News and trends on web development, design and technology: articles, tips + insights.
Passkeys replace the password with a phishing-resistant login via fingerprint or PIN — and Keycloak has supported them officially since version 26.4. This article shows you as a decision-maker how passkeys work, which MFA options Keycloak ships with (OTP, WebAuthn, recovery codes), which tiered model makes sense per user group, and where rollouts stall in practice: fallback, device changes, acceptance.
Matthias Radscheit
Keycloak itself costs nothing: Apache 2.0 license, no per-user fee. What you actually budget is setup (€8,000–60,000 depending on scope) and operations (roughly €150–700 per month, managed from €225). Against Auth0, the math works from a few thousand B2B users; below that, the SaaS route stays cheaper. All ranges: happycoding project experience, all third-party prices as of September 2026.
Matthias Radscheit
Keycloak ships feature releases on a quarterly rhythm and does not patch older versions, so your support window is roughly three months. Deferred upgrades become a security risk as soon as CVE fixes appear only in the new release. With a staging test, realm exports, a rehearsed rollback path, and a fixed quarterly rhythm, the upgrade becomes a plannable routine: in our experience, 0.5 to 5 person-days instead of an emergency project.
Matthias Radscheit
You get Keycloak as software, not as a service: the hosting question is the real decision. Three paths: self-hosting (2–5 person-days of setup in our experience), managed providers from Elestio (from $11/month) via Phase Two (from $149) to Cloud-IAM (from €225, as of 09/2026) — or a SaaS IdP. Data location and the DPA chain argue for the first two.
Matthias Radscheit
Four systems, four pricing models: Keycloak costs operations instead of a license, Auth0 bills per active user, Supabase Auth is included in the platform price, and Entra External ID gives you 50,000 MAU for free before it gets expensive. This comparison shows you, with verified prices (as of September 2026), which solution fits your scenario: startup app, mid-market portal, or enterprise with Active Directory.
Matthias Radscheit
SAML and OIDC solve the same problem from two eras: delegating login to a central identity service. SAML 2.0 (2005, OASIS, XML) is the federation standard of corporate IT; OIDC (2014, OpenID Foundation, JSON/JWT on top of OAuth 2.0) is the standard for new web and mobile applications. The practical rule: enterprise customers dictate SAML, your own applications speak OIDC — a broker like Keycloak serves both at once.
Matthias Radscheit
Webflow or WordPress was the right call to start. But at some point, collection limits, pricey multilingual support, scattered docs, missing approval workflows, and stagnating load times slow your SaaS down. I'll show you five signals it's time to switch, what a migration costs based on our project experience — and how to pull it off without losing rankings.
Matthias Radscheit
A second language only doubles your market if it does not double your maintenance. I show you when English pays off for your SaaS website, how to decide between subdirectory, subdomain, and a separate domain, what makes hreflang correct, and how a headless CMS connects the language versions instead of copying them. Including the translation workflow we use ourselves.
Matthias Radscheit
One landing page per integration, industry, and use case wins searches your homepage will never cover. But 50 copy-paste pages count as scaled content abuse in Google's book since March 2024. I'll show you how to scale with a content model, one template, and real substance per page, and which five pages to start with.
Matthias Radscheit
Your team ships every week, but customers, prospects, and AI search see none of it? Then you are giving away your cheapest marketing channel. I show you how to write release notes as benefits instead of ticket numbers, why dated entries get cited in AI answers, and when a dedicated /changelog route in your CMS beats the third-party widget.
Matthias Radscheit
Website in a page builder, docs in GitBook, blog in WordPress: three logins, three designs, no internal link graph. I show you how one content model in a headless CMS feeds all three outputs, what developer docs really need, when docs-as-code remains the better choice, and how our own site runs entirely on Sanity and Next.js.
Matthias Radscheit
In our projects, a SaaS website costs €8,000 to €80,000 one-off, depending on page count, design ambition, CMS, integrations, and languages. On top come recurring costs for hosting, CMS license, and maintenance: around €20 to €1,500 per month, depending on maintenance scope. Here you get the price drivers, three open sample budgets, and the line items others prefer not to mention.
