惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
B
Blog RSS Feed
宝玉的分享
宝玉的分享
腾讯CDC
博客园_首页
T
Tailwind CSS Blog
月光博客
月光博客
博客园 - 司徒正美
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
M
MIT News - Artificial intelligence
A
About on SuperTechFans
云风的 BLOG
云风的 BLOG
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
有赞技术团队
有赞技术团队
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
大猫的无限游戏
大猫的无限游戏
MongoDB | Blog
MongoDB | Blog
博客园 - 聂微东
V
Visual Studio Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
SecWiki News
SecWiki News
美团技术团队
P
Privacy International News Feed
H
Help Net Security
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Microsoft Security Blog
Microsoft Security Blog
Know Your Adversary
Know Your Adversary
Y
Y Combinator Blog
D
DataBreaches.Net
Project Zero
Project Zero
T
The Blog of Author Tim Ferriss
Cyberwarzone
Cyberwarzone
C
Cybersecurity and Infrastructure Security Agency CISA
C
Cisco Blogs
S
Schneier on Security
G
GRAHAM CLULEY
博客园 - 三生石上(FineUI控件)
Cisco Talos Blog
Cisco Talos Blog
小众软件
小众软件
Forbes - Security
Forbes - Security
D
Docker
T
Tenable Blog
S
Secure Thoughts
雷峰网
雷峰网
S
Security @ Cisco Blogs
T
The Exploit Database - CXSecurity.com
The Cloudflare Blog
博客园 - 【当耐特】
Spread Privacy
Spread Privacy
阮一峰的网络日志
阮一峰的网络日志

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Build vs Buy: The Expensive Engineering Decision Less Talked About
Venkatesan Ramar · 2026-06-15 · via DEV Community

Back in 2015, I joined a product company whose platform had been evolving since late 90's. Coming from a startup background, I was overwhelmed by the number of in-house tools, and platforms that existed alongside the core product.

Over time and after leaving the organization in 2023 — I began to appreciate the trade-offs behind those build decisions. Some became strategic assets, while some introduced years of ownership and maintenance overhead.

This article shares some of the lessons I learned about one of the most important engineering decisions teams make: build or buy.


Over the years, I've come to believe that some of the most expensive engineering mistakes have very little to do with technology itself.

They start with a much simpler question:

Should we build this ourselves?
Or should we buy it?

At first glance, the answer often feels obvious. A team identifies a need.
Maybe it's:

  • authentication,
  • workflow orchestration,
  • internal developer portals,
  • database migration tool, or
  • some internal framework.

Someone says:

"We can build this in a few weeks."

Often, they're right. The first version usually isn't that difficult. The real challenge comes later. Because every build decision eventually becomes an ownership decision.

And ownership tends to last much longer than implementation.

Over the years, I've seen teams successfully build internal platforms that became strategic assets. I've also seen teams accidentally become software vendors to themselves.

The interesting question isn't whether we can build something. Modern engineering teams can build almost anything.

The more important question is:

Do we want to own it for the next five years?


1. Why This Decision Matters

A decade ago, many engineering teams had fewer choices. But today, the situation is completely different.

Almost every technical capability has mature products available.

Say, you need:

  • authentication?
  • observability?
  • workflow orchestration?
  • developer portals?

There is probably a vendor already solving that problem, that's what makes the decision difficult.

Because modern engineering teams are no longer choosing between having a capability, or not having one.

They're choosing between:

  • building it,
  • extending it,
  • buying it, or
  • integrating it.

The number of options has increased. At the same time, engineering capacity remains limited. Teams hit decision paralysis.

Every sprint spent building internal tooling is a sprint not spent building customer-facing capabilities.

This trade-off becomes increasingly important as organizations grow. Especially when platform investments start competing with product investments.


2. The Hidden Cost Teams Ignore

One pattern I've noticed is that teams are usually good at estimating development effort. They're much less effective at estimating ownership effort.

A discussion might sound like this:

This looks straightforward. We can probably build it in three weeks.

Probably they're right. The problem is that the three-week estimate usually covers only Version 1.

