惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Application and Cybersecurity Blog
Application and Cybersecurity Blog
S
Securelist
K
Kaspersky official blog
Scott Helme
Scott Helme
C
CXSECURITY Database RSS Feed - CXSecurity.com
GbyAI
GbyAI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
C
Cisco Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
博客园 - Franky
Security Latest
Security Latest
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Y
Y Combinator Blog
T
Threat Research - Cisco Blogs
L
LINUX DO - 热门话题
C
Cyber Attacks, Cyber Crime and Cyber Security
Project Zero
Project Zero
Cisco Talos Blog
Cisco Talos Blog
月光博客
月光博客
I
Intezer
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
人人都是产品经理
人人都是产品经理
L
Lohrmann on Cybersecurity
Recorded Future
Recorded Future
Latest news
Latest news
V2EX - 技术
V2EX - 技术
T
The Exploit Database - CXSecurity.com
H
Heimdal Security Blog
F
Fortinet All Blogs
Cloudbric
Cloudbric
IT之家
IT之家
博客园 - 叶小钗
Microsoft Security Blog
Microsoft Security Blog
P
Proofpoint News Feed
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
PCI Perspectives
PCI Perspectives
AWS News Blog
AWS News Blog
H
Help Net Security
S
Security @ Cisco Blogs
酷 壳 – CoolShell
酷 壳 – CoolShell
Recent Announcements
Recent Announcements
Hacker News - Newest:
Hacker News - Newest: "LLM"
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
F
Full Disclosure
S
Schneier on Security
S
Security Affairs
T
Tenable Blog

Martin Alderson

Expert-aware quantisation: near-Q4 quality at near-Q2 size? A brief history of KV cache compression developments xAI is looking more like a datacentre REIT than a frontier lab Is datacentre sovereignty really that important? I went on the Built for Turbulence podcast What's going on with Gemini? Managed agents are the new Lambda Open weights are quietly closing up - and that's a problem 29th August 2026: a scenario Figma's woes compound with Claude Design A little tool to visualise MoE expert routing Has Mythos just broken the deal that kept the internet safe? What next for the compute crunch? Telnyx, LiteLLM and Axios: the supply chain crisis Using agents and Wine to move off Windows Why Claude's new 1M context length is a big deal How to use the Qwen 3.5 LLMs to OCR documents No, it doesn't cost Anthropic $5k per Claude Code user Is the AI Compute Crunch Here? Why on-device agentic AI can't keep up Using OpenCode in CI/CD for AI pull request reviews Which web frameworks are most token-efficient for AI agents? Who fixes the zero-days AI finds in abandoned software? Attack of the SaaS clones How to generate good looking reports with Claude Code, Cowork or Codex Self-improving CLAUDE.md files Wall Street just lost $285 billion because of 13 markdown files Two kinds of AI users are emerging. The gap between them is astonishing. Turns out I was wrong about TDD Why sandboxing coding agents is harder than you think The Coming AI Compute Crunch Which programming languages are most token-efficient? I ported Photoshop 1.0 to C# in 30 minutes Why I'm building my own CLIs for agents Travel agents took 10 years to collapse. Developers are 3 years in. Are we dismissing AI spend before the 6x lands? Minification isn't obfuscation - Claude Code proves it AI agents are starting to eat SaaS Has the cost of building software just dropped 90%? Are we in a GPT-4-style leap that evals can't see? I Finally Found a Use for IPv6 How I use Claude Code to manage sysadmin tasks Could Excel agents unlock $1T in economic value? Are we really repeating the telecoms crash with AI datacenters? Tracking MCP Server Growth Notes from MCP Dev Summit Europe: Where the Protocol Is Headed How I make CI/CD (much) faster and cheaper Google AI Studio API has been unreliable for the past 2 weeks What happens when coding agents stop feeling like dialup? Solving Claude Code's API Blindness with Static Analysis Tools Are OpenAI and Anthropic Really Losing Money on Inference? I gave Claude Code a folder of tax documents and used it as a professional tax agent Beyond the Hype: Real-World MCP Support Across Major AI APIs Welcome to My Blog
A non-technical CFO is shipping better code than the agencies he hired
Martin Alderson · 2025-10-17 · via Martin Alderson

I've been advising non-technical execs at mid-sized companies for a while now. Since the release of Claude Code and other agentic coding tools, I'm starting to see a real shift in what these people can achieve.

I was pretty astonished to see a non-technical friend (CFO) who had managed to use Claude Code to build a pretty impressive internal operations dashboard, tying various systems together. He'd been trying to build this for many years; one of those (many?) projects where it is very useful, but hard to justify the budget/return on investment to hire and manage a full development team.

This project had been tried with various other approaches:

  • AirTable (fell apart once data reached a certain size, too slow)
  • Low code tooling (didn't quite work, again, hit scale problems)
  • A low code agency specialising in retool (many problems from what I can gather transferring business domain knowledge to them)

I told him about Claude Code a month or two ago, and recently caught up with him. To my surprise there was a pretty well thought through application in Next.js which seemed surprisingly bug-free.

If he'd hired a less senior developer with no domain understanding I think getting to the point he got to with Claude Code would have actually been quite challenging.

