Published June 17, 2026 by gyorgy
The cloud the serious companies use is closer than you think.
You can build almost anything now. You describe what you want, an agent writes it, and a few minutes later there is a working app on your screen. "That part is largely solved." The gate that used to keep most people out of building software is largely gone.
Then there is a second gate, and the tools that nailed the first one drop you right at its edge. Building the thing and shipping the thing are different problems. Your app runs on your laptop. Maybe a toy host will take a frontend. But the moment you want a real backend, a database or three, something that holds up when more than one person shows up, on infrastructure you actually own, the weekend project stalls. That is the cliff.
The gate has always been made of knowledge that was hard to get. Cloud accounts, roles and permissions, networking, the difference between a thing that works and a thing that works securely. Knowing one of those does not mean you know the others. You cannot really practice it without a real thing to build for, and the big providers sat behind all of it. You could see them. You could not get in without a pile of knowledge that has nothing to do with your idea.
That gate is starting to come down.
The part the critics are right about
People who ship by prompting tend to ship things that are not safe. The app works in the demo and falls over in the real world. The secrets are in the wrong place. The setup is one good day away from a bad one. "You cannot vibe your way to a secure production deployment" has been a fair thing to say.
Fair, because the person shipping had to assemble all the professional parts themselves, and could not tell the agent to build what they could not picture. Left to improvise, the agent builds something that looks finished and might not be. The problem was never the person. It was that the safe, standard way to deploy was something you had to already understand to get.
What changes
So change that. Put the secure setup underneath the app by default, instead of asking the person to assemble it.
That is what tsdevstack does. tsdevstack is free and open source. You build your services in standard frameworks, and it generates the production setup around them: a CDN and WAF at the edge, a load balancer that terminates TLS, a Kong gateway behind it routing every request, your services on a private network nothing outside the gateway can reach, secrets in your cloud's managed secret store instead of an env file, the database, the CI, the deploy. As Terraform that lives in your repo and runs in your own cloud account. No platform in the middle, nothing to lock into, nothing to pay but your own cloud bill, through your own account.
You own all of it. And none of it is the part you have to know how to build. Not because vibe coders learned security overnight, but because the part under them is no longer the flimsy part.
Your agent already knows the rails
Here is the part nothing else gives you. When the agent scaffolds your project, it wires itself to tsdevstack directly. From then on it understands the whole system: every command, the structure, where the secrets go, how the routing is wired. So when you ask it for help, it is not improvising infrastructure it half-understands and quietly getting it wrong. It is operating a system that already has the guardrails, using the safe defaults instead of reinventing them.
That is the real answer to "the AI writes insecure code." Here the AI is not writing the dangerous part at all. The dangerous part is already built, the same way for everyone, and the agent just moves around inside it. The thing people are scared of, an agent left alone with your production setup, is the thing that does not happen.
And starting is one paste. There is a prompt on the site you drop into Claude Code, Cursor, or whatever agent you use. It scaffolds the project and brings it up locally in an environment that mirrors the cloud, so what runs on your laptop runs when you deploy. One block of text, from nothing to a running full-stack app. There is a 90-second video. If you would rather drive, it is a few CLI commands.
The fast track is Google
One part still takes real effort. You need a cloud account, and you need to give the framework access. The docs walk every step. It is not hard. It is just the one place that asks for fifteen quiet minutes instead of a prompt.
The providers are not equal here. Start with Google, where the setup is genuinely simple; follow the steps and you are deployed before you have time to get confused. AWS asks a little more, more moving parts, but it is doable and documented. Azure, well. Azure is there when you are ready, and you will know when you are ready.
The gate is lower
The first wave let everyone build. It left out that building was never the whole job; shipping something that holds up was a separate gate with its own toll. That gate is lower now. Not gone, and not for everything, but for ordinary full-stack microservices, the secure, standard deployment is something you can get without having built it yourself. You still have to make the thing good. You just no longer have to become an infrastructure engineer first to put it somewhere real.
The prompt is on the site. Paste it into your agent and start there.
tsdevstack is free and open source: tsdevstack.dev. The copy-paste prompt and the 90-second demo are on the homepage.