Hands-on insights on AI, Cloud, and Software Engineering from mid-sized DACH companies — for CTOs, tech leads, and decision-makers who treat technology as a strategic lever.
Desktop AI agents delete files, change configs, and accept outside input. How to secure AI agents: dedicated user, sandboxing, approval steps, recovery.
Soofi S beats Olmo 3 and Apertus 70B on benchmarks. Why Germany's open model is still not production-ready, and who should be evaluating it now.
Kubernetes is powerful but not always the right call: what a cluster really costs to operate, when it pays off, and which alternatives fit smaller teams.
Which SBOM tool for which job: Syft and Trivy generate, Dependency-Track manages and monitors, SBOM Lens makes documents readable. A hands-on comparison.
OCM Lens opens component descriptors and CTF archives in the browser: component trees, signatures, embedded SBOMs and quality profiles, fully client-only.
What the Open Component Model (OCM) is and when to use it: signed deliveries, CTF transport into air-gapped environments, and how it differs from an SBOM.
OpenClaw or Cowork? A hands-on comparison of the two AI desktop agents: architecture, cost, security and operations. Which one fits your team?
Voice agents in the enterprise: how the speech-to-text, LLM, and text-to-speech pipeline works, what latency to expect, and when deployment pays off.
The AI literacy duty in Article 4 of the EU AI Act has applied since February 2025, and enforcement starts in August 2026. What companies should do now.
The Cyber Resilience Act turns SBOMs into a manufacturer duty: reporting obligations from Sept 2026, CE requirements from late 2027, and how to prepare.
Why we built SBOM Lens: a client-only open source viewer for cascading SPDX SBOMs that renders your entire software supply chain as one navigable tree.
How cascading SPDX documents work: ExternalDocumentRef, cross-document relationships, checksum-based resolution and the quirks of real-world SBOM data.
Sovereign cloud promises digital sovereignty. What the three layers of data, operations and technology mean, and how to choose without dogma.
AI workflow automation for SMEs: when Zapier, self-hosted n8n, or a code-first agent framework fits best, plus a practical five-question framework.
Many AI pilots stall before reaching production. Five questions that reveal whether an AI initiative is operationally ready or still in experiment mode.
How small businesses can get started with AI on a small budget. Three concrete use cases, real costs, and common pitfalls from twelve practical projects.
Maintaining a quick-start, tutorial, video and tooltips in parallel is reality. How AI agents keep these multi-format strategies current and in sync.
Ollama, vLLM, Llama 3, Mistral: when does running LLMs locally actually pay off for mid-market companies? An honest look at hardware, cost, sovereignty.
LLM-generated documentation drafts look professional. Why that is precisely what undermines the review reflex, and which documentation practices push back.
SMEs build an AI-ready knowledge base with open-source tools (BookStack, Qdrant, Ollama). A concrete stack for GDPR-compliant maintenance and scale.
DITA has been an industry standard for complex documentation for decades. When it really pays off over Markdown and what hybrid pipelines look like.
How AI agents run our blog, competitor research and SEO audits in production. Workflows, the actual stack, and twelve months of lessons learned.
Knowledge bases rarely fail because of the tool, almost always because of ownership. Why AI lowers the maintenance load but does not solve the responsibility problem.
Only 37 percent of CIOs have full visibility into AI tool usage. Three telemetry sources, two weeks of effort, NIS-2 compatible — without a new vendor.
Sovereign Cloud promises data control without US reach. What does the term actually mean, which providers deliver, and when does a switch pay off?
Implementing NIS-2 technically: concrete tools for MFA, network segmentation, central logging, SIEM, and patch management for mid-market IT.
Autonomous AI agents introduce new risks. Learn a framework for threat modeling, scope analysis and incident response when agents misbehave in production.
The Omnibus deal did not postpone Art. 50(2). Three implementation paths, a 30/60/90-day plan and typical pitfalls for European mid-market companies.
GitLab CE vs GitHub, Plausible vs Google Analytics, Mattermost vs Slack: detailed TCO comparison and practical decision framework for mid-market teams.
The EU AI Act takes effect in stages. Learn about risk classes, documentation requirements, deadlines and a concrete checklist for enterprise AI deployment.
FinOps for mid-market companies: Reserved Instances, right-sizing and tagging cut cloud costs by 25 percent. Hands-on guide with code examples.
GPL, MIT, Apache 2.0, AGPL explained: Learn what each license requires and how to identify, properly manage, and prevent license risks in code.
NIS-2 compliance imposes new duties on mid-size companies: risk management, incident reporting, supply chain security. What you must do now.
Open source for SMEs: Infrastructure yes, ERP only with cost analysis. Realistic framework for deciding where open source works and where it doesn't pay off.
Llama, Mistral, Qwen are called open models. What separates Open Weights from Open Source and when self-hosting beats API usage in production.
What powers OpenDesk? A technical analysis of Germany's open-source workplace suite with component breakdown, maturity assessment and practical guidance.
How mid-size companies can build an AI strategy that delivers results. A field-tested 5-step approach with concrete use cases and timelines.
How mid-size teams adopt DevOps without over-engineering: first pipeline, deployment strategies, observability, and a phased rollout roadmap.
94% of enterprises worry about AI agent sprawl. How governance frameworks secure autonomous agents without blocking innovation and velocity.
Terraform and Pulumi compared head-to-head: state management, testing, multi-cloud, and modules. A decision guide for cloud engineering teams.
The Trivy supply chain attack compromised CI/CD pipelines worldwide. How it happened, how CanisterWorm spread through npm, and what teams should do now.
Cloud bills spiraling out of control? Five proven strategies help mid-sized companies cut cloud spending without sacrificing performance or velocity.
Microservices or monolith? Decision criteria, common pitfalls, and practical experience from real migration projects in mid-sized companies.
What sets DevSecOps apart from traditional DevOps? Shift-left security, SAST, SCA, DAST tooling, and concrete CI/CD pipeline examples.
How AI agents complement existing marketing tools and accelerate content processes from idea to publication. A practical guide with real-world examples.
Retrieval Augmented Generation makes internal company knowledge accessible to LLMs. Architectures, chunking strategies, and a hands-on Python example.
How enterprises put AI agents to productive use: from use case evaluation through proof of concept to scaled rollout. A practical guide for enterprise teams.
OpenClaw hit 60,000 GitHub stars in 72 hours. Five critical CVEs and uncontrolled enterprise adoption show: without governance, the hype is a liability.
Why a thoughtful cloud strategy matters more than provider choice. How companies avoid common pitfalls.
A pragmatic approach to modernizing legacy code without blocking day-to-day operations. With concrete methods and prioritization.
Our motivation for building an IT consultancy that works differently: pragmatic, technically deep, and at eye level.
No articles found.