Michael Graham
Advisor

Michael Graham

Founder & Software Engineer

From frontend design to a fully deployed application, I can build the entire pipeline.

About

Obsessed with building top-tier web software and crafting unique, polished user experiences.

Areas of expertise

TypeScriptJavaScriptPostgreSQLDockerKubernetesTerraformRAGDesign systemsMotion designAgile

Writing

Headless CMS SEO: The Complete Guide

The SEO concerns that genuinely change in a headless architecture, and the server-rendered Nuxt patterns we use to get metadata, canonicals, redirects, structured data, sitemaps, and Core Web Vitals right.

Headless CMS Localization: Patterns That Scale

How localization actually works in a headless CMS: field-level vs entry-level vs space-level translation, locale URL structure and hreflang, fallbacks, RTL, and keeping Nuxt i18n in sync with the CMS, with first-hand Storyblok and Sitecore notes.

Headless CMS Security: The Real Attack Surface

A headless CMS is secure when you treat it as one, but decoupling moves the attack surface to the seams: API tokens, preview endpoints, webhooks, edge caching, rich-text XSS, RBAC, and front-end secrets. Here is the real surface and a hardening checklist.

Headless CMS vs Traditional CMS: How to Actually Choose

A decision framework for headless CMS vs traditional CMS: the honest tradeoffs, a situation-keyed decision table, and the real Sanity vs Storyblok vs Strapi call we made on a production Nuxt build.

Enterprise Headless CMS, Explained

What the word "enterprise" actually adds on top of "headless": governance, SSO, localization at scale, audit, and SLAs, plus an honest read on Contentful, Sitecore XM Cloud, and Storyblok.

6 Bolt.new Problems That Break Apps in Production (And How We Fix Each One)

Bolt.new ships a working app fast, then the same six issues show up the moment real users arrive. Here is each failure pattern and the exact fix, from a team that does this for a living

Why AI-Generated Authentication Always Breaks (And the Fix We Apply Every Time)

AI tools build a convincing login screen and almost never build a real security boundary. Here is why AI-generated auth fails the same way every time, and the server-side fix that closes the hole.

From Vibe Code to Production: A Migration Playbook for Apps That Outgrew Their Prompt

Your vibe-coded app works in the demo and falls over with real users. Here is the exact playbook we run to take an AI-built prototype to a codebase you can ship and maintain.

AI-Generated UI Components Fail WCAG 2.2: The Review Checklist That Catches It

AI tools generate UI components that look right and fail WCAG 2.2 at scale, for the same reason they skip security. Here is the fast review checklist that catches it before merge.

Enterprise CMS in 2026: How to Choose the Platform and the Partner

Choosing an enterprise CMS is two decisions: the platform and the partner. A practical 2026 guide to Sitecore, Storyblok, Contentful, and AEM, and how to pick the team that delivers it.