AI features create a pricing nightmare because some customers barely touch them while others 10x their usage overnight. Kyle Hart built Toast's pricing playbook from $0 to $100M ARR and says customers claim they want usage-based pricing but actually hate the variability. His approach is similar to how you'd test a new feature. First, audit what you have - which features do reps discount most? What are customers actually using? Then, form 2-3 mock pricing pages to test in real sales calls. Slowly build your conviction over time before making the swap.
Most teams know what good product development looks like, but can't figure out why they're not doing it - the answer isn't what to add, it's what to stop. The author studied high-performing teams and found they create space for the right behaviors by killing the wrong ones. They weave context into every discussion instead of jumping straight to solutions and pretending they know everything. They ship meaningful progress weekly instead of getting stuck in analysis paralysis for months. They question year-old commitments instead of blindly executing plans made when everything was different. For your next product planning session, try asking, “What would we need to stop doing to make room for what matters?”
OpenVPN is featuring startups that use their business VPN on the OpenVPN website [12]. It's a great chance to get a link from a high-authority domain, expose your brand to 3M+ monthly visitors, and show that you care about data security. All you need to do: Sign up
Schematic is a modern monetization platform for SaaS that powers usage-based billing, customer portals, and pricing flows to help teams ship pricing faster and grow revenue.
Den is a multiplayer AI agent builder that centralizes your chats, docs, and agents so humans and AI can collaborate and automate work in one shared space.
AI capabilities have run so far ahead of product design that we could stop all model development today and still have years of work left. Everyone's bundling everything into chat apps, but chat sucks for depth, workflow, and longitudinal data. There's a reason AI code generators are IDEs, not text boxes. We'll see the same unbundling that happened with Craigslist - horizontal chat platforms will disaggregate into deeper, purpose-built apps. Any guidebook or professional guide is a candidate for standalone AI apps that go beyond chat. The optimal product has yet to be discovered, but chat won't cut it.
While everyone waits for the IPO window to reopen, secondaries quietly hit $152 billion in 2024, up 39% year over year. What started as a liquidity hack is now essential infrastructure. LPs tired of waiting can sell their fund stakes. Founders can give employees partial cash-outs without forcing an IPO. GPs spin their best companies into continuation vehicles to hold them longer while still returning cash. The numbers are wild. VC secondaries jumped from 16% of deal activity in 2020 to 29% in 2024. Secondaries aren't a workaround anymore. They're how venture capital actually works when traditional exits take over a decade.
Cognition's CEO, Scott Wu, offered buyouts to Windsurf employees after acquiring the company, emphasizing a demanding work culture with 80+ hour workweeks. He clarified that those rejecting the buyout must commit to an all-consuming environment. Wu accelerated share vesting schedules and laid off 30 staff, leaving 200 workers to decide on the buyout.
The most important framework in startups is the triangle between burn, growth, and valuation - constantly calculating what you can invest to grow at rates that justify your next raise.
The corporate firewall is a relic of bygone times. With employees working from coffee shops, airports, and home networks, traditional perimeter security leaves your endpoints exposed to unmanaged devices and compromised networks.
Complete source code for Android banking Trojan ERMAC 3.0 leaked from an open directory, revealing a Malware as a Service (MaaS) infrastructure targeting over 700 banking, shopping, and cryptocurrency apps. The leak exposed critical security flaws, including hardcoded JWT secrets, static admin tokens, and default credentials in the malware's PHP/Laravel backend and React frontend. ERMAC 3.0 features enhanced form injection methods, AES-CBC encrypted communications, and a Kotlin-based Android backdoor that avoids infecting devices in countries in the Commonwealth of Independent States (CIS).
Plex has reached out to some of its users and urged them to update their Plex Media Server installation due to a recently patched security vulnerability. Plex has not assigned a CVE to the vulnerability or released details yet, but has stated that it was discovered via the Plex bug bounty program.
The Warlock ransomware gang targeted the UK telecommunications firm Colt, causing disruptions to its online and voice services. In response, Colt took its systems offline, resulting in service interruptions, and is currently in the process of restoring operations. The attackers have claimed to have stolen sensitive data, potentially exploiting a flaw in Microsoft SharePoint.
Website typo protection is an automatically enabled, typosquatting protection in Microsoft Edge. Upon typing a misspelling of a common domain in Edge, the user will get a notification of the potential typo, and the address bar will include a “Not Secure” badge (similar to when visiting a website without HTTPS). This post provides details for configuring protection if it isn't enabled and includes screenshots of the notifications.
In preparation for the creation of a Cryptographically Relevant Quantum Computer (CRQC), NIST selected three post-quantum (PQ) cryptographic standards. This post details how to test hybrid TLS, where classical keys are used in combination with PQ ML-KEM keys, in Python on AWS. boto3, the Python SDK for AWS, relies upon the Python `ssl` module, which in turn relies on OpenSSL, which added support for hybrid TLS in version 3.5.
This article explains how to achieve end-to-end encryption of credit card data in Kafka without changing any application code, using the Kroxylicious proxy. This solution simplifies PCI compliance and data protection by encrypting messages transparently, minimizing disruption to existing systems and workflows.
An eBPF-based Linux kernel framework disrupts DNS-based C2 channels and tunneling through high-speed deep packet inspection in the kernel stack. It features a userspace deep learning model for detecting obfuscated DNS payloads, dynamic blacklisting, and real-time threat intelligence. It also provides kernel-level DNS exfiltration prevention with access control and threat event streaming.