It rarely includes:

  • upgrades,
  • support,
  • operational maintenance,
  • bug fixes,
  • security reviews,
  • documentation,
  • on-boarding,
  • scalability improvements, and
  • future requirements.

Those costs appear gradually which makes them easy to underestimate.

  • Building Is Easy. Owning Is Hard

Many internal systems begin life as small engineering utilities. Gradually adoption grows. Soon other teams depend on them.

Now expectations change.

The platform suddenly needs:

  • up-time guarantees,
  • backward compatibility,
  • support processes, and
  • clear ownership.

What started as an engineering project slowly becomes a product except now the customers are internal teams.

I've seen this happen with:

  • internal frameworks,
  • workflow engines,
  • authentication services, and
  • developer portals.

The implementation wasn't the difficult part but the long-term ownership was.

  • The Internal SaaS Trap

One of the most interesting things about platform engineering is that organizations sometimes become software vendors without realizing it.

Imagine a team builds an internal feature flag platform.

Version 1.0 supports simple enable/disable toggles. Seems pretty straightforward.

Then adopted teams raise feature requests like percentage roll-outs, audit logs, experimentation, approval workflows.

Now the platform team is effectively running a software product. Except instead of external customers, they're supporting internal engineering teams.

The complexity didn't disappear. It simply became your responsibility.

  • Opportunity Cost Is Real

This is probably the most overlooked factor in build-versus-buy discussions.

Suppose five engineers spend six months building an internal platform.

The direct cost is obvious but another question is often ignored:

What didn't get built during those six months?

Perhaps:

  • product features were delayed,
  • customer requests remained unresolved,
  • roadmap commitments slipped.

These costs rarely appear in dashboards. Yet they often have a larger business impact than infrastructure costs.


3. Why Engineering Teams Choose To Build

Despite the risks, engineering teams continue to build internal solutions. There are good reasons for that, not every build decision is a mistake.

Some become enormous competitive advantages.

The challenge is understanding why we are choosing to build in the first place.

  • Engineers Like Solving Problems

This shouldn't surprise anyone.

Most engineers enjoy creating systems, and building software feels productive and empowering. It provides a level of control that third-party products cannot. When requirements are unique, building can absolutely make sense.

The problem appears when technical enthusiasm replaces strategic evaluation.

Just because something is technically interesting doesn't automatically mean it should be owned long-term.

  • Vendor Skepticism

Many teams have legitimate concerns about vendors.

Questions such as:

  • What if pricing changes?
  • What if the company gets acquired?
  • What if we're locked in?
  • What if customization becomes difficult?

These concerns are real. Sometimes they justify building.

But I've also seen teams dramatically overestimate vendor risks while underestimating ownership risks.

Both sides deserve equal scrutiny.

  • The "It Looks Simple" Fallacy

Some capabilities appear deceptively simple.

Authentication is a classic example.

At first glance:

  • users log in,
  • users log out,
  • passwords are stored.

Simple, until requirements expand:

  • OAuth
  • SAML
  • MFA
  • SSO
  • compliance
  • account recovery
  • security reviews

Suddenly the original problem looks very different.

Version 1 is usually easy. Version 10 is where the complexity appears.


4. Where Companies Successfully Build

It might sound like buying is always the safer option, No. Many of the most successful technology companies built substantial internal platforms.

The difference is that they usually built capabilities closely tied to their competitive advantage.

Build What Makes You Different

One repeated pattern among successful engineering organizations is that they build things that are core to their business. Not things that are merely useful.

This distinction matters.

  • Netflix Didn't Win By Building Authentication

Netflix became successful because of:

  • streaming infrastructure,
  • recommendation systems,
  • content delivery,
  • personalization.

Those capabilities directly influenced the business.

Investing heavily in them made strategic sense. Authentication was necessary. Recommendation systems were differentiating.

The difference is important.

  • Uber Didn't Buy Dispatching

Dispatching is central to Uber's business.

The way drivers and riders are matched directly affects customer experience, efficiency, profitability.

