Head of Engineering @patchstackapp · Building https://xitter.cf/t.co/LEFznwwxTU for dev teams · https://xitter.cf/t.co/cgwhFM4cqq for personal finance ✌️
Bath, England
Joined April 2011
- Tweets7K
- Following3.5K
- Followers1.8K
- Likes8.8K
Elliot retweeted
🫣 We have onboarded 3X more new paying customers in the past 2 and a half months compared to the total number of new customers we onboarded during the entire 12 months prior to that.
Yesterday, we pre-launched Patchstack for Lovable, Replit, Base44 and for any hosted NodeJS applications. Based on the volume of applications coming in, I can already tell the approach we've taken to protect these apps is what people have been waiting for.
Beyond excited for what's ahead of us.
For those who want to get early access - here's the link:
patchstack.com/ai-assisted-a…
Early Access launched... one to watch. The team cooked with this 🔥
⚡️We just put @patchstackapp for Lovable, Base44 and Replit apps live on early access.
Most security tools available for JS apps have been built for software engineers and security teams. Most people today who run JS apps are neither of those.
Patchstack provides fully automated ongoing vulnerability protection and prevents secrets, API keys and sensitive information from leaking.
More info:
patchstack.com/ai-assisted-a…
Elliot retweeted
I fear @OliverSild is right. And I’m not sure how we deal with that as a community. How _any_ open source community deals with this pressure.
The pressure being put on the commons is insane, and in many cases, not enough money is flowing into them to maintain them well.
I predict it's a matter of time when a 0 day will be dropped in WordPress core (vulnerability disclosed before core releases a fix for it). I already see people publishing the vulnerability reports they have sent via HackerOne to WordPress core, but which have not been fixed for years and taking into account all the AI built chains we're seeing, pretty sure some of them which were considered "meh" to fix will end up being something with a very real impact. There are a lot more security researchers now who can report pretty severe stuff thanks to AI and if they just keep getting responses that the issues are duplicates without seeing fixes going out they will just drop them publicly (we're already seeing this with plugins and with software from other ecosystems).
Elliot retweeted
Yesterday, we did a technical live demo of how @patchstackapp detects and auto-mitigates security vulnerabilities on Javascript apps to a vibe coding platform.
A single prompt “build a simple to-do app” came with 873 packages and 5 severe reachable vulnerabilities out of the box.
And this was the situation at the moment of creating the app. What will it look like in a month and then in 6 months?
Who is going to make sure the vulnerabilities get mitigated in time because we all know the average vibe coder is not going to keep up with the updates.
We have a quite unique solution to it, and it works without a web host or AI app building platform to do much of a heavy lifting.
If you’re a web host offering NodeJS hosting or building AI app builder, reach out to me so I can show you what it can do and how it helps to solve the vibe coded apps long term maintenence, known vulnerability exposure (CVEs), supply chain attacks and more. ✌🏼
The difference between a WordCamp in Poland last week and @laravelphp @LaravelLiveUK in London is fucking wild
My main take away is it’s still so early.
So many people just getting to grips with the change. The new paradigm. It’s early in laraland and pressplanet it’s like going back in time
Up in London for @LaravelLiveUK beers for the England game tonight and then looking forward to hang and learn with everyone tomorrow 🍻
Anyone around ping me 👋
What in the absolute fuck is Coderbuds.com. You really had the goddamn audacity to build a "manager-in-a-box" for engineers who already hate their lives. "AI agents that fix review bottlenecks" is just a fancy way of saying you built an automated pestering machine to harass developers who are probably just trying to take a shit in peace. You are literally selling its ability to "nudge everyone" because you are too much of a goddamn coward to actually talk to your employees like a human being. If I wanted an AI to tell me my "PR is too big," I would just ask my ex-wife to review my code because she is also an expert at telling me I am not doing enough.
You claim to integrate with Jira and Slack to "prove what worked," but all you are doing is creating a digital panopticon where every microsecond of a developer's day is tracked by a fucking bot. "DORA, SPACE, and 30+ metrics" sounds like a goddamn list of ways to make your best engineers quit and move to a company where they are treated like adults instead of data points. Elliot, your "letter from the founder" is a rambling manifesto about "ambiguity breeding anxiety" when your actual product is the primary source of anxiety for any team unlucky enough to use it. The roadmap says you are building "12 specialized agents," which is exactly 12 more ways for this software to be an over-engineered pain in the goddamn asshole. It is actually impressive that you managed to turn the most annoying parts of middle management into a scalable SaaS product for people who think leadership is a fucking dashboard.
Thanks @alexlockok 😅🤣
I'd love a menu bar for my Mac that shows the Laravel Forge deployment status. I'm pulling deployment into GitHub, so likely the best place to pull this... Just a red green dot, perhaps with last commit...
Stop me avoid vibing this! Anything exist already?
TIL 75% of our sub-processors at Coderbuds are US-based.
Stripe? US. GitHub? US. OpenAI? US. Sentry? US. Loops... etc
I'd prefer to move as much as we can to EU infrastructure.
What EU-based alternatives are you using for payments, error tracking, email, and AI? Any ideas?
got @conductor_build working with my @laravelphp projects - works beautifully with Herd - so I have a centralised database and then each worktree spins up a unique .test domain
Massive unlock. Bit crazy. 🤯
AI code review on every commit doesn't just create noise. It makes you reluctant to push.
That's the real cost.
Posted this on LI and comments went burrrr, turns out dev's have opinions. 🤣
Most came to same fix: on-demand, not automatic.
Had a quick go with @nativephp and 20 files to get my Laravel Livewire application working well for iOS.
Need some tweaks my that's mainly UX.
Very impressed. Would recommend.
Have fun in India at @LaraconIN guys - top work! 👏👏👏
In Greece with the team getting the post-it notes out, white boards on the walls, ideas, ideas and some huuuuge plans -- big innovation push for 2026, reviewing what engineering looks like in 2026 / post-opus, MCP TI, Vibestack POC and then tomorrow more deep work to ship some experiments that have big implications! Time for some Mythos and then back to work 🇬🇷🍻