Approv provides runtime protections to secure devices, apps, APIs, and the channels used to communicate with the cloud, as well as real-time threat analytics to deliver visibility into mobile application security.
Russian threat actor EncryptHub is exploiting patched Windows vulnerability CVE-2025-26633 via social engineering and malicious MSC files to deploy Fickle Stealer malware and backdoors. The group uses fake IT support requests, a compromised Brave Support platform, and fake videoconferencing to gain control. Attacks feature encrypted C2, persistence, and evasion techniques like fake browser traffic.
State Department documents with sensitive details about the August 15 Trump-Putin summit were left in an Alaskan hotel's printer. The eight pages revealed meeting locations, times, and phone numbers of U.S. government employees involved in the summit at Joint Base Elmendorf-Richardson. Guests found the papers, photographed them, and reported the breach.
Vulnerabilities in home solar inverters pose cybersecurity risks, potentially exposing the power grid to attacks. Lax industry security, regulatory gaps, and widespread adoption have made these devices a national concern, highlighting the complexity of securing modern, distributed energy networks
A critical remote code execution vulnerability (CVSS 10) in Cisco's Firewall Management Center via RADIUS permits unauthenticated remote code execution when RADIUS authentication is enabled - apply patches immediately.
Italian authorities confirm a major breach affecting at least 10 hotels with nearly 100,000 records for sale, including high-resolution passport and ID scans stolen via a booking system breach between June and August.
Anthropic has updated its paid Claude Opus 4 and 4.1 AI models to terminate conversations if harm or abuse is detected, a feature most users will rarely encounter.
Instagram users routinely underestimate how many ads appear in their feeds as platforms are designing promotions to blend with organic posts. In tests with 152 participants, nearly one-third of posts were ads, yet most failed to notice the volume. Users engaged with the content at rates similar to organic posts when advertising cues like “Buy Now” buttons or logos were subtle. The findings show how banner blindness has evolved into seamless ad absorption.
Publishers that built affiliate revenue on SEO face mounting pressure as search platforms shift toward zero-click results and lower commission structures. Amazon now pays creators baseline rates of 10-15% while publishers receive only 2-3%, widening the economic gap. As a result, marketers are allocating incremental budgets to creators who deliver higher engagement and measurable sales impact.
Instead of starting with a blog, begin with LinkedIn posts to leverage built-in distribution and test what resonates with your target audience. Publish 30 posts over a month, identify the top 3 that connect, expand them into 800 to 1200-word newsletters, and then scale the best ones into longer blog posts. This approach validates ideas early and ensures content resonates before investing in larger formats.
Clay uses customer hackathons as a growth engine. It runs 20-30 per quarter, driving expansions up to 5X and viral LinkedIn content. Targeting customers 3-6 months in, the sessions help build advanced workflows with real business impact. They generate authentic video content that fuels inbound demand and retention, while also serving as R&D labs where engineers test features, creating a flywheel of adoption, marketing, and discovery.
A good benchmark for landing page performance is an overall median conversion rate of 6.6%, though results depend heavily on industry. Ecommerce and SaaS pages typically convert around 4% at the median, but strong campaigns can achieve nearly 3X that rate. Professional services and financial services outperform the average with medians above 6% and 8% respectively, while the travel and hospitality sector can climb past 15% at the high end. Entertainment campaigns stand out with average conversion rates above 12%.
Brainlabs tested adding Broadcaster YouTube content to a Unified CTV campaign with Netflix and YouTube during the Women's Euros. The campaign reached 1.4M additional people without extra budget, achieving 142% of planned reach at the same cost. It drove a 77% lift in product search and 61% in brand search, capturing engagement spikes after key matches. Brand-safe content like highlights and interviews extended audience attention, showing that combining Broadcaster YouTube with Unified CTV improves reach, frequency, and performance in a fragmented market.
To understand your buyers, focus on why they purchase, what solution they want, and how their organization makes decisions. Ask about motivations, desired outcomes, and required features. Also consider approval steps, budget, timing, and compliance needs. Together, these insights give a clear view of the buying journey and help avoid vague assumptions.
Selling on online marketplaces is a cost effective way for small or new brands to acquire customers and drive direct website sales. Research found that every 71 sales on a marketplace led to one customer switching to the brand's website. Customer acquisition costs were lower on marketplaces compared to owned websites. Brands can use marketplaces to gain visibility and then encourage repeat buyers to purchase directly by offering unique products, benefits, or promotions on their own sites.
Bugs sneak out when less than 80% of user flows are tested before shipping. However, getting that kind of coverage (and staying there) is hard and pricey for any team.
In TypeScript, logical expressions are of type boolean, with values true or false. The Lean language, on the other hand, treats logical statements like "2 + 2 = 4" as a distinct value of type Prop (proposition). This allows Lean to have "typed truthfulness," where facts are established and safely passed around a program.
Marginalia Search improved its index performance by rewriting data structures to better use modern hardware (NVMe SSDs). The redesign involves a deterministic block-based skip list replacing B-trees and utilizing direct-mode reads, which surprisingly revealed that larger block sizes increase read speeds by a lot on NVMe SSDs.
The Qwen3-Embedding-0.6B model can be used to embed millions of text documents, with near-100% GPU utilization. The process involves reading documents from S3, chunking them into sentences using spaCy, generating embeddings with Qwen3, and writing results to turbopuffer.