Matthias Radscheit
Your pricing page is your highest-intent buying page: according to Gartner, 61 to 67 percent of B2B buyers prefer to buy without talking to sales. I show you the five building blocks that sell, when price on request works, and what nine verified German-market providers from sevDesk to Circula get right — plus a tech tip on maintaining prices in the CMS.
Matthias Radscheit
When enterprise procurement asks for security evidence, your response speed decides the deal. A trust center answers the standard questions up front: a data processing agreement (DPA) to download, a sub-processor list, the hosting location, certificates, a status page. I show you what counts when you sell to EU customers, how Personio, Staffbase and sevdesk handle it, and why structured CMS content beats any PDF archive.
Matthias Radscheit
Too few trial signups are rarely a product problem — the problem is the path in front of it: entry, pricing, conversion page, signup flow. I'll show you when a trial button converts and when a demo form does, how to arrange the form, social proof, and objections on the page, and how to measure with events instead of gut feeling where you lose prospects.
Matthias Radscheit
Your SaaS website carries most of the sales conversation: buying teams spend only 17 percent of their purchase time with vendors. This hub dissects the anatomy of a B2B SaaS website: six page types from homepage to conversion path, the German-market specifics from GDPR to purchase on invoice, and the Next.js plus headless CMS stack our own site runs on.
Matthias Radscheit
41 percent of German companies use AI, and a third report significantly higher costs than planned. The difference is a roadmap: I show you four phases, an open budget calculation (16,000 to 35,000 euros for a real pilot), five measurable abort criteria, and funding programs that can cut your costs in half.
Matthias Radscheit
Self-hosting a 70B model currently costs 1,197.30 € net per month plus 599 € setup at Hetzner. The same model class is available from German data centers via API from 0.65 € per million tokens: the break-even sits at around 1.84 billion tokens per month. I show you the calculation — and when your own server pays off anyway.
Matthias Radscheit
In 2026, fine-tuning pays off in three cases: fixed tone and format, extraction at scale, and a small specialist model for latency and unit costs. After OpenAI's wind-down, that practically means LoRA on open-weight models. The training run often costs just the $4 minimum fee — the expensive parts are data preparation and evaluation. For pure company knowledge, you need RAG instead.
Matthias Radscheit
Your company knowledge belongs in a database, not in model weights: RAG looks knowledge up at runtime, stays current, cites its sources, and remains deletable for GDPR purposes. Fine-tuning trains behavior, not knowledge — and OpenAI is even winding down its fine-tuning by January 2027. We show you the pgvector stack, the real costs, and the three limits where RAG fails.
Matthias Radscheit
Workflow automation rarely fails because of the tool. It fails on three questions comparison articles leave out: Where do your data run, who is even allowed to operate n8n, and what does operating it really cost? I show you the license trap in agency hosting, an honest cost calculation with dated prices, and the line beyond which low-code is no longer enough.
Matthias Radscheit
You almost never need your own AI model: training GPT-4 alone cost around 78.4 million USD in compute. What you actually want is delivered by one of four stages: structured prompting, RAG over your data, or LoRA fine-tuning on open-weight models, each of which you can optionally run on EU infrastructure. This guide walks you to the right stage with four guiding questions, backed by sourced numbers instead of gut feeling.
Matthias Radscheit
Your shop search only finds what is in the index: no search engine compensates for missing attributes, empty descriptions, and inconsistent categories. I show you how to enrich facet attributes, synonyms, and short descriptions with an LLM, what that costs (a calculation path instead of a flat rate), and why invented values are worse than empty ones.
Matthias Radscheit
Semantic search finds results by meaning instead of by character string. The embedding fees are cent amounts; the real costs sit in engineering and upkeep. For websites you build it hybrid with Meilisearch, for RAG you use pgvector. And often you don't need it at all: measure your zero-result rate first, then decide.
Matthias Radscheit
You rarely need Elasticsearch, but you almost always need a better search. We walk you through three tiers: Postgres full-text search (often enough), Meilisearch (typo tolerance, facets, Cloud from $20/month), and Elasticsearch/OpenSearch (only with an operations team). On top, you get our experience values on effort and the cheapest lever of all: your search log with its zero-result queries.