I think this therefore highlights a significant shift in how software projects are going to be put together. I am not here to suggest that suddenly all developers are going to be replaced - I'll come to some of the areas where they are extremely valuable still - but what is very clear to me is that business people with LLMs and all their domain knowledge is an extremely powerful combination for (at least) internal systems.

What I do think is at real risk of automation over the coming years are less senior engineers with limited domain knowledge.

Domain knowledge is what's important in this new era

As someone that has mostly sat at the interface between technical strategy & commercial outcomes for the past decade, I've worked with a lot of great developers who do get the importance of domain knowledge, and others that (usually for corporate culture reasons) get treated as a "JIRA robot", picking up essential random tickets and following them to the letter.

The importance of developers having good domain knowledge and being trusted to experiment within it cannot be underestimated.

It has three main benefits in my view:

  1. It's extremely frustrating for business stakeholders to try to explain intricacies of the problem and the edge cases with someone that doesn't get the business. This causes a major morale drop, and often leads to poor outcomes because stakeholders give up pushing for what they need eventually. Equally it's hard for the developer to get up to speed on years of accumulated organisational knowledge
  2. Perhaps more importantly, it allows developers to have some element of 'predictive software design'. If you know a lot about the industry you are working in, you start being able to predict what parts will need future flexibility and start designing for that even if there isn't a commercial need. You also start to get a feel for what can be 'hardcoded' as it is very unlikely to change.
  3. Finally, and somewhat obviously, it massively improves the cohesion and iteration speed. Product development goes from less of a one way "JIRA factory" to a collaborative option, where developers can offer ideas and suggestions based on the code and the product goals

The issue is if you don't have this culture of shared understanding in your organisation, I think you'll see non technical stakeholders start to build their own products and tools very quickly with these tools.

It completely solves part 1) - they can literally transfer the domain knowledge to the LLM very quickly with a back and forth, and they can work together on 3).

This is going to substantially change the face of the industry. At a minimum we're going to see a lot more fully coded prototypes being handed over to product teams instead of PRDs or sketches of wireframes. I am sure a lot of these tools will also get put into production use - especially at smaller organisations where there isn't a CISO overlooking these kind of deployments.

Where senior developers are still essential

For now I think this is actually all good news for more senior developers, especially with domain knowledge.

While agentic coding tools are improving at a very rapid rate, they don't out of the box tend to setup unprompted:

  • A proper software development lifecycle
  • Source control approach and CI/CD
  • Unit/integration/e2e testing
  • A well thought out approach to security/access control
  • Performance/scalability

This tends to be what senior/lead engineers can do in their sleep - take a "MVP" app and make it (more) "production ready" and help on the ongoing scalability of said apps. Ironically, when prompted correctly they can do a pretty good job of each of these parts, but it is going to beyond non technical users to understand these concepts to prompt it.

So I can see a world where suddenly organisations have 10-50x the number of internal applications, and senior engineers helping out with taking these MVPs that business stakeholders build and making them production ready.

Jevons Paradox states that when something gets cheaper, the demand for it often rises far more than the price reduction. We're seeing potentially a 95%+ drop in costs for people to build internal business apps, so we'd expect to see way more of them.

There's always going to be a place for highly knowledgeable, motivated and smart software engineers. But I'm increasingly convinced they are going to see less and less MVPs from start to finish.

How are we going to manage so many new apps?

Where I can see this all going wrong is having so many new apps to manage. We're assuming a lot get transferred to an engineering team to develop further, which I expect will happen to some degree. However, I suspect there is going to be a huge long tail of 'ghost' apps that people build without really thinking too much about the ongoing maintenance.

We're going to need some sort of internal company 'PaaS' to manage them all. This PaaS should handle authentication and data access at a higher level (similar to Cloudflare Zero Trust), but be super simple for people to deploy apps. If we can reduce the attack surface of these apps being hosted on random (personal) Vercel accounts, then that is half the battle.

Ideally this PaaS would automatically manage to a certain degree platform and package updates, automatically deploying security fixes. I think "agentic" DevOps will really help out here - attempting to patch apps, and notifying if the agent fails.

Data exfiltration is a concern but again this PaaS could firewall outbound network (similar to how the Claude analysis tools are hardened to only allow very limited network requests).

However, we must keep in mind that right now this already happens - with a lot of random Excel and Google Sheets running a lot of critical business processes, often being emailed around. So I actually think there is a lot of opportunity to improve security and data access with this new future that's on the way - it's far easier to reason about and secure web applications than Excel files - especially if we could have a centralized, ACL'd SQL database system that isolates everyone's apps correctly, only allowing access to the data they need with the lowest possible permissions.

As such I think it's worth senior technical leadership starting to think of a strategy about this now. How would you handle 100x the amount of internal apps, and what processes would you put in place?

When tools like Claude Code get more enterprise support I suspect it's going to be a lot easier to start including an 'organization-level' claude.md file. But let's think this through now and start communicating the plan.

This to me means that developers will move less on line of business apps and more to building the systems, policies and automating the infrastructure, to allow organisations to deliver agentically built business applications at scale.

I'm really excited (and to be honest, slightly scared) about this new future. There are so many business challenges that are done in Excel that would unlock so much productivity if they could be built in code.