data in hybrid and multi-cloud environments.</description><pubDate>Mon, 02 Mar 2026 00:00:00 GMT</pubDate><category>zero-trust-architecture</category><category>hybrid-cloud-security</category><category>identity-security</category><category>network-security</category></item><item><title>Why Ransomware Is Becoming an Identity Problem</title><link>https://igotasite4that.com/blog/identity-based-ransomware/</link><guid isPermaLink="true">https://igotasite4that.com/blog/identity-based-ransomware/</guid><description>Ransomware is shifting from malware-heavy attacks to credential theft and session abuse. Here&apos;s what security teams should change in 2026.</description><pubDate>Sun, 01 Mar 2026 00:00:00 GMT</pubDate><category>identity-security</category><category>ransomware</category><category>zero-trust</category><category>enterprise-passkeys</category></item><item><title>How to Defend Against Identity-First Attacks: Session Theft, AiTM Phishing, and &quot;Logging In&quot; Attacks</title><link>https://igotasite4that.com/tutorials/defend-against-identity-first-attacks-session-theft-aitm-phishing/</link><guid isPermaLink="true">https://igotasite4that.com/tutorials/defend-against-identity-first-attacks-session-theft-aitm-phishing/</guid><description>Learn how to defend against identity-first attacks with phishing-resistant MFA, session hardening, AiTM defenses, detection rules, and response playbooks.</description><pubDate>Sun, 01 Mar 2026 00:00:00 GMT</pubDate><category>identity-security</category><category>phishing-resistant-mfa</category><category>session-security</category><category>incident-response</category></item><item><title>Enterprise Passkeys Rollout: What Actually Works</title><link>https://igotasite4that.com/blog/enterprise-passkeys-rollout/</link><guid isPermaLink="true">https://igotasite4that.com/blog/enterprise-passkeys-rollout/</guid><description>Planning an enterprise passkeys rollout? Learn the best implementation strategies, UX considerations, recovery flows, and adoption tips for 2026.</description><pubDate>Sat, 28 Feb 2026 00:00:00 GMT</pubDate><category>enterprise-passkeys</category><category>passwordless-authentication</category><category>identity-security</category><category>fido</category></item></channel></rss>