Matthias Radscheit
Since the 2021 fork, what separates Elasticsearch and OpenSearch is above all the license, not the technology: Elastic offers ELv2, SSPL, and since 2024 the AGPL; OpenSearch stays Apache 2.0 under the Linux Foundation. I walk you through the exact chronology, put both party-financed benchmarks in context, and give you three clear recommendations, including the option that you need neither.
Matthias Radscheit
You rarely need Elasticsearch: for website and shop search, Meilisearch, Typesense, or even Postgres full-text search are usually the better choice – cheaper to run and clear on licensing. Elasticsearch remains right for log analytics, aggregations, and very large data volumes. This comparison gives you the decision matrix with prices and license facts, all checked against primary sources on September 4, 2026.
Matthias Radscheit
Meilisearch is a lean open-source search engine for websites and shops: typo-tolerant, with facets and built-in AI search, run as a single binary. The core is MIT-licensed and free – since 2025 there are also enterprise modules under a contract license. Here you get the honest assessment: what it does, what it costs, and when you do not need it.
Matthias Radscheit
Google talks about a few weeks, an analysis of 1,052 domain migrations names a median of 304 days. Both figures are right, because they measure different things: reindexing against traffic recovery. Here you get the expected range for the first 90 days, the line between normal fluctuation and real damage, and the mandatory list you demand before you sign.
Matthias Radscheit
A dated design and slow load times are triggers, not criteria. You have three paths: iterate, rebuild partially on the same URLs, or migrate in full. Only the third costs you visibility — for domain migrations, a median of 304 days. This article gives you the four criteria at which iteration stops doing the job.
Matthias Radscheit
Published German price ranges for the same project class run from €15,000 to €150,000. Hourly rates explain only a factor of 2.6 of that; the rest is unspoken scope. To make quotes comparable, define integrations, roles, migration, acceptance and operations first — instead of negotiating the rate. Running costs are the easiest thing to underestimate.
Matthias Radscheit
Custom software is built for one specific client, not an anonymous market. It pays off when a process explains your margin, when three or more systems have to stay in sync, or when many people use it: license costs scale per head, development costs do not. For non-differentiating processes, off-the-shelf wins clearly.
Matthias Radscheit
The incremental path from JavaScript to TypeScript: a six-stage plan from allowJs to the CI gate, the right order for the strict flags, honest effort figures from the Airbnb, Stripe, and Pinterest migrations — and the cases where you are better off not migrating.
Matthias Radscheit
Roughly 38 percent of all PHP websites run without security patches. This guide shows IT leaders the path from legacy PHP to a TypeScript stack — without a big bang: decision criteria, five migration steps, and honest cost ranges.
Matthias Radscheit
The decision for NestJS has been made — but what does the path look like? Pattern mapping, a five-step migration sequence, team realities, and honest exclusion criteria: the practical guide for IT decision-makers, without a code tutorial.
Matthias Radscheit
Published customer portal prices range from €12,000 to over €300,000 — because they describe three different project classes. We publish our price anchors, break down the running costs, and show the threshold at which custom development becomes cheaper than SaaS.
Matthias Radscheit
Make or buy for a customer portal isn't a feature question — it's a question of cost trajectories: list prices as of July 2026, five decision criteria, an honest 5-year calculation, and when the hybrid path beats both.
Matthias Radscheit
An RFP that mixes up website, web app, and customer portal produces quotes you can't compare. Three definitions, three practical questions, and a decision table with published price anchors bring order to the decision — including the honest answer on when a website without a login is the better investment.
Matthias Radscheit
Headless WordPress keeps WordPress purely as a content backend: your editors stay in the familiar wp-admin, while a Next.js frontend handles delivery via the REST API or WPGraphQL. You gain security, performance and multichannel publishing; your marketing gets faster pages and clean technical SEO. The price is two systems in operation. Here I weigh both sides honestly.
