AI agent security: prompt injection, permissions, leaks
AI agents with tool access are a new attack surface. What prompt injection is, why Gartner ties 25% of breaches to agents by 2028, and how to protect yours.
Field notes
Field notes
Writing on software, automation, AI, and the practical side of digitalization.
-
01 -
02 How long does custom software development take?
Realistic custom software timelines: an MVP in 2-4 months, a mid-size business app in 4-9 months. What stretches deadlines and how discovery shortens them.
-
03 What is custom software development? A plain guide
Custom software development explained: what it actually is, the discovery-design-build-operate process, when it beats off-the-shelf tools, and what it costs.
-
04 Vibe coding: can AI-generated code go to production?
Vibe coding is everywhere in 2026 - but 65% of vibe-coded apps have security issues. What AI-generated code needs before production: review, tests, ownership.
-
05 What is agentic AI? Agentic vs generative AI, explained
Agentic AI plans and acts; generative AI produces content. What agentic AI actually means in 2026, how it differs from chatbots and copilots, and when you need one.
-
06 Why 40% of agentic AI projects fail - and how to be the 60%
Gartner expects over 40% of agentic AI projects to be cancelled by 2027. The real reasons AI agent projects fail, and what the ones that reach production do differently.
-
07 DORA in Croatia: digital resilience for financial firms
DORA has applied since January 2025. Who is in scope in Croatia, the five pillars, ICT third-party risk, and what it means if you build financial software.
-
08 AI voice agents: answer every call, book every slot
AI voice agents now handle reception, booking, and after-hours calls in natural conversation. What they do well in 2026, the honest limits, and where to start.
-
09 Payment gateway integration for Croatian web shops
How payment gateway integration works for a Croatian web shop: Monri WSPay, CorvusPay, Stripe, Aircash, 3-D Secure 2, SCA under PSD2, and recurring billing.
-
10 B2B web shop: what a wholesale ordering portal needs
A B2B web shop is not a B2C store with a login. What a wholesale ordering portal needs: customer-specific pricing, invoice payment, ERP-driven catalogues.
-
11 European Accessibility Act: is your website compliant?
The European Accessibility Act is now enforceable across the EU. Which businesses must make their website and app accessible, what WCAG requires, and the fines.
-
12 MCP: connecting AI agents to your business systems
Model Context Protocol (MCP) is becoming the standard way to connect AI agents to business systems. What MCP is, why it matters, and how to adopt it safely.
-
13 NIS2 in Croatia: who is in scope and what it requires
NIS2 is now Croatian law. Which companies are in scope, the Article 21 measures, the 24/72-hour reporting clock, and management's personal liability.
-
14 No-code vs custom development: where no-code breaks
No-code is fast and cheap to start - until it isn't. Where no-code platforms break on scale, cost, lock-in, and compliance, and when custom development wins.
-
15 EU AI Act 2026: what Croatian SMBs must do now
The EU AI Act reaches ordinary businesses in 2026. Which risk tier you are in, the transparency duties from August 2026, and what the reform just deferred.
-
16 Booking systems: build vs buy for service businesses
Should you buy an off-the-shelf booking app or build a custom reservation system? How salons, clinics, rentals, and tours decide on cost, control, and growth.
-
17 AI customer support agent: faster replies, human touch
An AI customer support agent can handle 55-70% of tickets. How to deploy one that resolves issues, hands off cleanly, and keeps the human touch.
-
18 Software maintenance cost: what support really costs
Software maintenance typically costs 15-25% of the build per year. What drives the price, what an SLA buys, and how to budget for support after launch.
-
19 Croatia e-invoicing 2026: Fiskalizacija 2.0 explained
Fiskalizacija 2.0 makes eRačun e-invoicing mandatory in Croatia from 2026. Who must comply, the deadlines, and how to make your software exchange eRačun.
-
20 Web scraping for business: is it legal, what it's for
Is web scraping legal for business? What web data collection delivers, the GDPR and terms-of-service limits, and how a clean pipeline turns it into decisions.
-
21 Accounting integrations for Croatian companies: Minimax, Synesis, Luceed & the API gaps to plan for
Integrating Croatian accounting software (Minimax, Synesis, Luceed) with your stack. API availability, workarounds, and what to budget for.
-
22 AI + automation stack for SMBs: what to build, what to buy, what to integrate
A practical AI and automation stack for SMBs. Which tools to buy, which to build custom, and how to connect them.
