Field notes
Practical writing on performance, security, and automation — the same thinking we apply to client work.
cybersecurity
VAPT Checklist for Indian Startups in 2026
The 15-point VAPT checklist we run on every client site before launch — and why DPDPA 2023 makes it non-optional for Indian SaaS.
Jun 20, 20268 min read
performanceHow We Hit Sub-2-Second Loads on Every Build
The exact Next.js rendering, caching, and image strategy we use to keep LCP under 2.5s without sacrificing rich design.
Jun 12, 20266 min read
cybersecurityWe Secured Our Own Site Before Yours: The Sitelytc Self-VAPT
Before we launched sitelytc.com, we ran the same VAPT we sell — here's every check and every fix, in the open.
Jun 5, 20267 min read