Matthias Radscheit
The numbers a department head needs to secure internal budget for a customer portal: honest deflection benchmarks instead of vendor marketing, the revenue side backed by McKinsey and Gartner data, and a transparent sample calculation with break-even in year two to three — plus the cases where a portal has no business case.
Matthias Radscheit
Framer turns design drafts into published websites – faster than any classic setup. The decision-maker view: what Framer replaces, where its design-tool heritage draws limits, and how GDPR, export and CMS depth stack up.
Matthias Radscheit
Keycloak is an open-source identity and access management (IAM) system: single sign-on, user and permission management, OIDC/OAuth2/SAML and AD/LDAP integration — self-hosted instead of rented. It replaces per-user licensed identity services such as Auth0, Okta or Azure AD B2C. Current release: version 26.7.4 (September 2026), four minor releases per year, one major release every two to three years. Three things matter for decision-makers: costs do not scale with the user count, identity data stays on your own EU infrastructure (GDPR), and as a CNCF project with Red Hat origins the project's future is broadly secured. A managed IdP remains the right choice for small teams without operational capacity.
Matthias Radscheit
Commercial support for Spring Boot 2.7 ends on December 31, 2026 — and the entire 3.x line is already without open-source patches. The sober decision tree: Boot 4, extended support, or a service-by-service TypeScript rebuild.
Matthias Radscheit
Webflow promises agency quality without a development team: visual builder, CMS and hosting in one. The honest decision-maker view: what Webflow replaces and where the limits are – GDPR, lock-in, localisation.
Matthias Radscheit
"Our ERP can't do that" is the most common objection to a customer portal — and it's almost always wrong. How SSO with Keycloak and four integration patterns connect portals to legacy systems without touching the old system at all.
Matthias Radscheit
On August 2, 2026, the EU AI Act's high-risk obligations take effect. What that means for companies that commission or operate software with AI features – risk classes, obligations, checklist.
Matthias Radscheit
With the Universal Commerce Protocol, Google, Shopify, Target, and Walmart are establishing a standard for AI agents that shop. What UCP, AP2, and Universal Cart actually are – and what retailers should prepare now.
Matthias Radscheit
Real price ranges for TypeScript and Node.js projects in 2026 — plus the TCO math showing what the comparable Java stack adds in operating costs, and when it should stay anyway.
Matthias Radscheit
Agentic AI is this year's Gartner vocabulary – but what separates an agent from a chatbot, where does real value emerge for mid-sized companies, and why are 40% of projects canceled? A sober assessment.
Matthias Radscheit
Medusa is a strong tool, and for many shops it is still overkill. Where Shopify ships faster and cheaper, where operational complexity eats the benefit, and why naming the limits is what makes the recommendation credible.
Matthias Radscheit
Why "composable" with Medusa is not a marketing word but the system's architecture — and where modular best-of-breed setups end up costing more than the monolith they were meant to replace.
Matthias Radscheit
Medusa is PostgreSQL-native and fully self-hostable. On Hetzner with Coolify and Docker the commerce stack runs GDPR-compliant in Germany, and it beats SaaS plus transaction fees above a clear revenue point. What the switch really costs, and when it pays off.
Matthias Radscheit
Shopify Plus sells comfort and time-to-market, Medusa sells control. The decision doesn't turn on the feature list but on transaction fees, lock-in, and whether you want to carry operational responsibility.
Matthias Radscheit
ChatGPT, Google AI Mode, and shopping agents are becoming a purchasing channel – but they only recommend products whose data they understand. The agent-readiness checklist: eight checkpoints for your product data.
Matthias Radscheit
Medusa is an excellent commerce core, but you won't get real enterprise procurement out of the box. The b2b-starter is boilerplate, not a maintained product. What that means for your procurement processes, your effort, and your make-or-buy decision.
Matthias Radscheit
Next.js is excellent — and for a whole class of projects it's the wrong call. An honest boundary for decision-makers: overengineering, migration costs, and the point where I'd pick it anyway.
Matthias Radscheit
Performance is not frontend cosmetics. It is a business metric. Treat Core Web Vitals as a technical detail and you leave both ranking and revenue on the table. Why Next.js gives you the best starting conditions, and why that alone guarantees nothing.