-
23 Agency co-build: how we partner with creative and marketing shops on the engineering side
How creative and marketing agencies partner with us for engineering. White-label, co-branded, or embedded team models explained.
-
24 AI readiness audit: how to know if your company is actually ready to deploy AI
An AI readiness audit checks your data, processes, team, and infrastructure before you invest. The framework and what it typically reveals.
-
25 I have an app idea - what are my options? 5 ways to actually get it built
Five realistic paths to turn an app idea into a shipped product: no-code, freelancer, agency, build partner, or technical co-founder. Costs and trade-offs.
-
26 Build partner vs paying upfront: how to fund custom software when you're not a developer
Build partner or pay-upfront agency? Compare equity splits, cash outlay, risk profiles, and real cost math for non-technical founders.
-
27 Corporate spin-outs: how we partner with enterprises to launch products outside the mothership
How enterprises spin out internal innovations into standalone products. IP, team structure, go-to-market, and our role as build partner.
-
28 Where automation actually pays back: 8 business processes worth automating first
Eight business processes where automation delivers the fastest ROI: invoicing, onboarding, reporting, inventory, approvals, and more. Real payback timelines.
-
29 Discovery sprint: how a one-week paid Discovery removes 80% of project risk
A paid Discovery sprint defines scope, validates assumptions, and removes 80% of project risk before development starts. Here's what happens in five days.
-
30 Equity for software development: when it makes sense for both sides
When trading equity for development works, when it backfires, and how to structure a deal that protects founder and developers.
-
31 ERP integrations explained: connecting SAP, Microsoft Dynamics & Pantheon to the rest of your stack
How ERP integrations work for SAP, Microsoft Dynamics, and Pantheon. API options, middleware, common pitfalls, and realistic costs.
-
32 Family business modernization: how we partner with second-gen owners to digitize legacy operations
How second-generation family business owners digitize legacy operations. From paper to custom software, without disrupting what works.
-
33 From industry expertise to software product: a founder's playbook for non-tech operators
How non-technical industry experts turn domain knowledge into software products. From idea crystallisation to MVP, team, and first paying customers.
-
34 Internal tools that 10x operations: when spreadsheets and SaaS stop being enough
Signs your business has outgrown spreadsheets and off-the-shelf SaaS. What custom internal tools cost, how long they take, and where they deliver impact.
-
35 Internal tool to SaaS: how we partner with ops teams to turn a workflow into a product
How to turn a working internal tool into a SaaS product. Multi-tenancy, pricing, onboarding, and the partnership model for ops teams.
-
36 KPI dashboards that actually get used: 7 design mistakes most companies make
Seven dashboard design mistakes that kill adoption. How to build KPI dashboards people actually open every morning - not just on reporting day.
-
37 Niche B2B SaaS: how we partner with industry insiders to ship the first version
How Tsunami Digital partners with industry experts to build niche B2B SaaS products. Our process, deal structures, and what we look for in a partner.
-
38 Operator-led startups: how we partner with non-technical founders to ship v1
How we partner with non-technical founders to ship v1. Our process for operator-led startups: from Discovery to working product in 12-16 weeks.
-
39 Productizing services: how we partner with consultancies to turn methodology into software
How consultancies turn proven methodologies into scalable software products. Our partnership model, process, and real economics of productization.
-
40 ROI of business automation: how to calculate payback before you spend a euro
A practical formula to calculate automation ROI before investing. Cost variables, payback math, and a framework you can use today.
-
41 Building software for a regulated industry (fintech, healthtech, edtech): what changes
What changes when building software for fintech, healthtech, or edtech. Compliance requirements, certification costs, and planning for regulation.
-
42 From spreadsheet chaos to BI: building a custom analytics stack that pays for itself within a year
How to replace spreadsheet chaos with a custom BI and analytics stack. Data pipelines, dashboards, and the real cost of building analytics.
-
43 Technical co-founder vs development partner: which one your idea actually needs
Technical co-founder or development partner? Compare commitment, equity, control, speed, and which path fits your idea.
-
44 Got an idea for vertical software? How to validate it before you build
A step-by-step validation framework for vertical SaaS ideas. Market sizing, competitor analysis, demand testing, and the build-or-wait decision.
-
45 AI Agents: Why Chatbots Are No Longer Enough for Business
AI agents go beyond chatbots: they decide and act. Use cases, costs, and how to get started.
