u/DCGMechanics

I work as a DevOps engineer at an AI startup, and we are running into a new problem.

With tools like Cursor and Claude Code, more people across the company are building small internal apps on their own — not just developers, but also folks from marketing, product, and sales. These apps often get deployed quickly on platforms like Vercel, Cloudflare Pages, or Netlify.

The concern is that this can become a security and governance mess very fast.

Right now, I am trying to figure out a practical way to make sure:

- Every internal app is behind authentication from day one

- Apps are hosted under the company’s domain only, not random public preview URLs

- We can discover if someone has deployed an internal app outside approved company accounts

- Sensitive internal data is not exposed through a personally created Vercel/Cloudflare/Netlify project

- Security controls do not kill the speed and productivity that made these tools useful in the first place

For “normal” dev-built apps, we usually put them behind SSO, auth gateways, or internal access controls. But that is harder when apps are being created outside the engineering team by non-dev teams.

I would like to know what has actually worked in practice, especially in environments where people are moving fast and experimenting with AI-assisted development.

For people living alone in Gurgaon and doing well financially, I am curious about the routines, hobbies, and little things that keep life exciting. What do you do for fun after work or on weekends? What makes you feel alive, connected, or genuinely happy?

Asking for a friend 👀

I am curious about the routines, hobbies, and little things that keep life exciting when you live alone and are doing well financially. What do you do for fun after work or on weekends? What makes you feel alive, connected, or genuinely happy?