That capability is core business logic.

Owning it provides competitive advantage. Buying it would have limited differentiation.

  • LinkedIn Built Kafka

Kafka began as an internal project at LinkedIn to solve large-scale event streaming challenges. At the time, existing messaging systems struggled to handle the volume, durability, and scalability requirements of LinkedIn's growing platform.

Building Kafka made sense because reliable event streaming was becoming a foundational capability for the business. What started as an internal solution eventually evolved into one of the most widely adopted distributed systems in the industry.

The lesson isn't that every company should build its own messaging platform. The lesson is that LinkedIn built a capability that directly addressed a strategic problem at its scale.

  • Google Built Kubernetes

Kubernetes originated from Google's experience running massive distributed systems over many years. Google had already developed internal container orchestration platforms and operational practices long before containers became mainstream.

Rather than adapting existing solutions, Google built Kubernetes based on lessons learned from operating infrastructure at enormous scale.

For most organizations, building a container orchestration platform would be a terrible investment. For Google, infrastructure management was a core competency and strategic advantage.

The takeaway is simple:

Build when the capability is closely tied to your unique scale, business model, or competitive advantage.


The Common Pattern

The most successful build decisions usually share a characteristic:

The capability directly contributes to competitive advantage.

When that's true, ownership often makes sense. When it doesn't, the equation changes dramatically.


5. The Platform Engineering Perspective

Over the last few years, platform engineering has become a major focus area for many organizations. The goal is to make developers more productive.

Provide:

  • self-service capabilities,
  • deployment automation,
  • observability,
  • infrastructure provisioning, and
  • standardized workflows.

The challenge is deciding how much of that platform should be built internally.

This is where build-versus-buy decisions become particularly interesting.

  • The Internal Developer Platform Dilemma

Imagine a growing engineering organization.

Developers complain about:

  • inconsistent environments,
  • deployment complexity,
  • on-boarding difficulties.

The organization decides to build an Internal Developer Platform. The initial vision sounds reasonable.

A central portal where developers can create services, access documentation, provision resources, monitor deployments. But soon new requirements emerge:

  • RBAC
  • audit logs
  • integrations
  • workflow automation
  • plugin ecosystems

Before long, the platform itself becomes a product.

  • The Backstage Lesson

Many organizations faced this exact challenge.

Instead of building an entire developer portal from scratch, they adopted existing platforms and customized them.

This approach is interesting because it reflects a broader engineering principle:

Buy the foundation. Build the differentiation.

The organization still owns the developer experience. It avoids spending years recreating foundational capabilities.

  • Build The Last 20%

One of the most useful heuristics I've encountered is this:

Buy the first 80%. Build the last 20%.

The first 80% usually consists of commodity functionality. The last 20% often contains:

  • business-specific workflows,
  • domain integrations,
  • unique operational requirements.

That final layer is often where competitive advantage exists. It's usually a better place to invest engineering effort.


6. A Practical Decision Framework

Over time, I've found that build-versus-buy discussions become much easier when evaluated through a consistent framework.

Rather than debating technologies, the conversation shifts toward business and ownership.

Here are some of the questions help to make decision.

Question 1: Does This Differentiate The Business?

This is one of the most important question.

If the capability disappeared tomorrow, would customers notice?
Would it impact the company's competitive position?

For example:

Building recommendation engines, pricing algorithms, matching engines, or domain-specific workflows often creates differentiation.

The closer a capability is to competitive advantage, the stronger the case for building.

Question 2: Do We Want To Own This In Three Years?

Most build decisions focus on implementation.
Few focus on ownership.

A better question is:

Will we still want to maintain this three years from now?

Ownership includes:

  • upgrades,
  • security,
  • operational support,
  • bug fixes,
  • documentation,
  • compliance,
  • training.

If the answer feels uncomfortable, that is valuable information.

Question 3: Can We Support It Operationally?

Every system eventually enters production and production changes everything.

A build decision also means committing to on-call support, incident response, monitoring, maintenance, and/or disaster recovery.

