Notes from real projects
Not theory. These are the real decisions and fixes I ran into while building.
Is Stack Overflow Dead? The End of an Era in Numbers
Monthly questions on Stack Overflow fell from a 2014 peak of 207,189 to 1,346 in 2026, a collapse of more than 99%. Does that really mean the site is dead, or has the business model changed? The whole story, from Stack Overflow's history to today, with real data.
• 9 min read
Writing Secure Code with AI Agents: Notes from a Real Project
AI agents like Claude Code speed up writing code, but they don't do the security thinking for you. Here are the real security decisions I made while building the AI Check feature: SSRF protection, zip-bomb defence, rate limiting and more.
• 7 min read
Where I Use AI Coding Assistants in Real Projects, and Where I Don't
Over the past year AI coding assistants have moved to the centre of development. Here's where I use them, and where I don't, in live projects such as PlusTurk and Ayda.
• 2 min read
Taking a SaaS from MVP to Production: My Checklist and Lessons
The checklist I used while turning PlusTurk from a tool built for one client into a multi-tenant platform: data isolation, roles, migrations, backups, observability, queues and data protection.
• 6 min read
5 Things I Always Check in a Payment Integration
Five rules I follow in iyzico, PayTR, Stripe and Nestpay integrations: keep card data off your server, verify callback signatures, make operations idempotent, calculate amounts on the server and protect API keys.
• 6 min read
Zero Trust in SaaS Applications: From Theory to Practice
Zero Trust is often used like a marketing term. Here's how I turned it into concrete steps while building role-based permissions and API security in PlusTurk.
• 2 min read
How to Set Up Automatic Updates in a Desktop App
Code signing, an update server, staged rollouts and recovering from a bad release in an Electron app for Windows: the update flow I built for Nerdesin, step by step.
• 6 min read
Real Performance Gains with Next.js Server Components
In theory Server Components make things faster, but used the wrong way they can do the opposite. I explain how to use them well, with real examples from this site's own architecture.
• 2 min read
5 Common Mistakes in Multi-Tenant SaaS Architecture
The mistakes I made and saw while turning PlusTurk from a tool built for one client into a multi-tenant platform.
• 2 min read