Matthias Radscheit
SAP, TYPO3, Salesforce and ageing ERP systems aren't going anywhere. They still have to talk to modern frontends. How Next.js works as an integration layer and Backend for Frontend to decouple legacy step by step, what holds the pattern up, and where it tips over.
Matthias Radscheit
Vercel is convenient and sits under US law. Next.js is open source and runs self-hosted on Hetzner with Coolify and Docker, stably, from around 39 euros a month. Why data sovereignty isn't optional for serious organisations but a requirement, and what the switch honestly costs.
Matthias Radscheit
SAP Commerce + Angular gets sold as the safe enterprise standard, usually without the full bill attached. Here is why Next.js + Medusa wins strategically on TCO, vendor lock-in and developer availability, and where SAP still remains the right call.
Matthias Radscheit
Almost everyone who migrates from Firebase to Supabase underestimates the same block: not auth, not storage, but reshaping denormalised Firestore collections into normalised Postgres tables with RLS. An honest account of where the time and money actually burn — and which apps should not migrate at all.
Matthias Radscheit
No vendor writes the TCO comparison between Supabase Cloud and self-hosted on Hetzner. Past a certain usage profile, self-hosting saves real money — but only if you price your internal operating hours at a real rate. Skip that, and the saving is an accounting illusion.
Matthias Radscheit
For most enterprise use cases, a separate vector database is a problem you buy back into your own stack. Why Supabase with pgvector and Edge Functions is a consolidation decision, not a hype one — and where the honest limit actually sits.
Matthias Radscheit
Comparing Supabase and Firebase on features means comparing the wrong dimension. For European companies under GDPR, this is a sovereignty and risk decision: a US corporation under the CLOUD Act versus open PostgreSQL with a real exit. A practitioner's take.
Matthias Radscheit
PIM vendors' AI features are almost always locked into paid editions. The architecture guide for the alternative: a model-agnostic AI layer on top of the API of Pimcore, AtroPIM, or UnoPIM.
Matthias Radscheit
Nearly 30 percent of Java production applications still run on Java 8, according to New Relic — and every new product idea is queued behind the migration. Two-speed IT breaks the gridlock: greenfield products on a TypeScript stack, docked onto the core via API contracts.
Matthias Radscheit
Cutouts, marketplace formats, scene and campaign variants: product image editing is becoming an automated pipeline in the PIM. What works reliably today – and where the AI Act's labeling obligation applies.
Matthias Radscheit
Payload CMS is the code-first headless CMS of the Next.js ecosystem: MIT-licensed, self-hosted, with auth and access control in the core. The in-depth decision-maker guide – substitution, the Figma acquisition, Payload vs. Sanity, GDPR, cost.
Matthias Radscheit
Support for the Akeneo Community Edition ends in September 2026. Four realistic paths for operators – with an honest assessment of when each one fits and what actually drives migration effort.
Matthias Radscheit
NestJS brings the enterprise patterns familiar from Spring to the TypeScript backend. The comparison for IT decision-makers: architecture, support cycles, talent pool, and costs — plus when Spring remains the right choice.
Matthias Radscheit
SaaS licenses are rising while AI-assisted development lowers the cost of building — the build-vs-buy calculus for PIM has shifted. The four signals for custom, the hidden SaaS costs, and an honest assessment of the TCO calculations.
Matthias Radscheit
With the ESPR and the Digital Product Passport, the EU demands structured, traceable product data – mandatory category by category. Why the DPP is a product data project and which PIM capabilities it presupposes.
Matthias Radscheit
Feature comparisons don't answer the stack question. This TCO comparison works through the four cost blocks that actually hit IT decision-makers — license and audit risk, talent, support cycles, and operations — and says honestly when the JVM wins.
Matthias Radscheit
Long description, marketplace bullets, ads titles, filter labels, badge copy: all product texts come from the same attributes – if the model is right. The principle of “enrich once, publish everywhere” as an architecture.
