Épisodes

  • 42% growth after dropping our entry-level plan

    42% growth after dropping our entry-level plan
    Oct 1 2026
    It’s embarrassing, but we made a classic mistake when designing the pricing model for our virus and malware scan API. The entry-level price was far too low. Find out how a simple trick led to 42% month-on-month growth, a lower churn rate and fewer support tickets. Additionally, find out how we replaced our newsletter provider, Kit, with a bespoke solution comprising SES, Lambda, Aurora DSQL and Step Functions. And if that’s not enough, we’ll also be sharing our struggles with tax compliance on the AWS Marketplace, as well as our thoughts on Aurora DSQL and a shift in the SaaS market.
    Afficher plus Afficher moins
    36 min
  • Less Alerts, More Impact: Stephen Kuenzli on Winning at AWS Security

    Less Alerts, More Impact: Stephen Kuenzli on Winning at AWS Security
    Apr 10 2026
    Stephen Kuenzli, founder of k9 Security, joins us to talk about his journey from AWS consultant to SaaS builder — and why IAM is still the hardest part of cloud security. We dig into practical advice for achieving least privilege, how to deal with the flood of security alerts from tools like AWS Security Hub and Wiz, and why your team's attention budget matters more than fixing every finding. Plus, Stephen plays a quick-fire round rating Security Hub controls as "critical" or "distraction."
    Afficher plus Afficher moins
    57 min
  • #096 AWS European Sovereign Cloud: Sovereignty or Just Marketing?

    #096 AWS European Sovereign Cloud: Sovereignty or Just Marketing?
    Mar 19 2026
    In this episode, Andreas introduces his long-time friend Thorsten Höger, with whom he shares a history going back to school and later working together on an AWS-powered online banking platform. Thorsten has spent over 10 years helping SMB customers in regulated industries build compliant AWS infrastructures, specializing in networking, security, Serverless, and CDK. He talks about his current consulting work and his upcoming product Deploymon. A major topic is the AWS European Sovereign Cloud (EUSC), where Andreas shares a field report and the hosts debate whether EUSC is genuine sovereignty or just "sovereign washing" given concerns around the US Cloud Act. They also discuss how small businesses can benefit from AI tools. Andreas uses AI to review blog posts, find bugs, and update dependencies, while Thorsten relies on it for customer offers, software development, planning, and research.
    Afficher plus Afficher moins
    48 min
  • #095 AWS costs are like fingernails ...

    #095 AWS costs are like fingernails ...
    Aug 25 2025
    Michael shares a trick to reduce AWS Config costs for volatile workloads. Andreas talks about EC2 instance families and their availability in the different AWS regions. On top of that, the Wittig brothers share insights into their work and business.
    Afficher plus Afficher moins
    37 min
  • #094 It's the small improvements that make us smile

    #094 It's the small improvements that make us smile
    Jul 24 2025
    This episode covers a month of record growth and strategic shifts, celebrating new customer wins and diving into our marketing strategies. We share project updates, including bucketAV's multi-engine scan, and highlight key AWS topics: simplified AMI deletion and generating SDKs for API Gateway. Tune in for insights, wins, and fails!
    Afficher plus Afficher moins
    33 min
  • #093 Getting ISO 27001 certified as a 2-person company

    #093 Getting ISO 27001 certified as a 2-person company
    Apr 10 2025
    Getting ISO 27001 certified is not just boring paperwork. We discuss what we've learned and how we improved information security for our customers. Also, Michael shares how to run Amazon Linux 2023 on small machines like t3.nano.
    Afficher plus Afficher moins
    35 min
  • #092 The Cloud Control API came a long way

    #092 The Cloud Control API came a long way
    Oct 11 2024
    Learn how to work around missing resources in Terraform by using the Cloud Control API and the awscc Terraform provider. Also, Michael shares what he learned from migrating a workload from Amazon Linux 2 to Amazon Linux 2023. Last but not least, Andreas reviews the fwd:cloudsec Europe conference. ☁️ Cloud Control API + Terraform awscc ☁️ Migrating to Amazon Linux 2023 ☁️ fwd:cloudsec Europe in Review
    Afficher plus Afficher moins
    36 min
  • #091 Cloudflare R2 Same Same But Different

    #091 Cloudflare R2 Same Same But Different
    Jul 25 2024
    Look behind the curtains of releasing two new products: bucketAV for Cloudflare R2 and attachmentAV Virus and Malware Scan API. Andreas and Michael discuss what they learned about Cloudflare, S3, and API Gateway. Besides that, the brothers rant about new security controls added to Security Hub recently.
    Afficher plus Afficher moins
    34 min