Where API keys and secrets should live in a vibe-coded app
Which keys belong on the server, how to check a deployed app, and what to do if a key leaks.
Read the guideKH Digital Studio insights
Practical writing from Kirsty Hawker on websites, user experience, accessibility, AI in practice and responsible technology.
Which keys belong on the server, how to check a deployed app, and what to do if a key leaks.
Read the guideHelp systems describe the business accurately by making the basics unambiguous.
Read the guideThe plain-English questions to answer before real users, customer data and money are involved.
Read the checklistCheckout, webhooks, duplicate orders, fulfilment and refunds explained.
Read the guideImprove the path from interest to enquiry by removing uncertainty one question at a time.
Read the guideWhy testing matters, why it cannot promise certainty, and what accountable deployment should require.
Read the articleA release check for real users, customer data, AI costs and recovery.
Read the guideTen practical checks for AI-built apps with real users, data and money.
Read the checklistPractical local SEO foundations: consistent business details, useful location context, service pages and review signals.
Read the guideThe evidence, scoring boundaries and verification record behind the AEO v2 website assessment.
Read the methodologyA practical way to plan a small site around visitor questions, trust and a clear next step.
Read the guidePeople are already turning to general-purpose chatbots in vulnerable moments. The urgent design question is how to make those interactions safer.
Written for The Data Lab Community blog · October 2026
Read the articleWant a second pair of eyes?
Use the free checks to find the clearest next improvement for your site.
Review my website