Matthias Radscheit
The open-source PIM market has sorted itself out: an honest comparison of Pimcore, AtroPIM, UnoPIM, and OpenPIM – including the question of why AI features almost always sit behind a paid upsell.
Matthias Radscheit
B2B buyers search by problem and application, not by SKU. Why hybrid search – exact matches plus semantics plus ERP context – is becoming the standard, and why the real project is in the product data.
Matthias Radscheit
AI writes product copy in seconds – but does it hold the brand? Why brand voice governance is a discipline in its own right: style guides as prompt assets, validation agents, and terminology rules across tens of thousands of SKUs.
Matthias Radscheit
AI agents that enrich product data, categorize items and detect errors – with human approval instead of blind trust. What the term Agentic PIM actually means and how to recognize serious implementations.
Matthias Radscheit
Datasheets, Excel lists, product photos: most product information exists in unstructured form. How an AI extraction pipeline turns it into PIM-ready attributes – and why confidence scores matter more than the model.
Matthias Radscheit
GDPR-compliant AI is possible, but never as a blanket yes. Separate data flow from data origin and every use case sorts into one of four categories. Three pieces of homework decide whether the system stays legally operable.
Matthias Radscheit
Matthias Radscheit
Matthias Radscheit
Supabase Row Level Security moves access control out of application code and into the database. The forgotten filter stops being a bug you avoid through discipline and becomes structurally impossible. For multi-tenant SaaS, that is a question of risk and speed that belongs on a decision-maker's desk.
Matthias Radscheit
Matthias Radscheit
Matthias Radscheit
AI-generated sameness is flooding the web: credibility is now your strongest competitive advantage. I'll show you seven tips for how your website builds trust, with humans and with AI search systems alike: with a real voice, real people, provable knowledge along E-E-A-T lines, clear processes, honest boundaries, and visibly maintained tech.
Matthias Radscheit
Black Friday is no longer just a day. It's an infrastructure. If you think January brings the great calm after the consumption frenzy, you underestimate the logic of e-commerce. A look at the architecture of modern buying.
Matthias Radscheit
Matthias Radscheit
Matthias Radscheit
Framer or WordPress? Work through the 10 questions honestly: multiple editors, growth, multilingual content, a shop, data protection and independence all point to WordPress. If design comes first and your content stays manageable, Framer is the legitimate, often faster choice.
Matthias Radscheit
Matthias Radscheit
Matthias Radscheit
When I started optimizing our agency’s website for the era of AI-powered search, I realized that my author profile was more than just a formality. In a world where Google SGE, ChatGPT, and Perplexity highlight not just content but also credibility, the author box became a crucial trust signal.
Matthias Radscheit
Visibility is no longer limited to traditional SERPs but extends into generative answer modules. The competitive risk is obvious—brands that don’t adapt now will lose visibility to those who align their content with AI-driven search systems.
Matthias Radscheit
Matthias Radscheit
MedusaJS replaces the commercial core of Shopify, Shopware & co. – without license fees or revenue share. What the open-source commerce engine means for decision-makers: substitution, advantages, GDPR, cost.
Matthias Radscheit
Sanity scales through a clear division of labor: your content lives in the hosted Content Lake, a global CDN delivers it with low latency, and your frontend scales independently of both. With caching, optimized GROQ queries, and serverless hosting you absorb load spikes. Brands like Nike and National Geographic serve millions of users this way.
Matthias Radscheit
Content management today means more than just managing text – it's about speed, consistency, scalability, and data-driven decisions.
Matthias Radscheit
WordPress or Sanity.io? For B2B marketing departments, the question is which CMS best fits their long-term digital strategy. This article offers a well-founded comparison – with a focus on headless capability, editorial processes, integration depth, and scalability.
Matthias Radscheit
A sluggish backend can turn a productive website into a frustrating bottleneck.
Matthias Radscheit
When building a WordPress website, entrepreneurs and project managers quickly face the central question: Should a custom WordPress theme be developed, or is an off-the-shelf pre-made theme sufficient?
Matthias Radscheit
Book a no-obligation call, send us an email, or use the form – we'd love to hear from you.