P.01Device Code Phishing Is Beating MFA: EvilTokens
EvilTokens abuses OAuth's device code flow, so it needs no fake login page at all. How the attack runs, and the Conditional Access policy that stops it.
Tag
12 articles tagged #SaaS.
P.01EvilTokens abuses OAuth's device code flow, so it needs no fake login page at all. How the attack runs, and the Conditional Access policy that stops it.
P.02Microsoft mapped a year of ShinyHunters activity to three paths into Salesforce, and the most common starts with a phone call. How the OAuth trick works.
PLG is not a marketing strategy. It's an architectural decision about where conversion happens. Here's what it looks like in practice and which patterns actually move revenue.
Row Level Security moves data isolation into the database where it belongs. Here's how to set it up for a multi-tenant SaaS, handle common edge cases, and avoid the traps that break it.
A practical comparison of PostHog, Amplitude, and Mixpanel for SaaS teams in 2026: pricing, self-hosting, event tracking, and what metrics matter.
Building SaaS billing on Stripe means handling subscription plans, the Meter API for usage-based pricing, webhook reliability, and the Customer Portal.
PostHog, Mixpanel, and Amplitude serve different primary users: engineers, product managers, and growth teams. Here is how to pick the right one.
Stripe's API now covers far more than checkout. This breaks down which Stripe products agencies actually need, which are overkill, and where teams get burned.
Seat-based pricing rewards headcount, usage-based rewards consumption, hybrids blend both. Here's how each works and how to pick the right SaaS pricing model.
Every SaaS team eventually faces the multi-tenancy decision. The wrong choice creates migration pain later. Here's how to think through database-per-tenant, schema-per-tenant, and row-level security based on what your product actually needs.
Developer tool UIs have converged into a boring monoculture. Here is why it happened, the anti-patterns killing your UX, and how to design dashboards developers actually love.
Anthropic's AI legal plugin for Claude Cowork erased $285 billion in software stock value in hours, as traders priced in AI's threat to SaaS.