Every page, one place.
Browse the full ShipReady site — the tool, stack checklists, blog posts, categories, tags, and legal pages.
The tool
Checklists by stack
Blog
- Blog index (all posts)
- Error Tracking with Sentry: From 'Users Are Complaining' to 'Already Fixed'Observability
- Rate Limiting in Production: The Most Underrated Security ControlSecurity
- DoS vs DDoS vs Decompression Bomb: A Developer's Field GuideSecurity
- The SRE Launch Checklist: SLOs, Error Budgets, and On-Call from Day OneObservability
- Blue-Green vs Canary Deployments: Which Should You Use?DevOps
- GDPR/CCPA for Developers: A No-Lawyer-Needed Pre-Launch ChecklistCompliance
- Circuit Breakers, Retries, and Idempotency: A Survival Guide for Production APIsReliability
- Backups Are Not a Disaster Recovery Plan — Until You've Tested a RestoreReliability
- JWT Best Practices: Short Expiry, Refresh Rotation, and Revocation Done RightAuth
- 12 Security Headers You Must Set Before Going to ProductionSecurity
- The Production Readiness Checklist Every Indie Hacker Should Run Before LaunchDevOps
- What Is a Zip Bomb? The 42KB File That Crashes Servers (DoS Explained)Security
Blog categories
- SecurityHeaders, injection, auth, dependencies, attacks.
- DevOpsCI/CD, deployments, infrastructure, shipping.
- ReliabilityRetries, circuit breakers, backups, DR, resilience.
- ComplianceGDPR, CCPA, privacy, data retention, legal.
- ObservabilitySLOs, error budgets, on-call, metrics, tracing.
- AuthJWT, sessions, OAuth, MFA, access control.
Blog tags
- #alerting2 posts
- #ddos2 posts
- #dos2 posts
- #abuse1 post
- #api1 post
- #backoff1 post
- #backups1 post
- #blue green1 post
- #brute force1 post
- #canary1 post
- #ccpa1 post
- #cdn1 post
- #checklist1 post
- #ci cd1 post
- #circuit breaker1 post
- #csp1 post
- #decompression1 post
- #decompression bomb1 post
- #deployments1 post
- #disaster recovery1 post
- #error budget1 post
- #error tracking1 post
- #file uploads1 post
- #gdpr1 post
- #headers1 post
- #hsts1 post
- #https1 post
- #idempotency1 post
- #indie1 post
- #jwt1 post
- #launch1 post
- #migrations1 post
- #oauth1 post
- #observability1 post
- #on call1 post
- #pii1 post
- #pre launch1 post
- #privacy1 post
- #rate limiting1 post
- #redis1 post
- #refresh tokens1 post
- #resilience1 post
- #restore1 post
- #retention1 post
- #retries1 post
- #rpo1 post
- #rto1 post
- #saas1 post
- #sentry1 post
- #sessions1 post
- #slo1 post
- #source maps1 post
- #sre1 post
- #tokens1 post
- #waf1 post
- #xss1 post
- #zip bomb1 post
Company & legal
The 12 checklist categories
- 01. SecurityThe non-negotiables. Get these wrong and everything else is moot.
- 02. Auth & Access ControlWho are you, what can you do, and for how long.
- 03. Data, Privacy & ComplianceTreat user data like it's your own. Because legally, kind of, it is.
- 04. TestingIf it's not tested, it's broken. You just don't know it yet.
- 05. Reliability & ResilienceThings will fail. Plan for it, don't panic about it.
- 06. Performance & ScalabilityFast today, faster tomorrow, survivable when you go viral.
- 07. Observability & OperationsYou can't fix what you can't see. Logs, metrics, traces, alerts.
- 08. CI/CD & DevOpsShip safely, ship often, ship reversibly.
- 09. Documentation & ArchitectureFuture you — and your team — will thank present you.
- 10. Accessibility & UXThe web is for everyone. Also: it's often legally required.
- 11. Business / LegalMoney, support, and not getting sued.
- 12. CostCloud bills spiral fast. Set guardrails before, not after.