The engineering effort doesn't end when the code is deployed. In many cases, that's where the real work begins.

Question 4: Is The Market Mature?

Sometimes buying is difficult because the market is immature. The available products may not solve the problem adequately.

But in mature categories observability, authentication, feature management and workflow orchestration vendors have often spent years refining their solutions.

Ignoring that accumulated expertise can be expensive.

Question 5: What Is The Opportunity Cost?

This question is frequently overlooked.

Suppose a team spends six engineers, six months, building an internal capability.

The direct cost is obvious but opportunity cost is harder to measure.

What customer-facing work was delayed?
What revenue-generating features were postponed?
What strategic initiatives slowed down?

Sometimes the most expensive cost is the one that never appears in a budget report.


7. The Hybrid Model Usually Wins

One thing I've noticed is that the engineering organizations rarely choose a pure build or pure buy strategy.

Instead, they combine both.

  • Buy The Foundation

Commodity capabilities are often purchased or adopted. These tools solve common problems that many organizations face.

Rebuilding them rarely creates differentiation.

  • Build Business-Specific Layers

The organization's engineering effort is then focused on:

  • business workflows,
  • domain models,
  • operational processes,
  • customer-facing capabilities,
  • proprietary integrations.

This is where engineering investment usually generates the highest return.

  • Why This Works

The hybrid model captures the advantages of both approaches.

Organizations avoid:

  • rebuilding mature capabilities,
  • unnecessary ownership burden,
  • platform reinvention.

At the same time, they retain flexibility where it matters most.


8. Common Mistakes Teams Make

Most build-versus-buy failures follow surprisingly similar patterns. The technology might change but the mistakes rarely do.

  • Underestimating Maintenance

Teams usually estimate 'Initial Build Cost' while forgetting support, upgrades, security and operations. Over a multi-year horizon, ownership often exceeds implementation cost.

  • Rebuilding Commodity Software

This is probably the most common mistake.

Engineering teams are highly capable. Given enough time, they can rebuild almost anything. The question is whether they should.

  • Optimizing For Engineering Preference

This is a subtle trap.

Engineers naturally enjoy building systems. But engineering satisfaction and business value are not always aligned.

A technically elegant solution can still be a poor investment. The best technical decision is not always the best business decision.

  • Assuming Vendors Never Improve

Many build decisions are based on current vendor limitations but products evolve. Markets mature gradually and capabilities improve. A solution that looked inadequate two years ago may look very different today.

Periodic re-evaluation is important.


9. AI Is Changing The Economics

It's impossible to discuss build-versus-buy decisions today without mentioning AI. AI-assisted development has significantly reduced implementation effort. Many teams can now prototype internal tools faster than ever.

Capabilities that once required months of development can sometimes be assembled in days.

  • Building Is Cheaper Than Before

AI helps with:

  • scaffolding
  • code generation
  • testing
  • documentation
  • integration

The barrier to building has unquestionably decreased.

  • Ownership Has Not Become Cheaper

This is the important distinction.

AI can help create software. It does not eliminate:

  • operational support
  • on-call responsibility
  • compliance
  • security
  • upgrades
  • platform ownership

The cost of creation is decreasing. The cost of ownership remains surprisingly stable. That means ownership becomes even more important in future build-versus-buy discussions.


10. Final Thoughts

One of the biggest lessons I've learned is that build-versus-buy decisions are rarely technology decisions.

They're ownership decisions.

Modern engineering teams can build almost anything. Open-source ecosystems are thriving. Cloud platforms provide powerful building blocks.

AI accelerates development even further.

The question is no longer: Can we build it?
The more important question is: Do we want to own it?

Because every build decision creates a long-term commitment. A commitment to maintenance, operations, support, upgrades, and continuous evolution.

Sometimes that commitment is absolutely worth making especially when the capability creates competitive advantage. Other times, the smarter decision is to leverage what already exists and focus engineering effort where it matters most.

In the end, the most successful engineering organizations aren't the ones that build everything. They're the ones that understand what is truly worth owning.


Assisted ChatGPT to rephrase.