Insights
Technical deep dives, incident analyses and architecture notes from the FNB Solutions engineering team.
Buyer's guideAgency, Freelancer or In-House Team: Who Should Build Your Web Application?
Agency, freelancer or in-house team for building a web application: how they compare on cost, continuity, skills and control, when each fits, and what to ask before you choose.
Buyer's guideHow Much Does a Custom Web Application Cost? What Actually Drives the Price
What drives the cost of a custom web application: scope, integrations, data, compliance and quality bar, plus how to get an estimate you can trust and keep costs under control.
Buyer's guideRescue or Rewrite? How to Decide What to Do With a Struggling Web Application
How to decide whether to rescue or rewrite a struggling web application: warning signs, a decision framework, the risks of full rewrites and how incremental recovery works.
Buyer's guideWhat a Technical Audit of a Web Application Includes, and When You Need One
What a technical audit of a web application covers: architecture, code quality, security, infrastructure and operations, what you receive, how to prepare and when an audit is worth it.
Technical deep diveStructuring Authorization: Authentication, Context, Policy, and Enforcement
How to split authorization into authentication context, authorization context, policy decisions and enforcement so access rules stay consistent and auditable.
Technical deep diveFormRoute by FNB Solutions: Transactional Form‑to‑Email Delivery at Scale
The architecture behind FormRoute, a transactional form-to-email service built on Amazon SES with per-site isolation, replacing marketing email tools for forms.
Technical deep diveTokenHub by FNB Solutions: Canonicalizing Digital Product Feeds at Scale
How TokenHub canonicalizes fragmented digital product feeds from regional providers into stable, auditable entities for pricing, routing and analytics.
Incident analysisReact2Shell (CVE-2025-55182): Early exploitation and real-world impact
Field notes on early exploitation of React2Shell (CVE-2025-55182) against React Server Components and Next.js apps, with real-world impact and response steps.
Incident analysisWordPress SEO Spam: Investigation and Remediation in the Wild
How we investigated and removed SEO spam malware from a WordPress and Elementor site, including the persistence that makes a standard cleanup fail.