-
46 AI in Business: Practical Applications Beyond Simple Chatbots
Practical AI in business: document processing, support, analytics, and reporting. Real examples, costs, and ROI.
-
47 API integrations: how they actually work and what they cost
A practical guide to API integrations: what they are, when they pay off, what they cost in Croatia, and the difference between Zapier and custom solutions.
-
48 CRM, ERP & internal tools: how much does digitalisation cost?
CRM, ERP & internal tools pricing in Croatia: from €3,000 for SaaS to €150,000+ for custom enterprise. What fits small, mid, and large companies.
-
49 How much does custom software cost in Croatia?
Custom software pricing in Croatia: from simple automations (€1,500) to enterprise platforms (€60,000+). What drives cost and how to budget realistically.
-
50 10 digitalization mistakes companies make (and how to avoid them)
The most common mistakes in digitalizing small and mid-sized companies: wrong priorities, poor partner choice, ignored data migration, and 7 more traps.
-
51 How to digitalize a small business: 5 steps that pay off fast
Digitalizing a small or mid-sized business: 5 steps that show results in the first 30 days, where to start, and how to avoid the biggest mistakes.
-
52 Cybersecurity for SMBs: threats, costs, and how to prepare
A practical guide to cybersecurity for small and mid-sized businesses. Most common threats, baseline measures, costs, and preparing for NIS2 and GDPR.
-
53 Custom software vs SaaS: when does each actually pay off?
When to pick off-the-shelf SaaS vs custom software: real costs, control, and when custom code ends up cheaper for your business.
-
54 EU funds for SME digitalization in Croatia: how to apply
EU funds for Croatian SME digitalization: NPOO, Digitalization Vouchers - what they cover, amounts available, and how to apply.
-
55 GDPR and custom software: what business owners must know
A practical guide to GDPR compliance in custom software in Croatia: requirements, costs, the biggest traps, and how to avoid fines.
-
56 Industrial software and Industry 4.0: IoT, production automation
Digitalizing industrial manufacturing in Croatia: IoT, predictive maintenance, manufacturing execution systems (MES), quality, and EU funds.
-
57 In-house developers vs agency: real cost & risk comparison
Hiring your own developers vs working with an agency: real numbers, risks, flexibility, and how to pick for your stage.
-
58 How to choose a development agency: 12 questions before signing
A practical guide to choosing a development agency or IT partner. 12 key questions that reveal quality, transparency, and risks before you sign.
-
59 Legacy software: when to migrate, when to scrap and build new
A practical guide to the decision about legacy software. When to upgrade, when to migrate, when to scrap and start fresh - with real costs and risks.
-
60 How much does a mobile app cost in Croatia?
Mobile app pricing (iOS, Android, cross-platform) in Croatia: from €4,000 for simple tools to €100,000+ for full products. What drives cost & how to plan.
-
61 What is an MVP and how to build one in 12 weeks
A practical guide to building an MVP (Minimum Viable Product) in 12 weeks. How to define scope, what to cut, and how to actually test the idea with real users.
-
62 Process automation: 7 signs your business needs it
A practical guide to spotting the signs that your business needs process automation. Real ROI, where to start, and how much you can actually save.
-
63 RAG & AI knowledge bases: AI that knows your company
A practical guide to RAG and AI knowledge bases for business. How they work, when they pay off, and what they cost.
-
64 Software for construction companies: projects, costs, people
Digitalizing construction companies in Croatia: project management, costs, sites, quotes, invoicing - what off-the-shelf covers and when custom is needed.
-
65 Software for restaurants & hospitality: POS, bookings, loyalty
Digitalizing restaurants, bars, and hotels in Croatia: POS, bookings, online ordering, loyalty - what SaaS solves and when custom pays off.
-
66 Software for real estate & property management
Digitalizing real estate agencies and property management in Croatia: CRM, listing portals, contracts, finance - what works and what it costs.
-
67 5 technical SEO mistakes 80% of Croatian websites make
Common technical SEO mistakes costing Croatian companies organic traffic. Concrete examples, how to check, and how to fix - without the jargon.
-
68 How much does a web shop cost in Croatia?
Web shop pricing in Croatia: from €1,500 for a simple store to €50,000+ for scalable e-commerce. What drives cost, which platform to pick, hidden costs.